last executing test programs: 5m16.458153452s ago: executing program 4 (id=5): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 5m10.242831924s ago: executing program 4 (id=17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @loopback, 0x4e24, 0x1, 'none\x00', 0x1, 0x32bd, 0x41}, {@loopback, 0x4e20, 0x2, 0x7f, 0x4, 0x12d5c}}, 0x44) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x1022002, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x8000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b000)=""/102400, 0x19000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m55.03429574s ago: executing program 32 (id=17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @loopback, 0x4e24, 0x1, 'none\x00', 0x1, 0x32bd, 0x41}, {@loopback, 0x4e20, 0x2, 0x7f, 0x4, 0x12d5c}}, 0x44) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x1022002, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x8000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b000)=""/102400, 0x19000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19.229025415s ago: executing program 3 (id=638): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000001000"/28], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@o_path={0x0, 0x0, 0x8000, r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000068000000060a010400000000000000000500400008000b4000000000400004803c0001800b00010074756e6e656c00002c0002800800034000000000080001400000000108000340000000020800014000000000080002400000000c0900010073797a30"], 0x5d54}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0xffffd6c0, r3, 0x0, 0x20}, 0x38) socket(0x10, 0x2, 0x0) io_setup(0x4, &(0x7f0000000080)) io_submit(0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0]) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r5, 0x80047453, &(0x7f00000002c0)={0x18, 0x4000000, {0x4, @remote, 'erspan0\x00'}}) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, 0xffffffffffffffff, 0x0) 14.641830934s ago: executing program 3 (id=646): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x5, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x4, r1}, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000300)={r7, @in6={{0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, 0xb48, 0x100, 0x3, 0x4f5, 0x1}, &(0x7f0000000100)=0x98) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) setsockopt$SO_J1939_SEND_PRIO(r8, 0x6b, 0x3, &(0x7f00000001c0)=0x7, 0x4) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) 14.573262505s ago: executing program 5 (id=647): r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x800}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000140)=0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f00000006c0)=@v2={0x2000000, [{0x4e, 0x6}, {0x5, 0x2}]}, 0x14, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) landlock_create_ruleset(0x0, 0x0, 0x3) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x4008000) 12.417057258s ago: executing program 0 (id=651): r0 = syz_open_dev$dri(0x0, 0xd21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() socket$can_bcm(0x1d, 0x2, 0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x5, 0x97, {{0x11, 0x4, 0x1, 0x5, 0x44, 0x65, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xed, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x9}, {@loopback, 0x3}, {@multicast2, 0x17bc388a}, {@remote, 0x7a8e}]}]}}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x3a, r6, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x81, 0x2, 0x4}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0x7, 0xa1b, 0x4}}, 0xe8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0xffffffff]}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, 0x0) 11.412424967s ago: executing program 0 (id=652): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB], 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) 11.411204457s ago: executing program 5 (id=654): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x415, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x8000) 10.670651722s ago: executing program 3 (id=655): r0 = syz_open_dev$dri(0x0, 0xd21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() r3 = socket$can_bcm(0x1d, 0x2, 0x2) getpeername(r3, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x5, 0x97, {{0x11, 0x4, 0x1, 0x5, 0x44, 0x65, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xed, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x9}, {@loopback, 0x3}, {@multicast2, 0x17bc388a}, {@remote, 0x7a8e}]}]}}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x3a, r7, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x81, 0x2, 0x4}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0x7, 0xa1b, 0x4}}, 0xe8) sendmmsg(r6, 0x0, 0x0, 0xffe0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xffffffff]}) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a0000", @ANYRES32=r11], 0x1c}}, 0x804) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={r10, 0x80000}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, 0x0) 10.591193523s ago: executing program 1 (id=656): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) 10.338272278s ago: executing program 5 (id=658): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xfffffffc) 9.17328389s ago: executing program 3 (id=659): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000001000"/28], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@o_path={0x0, 0x0, 0x8000, r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000068000000060a010400000000000000000500400008000b4000000000400004803c0001800b00010074756e6e656c00002c0002800800034000000000080001400000000108000340000000020800014000000000080002400000000c0900010073797a30"], 0x5d54}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0xffffd6c0, r3, 0x0, 0x20}, 0x38) socket(0x10, 0x2, 0x0) io_setup(0x4, &(0x7f0000000080)) io_submit(0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0]) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r5, 0x80047453, &(0x7f00000002c0)={0x18, 0x4000000, {0x4, @remote, 'erspan0\x00'}}) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, 0xffffffffffffffff, 0x0) 9.066269272s ago: executing program 1 (id=660): socket$kcm(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000040)=""/23, 0x17) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bb, 0x1, 0x5, 0x1c3}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) r7 = add_key$keyring(&(0x7f00000085c0), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, r7) keyctl$unlink(0x9, r8, r7) keyctl$KEYCTL_WATCH_KEY(0x20, r8, 0xffffffffffffffff, 0x1a) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000), 0x0, 0x1e}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.17603515s ago: executing program 2 (id=661): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x1, 0xfff8, 0x7, 0x8, 0x200}, {0x20, 0x1, 0xb, 0x9, 0x9}, 0x3, 0xfffffffb, 0x67}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.383805525s ago: executing program 3 (id=662): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() socket$can_bcm(0x1d, 0x2, 0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x5, 0x97, {{0x11, 0x4, 0x1, 0x5, 0x44, 0x65, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xed, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x9}, {@loopback, 0x3}, {@multicast2, 0x17bc388a}, {@remote, 0x7a8e}]}]}}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x3a, r6, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x81, 0x2, 0x4}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0x7, 0xa1b, 0x4}}, 0xe8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0xffffffff]}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, 0x0) 6.228163378s ago: executing program 2 (id=663): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/rt_acct\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) 5.747430587s ago: executing program 1 (id=664): sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000000f80), 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(&(0x7f0000000000)='./cgroup\x00', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r4) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x24040800) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r4) r5 = syz_io_uring_setup(0x2bd7, 0x0, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5.708953798s ago: executing program 0 (id=665): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x5, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x4, r1}, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000300)={r7, @in6={{0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, 0xb48, 0x100, 0x3, 0x4f5, 0x1}, &(0x7f0000000100)=0x98) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) setsockopt$SO_J1939_SEND_PRIO(r8, 0x6b, 0x3, &(0x7f00000001c0)=0x7, 0x4) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) 5.428100854s ago: executing program 2 (id=666): r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x800}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000140)=0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f00000006c0)=@v2={0x2000000, [{0x4e, 0x6}, {0x5, 0x2}]}, 0x14, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) landlock_create_ruleset(0x0, 0x0, 0x3) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x4008000) 4.425298883s ago: executing program 1 (id=667): socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}}, 0x800) getegid() getpid() syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87000000", 0xf5) 4.007935021s ago: executing program 1 (id=668): bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x1000}}, './file0\x00'}) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) 4.000536142s ago: executing program 5 (id=669): r0 = syz_open_dev$dri(0x0, 0xd21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() r3 = socket$can_bcm(0x1d, 0x2, 0x2) getpeername(r3, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x5, 0x97, {{0x11, 0x4, 0x1, 0x5, 0x44, 0x65, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xed, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x9}, {@loopback, 0x3}, {@multicast2, 0x17bc388a}, {@remote, 0x7a8e}]}]}}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x3a, r7, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x81, 0x2, 0x4}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0x7, 0xa1b, 0x4}}, 0xe8) sendmmsg(r6, 0x0, 0x0, 0xffe0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xffffffff]}) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a0000", @ANYRES32=r11], 0x1c}}, 0x804) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={r10, 0x80000}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, 0x0) 2.993664821s ago: executing program 5 (id=670): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x415, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x8000) 2.946462332s ago: executing program 1 (id=671): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() r3 = socket$can_bcm(0x1d, 0x2, 0x2) getpeername(r3, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x5, 0x97, {{0x11, 0x4, 0x1, 0x5, 0x44, 0x65, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xed, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x9}, {@loopback, 0x3}, {@multicast2, 0x17bc388a}, {@remote, 0x7a8e}]}]}}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x3a, r7, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x81, 0x2, 0x4}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0x7, 0xa1b, 0x4}}, 0xe8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0xffffffff]}) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) 2.53858651s