last executing test programs: 3.927990192s ago: executing program 4 (id=1875): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x4, 0xdc, 0xa}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) socket$kcm(0x11, 0x3, 0x0) 3.864191171s ago: executing program 3 (id=1876): set_mempolicy(0x4005, 0x0, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) eventfd2(0x1, 0x801) 3.617843158s ago: executing program 4 (id=1880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r1, 0x203, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x3}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4e808}, 0x4000) 3.232317154s ago: executing program 4 (id=1882): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c004}, 0x0) 3.040065508s ago: executing program 4 (id=1884): socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r1 = syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) pidfd_send_signal(r1, 0x2, 0x0, 0x0) 2.856789016s ago: executing program 1 (id=1886): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d000000180100002069"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 2.56053299s ago: executing program 1 (id=1888): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000001000000dd00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, 0x0}, 0x94) 2.360017417s ago: executing program 2 (id=1889): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10fac150a17d92bb51849d9eea53c78d427d8d1036dc906084046fcae09499c220ef50c2c7c475f392bc288eb5efb8032d1ade92e88e50a05a95dd5c6cbbdfb086fa53bca14d40c8c3f7149b39b16b7c7370978389366174db5fbc99dbe958f8c1690cd695dfbe6c384162a412c8d3cfd7cf223f9df4c67b92514111891f53d4e19826797302e1a87e7a627c52740bb3bd311771a68d349c0a68ef6f2a765f8220323add67b2b6695ca41adcda387a4264bcd94c8578a9ccca3b55ebcda45369b56068cfeec34abc2cbd94b9b12d057fa9d4328d57073f40e5ae64443e4a10ed400575bbd1168a170a0134b9ad28735dbd9603a9e417cce864f2141a92f57e1fdfcff4776f94a794d6db8d3e9e0ecc783956c7ab15a8d5639d3df1ac9da6057af913a563bd55b657f37cbf4cae2919aea6ff8a7490b4c036361b8866cc062bbad019f43d02b0c38bd6309f2baa53924466203ab8d00daaac4c9da846e645d64c10e47c32e9824e79ade4eeee7cbf71b1bb48f760800b04334745ab553dea12a85f0671eb07a4cc67ceaffa8269e0b052f25136cfb8a6b9327a2d165c42933642d3171ad00ebf0be485f5ed319021600a94072f251c8905a2451eba3ba7db2ec5fb8613463a796610629719166259ffa3261e06f09b5a69798b88848da9028ff7ed8a", 0x2fb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="bc", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) 2.359577625s ago: executing program 3 (id=1890): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x4, 0xdc, 0xa}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) socket$kcm(0x11, 0x3, 0x0) 2.345499583s ago: executing program 1 (id=1891): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.262042953s ago: executing program 0 (id=1892): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r1, 0x203, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x3}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4e808}, 0x4000) 2.112003017s ago: executing program 2 (id=1893): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x40, 0x0, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}]}, 0x40}}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000801200000008000300", @ANYRES32, @ANYBLOB="0a0006000802110000010000140081"], 0x3c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) 2.111687331s ago: executing program 1 (id=1894): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c004}, 0x0) 2.081294843s ago: executing program 0 (id=1895): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000007100)=0x8, 0x4) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r1, &(0x7f0000007080)="31e9200000007ef52f555f76c888", 0xe, 0x24000840, &(0x7f0000000040)={0x11, 0x86dd, r3, 0x1, 0xe2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x14) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in=@empty, 0x4e21, 0x8000, 0x4e24, 0x9, 0xfcf8d278083eddec, 0xa0}, {0x5, 0x1000, 0x5, 0x8001, 0x7, 0x3, 0x98, 0x2}, {0x9, 0x0, 0x9, 0x73}, 0x10000, 0x0, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4d6, 0xff}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0xf701a192b5f05b74, 0x3, 0x40, 0x9, 0x10001, 0x2}}, 0xe8) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd5eccfddbdf253b00000008000300", @ANYRES32, @ANYBLOB="4b003300509c0600080211000001080211000001fffffffffffff3ff08004841940000000000000064000e0201000406b40a010006000602090072060303030303037107254c79370f04d0f20800"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c000) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010000000000000000000000fff8afdb60e0d900ffac14141650bb2d6f67d29d6fabadb107d0c0f49c88ea04abde1d5e8d3fb27dac8150b00633b0b945670e4d26452f2a1b5046778bdafefc46b0449ade68bf84b3000000001265fc2e882348c26c2126237dd5b37f5ae65531d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe947c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f368764337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be820400e900"/299], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000fc0)) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000fddbdf250100000008000100", @ANYRESHEX=r0, @ANYBLOB="4400028040000100240001006c625f686173685f73746174730000000000007cd6df1dbb1a48fe0000000000050003"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x884) socket$kcm(0x11, 0x200000000000002, 0x300) 2.06413197s ago: executing program 3 (id=1896): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) 1.928082013s ago: executing program 1 (id=1897): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x3e, &(0x7f0000002100)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x88, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @local, {[@dstopts={0x67}]}}}}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xc, &(0x7f0000000000)=0x101, 0x4) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0x102, 0x0, 0x0) 1.910052827s ago: executing program 0 (id=1898): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002180)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="3f031c164b1f889799dec870fae1ff7786dda39e", 0x14, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r1, 0x1, 0x7, 0x6, @remote}, 0x14) 1.887457169s ago: executing program 2 (id=1899): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000140)=@x86={0x6, 0x0, 0x8, 0x0, 0xc, 0x8, 0x4, 0xb, 0x3, 0x13, 0x5, 0x70, 0x0, 0x2, 0xb, 0x0, 0x1, 0x5, 0xce, '\x00', 0x4, 0x4}) 728.026053ms ago: executing program 3 (id=1900): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x80, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 659.873574ms ago: executing program 1 (id=1901): set_mempolicy(0x4005, 0x0, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) eventfd2(0x1, 0x801) 618.267766ms ago: executing program 0 (id=1902): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000098"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 502.931659ms ago: executing program 2 (id=1903): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000004) 402.254345ms ago: executing program 0 (id=1904): syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 395.437328ms ago: executing program 3 (id=1905): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 340.00339ms ago: executing program 2 (id=1906): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) keyctl$set_reqkey_keyring(0xe, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 275.313183ms ago: executing program 4 (id=1907): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x19}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xfe}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) 159.939491ms ago: executing program 2 (id=1908): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x75, 0x4, @fd, 0xb, &(0x7f0000000380)}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 67.945642ms ago: executing program 3 (id=1909): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000007100)=0x8, 0x4) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r1, &(0x7f0000007080)="31e9200000007ef52f555f76c888", 0xe, 0x24000840, &(0x7f0000000040)={0x11, 0x86dd, r3, 0x1, 0xe2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x14) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in=@empty, 0x4e21, 0x8000, 0x4e24, 0x9, 0xfcf8d278083eddec, 0xa0}, {0x5, 0x1000, 0x5, 0x8001, 0x7, 0x3, 0x98, 0x2}, {0x9, 0x0, 0x9, 0x73}, 0x10000, 0x0, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4d6, 0xff}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0xf701a192b5f05b74, 0x3, 0x40, 0x9, 0x10001, 0x2}}, 0xe8) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd5eccfddbdf253b00000008000300", @ANYRES32, @ANYBLOB="4b003300509c0600080211000001080211000001fffffffffffff3ff08004841940000000000000064000e0201000406b40a010006000602090072060303030303037107254c79370f04d0f20800"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c000) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="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"/299], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000fc0)) socket$kcm(0x11, 0x200000000000002, 0x300) 67.380062ms ago: executing program 4 (id=1910): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x8000000000001de, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000ffff00000000000000040000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200007d18c55932c62572030000008500000006000000554a0800"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x6e, &(0x7f0000000580)=""/110, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0x2, 0xffffff80, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000c80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x3, 0x1, 0xc, 0x8}, {0x3, 0x1, 0x2, 0xb}, {0x5, 0x4, 0x1, 0x1}], 0x10, 0x1}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000380)='hpfs\x00', 0x2208004, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updsa={0x184, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@loopback}, {@in6=@dev, 0x4d2, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, {0x407}, {}, 0x40, 0x0, 0xa, 0x0, 0x3}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @algo_auth={0x48, 0x1, {{'blake2s-160-generic\x00'}, 0x16}}]}, 0x184}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x42060200) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x457}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000500)=ANY=[@ANYRES32=0x0], 0xe) 0s ago: executing program 0 (id=1911): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x3}, 0x8) socket$packet(0x11, 0x3, 