last executing test programs: 4.612507145s ago: executing program 3 (id=177): openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet(0x2, 0x3, 0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x3000, 0x2000, &(0x7f0000285000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.228364577s ago: executing program 0 (id=184): ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='udf\x00', 0x0, 0x0) 3.098129832s ago: executing program 3 (id=185): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) 2.988486726s ago: executing program 0 (id=186): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = gettid() prlimit64(r1, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000000100001040000000000000000000000b3", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800130001"], 0x3c}}, 0x0) 2.988390386s ago: executing program 2 (id=187): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x3) 2.988216147s ago: executing program 3 (id=188): io_uring_setup(0x0, &(0x7f0000000280)) io_uring_setup(0x439b, &(0x7f0000000180)={0x0, 0x8a06, 0x4, 0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040a00000000000054"], 0xd) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2276, 0xfffffffffffffffe) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="042c000700000000000000f9ff00000000000000aad01a769f90803f9a5297aea4415cebbbf6297d5df84c3dc02339481d2a4661bfb25a431d240d0552c7d87e"], 0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000fedbdf25000000000d4cf0a75eba5f33ae920b9e98b7bc22fe786ec69357aac4d559d5acb01ca75bdb3f6971c1708c0b1627d39cc77f2a59b111b2aa414ec1c3330148898e2e2dadf5db51332e5f469fbf0056f2bb29627c1d9fb9a32b8c50faf1aa29355f14cabbb4f141a91d0ad6861a6c79d667a9871dc52457ab282c", @ANYRES32=0x0, @ANYRES64=r0], 0x40}}, 0x8805) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000100)) socket$key(0xf, 0x3, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.961650887s ago: executing program 2 (id=189): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4089, 0xff9}], 0x1, 0x0, 0x0, 0x8) 2.867636401s ago: executing program 2 (id=190): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000008000850000006100000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x14, 0x0, &(0x7f00000004c0)="243c42e8680d85ffff03762f080071127b58425e", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.664636448s ago: executing program 4 (id=193): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c00)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000000c0)='ext4_unlink_enter\x00'}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 2.647823999s ago: executing program 3 (id=194): syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xfb, 0xf8, 0xe, 0x10, 0x2304, 0x21f, 0x5faf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa7, 0x13, 0x85}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb05, 0x1807, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) 2.570762012s ago: executing program 1 (id=195): openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet(0x2, 0x3, 0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x3000, 0x2000, &(0x7f0000285000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.551259523s ago: executing program 4 (id=196): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000f80)={0x14, r2, 0x1}, 0x14}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) socket$packet(0x11, 0x2, 0x300) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 2.320537752s ago: executing program 4 (id=197): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a029b30095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x93c, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x5, 0x20000002, 0x0) 2.170743697s ago: executing program 4 (id=198): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) 2.08113412s ago: executing program 4 (id=199): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3f}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x4c}}, 0x0) 2.070241931s ago: executing program 0 (id=200): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) 1.924496636s ago: executing program 2 (id=201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWFLOWTABLE={0x14}], {0x14}}, 0x9c}}, 0x0) 1.916608857s ago: executing program 4 (id=202): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffffffffffffc}) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r2, 0x4141, 0x0) 1.813774591s ago: executing program 2 (id=203): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000c40)=ANY=[], 0x4e0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="050000000001000000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB], 0x48}}, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000340), &(0x7f0000000400)=0x4) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x1, 0x514, 0x186, {0x77359400}, {0x0, 0xea60}, {0x3}, 0x1, @canfd={{0x1, 0x1, 0x1}, 0x3f, 0x1, 0x0, 0x0, "3e06a6c082745fc8ee1749aedccee32a6ad836aefebd18b9c9c30f040a486fa712a7161421a95d01cfc016523a34741d66bc548fab6bb33be8a07680e5ade73b"}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x2000c810) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="06"], 0x48}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x18, r4, 0x125, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x1}, 0x1c}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d5, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000003b80)=[{&(0x7f0000000a80)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000000ac0)='{', 0x1}], 0x1, &(0x7f0000001d00)=[@prinfo={0x18}], 0x18}], 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x4e3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000440)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000480)={r8, 0x1}, 0x8) 1.700402565s ago: executing program 0 (id=204): io_uring_setup(0x0, &(0x7f0000000280)) io_uring_setup(0x439b, &(0x7f0000000180)={0x0, 0x8a06, 0x4, 0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040a00000000000054"], 0xd) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2276, 0xfffffffffffffffe) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="042c000700000000000000f9ff00000000000000aad01a769f90803f9a5297aea4415cebbbf6297d5df84c3dc02339481d2a4661bfb25a431d240d0552c7d87e"], 0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000fedbdf25000000000d4cf0a75eba5f33ae920b9e98b7bc22fe786ec69357aac4d559d5acb01ca75bdb3f6971c1708c0b1627d39cc77f2a59b111b2aa414ec1c3330148898e2e2dadf5db51332e5f469fbf0056f2bb29627c1d9fb9a32b8c50faf1aa29355f14cabbb4f141a91d0ad6861a6c79d667a9871dc52457ab282c", @ANYRES32=0x0, @ANYRES64=r0], 0x40}}, 0x8805) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000100)) socket$key(0xf, 0x3, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.533872561s ago: executing program 0 (id=205): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xa) socket$inet(0x2, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x9, @raw_data="a425e2f1a54d24f14853563360608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) 848.292587ms ago: executing program 1 (id=206): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c00)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000000c0)='ext4_unlink_enter\x00'}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 