ago: executing program 0 (id=672): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000240)={0x3, @bcast, 0xee00}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000580)="303e3080020000000900f190c937dc6b14243b0402e8886ff204d830fa5b3ba026b4fb643891162fb3fbf36e7118a3d45a46b678a2e5b247a74f", 0x3a, r5) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@any, 0x1}, {@local, 0x5}, 0x400, "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"}, 0x418, 0x8}) close_range(0xffffffffffffffff, r1, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000200)={0x3, @bcast}) r6 = socket$igmp(0x2, 0x3, 0x2) getpeername$inet(r6, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) 2.288716255s ago: executing program 2 (id=673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x1, 0xfff8, 0x7, 0x8, 0x200}, {0x20, 0x1, 0xb, 0x9, 0x9}, 0x3, 0xfffffffb, 0x67}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.277214675s ago: executing program 0 (id=674): socket$kcm(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) write(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000040)=""/23, 0x17) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bb, 0x1, 0x5, 0x1c3}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) r7 = add_key$keyring(&(0x7f00000085c0), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, r7) keyctl$unlink(0x9, r8, r7) keyctl$KEYCTL_WATCH_KEY(0x20, r8, 0xffffffffffffffff, 0x1a) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000), 0x0, 0x1e}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.987785841s ago: executing program 5 (id=675): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB], 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) 1.50312388s ago: executing program 2 (id=676): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x101041, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40002, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_vhci(0x0, 0xf8) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x176) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x2, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x3, 0x5], 0xffff1000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 271.009464ms ago: executing program 2 (id=677): sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000000f80), 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(&(0x7f0000000000)='./cgroup\x00', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r4) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x24040800) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r4) r5 = syz_io_uring_setup(0x2bd7, 0x0, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 77.335278ms ago: executing program 0 (id=678): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) ioctl$TIOCGSID(r1, 0x5429, 0x0) syz_open_dev$usbmon(0x0, 0x80000001, 0x82002) io_submit(0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r2 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xa00012, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRESHEX, @ANYRES16, @ANYRESHEX, @ANYRES16=r0]) getsockopt$netlink(r2, 0x10e, 0x5, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000200)={0x9, 0x6e}, &(0x7f0000000300)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(r1, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) 0s ago: executing program 3 (id=679): socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}}, 0x800) getegid() getpid() syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87000000", 0xf5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.234' (ED25519) to the list of known hosts. [ 67.875991][ T4173] cgroup: Unknown subsys name 'net' [ 68.013925][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.680479][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.265805][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 71.310151][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 71.378192][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 71.421072][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 71.524245][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.531825][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.539880][ T4184] device bridge_slave_0 entered promiscuous mode [ 71.553963][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.563328][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.572460][ T4191] device bridge_slave_0 entered promiscuous mode [ 71.587163][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 71.603822][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.612800][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.623575][ T4184] device bridge_slave_1 entered promiscuous mode [ 71.640615][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.648906][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.658524][ T4191] device bridge_slave_1 entered promiscuous mode [ 71.731255][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.738788][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.746905][ T4197] device bridge_slave_0 entered promiscuous mode [ 71.766701][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.785941][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.795662][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.803896][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.812656][ T4197] device bridge_slave_1 entered promiscuous mode [ 71.827822][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.839931][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.847923][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.858315][ T4185] device bridge_slave_0 entered promiscuous mode [ 71.870611][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.900250][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.907963][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.916311][ T4185] device bridge_slave_1 entered promiscuous mode [ 71.955974][ T4191] team0: Port device team_slave_0 added [ 71.980210][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.993649][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.000459][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.018728][ T4191] team0: Port device team_slave_1 added [ 72.036694][ T4184] team0: Port device team_slave_0 added [ 72.044468][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.055007][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.062893][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.072322][ T4183] device bridge_slave_0 entered promiscuous mode [ 72.090304][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.102096][ T4184] team0: Port device team_slave_1 added [ 72.119277][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.127212][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.135698][ T4183] device bridge_slave_1 entered promiscuous mode [ 72.154838][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.166459][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.178639][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.209821][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.269618][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.277646][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.304741][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.317079][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.324225][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.354534][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.369976][ T4197] team0: Port device team_slave_0 added [ 72.397928][ T4185] team0: Port device team_slave_0 added [ 72.409476][ T4185] team0: Port device team_slave_1 added [ 72.416930][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.424592][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.451589][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.464562][ T4197] team0: Port device team_slave_1 added [ 72.476427][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.488866][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.552575][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.559797][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.587880][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.611200][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.618827][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.645754][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.682347][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.689686][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.718249][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.730191][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.737613][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.764928][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.779901][ T4184] device hsr_slave_0 entered promiscuous mode [ 72.788323][ T4184] device hsr_slave_1 entered promiscuous mode [ 72.800762][ T4183] team0: Port device team_slave_0 added [ 72.811398][ T4191] device hsr_slave_0 entered promiscuous mode [ 72.818542][ T4191] device hsr_slave_1 entered promiscuous mode [ 72.825730][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.834477][ T4191] Cannot create hsr debugfs directory [ 72.860466][ T4183] team0: Port device team_slave_1 added [ 72.862024][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 72.867474][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 72.874360][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 72.935859][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.943364][ T2302] Bluetooth: hci3: command 0x0409 tx timeout [ 72.943412][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.976112][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 72.977302][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.037535][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.045198][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.073173][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.088779][ T4185] device hsr_slave_0 entered promiscuous mode [ 73.096828][ T4185] device hsr_slave_1 entered promiscuous mode [ 73.105527][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.114009][ T4185] Cannot create hsr debugfs directory [ 73.123577][ T4197] device hsr_slave_0 entered promiscuous mode [ 73.131270][ T4197] device hsr_slave_1 entered promiscuous mode [ 73.138368][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.150414][ T4197] Cannot create hsr debugfs directory [ 73.285602][ T4183] device hsr_slave_0 entered promiscuous mode [ 73.292853][ T4183] device hsr_slave_1 entered promiscuous mode [ 73.299866][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.307806][ T4183] Cannot create hsr debugfs directory [ 