0x300) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001880)="da", 0x1}], 0x1, &(0x7f0000000440)=ANY=[], 0xd0}}], 0x1, 0x4040005) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. [ 83.269131][ T5851] cgroup: Unknown subsys name 'net' [ 83.426152][ T5851] cgroup: Unknown subsys name 'cpuset' [ 83.435391][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.120107][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.004293][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.039821][ T5880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.049147][ T5880] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.049394][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.057871][ T5880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.072392][ T5880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.077676][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.081333][ T5883] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.095601][ T5876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.095879][ T5882] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.104062][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.117343][ T5882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.131900][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.133894][ T5882] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.151752][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.160218][ T5882] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.172141][ T5876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.180092][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.188609][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.193689][ T5883] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.197024][ T5878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.217878][ T5880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.220557][ T5878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.232691][ T5882] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.240947][ T5882] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.955659][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 89.019988][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 89.044802][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 89.216794][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 89.284378][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 89.355339][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.363023][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.370492][ T5863] bridge_slave_0: entered allmulticast mode [ 89.378543][ T5863] bridge_slave_0: entered promiscuous mode [ 89.413189][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.420391][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.428050][ T5871] bridge_slave_0: entered allmulticast mode [ 89.435586][ T5871] bridge_slave_0: entered promiscuous mode [ 89.465551][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.472759][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.479974][ T5863] bridge_slave_1: entered allmulticast mode [ 89.487698][ T5863] bridge_slave_1: entered promiscuous mode [ 89.501280][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.508541][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.515841][ T5864] bridge_slave_0: entered allmulticast mode [ 89.523462][ T5864] bridge_slave_0: entered promiscuous mode [ 89.531315][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.538955][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.546348][ T5871] bridge_slave_1: entered allmulticast mode [ 89.553962][ T5871] bridge_slave_1: entered promiscuous mode [ 89.597757][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.605220][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.612925][ T5864] bridge_slave_1: entered allmulticast mode [ 89.620265][ T5864] bridge_slave_1: entered promiscuous mode [ 89.696024][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.715529][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.728469][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.767690][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.801828][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.809493][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.816806][ T5862] bridge_slave_0: entered allmulticast mode [ 89.824726][ T5862] bridge_slave_0: entered promiscuous mode [ 89.835787][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.887707][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.894976][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.902334][ T5862] bridge_slave_1: entered allmulticast mode [ 89.909688][ T5862] bridge_slave_1: entered promiscuous mode [ 89.919481][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.941566][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.948977][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.956307][ T5861] bridge_slave_0: entered allmulticast mode [ 89.963701][ T5861] bridge_slave_0: entered promiscuous mode [ 89.973450][ T5863] team0: Port device team_slave_0 added [ 90.007267][ T5871] team0: Port device team_slave_0 added [ 90.013657][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.020873][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.028216][ T5861] bridge_slave_1: entered allmulticast mode [ 90.036071][ T5861] bridge_slave_1: entered promiscuous mode [ 90.046028][ T5863] team0: Port device team_slave_1 added [ 90.092754][ T5871] team0: Port device team_slave_1 added [ 90.100719][ T5864] team0: Port device team_slave_0 added [ 90.135828][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.160283][ T5864] team0: Port device team_slave_1 added [ 90.183656][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.190651][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.217098][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.232387][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.243119][ T5882] Bluetooth: hci0: command tx timeout [ 90.243124][ T52] Bluetooth: hci4: command tx timeout [ 90.243468][ T5870] Bluetooth: hci3: command tx timeout [ 90.281131][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.291858][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.299268][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.322266][ T5870] Bluetooth: hci2: command tx timeout [ 90.325246][ T5882] Bluetooth: hci1: command tx timeout [ 90.331049][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.370867][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.377956][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.405290][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.433425][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.485594][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.493158][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.519353][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.540839][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.547948][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.574862][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.588009][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.595036][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.621322][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.636047][ T5861] team0: Port device team_slave_0 added [ 90.645665][ T5861] team0: Port device team_slave_1 added [ 90.653861][ T5862] team0: Port device team_slave_0 added [ 90.663970][ T5862] team0: Port device team_slave_1 added [ 90.770327][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.777774][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.804621][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.834330][ T5863] hsr_slave_0: entered promiscuous mode [ 90.841093][ T5863] hsr_slave_1: entered promiscuous mode [ 90.869867][ T5871] hsr_slave_0: entered promiscuous mode [ 90.876615][ T5871] hsr_slave_1: entered promiscuous mode [ 90.883547][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 90.889366][ T5871] Cannot create hsr debugfs directory [ 90.895828][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.902839][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.929077][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.941053][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.948402][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.974399][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.986996][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.994095][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.020446][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.092965][ T5864] hsr_slave_0: entered promiscuous mode [ 91.099536][ T5864] hsr_slave_1: entered promiscuous mode [ 91.106332][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 91.112160][ T5864] Cannot create hsr debugfs directory [ 91.277402][ T5861] hsr_slave_0: entered promiscuous mode [ 91.285344][ T5861] hsr_slave_1: entered promiscuous mode [ 91.291616][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 91.297520][ T5861] Cannot create hsr debugfs directory [ 91.348635][ T5862] hsr_slave_0: entered promiscuous mode [ 91.355434][ T5862] hsr_slave_1: entered promiscuous mode [ 91.361849][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 91.368310][ T5862] Cannot create hsr debugfs directory [ 91.882433][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.902146][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.923658][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.943382][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.014036][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.026675][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.058040][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.068538][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.117637][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.143792][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.173452][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.203811][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.246177][ T44] cfg80211: failed to load regulatory.db [ 92.265566][ T5862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.290825][ T5862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.304365][ T5862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.315829][ T5862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.323210][ T5882] Bluetooth: hci3: command tx timeout [ 92.323397][ T5870] Bluetooth: hci4: command