73.543562][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.559315][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.569343][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.584391][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.628856][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.658612][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.670656][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.690471][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.767868][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.788412][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.798119][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.809809][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.823600][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.863461][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.876267][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.898663][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.950156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.963352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.974769][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.985702][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.999289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.009053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.022206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.033537][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.041927][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.062666][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.090002][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.104224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.137621][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.148143][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.179565][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.201169][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.210677][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.223358][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.233539][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.252227][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.267086][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.277051][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.289899][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.300013][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.309120][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.327360][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.337912][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.376734][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.386581][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.397440][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.435447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.447195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.480266][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.506485][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.538791][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.558243][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.568438][ T3053] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.575781][ T3053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.588306][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.597511][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.607074][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.629257][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.638971][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.648770][ T3053] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.656095][ T3053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.666603][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.691865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.703617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.712871][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.720418][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.728751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.741796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.750271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.767669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.793229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.802594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.813734][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.821193][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.828979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.841565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.859116][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.872322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.884197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.915128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.924588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.934769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.943843][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 74.950422][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 74.950472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.956794][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 74.979269][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.004274][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.013207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.021559][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 75.021689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.036576][ T4241] Bluetooth: hci3: command 0x041b tx timeout [ 75.038057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.052262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.062284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.072882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.081339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.099223][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.112251][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.153519][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.163482][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.173625][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.185153][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.200319][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.215658][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.230145][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.245016][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.255967][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.266609][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.276483][ T3053] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.285989][ T3053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.296961][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.313098][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.324020][ T3053] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.333927][ T3053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.349455][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.360486][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.376795][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.388623][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.405553][ T4184] device veth0_vlan entered promiscuous mode [ 75.419994][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.438117][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.449726][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.466241][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.476196][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.498583][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.517730][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.537015][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.564126][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.582977][ T4184] device veth1_vlan entered promiscuous mode [ 75.604030][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.619048][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.638927][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.657426][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.667204][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.677550][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.688847][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.699879][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.709961][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.719632][ T3053] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.727216][ T3053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.735734][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.745322][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.755933][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.765502][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.777916][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.787417][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.797127][ T3053] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.804299][ T3053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.825447][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.834183][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.874328][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.893895][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.915888][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.925454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.937399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.950643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.959562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.970165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.994421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.008146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.037841][ T4184] device veth0_macvtap entered promiscuous mode [ 76.047333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.057458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.071568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.079757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.097379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.110033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.123589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.134317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.153895][ T4184] device veth1_macvtap entered promiscuous mode [ 76.166990][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.178772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.203260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.221950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.267461][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.288277][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.298606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.318218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.331292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.341487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.359075][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.369028][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.381181][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.418510][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.430632][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.457268][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.477480][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.501914][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.516702][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.525823][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.538821][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.552878][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.562513][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.572709][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.588407][ T4185] device veth0_vlan entered promiscuous mode [ 76.601286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.609217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.669046][ T4185] device veth1_vlan entered promiscuous mode [ 76.683506][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.762581][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.778136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.788576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.798746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.806919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.843652][ T4185] device veth0_macvtap entered promiscuous mode [ 76.853950][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.865276][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.875714][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.887710][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.897872][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.908191][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.918354][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.946799][ T4185] device veth1_macvtap entered promiscuous mode [ 77.011712][ T4280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.021334][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 77.021471][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 77.021553][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 77.041130][ T4197] device veth0_vlan entered promiscuous mode [ 77.048082][ T4280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.066697][ T4191] device veth0_vlan entered promiscuous mode [ 77.076258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.086617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.097834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.102488][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 77.113129][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 77.126838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.136306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.146628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.157942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.167179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.177003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.187344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.197048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.205586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.248279][ T4191] device veth1_vlan entered promiscuous mode [ 77.258966][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.274663][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.288087][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.315846][ T4183] device veth0_vlan entered promiscuous mode [ 77.323102][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.335187][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.347252][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.359269][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.369017][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.378212][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.389558][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.402051][ T4197] device veth1_vlan entered promiscuous mode [ 77.417192][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.418079][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.433880][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.448575][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.448750][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.475597][ T4183] device veth1_vlan entered promiscuous mode [ 77.488407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.498015][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.507582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.517101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.525983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.535403][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.545902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.566872][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.577586][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.588479][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.597966][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.632736][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.643041][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.663440][ T4197] device veth0_macvtap entered promiscuous mode [ 77.697182][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.706086][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.717754][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.732694][ T4197] device veth1_macvtap entered promiscuous mode [ 77.758691][ T4183] device veth0_macvtap entered promiscuous mode [ 77.792023][ T4191] device veth0_macvtap entered promiscuous mode [ 77.817847][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.835247][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.847423][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.864665][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.899148][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.943216][ T4294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 77.979787][ T4294] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.087057][ T4191] device veth1_macvtap entered promiscuous mode [ 78.134360][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.186343][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.270331][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.316963][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.399658][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.457868][ T4183] device veth1_macvtap entered promiscuous mode [ 78.509952][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.589507][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.675470][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.755214][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.923105][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.935374][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.946717][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.959693][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.973597][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.995928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.007186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.020090][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.030290][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.040255][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.049936][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.078110][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.088867][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.099116][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.101040][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 79.110240][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.123391][ T4234] Bluetooth: hci1: command 0x0419 tx timeout [ 79.128480][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.137543][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 79.142953][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.144825][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.181855][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 79.192205][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.203723][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.209680][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 79.215303][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.231779][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.242895][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.253949][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.265617][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.276803][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.289621][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.297886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.307647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.317779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.327427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.337414][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.345660][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.361803][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.377475][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.387924][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.399066][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.409368][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.421373][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.436366][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.457150][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.471797][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.483829][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.496954][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.508049][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.519681][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.529814][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.540318][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.552466][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.560230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.568490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.579063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.589470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.599125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.615198][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.626058][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.636677][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.645968][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.678220][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.689199][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.705378][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.718456][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.761382][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.778007][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.779557][ T4300] delete_channel: no stack [ 79.815186][ T3053] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.869140][ T4280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.902859][ T4280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.982641][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.998833][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.036736][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.169418][ T7] libceph: connect (1)[c::]:6789 error -101 [ 80.181481][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 80.234328][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.268761][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.288377][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.322091][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.474381][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 80.485142][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 80.495100][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 80.504803][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.515376][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.687504][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.699352][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.709989][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.723350][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.733350][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 80.969858][ T7] libceph: connect (1)[c::]:6789 error -101 [ 81.020999][ T4310] ceph: No mds