tx timeout [ 92.332293][ T5882] Bluetooth: hci0: command tx timeout [ 92.403188][ T5882] Bluetooth: hci2: command tx timeout [ 92.403198][ T5870] Bluetooth: hci1: command tx timeout [ 92.449055][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.466132][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.480594][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.492342][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.609948][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.636421][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.677356][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.713573][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.720854][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.744804][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.774604][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.781765][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.798667][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.805904][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.838886][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.856704][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.874613][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.881808][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.945859][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.977110][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.989718][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.996992][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.017601][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.024793][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.050358][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.057562][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.074882][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.095021][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.102227][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.185205][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.266056][ T3474] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.273310][ T3474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.291197][ T3474] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.298447][ T3474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.428614][ T5862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.606707][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.721335][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.937879][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.953011][ T5871] veth0_vlan: entered promiscuous mode [ 94.034783][ T5871] veth1_vlan: entered promiscuous mode [ 94.131230][ T5871] veth0_macvtap: entered promiscuous mode [ 94.167089][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.184711][ T5871] veth1_macvtap: entered promiscuous mode [ 94.201213][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.260903][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.278891][ T5862] veth0_vlan: entered promiscuous mode [ 94.295729][ T5862] veth1_vlan: entered promiscuous mode [ 94.327108][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.368063][ T3474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.377210][ T3474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.405017][ T5882] Bluetooth: hci4: command tx timeout [ 94.407074][ T52] Bluetooth: hci3: command tx timeout [ 94.416662][ T5870] Bluetooth: hci0: command tx timeout [ 94.428029][ T5861] veth0_vlan: entered promiscuous mode [ 94.437342][ T3474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.447361][ T3474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.482672][ T52] Bluetooth: hci1: command tx timeout [ 94.488210][ T5870] Bluetooth: hci2: command tx timeout [ 94.501108][ T5863] veth0_vlan: entered promiscuous mode [ 94.534488][ T5864] veth0_vlan: entered promiscuous mode [ 94.545726][ T5861] veth1_vlan: entered promiscuous mode [ 94.568004][ T5862] veth0_macvtap: entered promiscuous mode [ 94.580232][ T5862] veth1_macvtap: entered promiscuous mode [ 94.612301][ T5864] veth1_vlan: entered promiscuous mode [ 94.627985][ T5863] veth1_vlan: entered promiscuous mode [ 94.667453][ T3559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.679552][ T3559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.690452][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.705557][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.767102][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.778736][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.799887][ T3559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.806558][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.810874][ T3559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.820102][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.844008][ T5864] veth0_macvtap: entered promiscuous mode [ 94.851625][ T5861] veth0_macvtap: entered promiscuous mode [ 94.873988][ T5864] veth1_macvtap: entered promiscuous mode [ 94.904222][ T5861] veth1_macvtap: entered promiscuous mode [ 94.930479][ T5871] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.942287][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.990354][ T5863] veth0_macvtap: entered promiscuous mode [ 95.023413][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.051079][ T5863] veth1_macvtap: entered promiscuous mode [ 95.071242][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.106160][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.120144][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.133715][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.159280][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.184117][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.217261][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.289780][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.347944][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.379654][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.403383][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.427039][ T1158] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.439984][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.480515][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.499089][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.543356][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.584336][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.635246][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.644814][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.679524][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.721296][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.842711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.853474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.862070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.902732][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.069671][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.088510][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.225339][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.282005][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.407507][ T3559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.436520][ T3559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.495265][ T5870] Bluetooth: hci0: command tx timeout [ 96.502043][ T52] Bluetooth: hci3: command tx timeout [ 96.502096][ T5882] Bluetooth: hci4: command tx timeout [ 96.562657][ T5882] Bluetooth: hci2: command tx timeout [ 96.568139][ T5882] Bluetooth: hci1: command tx timeout [ 96.639130][ T3559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.724037][ T3559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.835028][ T3559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.882690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 96.893133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.912128][ T3559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.965316][ T6010] 9pnet_fd: Insufficient options for proto=fd [ 97.166176][ T6015] process 'syz.1.11' launched './file1' with NULL argv: empty string added [ 97.464109][ T6015] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.743413][ T6027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.753691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.022326][ T6036] Zero length message leads to an empty skb [ 98.053877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.065273][ T6037] fuse: Bad value for 'fd' [ 98.072632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 98.081698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.279211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.506169][ T6049] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.709197][ T6044] Bluetooth: MGMT ver 1.23 [ 98.799578][ T6049] mmap: syz.4.21 (6049) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.172242][ T5952] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 102.296292][ T6068] lo speed is unknown, defaulting to 1000 [ 102.348283][ T6068] lo speed is unknown, defaulting to 1000 [ 102.358515][ T6081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.372165][ T5952] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 102.412116][ T5952] usb 5-1: config 0 has no interface number 0 [ 102.428945][ T6068] lo speed is unknown, defaulting to 1000 [ 102.435141][ T5952] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 102.450825][ T6068] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 102.520794][ T6068] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 102.540104][ T5952] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 102.579544][ T5952] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 102.614398][ T5952] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 102.661993][ T5952] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 102.681476][ T5952] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 102.712993][ T6068] lo speed is unknown, defaulting to 1000 [ 102.738454][ T5952] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 102.752470][ T6068] lo speed is unknown, defaulting to 1000 [ 102.767948][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.792989][ T6068] lo speed is unknown, defaulting to 1000 [ 102.812899][ T6068] lo speed is unknown, defaulting to 1000 [ 102.830046][ T6068] lo speed is unknown, defaulting to 1000 [ 102.839441][ T5952] usb 5-1: config 0 descriptor?? [ 102.871867][ T6084] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 102.882370][ T6084] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 102.976671][ T5952] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 103.152501][ T6105] fuse: Bad value for 'fd' [ 103.417009][ T6084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.451600][ T6084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.480839][ T6084] ldusb 5-1:0.55: Write buffer overflow, 2 bytes dropped [ 103.496604][ T9] usb 5-1: USB disconnect, device number 2 [ 103.503531][ T5952] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.529699][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 103.884658][ T5952] usb 1-1: Using ep0 maxpacket: 8 [ 104.394511][ T5952] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.415422][ T5952] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 104.426984][ T5952] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 104.439917][ T5952] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 104.452644][ T5952] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 104.461770][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.519899][ T5952] hub 1-1:1.0: bad descriptor, ignoring hub [ 104.536403][ T5952] hub 1-1:1.0: probe with driver hub failed with error -5 [ 104.725995][ T6129] siw: device registration error -23 [ 104.903349][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.072937][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.414805][ T5952] cdc_wdm 1-1:1.0: skipping garbage [ 105.420175][ T5952] cdc_wdm 1-1:1.0: skipping garbage [ 105.422485][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.476112][ T5952] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 105.482589][ T6136] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 105.489823][ T5952] cdc_wdm 1-1:1.0: Unknown control protocol [ 105.502321][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.605065][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.663652][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.455141][ T6163] comedi comedi0: Minor 3 could not be opened [ 106.973867][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.531671][ T5874] usb 1-1: USB disconnect, device number 2 [ 107.616221][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 107.782608][ T24] usb 4-1: config 1 interface 0 altsetting 97 bulk endpoint 0x82 has invalid maxpacket 64 [ 107.794342][ T24] usb 4-1: config 1 interface 0 altsetting 97 bulk endpoint 0x3 has invalid maxpacket 8 [ 107.846524][ T24] usb 4-1: config 1 interface 0 altsetting 97 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.064565][ T6178] lo speed is unknown, defaulting to 1000 [ 108.071062][ T6178] lo speed is unknown, defaulting to 1000 [ 108.089686][ T6178] lo speed is unknown, defaulting to 1000 [ 108.141651][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 108.150595][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.163661][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 108.171881][ T24] usb 4-1: SerialNumber: syz [ 108.199860][ T6152] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 108.207932][ T6152] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 108.331723][ T6178] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 108.407987][ T6178] lo speed is unknown, defaulting to 1000 [ 108.424732][ T6178] lo speed is unknown, defaulting to 1000 [ 108.443912][ T6178] lo speed is unknown, defaulting to 1000 [ 108.458226][ T6178] lo speed is unknown, defaulting to 1000 [ 108.472816][ T6178] lo speed is unknown, defaulting to 1000 [ 108.486870][ T6178] lo speed is unknown, defaulting to 1000 [ 108.983856][ T24] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 109.059720][ T24] usb 4-1: USB disconnect, device number 2 [ 110.190507][ T6204] comedi comedi0: Minor 3 could not be opened [ 111.732032][ T5952] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.923367][ T5952] usb 4-1: Using ep0 maxpacket: 16 [ 111.936090][ T5952] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.946140][ T5989] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.973861][ T5952] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 112.005044][ T5952] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.018765][ T5952] usb 4-1: config 1 interface 0 has no altsetting 0 [ 112.029646][ T5952] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 112.042669][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.059359][ T5952] usb 4-1: Product: syz [ 112.067153][ T5952] usb 4-1: Manufacturer: syz [ 112.077732][ T5952] usb 4-1: SerialNumber: syz [ 112.122084][ T5989] usb 5-1: Using ep0 maxpacket: 8 [ 112.135395][ T5989] usb 5-1: config 1 interface 0 altsetting 97 bulk endpoint 0x82 has invalid maxpacket 64 [ 112.147597][ T5989] usb 5-1: config 1 interface 0 altsetting 97 bulk endpoint 0x3 has invalid maxpacket 8 [ 112.158944][ T5989] usb 5-1: config 1 interface 0 altsetting 97 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.173870][ T5989] usb 5-1: config 1 interface 0 has no altsetting 0 [ 112.198641][ T5989] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.214000][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 112.222861][ T5989] usb 5-1: SerialNumber: syz [ 112.255103][ T6223] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 112.263929][ T6223] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 112.471793][ T5952] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 113.221274][ T6236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.313874][ T5989] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 113.361830][ T5989] usb 5-1: USB disconnect, device number 3 [ 114.043785][ T6243] lo speed is unknown, defaulting to 1000 [ 114.423141][ T5952] usb 4-1: USB disconnect, device number 3 [ 114.436482][ T5952] usblp0: removed [ 114.482662][ T6242] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 114.795016][ T6255] fuse: Bad value for 'fd' [ 115.154023][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.99'. [ 116.612003][ T5959] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.654850][ T6289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.108'. [ 116.772281][ T5959] usb 2-1: Using ep0 maxpacket: 8 [ 116.839019][ T5959] usb 2-1: config 1 interface 0 altsetting 97 bulk endpoint 0x82 has invalid maxpacket 64 [ 116.850702][ T5959] usb 2-1: config 1 interface 0 altsetting 97 bulk endpoint 0x3 has invalid maxpacket 8 [ 116.863508][ T5959] usb 2-1: config 1 interface 0 altsetting 97 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.877081][ T5959] usb 2-1: config 1 interface 0 has no altsetting 0 [ 116.885775][ T5959] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.617004][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 117.623351][ T6297] random: crng reseeded on system resumption [ 117.625703][ T5959] usb 2-1: SerialNumber: syz [ 117.641178][ T6278] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.648604][ T6278] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.773135][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.113'. [ 118.089582][ T5959] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 118.117321][ T5959] usb 2-1: USB disconnect, device number 2 [ 118.388489][ T6324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.124'. [ 119.440596][ T6335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.126'. [ 119.488058][ T6334] random: crng reseeded on system resumption [ 119.495852][ T6337] warning: `syz.2.129' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 120.272064][ T6358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.137'. [ 125.649435][ T6436] siw: device registration error -23 [ 126.865308][ T6391] netlink: 'syz.0.151': attribute type 3 has an invalid length. [ 128.511199][ T6476] netlink: 'syz.4.184': attribute type 3 has an invalid length. [ 129.475126][ T6497] siw: device registration error -23 [ 130.876485][ T6516] comedi comedi0: Minor 3 could not be opened [ 132.356104][ T6517] netlink: 'syz.2.199': attribute type 3 has an invalid length. [ 135.249095][ T6541] siw: device registration error -23 [ 136.170289][ T6546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.630365][ T6561] netlink: 40 bytes leftover after parsing attributes in process `syz.2.216'. [ 137.715980][ T6572] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 137.724697][ T6572] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 137.907477][ T5952] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 138.106218][ T5952] usb 3-1: Using ep0 maxpacket: 8 [ 138.126519][ T5952] usb 3-1: config 1 interface 0 altsetting 97 bulk endpoint 0x82 has invalid maxpacket 64 [ 138.180708][ T5952] usb 3-1: config 1 interface 0 altsetting 97 bulk endpoint 0x3 has invalid maxpacket 8 [ 138.204488][ T5952] usb 3-1: config 1 interface 0 altsetting 97 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.222638][ T5952] usb 3-1: config 1 interface 0 has no altsetting 0 [ 138.231089][ T5952] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.250572][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 138.290782][ T5952] usb 3-1: SerialNumber: syz [ 138.327628][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.339026][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.350938][ T6571] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 138.392633][ T6571] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 139.086124][ T5952] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 139.377251][ T5952] usb 3-1: USB disconnect, device number 2 [ 139.828915][ T6615] wg2: entered promiscuous mode [ 139.846161][ T6615] wg2: entered allmulticast mode [ 140.227349][ T6627] siw: device registration error -23 [ 141.711995][ T5959] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 141.988236][ T5959] usb 2-1: Using ep0 maxpacket: 8 [ 142.029461][ T5959] usb 2-1: config 1 interface 0 altsetting 97 bulk endpoint 0x82 has invalid maxpacket 64 [ 142.053989][ T5959] usb 2-1: config 1 interface 0 altsetting 97 bulk endpoint 0x3 has invalid maxpacket 8 [ 142.063882][ T5959] usb 2-1: config 1 interface 0 altsetting 97 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.153951][ T5959] usb 2-1: config 1 interface 0 has no altsetting 0 [ 142.162829][ T5959] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.183998][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 142.192593][ T5959] usb 2-1: SerialNumber: syz [ 142.229761][ T6645] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 142.245433][ T6645] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 142.697866][ T5959] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 142.780507][ T5959] usb 2-1: USB disconnect, device number 3 [ 142.860088][ T6667] syz.4.257 uses obsolete (PF_INET,SOCK_PACKET) [ 143.869231][ T6694] comedi comedi0: Minor 3 could not be opened [ 145.503207][ T6719] fuse: Bad value for 'fd' [ 145.917102][ T6718] wg2: entered promiscuous mode [ 145.932753][ T6718] wg2: entered allmulticast mode [ 146.382793][ T6734] sit0: entered allmulticast mode [ 146.502908][ T6743] comedi comedi0: Minor 3 could not be opened [ 147.070423][ T6734] sit0: entered promiscuous mode [ 147.695168][ T6767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.760819][ T6764] wg2: entered promiscuous mode [ 147.765923][ T6764] wg2: entered allmulticast mode [ 147.801518][ T6772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.298'. [ 147.871973][ T6764] lo speed is unknown, defaulting to 1000 [ 148.358294][ T6783] netlink: 'syz.1.294': attribute type 4 has an invalid length. [ 148.477782][ T6782] lo speed is unknown, defaulting to 1000 [ 148.642130][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 148.812198][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 150.957116][ T6796] random: crng reseeded on system resumption [ 151.182998][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 151.190599][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 151.197980][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 151.205424][ T24] usb 1-1: unable to read config index 0 descriptor/start: -32 [ 151.213106][ T24] usb 1-1: chopping to 0 config(s) [ 151.219745][ T24] usb 1-1: can't read configurations, error -32 [ 151.568052][ T6799] lo speed is unknown, defaulting to 1000 [ 151.789998][ T6809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.030185][ T6820] random: crng reseeded on system resumption [ 152.283564][ T6827] pim6reg1: entered promiscuous mode [ 152.295749][ T6827] pim6reg1: entered allmulticast mode [ 152.551983][ T5952] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 154.159037][ T5952] usb 2-1: Using ep0 maxpacket: 8 [ 155.791423][ T5952] usb 2-1: device descriptor read/all, error -71 [ 156.720697][ T6859] random: crng reseeded on system resumption [ 156.807353][ T6855] lo speed is unknown, defaulting to 1000 [ 157.059730][ T6873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.338'. [ 157.991998][ T981] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 158.196411][ T981] usb 4-1: Using ep0 maxpacket: 8 [ 158.214632][ T981] usb 4-1: config 1 interface 0 altsetting 97 bulk endpoint 0x82 has invalid maxpacket 64 [ 158.242663][ T981] usb 4-1: config 1 interface 0 altsetting 97 bulk endpoint 0x3 has invalid maxpacket 8 [ 158.295551][ T981] usb 4-1: config 1 interface 0 altsetting 97 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.331365][ T981] usb 4-1: config 1 interface 0 has no altsetting 0 [ 158.346511][ T981] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.370748][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 158.379189][ T981] usb 4-1: SerialNumber: syz [ 158.387137][ T6898] random: crng reseeded on system resumption [ 158.392480][ T6887] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 158.411795][ T6887] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 158.688216][ T6910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.351'. [ 158.873899][ T981] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 158.914862][ T981] usb 4-1: USB disconnect, device number 4 [ 159.618029][ T6914] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 159.665346][ T6915] lo speed is unknown, defaulting to 1000 [ 160.410177][ T6932] pim6reg1: entered promiscuous mode [ 160.426462][ T6932] pim6reg1: entered allmulticast mode [ 160.455704][ T6937] veth0_vlan: entered allmulticast mode [ 160.816776][ T6947] netlink: 20 bytes leftover after parsing attributes in process `syz.3.362'. [ 160.823545][ T6948] random: crng reseeded on system resumption [ 160.917947][ T6954] 9pnet_fd: Insufficient options for proto=fd [ 161.555819][ T6964] lo speed is unknown, defaulting to 1000 [ 162.185666][ T5989] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 162.382438][ T5989] usb 3-1: Using ep0 maxpacket: 8 [ 162.402367][ T5989] usb 3-1: config 1 interface 0 altsetting 97 bulk endpoint 0x82 has invalid maxpacket 64 [ 162.425924][ T5989] usb 3-1: config 1 interface 0 altsetting 97 bulk endpoint 0x3 has invalid maxpacket 8 [ 162.456068][ T5989] usb 3-1: config 1 interface 0 altsetting 97 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.512129][ T5989] usb 3-1: config 1 interface 0 has no altsetting 0 [ 162.529386][ T5989] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.548730][ T5989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 162.579822][ T5989] usb 3-1: SerialNumber: syz [ 162.603973][ T6956] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 162.614851][ T6956] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 162.802805][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.380'. [ 163.109051][ T5989] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 163.823777][ T5989] usb 3-1: USB disconnect, device number 3 [ 163.880231][ T6992] lo speed is unknown, defaulting to 1000 [ 164.460573][ T7023] netlink: 44 bytes leftover after parsing attributes in process `syz.0.393'. [ 166.722703][ T7040] lo speed is unknown, defaulting to 1000 [ 167.107680][ T7056] netlink: 'syz.3.406': attribute type 1 has an invalid length. [ 167.142086][ T7056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.406'. [ 167.271536][ T7056] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.382962][ T7056] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.390339][ T7056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.828570][ T7069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.850596][ T7075] random: crng reseeded on system resumption [ 168.914950][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 169.101242][ T7082] fuse: Bad value for 'fd' [ 170.400105][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 170.639644][ T7117] random: crng reseeded on system resumption [ 170.893751][ T7129] netlink: 'syz.1.436': attribute type 4 has an invalid length. [ 170.961338][ T7133] netlink: 44 bytes leftover after parsing attributes in process `syz.2.437'. [ 170.969446][ T7130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.013939][ T7135] fuse: Bad value for 'fd' [ 172.262529][ T7158] siw: device registration error -23 [ 173.266346][ T7170] netlink: 'syz.1.450': attribute type 4 has an invalid length. [ 173.282041][ T981] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 173.421983][ T981] usb 5-1: device descriptor read/64, error -71 [ 173.752034][ T981] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 173.892000][ T981] usb 5-1: device descriptor read/64, error -71 [ 174.031040][ T7182] fuse: Bad value for 'fd' [ 174.038375][ T981] usb usb5-port1: attempt power cycle [ 174.065198][ T7181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.571975][ T981] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 174.603101][ T981] usb 5-1: device descriptor read/8, error -71 [ 174.862056][ T981] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 174.909713][ T981] usb 5-1: device descriptor read/8, error -71 [ 175.049787][ T981] usb usb5-port1: unable to enumerate USB device [ 175.305548][ T7227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.542511][ T7245] fuse: Bad value for 'fd' [ 175.828561][ T7258] netlink: 44 bytes leftover after parsing attributes in process `syz.2.488'. [ 177.324860][ T7297] lo speed is unknown, defaulting to 1000 [ 177.649816][ T7299] netlink: 44 bytes leftover after parsing attributes in process `syz.2.503'. [ 177.682085][ T5952] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 177.701002][ T7296] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 177.812056][ T5952] usb 5-1: device descriptor read/64, error -71 [ 178.017699][ T7311] fuse: Bad value for 'fd' [ 178.174227][ T5952] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 178.330168][ T5952] usb 5-1: device descriptor read/64, error -71 [ 178.442339][ T5952] usb usb5-port1: attempt power cycle [ 178.468742][ T7320] netlink: 40 bytes leftover after parsing attributes in process `syz.1.511'. [ 178.802304][ T5952] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 178.834644][ T5952] usb 5-1: device descriptor read/8, error -71 [ 179.519771][ T7340] lo speed is unknown, defaulting to 1000 [ 179.926746][ T5952] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 180.012636][ T5952] usb 5-1: device descriptor read/8, error -71 [ 180.043337][ T7339] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 180.147113][ T7344] netlink: 44 bytes leftover after parsing attributes in process `syz.0.519'. [ 180.174166][ T5952] usb usb5-port1: unable to enumerate USB device [ 180.559760][ T7359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.524'. [ 180.639288][ T7355] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 180.647284][ T7355] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 180.824274][ T7369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.529'. [ 180.870187][ T7369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.529'. [ 181.574714][ T7382] lo speed is unknown, defaulting to 1000 [ 182.053903][ T7381] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 182.389902][ T7398] random: crng reseeded on system resumption [ 182.415064][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.539'. [ 182.646024][ T7408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.545'. [ 182.753261][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.545'. [ 182.927926][ T7420] netlink: 'syz.2.550': attribute type 6 has an invalid length. [ 182.952777][ T7420] netlink: 44 bytes leftover after parsing attributes in process `syz.2.550'. [ 183.507319][ T7426] lo speed is unknown, defaulting to 1000 [ 183.936776][ T7425] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 184.085219][ T7430] random: crng reseeded on system resumption [ 184.621191][ T7452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.562'. [ 184.748935][ T7457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.562'. [ 184.870286][ T7459] comedi comedi0: Minor 3 could not be opened [ 185.972411][ T7474] random: crng reseeded on system resumption [ 186.627984][ T7479] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 188.173565][ T7480] lo speed is unknown, defaulting to 1000 [ 188.960616][ T7515] comedi comedi0: Minor 3 could not be opened [ 190.043347][ T7531] siw: device registration error -23 [ 190.569190][ T7550] syzkaller0: create flow: hash 3625458848 index 2 [ 190.731553][ T7557] comedi comedi0: Minor 3 could not be opened [ 190.999194][ T7550] syzkaller0: delete flow: hash 3625458848 index 2 [ 191.310215][ T36] syzkaller0: tun_net_xmit 76 [ 191.324619][ T36] syzkaller0: tun_net_xmit 48 [ 191.332295][ T5989] syzkaller0: tun_net_xmit 76 [ 191.510051][ T7567] 9pnet_fd: Insufficient options for proto=fd [ 191.803689][ T7576] siw: device registration error -23 [ 192.433592][ T7599] 9pnet_fd: Insufficient options for proto=fd [ 193.588633][ T7578] netlink: 'syz.2.602': attribute type 12 has an invalid length. [ 193.606205][ T7611] netlink: 60 bytes leftover after parsing attributes in process `syz.4.617'. [ 193.633722][ T7612] netlink: 60 bytes leftover after parsing attributes in process `syz.4.617'. [ 194.029223][ T7628] 9pnet_fd: Insufficient options for proto=fd [ 194.633888][ T5989] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 194.852121][ T5989] usb 5-1: device descriptor read/64, error -71 [ 195.122287][ T5989] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 195.312546][ T5989] usb 5-1: device descriptor read/64, error -71 [ 195.485374][ T5989] usb usb5-port1: attempt power cycle [ 195.892048][ T5989] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 196.062801][ T5989] usb 5-1: device descriptor read/8, error -71 [ 196.342430][ T5989] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 196.373464][ T5989] usb 5-1: device descriptor read/8, error -71 [ 196.495557][ T5989] usb usb5-port1: unable to enumerate USB device [ 197.231097][ T7719] comedi comedi0: Minor 3 could not be opened [ 198.433638][ T7747] 9pnet_fd: Insufficient options for proto=fd [ 198.606438][ T7752] netlink: 'syz.0.679': attribute type 1 has an invalid length. [ 198.636179][ T7752] netlink: 'syz.0.679': attribute type 4 has an invalid length. [ 198.657873][ T7752] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.679'. [ 198.664219][ T7754] netlink: 60 bytes leftover after parsing attributes in process `syz.4.681'. [ 198.697179][ T7754] netlink: 60 bytes leftover after parsing attributes in process `syz.4.681'. [ 198.726254][ T7754] netlink: 60 bytes leftover after parsing attributes in process `syz.4.681'. [ 198.822407][ T24] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 198.989330][ T24] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 198.989440][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.989504][ T24] usb 2-1: config 0 has no interface number 0 [ 198.989728][ T24] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 198.989786][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.127192][ T7765] siw: device registration error -23 [ 199.391282][ T24] usb 2-1: config 0 descriptor?? [ 199.692680][ T24] ldusb 2-1:0.55: Interrupt in endpoint not found [ 199.769918][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.776476][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.827410][ T7768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.837979][ T24] usb 2-1: USB disconnect, device number 6 [ 200.106838][ T7779] 9pnet_fd: Insufficient options for proto=fd [ 200.532118][ T7799] netlink: 'syz.1.701': attribute type 10 has an invalid length. [ 200.562251][ T7799] netlink: 40 bytes leftover after parsing attributes in process `syz.1.701'. [ 200.599910][ T7799] batman_adv: batadv0: Adding interface: virt_wifi0 [ 200.664979][ T7799] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.690831][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.752933][ T7799] batman_adv: batadv0: Interface activated: virt_wifi0 [ 200.994387][ T7815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.148700][ T7825] comedi comedi0: Minor 3 could not be opened [ 202.292049][ T5989] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 207.506899][ T7862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.007714][ T7890] netlink: 'syz.0.739': attribute type 29 has an invalid length. [ 208.701363][ T7920] lo speed is unknown, defaulting to 1000 [ 209.111514][ T7934] 9pnet_fd: Insufficient options for proto=fd [ 209.124239][ T7918] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 211.103416][ T7961] 9pnet_fd: Insufficient options for proto=fd [ 212.093352][ T5878] Bluetooth: hci3: command 0x0406 tx timeout [ 212.093406][ T5878] Bluetooth: hci1: command 0x0406 tx timeout [ 212.093444][ T5878] Bluetooth: hci2: command 0x0406 tx timeout [ 212.134936][ T7981] lo speed is unknown, defaulting to 1000 [ 212.228570][ T7985] lo speed is unknown, defaulting to 1000 [ 212.442237][ T7982] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 213.243959][ T7986] siw: device registration error -23 [ 214.987931][ T8031] lo speed is unknown, defaulting to 1000 [ 215.157085][ T8030] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 215.606697][ T8019] lo speed is unknown, defaulting to 1000 [ 215.767988][ T8036] siw: device registration error -23 [ 215.951561][ T8040] pim6reg1: entered promiscuous mode [ 215.961435][ T8040] pim6reg1: entered allmulticast mode [ 217.221237][ T8063] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 217.228112][ T5959] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 217.231090][ T8063] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 217.392099][ T5959] usb 4-1: Using ep0 maxpacket: 8 [ 217.404445][ T5959] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.494411][ T5959] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 217.550240][ T5959] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 217.560584][ T5959] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.560662][ T5959] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 217.560687][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.841037][ T5959] usb 4-1: GET_CAPABILITIES returned 0 [ 217.841075][ T5959] usbtmc 4-1:16.0: can't read capabilities [ 217.864288][ T8078] siw: device registration error -23 [ 218.019187][ T8080] lo speed is unknown, defaulting to 1000 [ 218.154447][ T5959] usb 4-1: USB disconnect, device number 5 [ 218.433624][ T8079] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 219.450584][ T8090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.647235][ T8127] lo speed is unknown, defaulting to 1000 [ 222.955343][ T8132] siw: device registration error -23 [ 223.148885][ T8126] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 223.638550][ T8144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.680494][ T8150] lo speed is unknown, defaulting to 1000 [ 223.805154][ T8143] lo speed is unknown, defaulting to 1000 [ 224.797036][ T8178] siw: device registration error -23 [ 225.109074][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.852'. [ 225.112539][ T8183] pim6reg1: entered promiscuous mode [ 225.158877][ T8189] 9pnet_fd: Insufficient options for proto=fd [ 225.182320][ T8183] pim6reg1: entered allmulticast mode [ 226.465383][ T8217] 9pnet_fd: Insufficient options for proto=fd [ 226.551380][ T8211] lo speed is unknown, defaulting to 1000 [ 227.669754][ T8248] 9pnet_fd: Insufficient options for proto=fd [ 227.936606][ T8251] lo speed is unknown, defaulting to 1000 [ 229.009928][ T8271] comedi comedi0: Minor 3 could not be opened [ 229.188493][ T8270] lo speed is unknown, defaulting to 1000 [ 229.437296][ T8277] lo speed is unknown, defaulting to 1000 [ 229.635235][ T8285] 9pnet_fd: Insufficient options for proto=fd [ 230.257813][ T8307] siw: device registration error -23 [ 230.963099][ T8311] netlink: 36 bytes leftover after parsing attributes in process `syz.0.897'. [ 231.039806][ T8311] netlink: 36 bytes leftover after parsing attributes in process `syz.0.897'. [ 231.370537][ T8326] netlink: 68 bytes leftover after parsing attributes in process `syz.0.905'. [ 231.388208][ T8328] 9pnet_fd: Insufficient options for proto=fd [ 231.444556][ T8322] lo speed is unknown, defaulting to 1000 [ 232.642045][ T5882] Bluetooth: hci4: command 0x0406 tx timeout [ 232.955749][ T8360] pim6reg1: entered promiscuous mode [ 232.980318][ T8364] 9pnet_fd: Insufficient options for proto=fd [ 232.986940][ T8360] pim6reg1: entered allmulticast mode [ 233.186433][ T8362] lo speed is unknown, defaulting to 1000 [ 233.770854][ T8380] comedi comedi0: Minor 3 could not be opened [ 235.776736][ T8411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.313008][ T5874] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 236.509747][ T5874] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 236.943217][ T5874] usb 1-1: config 0 has no interface number 0 [ 236.949426][ T5874] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 236.996406][ T8433] lo speed is unknown, defaulting to 1000 [ 237.052899][ T5874] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 237.067977][ T5874] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 237.120462][ T5874] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 237.159326][ T5874] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 237.187233][ T5874] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 237.244740][ T5874] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 237.301028][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.330755][ T5874] usb 1-1: config 0 descriptor?? [ 237.346216][ T8426] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 237.376318][ T5874] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 237.582772][ T8426] ldusb 1-1:0.55: Couldn't submit interrupt_in_urb -90 [ 237.616760][ T5874] usb 1-1: USB disconnect, device number 6 [ 237.655733][ T5874] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 239.573134][ T5874] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 239.752621][ T5874] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 239.771512][ T5874] usb 1-1: config 0 has no interface number 0 [ 239.788294][ T5874] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 239.824734][ T5874] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 239.847565][ T5874] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 239.906365][ T5874] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 239.942240][ T5874] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 239.956764][ T5874] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 240.038957][ T5874] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 