server is up or the cluster is laggy [ 81.063224][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 81.255763][ T400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.259776][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.345587][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.398068][ T400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.499559][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.534537][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.818975][ T4234] libceph: connect (1)[c::]:6789 error -101 [ 81.858036][ T4234] libceph: mon0 (1)[c::]:6789 connect error [ 81.961230][ T4249] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.519561][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.598295][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.644510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.583551][ T4249] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 83.855088][ T4249] usb 3-1: can't read configurations, error -71 [ 91.733013][ T4379] crypto_alloc_aead failed rc=-4 [ 92.498970][ T1325] cfg80211: failed to load regulatory.db [ 96.356916][ T4438] ip6gretap0 speed is unknown, defaulting to 1000 [ 96.383447][ T4438] ip6gretap0 speed is unknown, defaulting to 1000 [ 96.402888][ T4438] ip6gretap0 speed is unknown, defaulting to 1000 [ 97.001189][ T4438] infiniband syz2: set active [ 97.006514][ T4438] infiniband syz2: added ip6gretap0 [ 97.069081][ T23] ip6gretap0 speed is unknown, defaulting to 1000 [ 97.128611][ T4438] RDS/IB: syz2: added [ 97.133988][ T4438] smc: adding ib device syz2 with port count 1 [ 97.141249][ T4438] smc: ib device syz2 port 1 has pnetid [ 97.152881][ T4438] ip6gretap0 speed is unknown, defaulting to 1000 [ 97.239074][ T4438] ip6gretap0 speed is unknown, defaulting to 1000 [ 97.321930][ T4438] ip6gretap0 speed is unknown, defaulting to 1000 [ 97.408483][ T4438] ip6gretap0 speed is unknown, defaulting to 1000 [ 97.495154][ T4438] ip6gretap0 speed is unknown, defaulting to 1000 [ 97.616198][ T23] ip6gretap0 speed is unknown, defaulting to 1000 [ 99.467351][ T4453] UBIFS error (pid: 4453): cannot open "./file0", error -22 [ 106.107505][ T4493] device syzkaller0 entered promiscuous mode [ 106.247932][ T4493] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 106.876723][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.979081][ T4494] ip6gretap0 speed is unknown, defaulting to 1000 [ 108.099796][ T4248] Bluetooth: hci3: command 0x0409 tx timeout [ 108.430581][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.712499][ T4520] tmpfs: Unknown parameter 'usrquota' [ 109.200124][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.548917][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.923890][ T4539] tipc: Enabling of bearer rejected, failed to enable media [ 110.141856][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 110.247934][ T4536] device syzkaller0 entered promiscuous mode [ 110.409719][ T4494] chnl_net:caif_netlink_parms(): no params data found [ 111.730645][ T4494] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.753701][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.778223][ T4494] device bridge_slave_0 entered promiscuous mode [ 111.812023][ T4570] device syzkaller0 entered promiscuous mode [ 111.839971][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.910705][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.939649][ T4494] device bridge_slave_1 entered promiscuous mode [ 111.997224][ T4570] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 112.123633][ T4494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.177582][ T4494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.231178][ T4248] Bluetooth: hci3: command 0x040f tx timeout [ 112.364585][ T4494] team0: Port device team_slave_0 added [ 112.493565][ T4494] team0: Port device team_slave_1 added [ 113.183915][ T4494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.222083][ T4494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.369224][ T4494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.639783][ T4494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.657489][ T4494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.823187][ T4494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.433469][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 114.586895][ T4494] device hsr_slave_0 entered promiscuous mode [ 114.646177][ T4494] device hsr_slave_1 entered promiscuous mode [ 114.673552][ T4494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.683146][ T4494] Cannot create hsr debugfs directory [ 116.404419][ T4645] netlink: 'syz.3.73': attribute type 3 has an invalid length. [ 117.497159][ T4494] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 118.579361][ T4658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 119.248317][ T4494] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 120.080178][ T4494] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 120.238366][ T4494] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 122.584001][ T154] device hsr_slave_0 left promiscuous mode [ 123.351263][ T154] device hsr_slave_1 left promiscuous mode [ 123.397421][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.563274][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.582869][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.596044][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.217198][ T154] device bridge_slave_1 left promiscuous mode [ 124.272031][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.063986][ T154] device bridge_slave_0 left promiscuous mode [ 125.084268][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.278022][ T154] device veth1_macvtap left promiscuous mode [ 125.308676][ T154] device veth0_macvtap left promiscuous mode [ 125.347041][ T154] device veth1_vlan left promiscuous mode [ 125.386082][ T154] device veth0_vlan left promiscuous mode [ 126.174067][ T154] team0 (unregistering): Port device team_slave_1 removed [ 126.188499][ T154] team0 (unregistering): Port device team_slave_0 removed [ 126.413303][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.642111][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.964327][ T154] bond0 (unregistering): Released all slaves [ 127.163743][ T4494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.217865][ T4494] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.285201][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.295944][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.422598][ T4719] device syzkaller0 entered promiscuous mode [ 127.705235][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.301491][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.311289][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.318691][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.434210][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.464406][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.488784][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.500394][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.507877][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.532131][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.548484][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.680016][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.742215][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.777750][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.800929][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.812038][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.134477][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.519425][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.631968][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.681212][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.886951][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.419327][ T4793] device syzkaller0 entered promiscuous mode [ 132.997915][ T4797] device syzkaller0 entered promiscuous mode [ 133.062354][ T4798] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 133.113180][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.279059][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.341570][ T4494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.424466][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.433678][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.336201][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.431944][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.655693][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.701516][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.204880][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.461769][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.542020][ T4494] device veth0_vlan entered promiscuous mode [ 137.663217][ T4494] device veth1_vlan entered promiscuous mode [ 137.754604][ T4855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 137.950915][ T4325] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 138.090263][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.133416][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.177583][ T4494] device veth0_macvtap entered promiscuous mode [ 138.231774][ T4494] device veth1_macvtap entered promiscuous mode [ 138.338675][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.366228][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.400442][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.435293][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.448549][ T4325] usb 2-1: too many endpoints for config 0 interface 0 altsetting 15: 255, using maximum allowed: 30 [ 138.469224][ T4325] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 138.492676][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.513014][ T4325] usb 2-1: config 0 interface 0 has no altsetting 0 [ 138.523584][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.541767][ T4325] usb 2-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice= 0.00 [ 138.558116][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.577142][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.592512][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.626319][ T4325] usb 2-1: config 0 descriptor?? [ 138.634571][ T4494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.654039][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.671621][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.712905][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.748533][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.787074][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.808421][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.828695][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.849985][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.873495][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.907358][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.936345][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.963263][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.005371][ T4494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.049177][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.102986][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.160451][ T4869] device syzkaller0 entered promiscuous mode [ 139.201487][ T4325] apple 0003:05AC:020E.0001: hidraw0: USB HID vf.fe Device [HID 05ac:020e] on usb-dummy_hcd.1-1/input0 [ 139.216656][ T4494] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.235821][ T4494] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.261291][ T4494] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.317540][ T4494] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.485888][ T4325] usb 2-1: USB disconnect, device number 2 [ 140.702192][ T4878] fido_id[4878]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 141.509717][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.582725][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.631271][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.669224][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.506488][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.569305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.033968][ T4959] device syzkaller0 entered promiscuous mode [ 148.067610][ T4959] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 154.920763][ C0] sched: RT throttling activated [ 155.402740][ T5023] device syzkaller0 entered promiscuous mode [ 159.923061][ T5072] syz.2.159 uses obsolete (PF_INET,SOCK_PACKET) [ 163.644891][ T5111] device syzkaller0 entered promiscuous mode [ 163.707158][ T5111] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 163.774706][ T5108] kAFS: Can only specify source 'none' with -o dyn [ 163.963594][ T5108] syz.5.166 (5108) used greatest stack depth: 17824 bytes left [ 169.449541][ T5169] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 171.792508][ T5195] ip6gretap0 speed is unknown, defaulting to 1000 [ 171.830914][ T2302] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 173.078150][ T2302] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 173.094286][ T2302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.106622][ T2302] usb 2-1: Product: syz [ 173.115385][ T2302] usb 2-1: Manufacturer: syz [ 173.120168][ T2302] usb 2-1: SerialNumber: syz [ 173.242805][ T2302] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 174.972832][ T23] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 175.020154][ T23] usb 2-1: ath9k_htc: USB layer deinitialized [ 175.175229][ T4266] usb 2-1: USB disconnect, device number 3 [ 176.625187][ T5243] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 178.363157][ T5286] netlink: 'syz.0.198': attribute type 3 has an invalid length. [ 180.689928][ T5304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'. [ 184.643893][ T5341] UBIFS error (pid: 5341): cannot open "./file0", error -22 [ 186.077170][ T5359] device syzkaller0 entered promiscuous mode [ 186.293941][ T5365] netlink: 'syz.5.212': attribute type 3 has an invalid length. [ 186.361510][ T5364] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 188.024847][ T5382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.215'. [ 192.013478][ T5425] tipc: Started in network mode [ 192.036941][ T5425] tipc: Node identity ba6faa538cb9, cluster identity 4711 [ 192.085113][ T5425] tipc: Enabled bearer , priority 0 [ 192.152030][ T5425] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 192.184584][ T5425] tipc: Resetting bearer [ 192.272425][ T5424] tipc: Disabling bearer [ 193.855473][ T5457] tipc: Started in network mode [ 193.889086][ T5457] tipc: Node identity ae904ce1d228, cluster identity 4711 [ 193.981957][ T5457] tipc: Enabled bearer , priority 0 [ 194.242964][ T5457] tipc: Resetting bearer [ 194.317106][ T5453] tipc: Disabling bearer [ 195.393272][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.400093][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.810915][ T1325] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 197.223239][ T1325] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.260983][ T1325] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.421652][ T2302] Bluetooth: hci0: command 0x0406 tx timeout [ 197.428424][ T2302] Bluetooth: hci2: command 0x0406 tx timeout [ 197.441961][ T1325] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 197.468872][ T1325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 197.480872][ T2302] Bluetooth: hci1: command 0x0406 tx timeout [ 197.505098][ T1325] usb 6-1: SerialNumber: syz [ 197.509889][ T2302] Bluetooth: hci4: command 0x0406 tx timeout [ 197.893013][ T1325] usb 6-1: 0:2 : does not exist [ 197.936143][ T1325] usb 6-1: unit 255 not found! [ 198.409682][ T1325] usb 6-1: USB disconnect, device number 2 [ 198.747037][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.989009][ T5540] tipc: Enabling of bearer rejected, failed to enable media [ 205.088669][ T5593] tipc: Started in network mode [ 205.107579][ T5593] tipc: Node identity 7606f7c7a392, cluster identity 4711 [ 205.310961][ T5593] tipc: Enabled bearer , priority 0 [ 205.391311][ T5599] device syzkaller0 entered promiscuous mode [ 205.452708][ T5593] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 205.528704][ T5588] tipc: Resetting bearer [ 205.663898][ T5588] tipc: Disabling bearer [ 205.688846][ T5604] tipc: Enabled bearer , priority 0 [ 205.935745][ T5611] tipc: Disabling bearer [ 208.934101][ T5648] rdma_rxe: rxe_register_device failed with error -23 [ 209.102552][ T5648] rdma_rxe: failed to add ip6gretap0 [ 209.962675][ T5657] tipc: Started in network mode [ 209.974940][ T5657] tipc: Node identity 6256d1a83697, cluster identity 4711 [ 210.010422][ T5657] tipc: Enabled bearer , priority 0 [ 210.043576][ T5659] tipc: Enabled bearer , priority 0 [ 210.097742][ T5661] device syzkaller0 entered promiscuous mode [ 210.119702][ T5664] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 210.158537][ T5663] device syzkaller0 entered promiscuous mode [ 210.203426][ T5656] tipc: Resetting bearer [ 210.371681][ T5656] tipc: Disabling bearer [ 210.437788][ T5655] tipc: Resetting bearer [ 210.513887][ T5655] tipc: Disabling bearer [ 212.809213][ T5698] rdma_rxe: rxe_register_device failed with error -23 [ 212.915498][ T5698] rdma_rxe: failed to add ip6gretap0 [ 214.533112][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 214.636174][ T5718] tipc: Enabled bearer , priority 0 [ 214.661572][ T5724] device syzkaller0 entered promiscuous mode [ 215.471246][ T5718] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 215.768136][ T5722] tipc: Enabled bearer , priority 0 [ 215.790143][ T1108] tipc: Node number set to 3583309767 [ 215.802969][ T5728] device syzkaller0 entered promiscuous mode [ 215.891142][ T5728] tipc: Resetting bearer [ 215.923076][ T5728] tipc: Disabling bearer [ 215.944756][ T5727] tipc: Resetting bearer [ 216.057087][ T5727] tipc: Disabling bearer [ 216.585149][ T5739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'. [ 222.494889][ T5786] tipc: Enabled bearer , priority 0 [ 222.544452][ T5786] tipc: Resetting bearer [ 222.589220][ T5781] tipc: Disabling bearer [ 223.701015][ T5805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 225.647491][ T4275] Bluetooth: hci0: command 0x0c1a tx timeout [ 229.051985][ T5842] tipc: Enabled bearer , priority 0 [ 229.435528][ T5848] device syzkaller0 entered promiscuous mode [ 229.561569][ T5842] tipc: Resetting bearer [ 229.885655][ T5839] tipc: Resetting bearer [ 231.176895][ T4249] tipc: Node number set to 2092453089 [ 231.189960][ T5839] tipc: Disabling bearer [ 232.438264][ T5859] overlayfs: failed to resolve './file1': -2 [ 232.874599][ T1108] Bluetooth: hci3: command 0x0406 tx timeout [ 233.903859][ T5873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'. [ 234.840913][ T1325] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 235.091948][ T1325] usb 2-1: Using ep0 maxpacket: 32 [ 235.380995][ T1325] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 236.072525][ T1325] usb 2-1: config 0 has no interface number 0 [ 236.301048][ T1325] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 236.431979][ T1325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.619192][ T1325] usb 2-1: Product: syz [ 236.641739][ T1325] usb 2-1: Manufacturer: syz [ 236.657427][ T1325] usb 2-1: SerialNumber: syz [ 237.460674][ T5905] orangefs_mount: mount request failed with -4 [ 237.509881][ T1325] usb 2-1: config 0 descriptor?? [ 237.580022][ T1325] usb 2-1: can't set config #0, error -71 [ 237.600302][ T1325] usb 2-1: USB disconnect, device number 4 [ 238.970084][ T5919] tipc: Enabled bearer , priority 0 [ 239.006253][ T5919] device syzkaller0 entered promiscuous mode [ 239.130379][ T5919] tipc: Resetting bearer [ 239.637834][ T5918] tipc: Resetting bearer [ 239.932990][ T5918] tipc: Disabling bearer [ 240.004525][ T23] tipc: Node number set to 1421988264 [ 240.869585][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 241.405968][ T13] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 242.353505][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.346'. [ 245.530434][ T5952] fido_id[5952]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 246.838543][ T5982] tipc: Started in network mode [ 246.846615][ T5982] tipc: Node identity 421e372b9aae, cluster identity 4711 [ 246.934502][ T5982] tipc: Enabled bearer , priority 0 [ 247.381073][ T5982] tipc: Resetting bearer [ 247.425247][ T5988] device syzkaller0 entered promiscuous mode [ 247.434959][ T5988] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 247.498019][ T5990] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 247.520862][ T5980] tipc: Resetting bearer [ 247.530353][ T5990] cramfs: wrong magic [ 247.752953][ T5980] tipc: Disabling bearer [ 249.551114][ T4266] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 250.161123][ T4266] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 250.179984][ T4266] usb 4-1: config 0 has no interface number 0 [ 250.423576][ T4266] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 251.169599][ T4266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.178360][ T4266] usb 4-1: Product: syz [ 251.183835][ T4266] usb 4-1: Manufacturer: syz [ 251.188489][ T4266] usb 4-1: SerialNumber: syz [ 251.207711][ T4266] usb 4-1: config 0 descriptor?? [ 251.651130][ T4266] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 251.679065][ T4266] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 251.710459][ T4266] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 251.731001][ T4266] usb 4-1: media controller created [ 251.752332][ T4266] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.951438][ T4266] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 253.174866][ T4266] usb 4-1: USB disconnect, device number 2 [ 256.304834][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.311400][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.446433][ T6060] gfs2: not a GFS2 filesystem [ 258.443243][ T6070] tipc: Enabled bearer , priority 0 [ 258.471773][ T6070] device syzkaller0 entered promiscuous mode [ 258.565116][ T6070] tipc: Resetting bearer [ 258.819220][ T6069] tipc: Resetting bearer [ 258.939034][ T6069] tipc: Disabling bearer [ 261.517138][ T6091] netlink: 80 bytes leftover after parsing attributes in process `syz.3.384'. [ 263.448895][ T6118] tipc: Enabled bearer , priority 0 [ 263.492232][ T6118] device syzkaller0 entered promiscuous mode [ 263.551576][ T6118] tipc: Resetting bearer [ 263.612618][ T6117] tipc: Resetting bearer [ 263.770055][ T6117] tipc: Disabling bearer [ 267.066722][ T6157] tipc: Enabled bearer , priority 0 [ 267.118152][ T6157] tipc: Resetting bearer [ 267.155887][ T6156] tipc: Disabling bearer [ 268.353340][ T6172] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 270.135205][ T6181] ip6gretap0 speed is unknown, defaulting to 1000 [ 270.470826][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 270.822767][ T6189] rdma_rxe: rxe_register_device failed with error -23 [ 270.831266][ T6189] rdma_rxe: failed to add ip6gretap0 [ 271.071407][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.099242][ T13] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 271.485683][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.523582][ T13] usb 4-1: config 0 descriptor?? [ 271.561115][ T13] usb 4-1: can't set config #0, error -71 [ 271.662804][ T13] usb 4-1: USB disconnect, device number 3 [ 273.406589][ T6208] tipc: Enabled bearer , priority 0 [ 273.418510][ T6208] device syzkaller0 entered promiscuous mode [ 274.454072][ T6212] tipc: Resetting bearer [ 274.722184][ T6219] tipc: Resetting bearer [ 274.791482][ T1111] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 274.843837][ T6219] tipc: Disabling bearer [ 275.161005][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.229155][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.255156][ T1111] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 275.281639][ T1111] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 275.300942][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.346817][ T1111] usb 4-1: config 0 descriptor?? [ 275.684987][ T6226] netlink: 165 bytes leftover after parsing attributes in process `syz.1.425'. [ 275.933174][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x1 [ 275.957132][ T1111] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 276.086328][ T1111] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 276.328232][ T6218] netlink: 'syz.3.423': attribute type 4 has an invalid length. [ 276.471911][ T6237] netlink: 'syz.3.423': attribute type 4 has an invalid length. [ 276.733716][ T4249] usb 4-1: USB disconnect, device number 4 [ 280.408525][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.434'. [ 292.953676][ T6345] tipc: Enabled bearer , priority 0 [ 292.999408][ T6345] device syzkaller0 entered promiscuous mode [ 293.015036][ T6347] usb usb8: usbfs: process 6347 (syz.1.457) did not claim interface 0 before use [ 293.043663][ T6345] Zero length message leads to an empty skb [ 293.084532][ T6345] tipc: Resetting bearer [ 293.165234][ T6344] tipc: Resetting bearer [ 293.196706][ T6344] tipc: Disabling bearer [ 293.280844][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.458'. [ 293.471025][ T5129] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 295.010842][ T5129] usb 2-1: Using ep0 maxpacket: 32 [ 295.541816][ T5129] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.962957][ T5129] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 296.039165][ T5129] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 296.202239][ T5129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.263132][ T5129] usb 2-1: config 0 descriptor?? [ 296.400925][ T5129] usb 2-1: can't set config #0, error -71 [ 296.481117][ T5129] usb 2-1: USB disconnect, device number 5 [ 300.111327][ T6402] tmpfs: Unknown parameter 'usrquota' [ 301.526526][ T6412] tipc: Enabled bearer , priority 0 [ 301.571610][ T6412] device syzkaller0 entered promiscuous mode [ 302.804612][ T6415] tipc: Resetting bearer [ 302.986779][ T4249] tipc: Node number set to 3635427115 [ 303.175548][ T6415] tipc: Disabling bearer [ 307.968705][ T6466] tipc: Enabled bearer , priority 0 [ 308.061753][ T6466] device syzkaller0 entered promiscuous mode [ 308.731578][ T6473] tipc: Enabled bearer , priority 0 [ 308.783444][ T6473] device syzkaller0 entered promiscuous mode [ 308.807365][ T6473] tipc: Resetting bearer [ 308.839322][ T6472] tipc: Resetting bearer [ 308.989715][ T6472] tipc: Disabling bearer [ 309.029849][ T6474] tipc: Resetting bearer [ 309.097793][ T6474] tipc: Disabling bearer [ 313.881186][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 315.752662][ T6527] netlink: 'syz.3.503': attribute type 1 has an invalid length. [ 316.119027][ T6527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.153553][ T6536] bond1: (slave geneve2): making interface the new active one [ 316.889342][ T6536] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 317.132279][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 317.248493][ T6549] rdma_rxe: rxe_register_device failed with error -23 [ 317.257357][ T6549] rdma_rxe: failed to add ip6gretap0 [ 317.743220][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.749734][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.880809][ T4249] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 321.121791][ T6574] tipc: Enabled bearer , priority 0 [ 321.258802][ T6574] device syzkaller0 entered promiscuous mode [ 321.271243][ T4249] usb 6-1: Using ep0 maxpacket: 32 [ 321.513772][ T4249] usb 6-1: config 7 has an invalid interface number: 203 but max is 0 [ 322.148048][ T4249] usb 6-1: config 7 has no interface number 0 [ 322.154783][ T4249] usb 6-1: config 7 interface 203 has no altsetting 0 [ 322.203858][ T6574] tipc: Resetting bearer [ 322.222458][ T6573] tipc: Resetting bearer [ 322.393965][ T6573] tipc: Disabling bearer [ 322.451298][ T4249] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=64.4b [ 322.537650][ T4249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.561947][ T4249] usb 6-1: Product: syz [ 322.566532][ T4249] usb 6-1: Manufacturer: syz [ 322.571699][ T4249] usb 6-1: SerialNumber: syz [ 323.632482][ T4249] legousbtower 6-1:7.203: interrupt endpoints not found [ 323.681036][ T4249] usb 6-1: USB disconnect, device number 3 [ 326.832497][ T6613] rdma_rxe: rxe_register_device failed with error -23 [ 326.840215][ T6613] rdma_rxe: failed to add ip6gretap0 [ 334.240775][ T4249] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 334.302121][ T6659] tipc: Enabled bearer , priority 0 [ 334.338194][ T6659] device syzkaller0 entered promiscuous mode [ 334.490946][ T4249] usb 2-1: Using ep0 maxpacket: 32 [ 334.500000][ T6659] tipc: Resetting bearer [ 334.537086][ T6657] tipc: Resetting bearer [ 334.599799][ T6657] tipc: Disabling bearer [ 334.690875][ T4249] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 334.753919][ T4249] usb 2-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 334.818417][ T4249] usb 2-1: Product: syz [ 334.879194][ T4249] usb 2-1: config 0 descriptor?? [ 335.302354][ T4249] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 335.501048][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 335.524987][ T4249] usb 2-1: USB disconnect, device number 6 [ 335.760973][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 336.064136][ T13] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.00 [ 336.078119][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.108638][ T13] usb 1-1: Product: syz [ 336.282624][ T13] usb 1-1: Manufacturer: syz [ 336.287400][ T13] usb 1-1: SerialNumber: syz [ 336.295180][ T13] usb 1-1: config 0 descriptor?? [ 336.351279][ T4276] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 336.761502][ T4276] usb 6-1: config 0 has an invalid interface number: 149 but max is 0 [ 336.815348][ T4276] usb 6-1: config 0 has no interface number 0 [ 336.960115][ T4276] usb 6-1: too many endpoints for config 0 interface 149 altsetting 88: 114, using maximum allowed: 30 [ 337.117096][ T13] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 337.126003][ T13] usb 1-1: USB disconnect, device number 2 [ 337.165651][ T4276] usb 6-1: config 0 interface 149 altsetting 88 has 0 endpoint descriptors, different from the interface descriptor's value: 114 [ 337.181532][ T4276] usb 6-1: config 0 interface 149 has no altsetting 0 [ 337.479993][ T4276] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 337.491214][ T4276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.503189][ T4276] usb 6-1: Product: syz [ 337.505604][ T6675] udevd[6675]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.509387][ T4276] usb 6-1: Manufacturer: syz [ 337.530546][ T4276] usb 6-1: SerialNumber: syz [ 337.685238][ T4276] usb 6-1: config 0 descriptor?? [ 340.115047][ T4276] usb 6-1: USB disconnect, device number 4 [ 340.151326][ T6701] tipc: Enabled bearer , priority 0 [ 340.332631][ T6705] device syzkaller0 entered promiscuous mode [ 340.831396][ T6701] tipc: Resetting bearer [ 341.155378][ T6700] tipc: Resetting bearer [ 341.174035][ T6700] tipc: Disabling bearer [ 345.797129][ T6744] rdma_rxe: rxe_register_device failed with error -23 [ 345.805248][ T6744] rdma_rxe: failed to add ip6gretap0 [ 346.625489][ T6748] tipc: Enabled bearer , priority 0 [ 346.648266][ T6748] device syzkaller0 entered promiscuous mode [ 346.699509][ T6748] tipc: Resetting bearer [ 346.775148][ T6747] tipc: Resetting bearer [ 346.981431][ T6747] tipc: Disabling bearer [ 354.132750][ T6807] tipc: Enabled bearer , priority 0 [ 354.166850][ T6807] device syzkaller0 entered promiscuous mode [ 354.332594][ T6807] tipc: Resetting bearer [ 354.369849][ T6802] tipc: Resetting bearer [ 354.417089][ T6802] tipc: Disabling bearer [ 357.429730][ T6839] tipc: Enabled bearer , priority 0 [ 357.612544][ T6839] device syzkaller0 entered promiscuous mode [ 358.421416][ T6839] tipc: Resetting bearer [ 358.446445][ T6838] tipc: Resetting bearer [ 358.494344][ T6838] tipc: Disabling bearer [ 359.549315][ T6853] tipc: Enabled bearer , priority 0 [ 359.571716][ T6853] device syzkaller0 entered promiscuous mode [ 359.731787][ T6853] tipc: Resetting bearer [ 359.769638][ T6852] tipc: Resetting bearer [ 360.224070][ T6852] tipc: Disabling bearer [ 363.619085][ T6886] tipc: Enabling of bearer rejected, failed to enable media [ 367.015438][ T6921] tipc: Enabled bearer , priority 0 [ 367.675777][ T6921] device syzkaller0 entered promiscuous mode [ 368.611373][ T6921] tipc: Resetting bearer [ 369.165229][ T6920] tipc: Resetting bearer [ 369.669068][ T6945] rdma_rxe: rxe_register_device failed with error -23 [ 369.678282][ T6945] rdma_rxe: failed to add ip6gretap0 [ 371.353758][ T6920] tipc: Disabling bearer [ 373.144986][ T6959] tipc: Enabled bearer , priority 0 [ 373.205896][ T6960] device syzkaller0 entered promiscuous mode [ 373.524755][ T6959] tipc: Resetting bearer [ 373.612818][ T6955] tipc: Resetting bearer [ 373.644254][ T6955] tipc: Disabling bearer [ 375.650707][ T6996] tipc: Enabled bearer , priority 0 [ 375.841572][ T6996] device syzkaller0 entered promiscuous mode [ 376.202652][ T6996] tipc: Resetting bearer [ 376.269162][ T6995] tipc: Resetting bearer [ 376.330096][ T6995] tipc: Disabling bearer [ 376.573458][ T7008] rdma_rxe: rxe_register_device failed with error -23 [ 376.581771][ T7008] rdma_rxe: failed to add ip6gretap0 [ 379.182416][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.701646][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.794237][ T7026] tipc: Enabled bearer , priority 0 [ 379.841807][ T7026] device syzkaller0 entered promiscuous mode [ 379.919681][ T7026] tipc: Resetting bearer [ 380.944647][ T7025] tipc: Resetting bearer [ 380.961271][ T7025] tipc: Disabling bearer [ 385.651285][ T7072] rdma_rxe: rxe_register_device failed with error -23 [ 385.660485][ T7072] rdma_rxe: failed to add ip6gretap0 [ 392.642527][ T7122] tipc: Enabling of bearer rejected, failed to enable media [ 394.375688][ T7149] rdma_rxe: rxe_register_device failed with error -23 [ 394.385173][ T7149] rdma_rxe: failed to add ip6gretap0 [ 395.680682][ C0] hrtimer: interrupt took 51873 ns [ 397.045721][ T7173] tipc: Enabled bearer , priority 0 [ 397.079656][ T7173] device syzkaller0 entered promiscuous mode [ 397.128261][ T7173] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 397.173714][ T7173] tipc: Resetting bearer [ 397.300505][ T7172] tipc: Resetting