240.051990][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.399164][ T5874] usb 1-1: config 0 descriptor?? [ 240.453689][ T8502] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 240.564734][ T5874] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 240.705068][ T8502] ldusb 1-1:0.55: Couldn't submit interrupt_in_urb -90 [ 240.729005][ T5989] usb 1-1: USB disconnect, device number 7 [ 240.771031][ T5989] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 240.863327][ T8519] lo speed is unknown, defaulting to 1000 [ 242.804981][ T8567] lo speed is unknown, defaulting to 1000 [ 243.280791][ T8584] lo speed is unknown, defaulting to 1000 [ 243.450062][ T8586] lo speed is unknown, defaulting to 1000 [ 244.393802][ T8603] netlink: 'syz.0.1015': attribute type 4 has an invalid length. [ 245.291427][ T8629] siw: device registration error -23 [ 246.674344][ T8659] siw: device registration error -23 [ 247.573313][ T8664] netlink: 'syz.2.1036': attribute type 4 has an invalid length. [ 247.698397][ T8670] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1044'. [ 247.997736][ T8677] lo speed is unknown, defaulting to 1000 [ 248.701312][ T8690] siw: device registration error -23 [ 249.728952][ T8701] siw: device registration error -23 [ 250.729596][ T8716] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1060'. [ 252.196138][ T8729] netlink: 'syz.0.1065': attribute type 4 has an invalid length. [ 253.929741][ T8808] tap0: tun_chr_ioctl cmd 2147767521 [ 255.726656][ T8853] lo speed is unknown, defaulting to 1000 [ 256.046909][ T8861] pim6reg1: entered promiscuous mode [ 256.063385][ T8861] pim6reg1: entered allmulticast mode [ 256.841201][ T8882] siw: device registration error -23 [ 258.484724][ T8914] pim6reg1: entered promiscuous mode [ 258.490098][ T8914] pim6reg1: entered allmulticast mode [ 261.210485][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.217508][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.128760][ T8969] siw: device registration error -23 [ 263.159631][ T8984] pim6reg1: entered promiscuous mode [ 263.165418][ T8984] pim6reg1: entered allmulticast mode [ 264.668807][ T9021] siw: device registration error -23 [ 267.316014][ T9057] siw: device registration error -23 [ 267.582803][ T9078] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1209'. [ 267.673059][ T9079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.689470][ T9100] netlink: 'syz.4.1211': attribute type 4 has an invalid length. [ 268.735211][ T5874] lo speed is unknown, defaulting to 1000 [ 268.745687][ T5874] syz2: Port: 1 Link DOWN [ 269.346006][ T9120] pim6reg1: entered promiscuous mode [ 269.357477][ T9120] pim6reg1: entered allmulticast mode [ 269.375407][ T9121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.894799][ T9135] lo speed is unknown, defaulting to 1000 [ 271.373516][ T9134] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 275.092761][ T9201] siw: device registration error -23 [ 276.084091][ T9222] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1266'. [ 276.096904][ T9212] lo speed is unknown, defaulting to 1000 [ 276.231135][ T9218] lo speed is unknown, defaulting to 1000 [ 277.619344][ T9250] siw: device registration error -23 [ 277.881408][ T9255] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1278'. [ 280.282707][ T9296] pim6reg1: entered promiscuous mode [ 280.298386][ T9296] pim6reg1: entered allmulticast mode [ 280.351669][ T9287] lo speed is unknown, defaulting to 1000 [ 281.127739][ T9295] netlink: 'syz.0.1294': attribute type 4 has an invalid length. [ 281.425187][ T9328] lo speed is unknown, defaulting to 1000 [ 283.334257][ T9379] lo speed is unknown, defaulting to 1000 [ 284.449104][ T9395] netlink: 'syz.3.1323': attribute type 4 has an invalid length. [ 285.712795][ T9401] siw: device registration error -23 [ 286.202444][ T9405] pim6reg1: entered promiscuous mode [ 286.224182][ T9405] pim6reg1: entered allmulticast mode [ 287.382468][ T9440] lo speed is unknown, defaulting to 1000 [ 288.222315][ T9467] lo speed is unknown, defaulting to 1000 [ 291.493162][ T9485] lo speed is unknown, defaulting to 1000 [ 291.812757][ T9490] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.821307][ T9490] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.863654][ T9490] bridge0: entered allmulticast mode [ 291.918156][ T9498] bridge_slave_1: left allmulticast mode [ 291.938856][ T9498] bridge_slave_1: left promiscuous mode [ 291.965148][ T9498] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.008688][ T9498] bridge_slave_0: left allmulticast mode [ 292.030859][ T9498] bridge_slave_0: left promiscuous mode [ 292.039727][ T9498] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.744926][ T9506] lo speed is unknown, defaulting to 1000 [ 293.894679][ T9547] lo speed is unknown, defaulting to 1000 [ 296.206746][ T9612] netlink: 'syz.1.1421': attribute type 4 has an invalid length. [ 297.136393][ T9663] lo speed is unknown, defaulting to 1000 [ 297.449966][ T9662] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 298.406305][ T9706] comedi comedi0: Minor 3 could not be opened [ 299.017864][ T9687] netlink: 'syz.3.1452': attribute type 4 has an invalid length. [ 299.531020][ T9718] lo speed is unknown, defaulting to 1000 [ 300.061674][ T9731] lo speed is unknown, defaulting to 1000 [ 300.247007][ T9730] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 301.961030][ T9793] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 301.969915][ T9793] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 303.512917][ T9862] pim6reg1: entered promiscuous mode [ 303.518306][ T9862] pim6reg1: entered allmulticast mode [ 304.824822][ T9872] netlink: 'syz.4.1526': attribute type 4 has an invalid length. [ 306.534048][ T9961] siw: device registration error -23 [ 306.907185][ T9967] lo speed is unknown, defaulting to 1000 [ 307.057811][ T9981] pim6reg1: entered promiscuous mode [ 307.063349][ T9981] pim6reg1: entered allmulticast mode [ 307.221984][ T9988] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 308.051717][T10015] comedi comedi0: Minor 3 could not be opened [ 309.724714][T10059] comedi comedi0: Minor 3 could not be opened [ 310.597258][T10065] siw: device registration error -23 [ 311.557974][T10101] comedi comedi0: Minor 3 could not be opened [ 312.409351][T10112] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1625'. [ 312.573995][T10116] netlink: 'syz.3.1627': attribute type 1 has an invalid length. [ 312.601971][T10116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1627'. [ 312.815236][T10128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1632'. [ 313.714960][T10159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1646'. [ 314.880679][T10202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1662'. [ 315.154673][T10209] netlink: 'syz.4.1665': attribute type 4 has an invalid length. [ 315.193654][T10209] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1665'. [ 315.260008][T10209] `: renamed from bond0 (while UP) [ 315.600111][T10219] lo speed is unknown, defaulting to 1000 [ 315.645544][T10222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.598075][T10256] netlink: 'syz.3.1682': attribute type 4 has an invalid length. [ 317.744785][T10284] tipc: Started in network mode [ 317.749870][T10284] tipc: Node identity 080211000001, cluster identity 4711 [ 317.789228][T10284] tipc: Enabled bearer , priority 0 [ 317.842822][T10289] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 317.862112][T10289] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 317.877588][T10284] tipc: Resetting bearer [ 318.913892][ T5952] tipc: Node number set to 134418688 [ 319.909185][T10342] comedi comedi0: Minor 3 could not be opened [ 320.519102][T10346] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 320.735592][T10320] netlink: 'syz.4.1708': attribute type 4 has an invalid length. [ 320.871134][T10363] netlink: 'syz.1.1725': attribute type 14 has an invalid length. [ 320.880069][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1725'. [ 320.925701][T10363] netlink: 'syz.1.1725': attribute type 14 has an invalid length. [ 320.933821][ T1150] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.949039][ T1150] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.959187][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1725'. [ 320.968740][ T1150] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.978810][ T1150] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.164068][T10373] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1731'. [ 322.392520][T10385] lo speed is unknown, defaulting to 1000 [ 322.772591][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.847893][T10384] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 323.192174][ T5874] IPVS: starting estimator thread 0... [ 323.289260][T10406] IPVS: using max 28 ests per chain, 67200 per kthread [ 323.767334][T10426] block nbd0: not configured, cannot reconfigure [ 324.108692][T10430] lo speed is unknown, defaulting to 1000 [ 324.608652][T10429] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 324.746721][T10399] netlink: 'syz.1.1740': attribute type 4 has an invalid length. [ 324.770575][ T5952] IPVS: starting estimator thread 0... [ 324.864314][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1756'. [ 324.893055][T10442] IPVS: using max 28 ests per chain, 67200 per kthread [ 325.064579][T10452] netlink: 'syz.2.1760': attribute type 25 has an invalid length. [ 325.478495][T10464] siw: device registration error -23 [ 326.567312][T10476] lo speed is unknown, defaulting to 1000 [ 327.063816][T10475] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 327.554059][T10497] netlink: 'syz.0.1775': attribute type 10 has an invalid length. [ 327.572025][T10488] lo speed is unknown, defaulting to 1000 [ 328.174754][T10497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.236562][T10497] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 329.254922][T10504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.262744][T10504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.274111][T10504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.281786][T10504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.311282][T10504] bond0: (slave batadv0): Releasing backup interface [ 330.100921][T10517] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 330.164171][T10518] lo speed is unknown, defaulting to 1000 [ 330.572441][T10535] comedi comedi0: Minor 3 could not be opened [ 331.410280][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1792'. [ 332.346318][T10559] netlink: 'syz.3.1797': attribute type 1 has an invalid length. [ 332.382166][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1797'. [ 332.412859][T10561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1795'. [ 332.421231][T10559] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1797'. [ 333.372871][T10592] lo speed is unknown, defaulting to 1000 [ 333.884542][T10591] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 334.031104][T10600] netlink: 'syz.3.1813': attribute type 1 has an invalid length. [ 334.092058][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1813'. [ 334.386343][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1820'. [ 335.478783][T10638] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 335.505681][T10639] lo speed is unknown, defaulting to 1000 [ 338.776793][T10702] netlink: 'syz.3.1854': attribute type 11 has an invalid length. [ 338.790890][T10702] netlink: 448 bytes leftover after parsing attributes in process `syz.3.1854'. [ 339.232148][ T5952] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 339.418130][ T5952] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 339.431277][ T5952] usb 5-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 339.532765][ T5952] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 339.560105][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.613522][ T5952] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 339.719192][ T5952] usb 5-1: invalid MIDI out EP 0 [ 340.237514][ T5952] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 341.853123][T10739] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 342.267911][ T5874] usb 5-1: USB disconnect, device number 16 [ 342.918040][T10768] netlink: 'syz.1.1878': attribute type 1 has an invalid length. [ 342.925937][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1878'. [ 343.226495][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1885'. [ 344.211072][T10802] netlink: 'syz.2.1893': attribute type 1 has an invalid length. [ 344.252426][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1893'. [ 344.274964][T10804] netlink: 'syz.0.1895': attribute type 1 has an invalid length. [ 344.282942][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1895'. [ 345.937088][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1904'. [ 345.968131][T10825] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1904'. [ 346.040964][ T1150] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.041113][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1904'. [ 346.063511][ T1150] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.104738][T10825] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1904'. [ 346.114944][ T1150] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.146879][ T1150] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.426260][T10838] netlink: 'syz.3.1909': attribute type 1 has an invalid length. [ 347.130961][T10847] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 347.137960][T10848] ------------[ cut here ]------------ [ 347.143518][T10848] WARNING: kernel/nstree.c:115 at __ns_tree_remove+0x28d/0x330, CPU#1: syz.4.1910/10848 [ 347.153374][T10848] Modules linked in: [ 347.157314][T10848] CPU: 1 UID: 0 PID: 10848 Comm: syz.4.1910 Not tainted syzkaller #0 PREEMPT(full) [ 347.166781][T10848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 347.176895][T10848] RIP: 0010:__ns_tree_remove+0x28d/0x330 [ 347.182603][T10848] Code: 0f 85 a4 00 00 00 48 8b 04 24 ff 00 48 8b 7c 24 18 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 79 92 f9 09 e8 54 f5 31 00 90 <0f> 0b 90 e9 cc fd ff ff e8 46 f5 31 00 90 0f 0b 90 e9 ee fd ff ff [ 347.202453][T10848] RSP: 0018:ffffc9001c107aa8 EFLAGS: 00010283 [ 347.208543][T10848] RAX: ffffffff818de3cc RBX: ffff8880671fd220 RCX: 0000000000080000 [ 347.218420][T10848] RDX: ffffc90012440000 RSI: 000000000000032b RDI: 000000000000032c [ 347.223296][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1909'. [ 347.226598][T10848] RBP: dffffc0000000000 R08: ffffffff8e1efb53 R09: 1ffffffff1c3df6a [ 347.243646][T10848] R10: dffffc0000000000 R11: fffffbfff1c3df6b R12: ffff8880671fd220 [ 347.251681][T10848] R13: 1ffff1100ce3fa43 R14: ffff8880671fd200 R15: ffffffff8e1ea3c0 [ 347.260038][T10848] FS: 00007f7be03456c0(0000) GS:ffff888125ae7000(0000) knlGS:0000000000000000 [ 347.269206][T10848] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.275863][T10848] CR2: 000000110c41639a CR3: 000000005f300000 CR4: 00000000003526f0 [ 347.283912][T10848] Call Trace: [ 347.287211][T10848] [ 347.290154][T10848] ? dec_ucount+0x15c/0x180 [ 347.294730][T10848] free_mnt_ns+0xd1/0x110 [ 347.299078][T10848] namespace_unlock+0x529/0x760 [ 347.303990][T10848] ? clone_mnt+0xba/0x9a0 [ 347.308340][T10848] ? __pfx_namespace_unlock+0x10/0x10 [ 347.314689][T10848] ? alloc_mnt_ns+0x2fc/0x3d0 [ 347.319435][T10848] copy_mnt_ns+0x6e0/0x870 [ 347.324528][T10848] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 347.329952][T10848] ? create_new_namespaces+0x31/0x720 [ 347.335426][T10848] create_new_namespaces+0xd1/0x720 [ 347.340659][T10848] ? bpf_lsm_capable+0x9/0x20 [ 347.345407][T10848] ? security_capable+0x7e/0x2e0 [ 347.350369][T10848] unshare_nsproxy_namespaces+0x11c/0x170 [ 347.356190][T10848] ksys_unshare+0x4c8/0x8c0 [ 347.360733][T10848] ? __pfx_ksys_unshare+0x10/0x10 [ 347.365955][T10848] __x64_sys_unshare+0x38/0x50 [ 347.370730][T10848] do_syscall_64+0xfa/0xfa0 [ 347.375298][T10848] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.380536][T10848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.386651][T10848] ? clear_bhb_loop+0x60/0xb0 [ 347.391339][T10848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.397290][T10848] RIP: 0033:0x7f7bdf58ec29 [ 347.401726][T10848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.422173][T10848] RSP: 002b:00007f7be0345038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 347.430616][T10848] RAX: ffffffffffffffda RBX: 00007f7bdf7d6450 RCX: 00007f7bdf58ec29 [ 347.439234][T10848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042060200 [ 347.447612][T10848] RBP: 00007f7bdf611e41 R08: 0000000000000000 R09: 0000000000000000 [ 347.455652][T10848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.463718][T10848] R13: 00007f7bdf7d64e8 R14: 00007f7bdf7d6450 R15: 00007ffc173c93d8 [ 347.471732][T10848] [ 347.474827][T10848] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 347.482115][T10848] CPU: 1 UID: 0 PID: 10848 Comm: syz.4.1910 Not tainted syzkaller #0 PREEMPT(full) [ 347.491486][T10848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 347.501547][T10848] Call Trace: [ 347.504832][T10848] [ 347.507762][T10848] dump_stack_lvl+0x99/0x250 [ 347.512367][T10848] ? __asan_memcpy+0x40/0x70 [ 347.516965][T10848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.522187][T10848] ? __pfx__printk+0x10/0x10 [ 347.526814][T10848] vpanic+0x237/0x6d0 [ 347.530817][T10848] ? __pfx_vpanic+0x10/0x10 [ 347.535330][T10848] ? is_bpf_text_address+0x292/0x2b0 [ 347.540630][T10848] ? is_bpf_text_address+0x26/0x2b0 [ 347.545841][T10848] panic+0xb9/0xc0 [ 347.549594][T10848] ? __pfx_panic+0x10/0x10 [ 347.554023][T10848] __warn+0x334/0x4c0 [ 347.558009][T10848] ? __ns_tree_remove+0x28d/0x330 [ 347.563044][T10848] ? __ns_tree_remove+0x28d/0x330 [ 347.568076][T10848] report_bug+0x2be/0x4f0 [ 347.572411][T10848] ? __ns_tree_remove+0x28d/0x330 [ 347.577470][T10848] ? __ns_tree_remove+0x28d/0x330 [ 347.582520][T10848] ? __ns_tree_remove+0x28f/0x330 [ 347.587563][T10848] handle_bug+0x84/0x160 [ 347.591818][T10848] exc_invalid_op+0x1a/0x50 [ 347.596342][T10848] asm_exc_invalid_op+0x1a/0x20 [ 347.601196][T10848] RIP: 0010:__ns_tree_remove+0x28d/0x330 [ 347.606838][T10848] Code: 0f 85 a4 00 00 00 48 8b 04 24 ff 00 48 8b 7c 24 18 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 79 92 f9 09 e8 54 f5 31 00 90 <0f> 0b 90 e9 cc fd ff ff e8 46 f5 31 00 90 0f 0b 90 e9 ee fd ff ff [ 347.626449][T10848] RSP: 0018:ffffc9001c107aa8 EFLAGS: 00010283 [ 347.632535][T10848] RAX: ffffffff818de3cc RBX: ffff8880671fd220 RCX: 0000000000080000 [ 347.640523][T10848] RDX: ffffc90012440000 RSI: 000000000000032b RDI: 000000000000032c [ 347.648510][T10848] RBP: dffffc0000000000 R08: ffffffff8e1efb53 R09: 1ffffffff1c3df6a [ 347.656510][T10848] R10: dffffc0000000000 R11: fffffbfff1c3df6b R12: ffff8880671fd220 [ 347.664493][T10848] R13: 1ffff1100ce3fa43 R14: ffff8880671fd200 R15: ffffffff8e1ea3c0 [ 347.672496][T10848] ? __ns_tree_remove+0x28c/0x330 [ 347.677548][T10848] ? __ns_tree_remove+0x28c/0x330 [ 347.682581][T10848] ? dec_ucount+0x15c/0x180 [ 347.687096][T10848] free_mnt_ns+0xd1/0x110 [ 347.691435][T10848] namespace_unlock+0x529/0x760 [ 347.696286][T10848] ? clone_mnt+0xba/0x9a0 [ 347.700621][T10848] ? __pfx_namespace_unlock+0x10/0x10 [ 347.706043][T10848] ? alloc_mnt_ns+0x2fc/0x3d0 [ 347.710738][T10848] copy_mnt_ns+0x6e0/0x870 [ 347.715176][T10848] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 347.720571][T10848] ? create_new_namespaces+0x31/0x720 [ 347.725962][T10848] create_new_namespaces+0xd1/0x720 [ 347.731177][T10848] ? bpf_lsm_capable+0x9/0x20 [ 347.735874][T10848] ? security_capable+0x7e/0x2e0 [ 347.740840][T10848] unshare_nsproxy_namespaces+0x11c/0x170 [ 347.746585][T10848] ksys_unshare+0x4c8/0x8c0 [ 347.751096][T10848] ? __pfx_ksys_unshare+0x10/0x10 [ 347.756130][T10848] __x64_sys_unshare+0x38/0x50 [ 347.760892][T10848] do_syscall_64+0xfa/0xfa0 [ 347.765397][T10848] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.770616][T10848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.776713][T10848] ? clear_bhb_loop+0x60/0xb0 [ 347.781450][T10848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.787402][T10848] RIP: 0033:0x7f7bdf58ec29 [ 347.791855][T10848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.811498][T10848] RSP: 002b:00007f7be0345038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 347.819961][T10848] RAX: ffffffffffffffda RBX: 00007f7bdf7d6450 RCX: 00007f7bdf58ec29 [ 347.827948][T10848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042060200 [ 347.835938][T10848] RBP: 00007f7bdf611e41 R08: 0000000000000000 R09: 0000000000000000 [ 347.843928][T10848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.851964][T10848] R13: 00007f7bdf7d64e8 R14: 00007f7bdf7d6450 R15: 00007ffc173c93d8 [ 347.859965][T10848] [ 347.863373][T10848] Kernel Offset: disabled [ 347.867737][T10848] Rebooting in 86400 seconds..