bearer [ 397.529641][ T7172] tipc: Disabling bearer [ 399.661215][ C0] ================================================================== [ 399.670283][ C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 399.678149][ C0] Read of size 2 at addr ffff88805ff6e82a by task swapper/0/0 [ 399.686070][ C0] [ 399.688466][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 399.695788][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 399.705984][ C0] Call Trace: [ 399.709320][ C0] [ 399.712275][ C0] dump_stack_lvl+0x168/0x230 [ 399.717414][ C0] ? show_regs_print_info+0x20/0x20 [ 399.722846][ C0] ? _printk+0xcc/0x110 [ 399.727241][ C0] ? rose_timer_expiry+0x470/0x490 [ 399.732656][ C0] ? load_image+0x3b0/0x3b0 [ 399.737237][ C0] print_address_description+0x60/0x2d0 [ 399.742819][ C0] ? rose_timer_expiry+0x470/0x490 [ 399.748108][ C0] kasan_report+0xdf/0x130 [ 399.752594][ C0] ? rose_timer_expiry+0x470/0x490 [ 399.757917][ C0] rose_timer_expiry+0x470/0x490 [ 399.763707][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 399.769203][ C0] call_timer_fn+0x16c/0x530 [ 399.774121][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 399.779167][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 399.785279][ C0] ? __run_timers+0x7c0/0x7c0 [ 399.790129][ C0] ? rcu_is_watching+0x11/0xa0 [ 399.795007][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 399.800360][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 399.805820][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 399.810879][ C0] __run_timers+0x525/0x7c0 [ 399.815432][ C0] ? detach_timer+0x2b0/0x2b0 [ 399.820128][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 399.826358][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 399.831378][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 399.836779][ C0] run_timer_softirq+0x63/0xf0 [ 399.841928][ C0] handle_softirqs+0x328/0x820 [ 399.846738][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 399.851720][ C0] ? do_softirq+0x200/0x200 [ 399.856321][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 399.861622][ C0] __irq_exit_rcu+0x12f/0x220 [ 399.866636][ C0] ? irq_exit_rcu+0x20/0x20 [ 399.871168][ C0] irq_exit_rcu+0x5/0x20 [ 399.875508][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 399.881517][ C0] [ 399.884758][ C0] [ 399.887868][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 399.894142][ C0] RIP: 0010:default_idle+0xb/0x10 [ 399.899343][ C0] Code: bf 48 89 df e8 86 f5 09 f8 eb b5 e8 3f b0 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d f7 83 53 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 399.919086][ C0] RSP: 0018:ffffffff8be07dc8 EFLAGS: 000002c6 [ 399.925181][ C0] RAX: 9bf3d71b8da0c000 RBX: ffffffff8bebc3c0 RCX: 9bf3d71b8da0c000 [ 399.933166][ C0] RDX: 0000000000000001 RSI: ffffffff8a0b1820 RDI: ffffffff8a59a480 [ 399.941158][ C0] RBP: ffffffff8be07ef8 R08: dffffc0000000000 R09: ffffed1017207662 [ 399.949152][ C0] R10: ffffed1017207662 R11: 1ffff11017207661 R12: ffffffff8d6991e8 [ 399.957504][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff17d7878 [ 399.965701][ C0] default_idle_call+0x81/0xc0 [ 399.970515][ C0] do_idle+0x21b/0x5b0 [ 399.974635][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 399.979850][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 399.985788][ C0] cpu_startup_entry+0x14/0x20 [ 399.990581][ C0] ? time_init+0x40/0x40 [ 399.994843][ C0] start_kernel+0x486/0x530 [ 399.999357][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 400.005506][ C0] [ 400.008631][ C0] [ 400.011134][ C0] Allocated by task 4320: [ 400.015550][ C0] __kasan_kmalloc+0xb5/0xf0 [ 400.020169][ C0] batadv_forw_packet_alloc+0x1e5/0x380 [ 400.025728][ C0] batadv_iv_ogm_queue_add+0x77b/0xcf0 [ 400.031191][ C0] batadv_iv_ogm_schedule+0x81c/0xe90 [ 400.036824][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x72d/0x840 [ 400.044033][ C0] process_one_work+0x863/0x1000 [ 400.048994][ C0] worker_thread+0xaa8/0x12a0 [ 400.053901][ C0] kthread+0x436/0x520 [ 400.057978][ C0] ret_from_fork+0x1f/0x30 [ 400.062428][ C0] [ 400.064765][ C0] Last potentially related work creation: [ 400.070490][ C0] kasan_save_stack+0x35/0x60 [ 400.075277][ C0] kasan_record_aux_stack+0xb8/0x100 [ 400.080872][ C0] insert_work+0x54/0x3d0 [ 400.085336][ C0] __queue_work+0x9c5/0xd50 [ 400.089887][ C0] call_timer_fn+0x16c/0x530 [ 400.095121][ C0] __run_timers+0x550/0x7c0 [ 400.099771][ C0] run_timer_softirq+0x63/0xf0 [ 400.105098][ C0] handle_softirqs+0x328/0x820 [ 400.110199][ C0] __irq_exit_rcu+0x12f/0x220 [ 400.115125][ C0] irq_exit_rcu+0x5/0x20 [ 400.119504][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 400.125228][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 400.131472][ C0] [ 400.133806][ C0] The buggy address belongs to the object at ffff88805ff6e800 [ 400.133806][ C0] which belongs to the cache kmalloc-512 of size 512 [ 400.147896][ C0] The buggy address is located 42 bytes inside of [ 400.147896][ C0] 512-byte region [ffff88805ff6e800, ffff88805ff6ea00) [ 400.161307][ C0] The buggy address belongs to the page: [ 400.167976][ C0] page:ffffea00017fdb00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805ff6e800 pfn:0x5ff6c [ 400.181776][ C0] head:ffffea00017fdb00 order:2 compound_mapcount:0 compound_pincount:0 [ 400.191181][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 400.199899][ C0] raw: 00fff00000010200 ffffea0001893508 ffffea00017e5508 ffff888016841c80 [ 400.209241][ C0] raw: ffff88805ff6e800 0000000000100003 00000001ffffffff 0000000000000000 [ 400.217854][ C0] page dumped because: kasan: bad access detected [ 400.224793][ C0] page_owner tracks the page as allocated [ 400.231243][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4183, ts 74461834340, free_ts 27767358086 [ 400.250717][ C0] get_page_from_freelist+0x1b77/0x1c60 [ 400.256602][ C0] __alloc_pages+0x1e1/0x470 [ 400.261653][ C0] new_slab+0xc0/0x4b0 [ 400.265976][ C0] ___slab_alloc+0x81e/0xdf0 [ 400.270606][ C0] __kmalloc+0x1cd/0x330 [ 400.274862][ C0] fib6_info_alloc+0x2e/0xe0 [ 400.279459][ C0] ip6_route_info_create+0x44f/0x1210 [ 400.284875][ C0] addrconf_f6i_alloc+0x1b9/0x3f0 [ 400.289913][ C0] ipv6_add_addr+0x438/0xde0 [ 400.294674][ C0] add_addr+0x83/0x2c0 [ 400.298748][ C0] add_v4_addrs+0x6f9/0xbf0 [ 400.303962][ C0] addrconf_init_auto_addrs+0x37d/0xa80 [ 400.309514][ C0] addrconf_notify+0xa6b/0xf00 [ 400.314453][ C0] raw_notifier_call_chain+0xcb/0x160 [ 400.319854][ C0] __dev_notify_flags+0x178/0x2d0 [ 400.324979][ C0] dev_change_flags+0xe3/0x1a0 [ 400.329845][ C0] page last free stack trace: [ 400.334515][ C0] free_unref_page_prepare+0x637/0x6c0 [ 400.339995][ C0] free_unref_page+0x94/0x280 [ 400.344676][ C0] free_contig_range+0x96/0xf0 [ 400.349446][ C0] destroy_args+0x100/0xa20 [ 400.353985][ C0] debug_vm_pgtable+0x318/0x370 [ 400.358948][ C0] do_one_initcall+0x1ee/0x680 [ 400.363726][ C0] do_initcall_level+0x137/0x1f0 [ 400.368672][ C0] do_initcalls+0x4b/0x90 [ 400.372997][ C0] kernel_init_freeable+0x3ce/0x560 [ 400.378700][ C0] kernel_init+0x19/0x1b0 [ 400.383147][ C0] ret_from_fork+0x1f/0x30 [ 400.388250][ C0] [ 400.390602][ C0] Memory state around the buggy address: [ 400.396249][ C0] ffff88805ff6e700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 400.404933][ C0] ffff88805ff6e780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 400.413002][ C0] >ffff88805ff6e800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 400.421151][ C0] ^ [ 400.426618][ C0] ffff88805ff6e880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 400.434909][ C0] ffff88805ff6e900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 400.443152][ C0] ================================================================== [ 400.451716][ C0] Disabling lock debugging due to kernel taint [ 400.458094][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.464403][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 400.471711][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B syzkaller #0 [ 400.480918][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 400.491278][ C0] Call Trace: [ 400.494892][ C0] [ 400.497763][ C0] dump_stack_lvl+0x168/0x230 [ 400.502548][ C0] ? show_regs_print_info+0x20/0x20 [ 400.508047][ C0] ? load_image+0x3b0/0x3b0 [ 400.512563][ C0] panic+0x2c9/0x7f0 [ 400.516463][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 400.520965][ C0] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 400.526856][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 400.532750][ C0] ? _raw_spin_unlock+0x40/0x40 [ 400.537613][ C0] ? print_memory_metadata+0x314/0x400 [ 400.543085][ C0] ? rose_timer_expiry+0x470/0x490 [ 400.548337][ C0] check_panic_on_warn+0x80/0xa0 [ 400.553723][ C0] ? rose_timer_expiry+0x470/0x490 [ 400.558852][ C0] end_report+0x6d/0xf0 [ 400.563221][ C0] kasan_report+0x102/0x130 [ 400.567732][ C0] ? rose_timer_expiry+0x470/0x490 [ 400.572847][ C0] rose_timer_expiry+0x470/0x490 [ 400.577810][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 400.582839][ C0] call_timer_fn+0x16c/0x530 [ 400.587444][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 400.592553][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 400.598691][ C0] ? __run_timers+0x7c0/0x7c0 [ 400.603389][ C0] ? rcu_is_watching+0x11/0xa0 [ 400.608181][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 400.613480][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 400.619163][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 400.624290][ C0] __run_timers+0x525/0x7c0 [ 400.628821][ C0] ? detach_timer+0x2b0/0x2b0 [ 400.633599][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 400.639721][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 400.644760][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 400.650057][ C0] run_timer_softirq+0x63/0xf0 [ 400.654929][ C0] handle_softirqs+0x328/0x820 [ 400.659696][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 400.664633][ C0] ? do_softirq+0x200/0x200 [ 400.669411][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 400.674694][ C0] __irq_exit_rcu+0x12f/0x220 [ 400.679457][ C0] ? irq_exit_rcu+0x20/0x20 [ 400.684092][ C0] irq_exit_rcu+0x5/0x20 [ 400.688492][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 400.694590][ C0] [ 400.697540][ C0] [ 400.700567][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 400.706662][ C0] RIP: 0010:default_idle+0xb/0x10 [ 400.711740][ C0] Code: bf 48 89 df e8 86 f5 09 f8 eb b5 e8 3f b0 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d f7 83 53 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 400.731754][ C0] RSP: 0018:ffffffff8be07dc8 EFLAGS: 000002c6 [ 400.737821][ C0] RAX: 9bf3d71b8da0c000 RBX: ffffffff8bebc3c0 RCX: 9bf3d71b8da0c000 [ 400.745802][ C0] RDX: 0000000000000001 RSI: ffffffff8a0b1820 RDI: ffffffff8a59a480 [ 400.753961][ C0] RBP: ffffffff8be07ef8 R08: dffffc0000000000 R09: ffffed1017207662 [ 400.762281][ C0] R10: ffffed1017207662 R11: 1ffff11017207661 R12: ffffffff8d6991e8 [ 400.770563][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff17d7878 [ 400.778574][ C0] default_idle_call+0x81/0xc0 [ 400.783373][ C0] do_idle+0x21b/0x5b0 [ 400.787441][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 400.792635][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 400.798275][ C0] cpu_startup_entry+0x14/0x20 [ 400.803219][ C0] ? time_init+0x40/0x40 [ 400.807491][ C0] start_kernel+0x486/0x530 [ 400.812109][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 400.823244][ C0] [ 400.826558][ C0] Kernel Offset: disabled [ 400.832604][ C0] Rebooting in 86400 seconds..