708.580393ms ago: executing program 1 (id=207): ioperm(0x0, 0x44, 0x7) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x0, 0x0) 642.181015ms ago: executing program 1 (id=208): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="c300000000000000620a00000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x23) 558.632599ms ago: executing program 1 (id=209): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) 444.540083ms ago: executing program 1 (id=210): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) gettid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000000100001040000000000000000000000b3", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800130001"], 0x3c}}, 0x0) 394.117125ms ago: executing program 2 (id=211): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000008000850000006100000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x14, 0x0, &(0x7f00000004c0)="243c42e8680d85ffff03762f080071127b58425e", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 386.898325ms ago: executing program 3 (id=212): syz_io_uring_setup(0x7667, &(0x7f0000000100)={0x0, 0x0, 0x13580, 0x0, 0x74}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r2}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x101, @empty, 0x440}]}, &(0x7f0000000180)=0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000000c0)=0x6, 0x4) bind$inet(r7, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmsg$nl_route(r6, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa02a11300e3aebb0000000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e234b6207725486c9e828d756ff9b6d4f5c4960469dd3a48b4e525f0cbf7158f95d603a37c272f874ee3b5c6e56", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}}, 0x90) socket$inet6(0xa, 0x5, 0xfffffffc) setfsgid(0xee01) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) getuid() msgget$private(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000400000000"], 0x0, 0x0) msgsnd(0x0, &(0x7f00000026c0)=ANY=[], 0x8, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) fdatasync(0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.480269ms ago: executing program 0 (id=213): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r2, 0x80080400) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRESDEC], 0x15) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x154}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r4, 0x10d, 0xe, &(0x7f00000000c0), &(0x7f0000000140)=0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000000c0)=ANY=[@ANYRES16=r6, @ANYBLOB="110600000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB], 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', r7, 0x29, 0x50, 0x2, 0x6, 0x8, @mcast2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x8000, 0x10, 0x3451, 0x2}}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@getchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x4}}}, 0x24}}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04230d00c9000100"], 0x10) 0s ago: executing program 3 (id=214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000580)={@val={0x1c}, @val={0x1, 0x5, 0x0, 0x2, 0x0, 0x6}, @ipv6=@udp={0x0, 0x6, "272cc3", 0xc, 0x11, 0x0, @private0, @ipv4={'\x00', '\xff\xff', @empty}, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}, 0x42) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.28' (ED25519) to the list of known hosts. syzkaller login: [ 46.378773][ T3534] cgroup: Unknown subsys name 'net' [ 46.507251][ T3534] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 47.738711][ T3534] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 48.271727][ T3549] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.279698][ T3549] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.294180][ T3550] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.302227][ T3553] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.309984][ T3553] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.311183][ T3559] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.318036][ T3553] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.325202][ T3559] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 48.332602][ T3553] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.339171][ T3559] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.346204][ T3553] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.353131][ T3559] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.360133][ T3553] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 48.366801][ T3559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.373820][ T3553] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.381055][ T3559] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.387455][ T3553] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 48.394196][ T3559] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.402457][ T3560] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 48.415380][ T3560] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 48.415775][ T3559] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.423037][ T3560] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 48.430225][ T3559] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 48.436992][ T3560] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.444482][ T3559] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 48.450713][ T3560] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.458021][ T3559] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 48.464724][ T3560] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 48.471843][ T3559] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.479037][ T3560] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.847633][ T3545] chnl_net:caif_netlink_parms(): no params data found [ 48.932918][ T3552] chnl_net:caif_netlink_parms(): no params data found [ 49.013000][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.020121][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.030880][ T3545] device bridge_slave_0 entered promiscuous mode [ 49.045121][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.052289][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.059997][ T3545] device bridge_slave_1 entered promiscuous mode [ 49.070621][ T3551] chnl_net:caif_netlink_parms(): no params data found [ 49.106552][ T3543] chnl_net:caif_netlink_parms(): no params data found [ 49.115145][ T3544] chnl_net:caif_netlink_parms(): no params data found [ 49.140612][ T3545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.151968][ T3545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.214369][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.221478][ T3552] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.229277][ T3552] device bridge_slave_0 entered promiscuous mode [ 49.244646][ T3545] team0: Port device team_slave_0 added [ 49.265998][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.273281][ T3552] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.280851][ T3552] device bridge_slave_1 entered promiscuous mode [ 49.289360][ T3545] team0: Port device team_slave_1 added [ 49.325986][ T3551] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.333375][ T3551] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.340953][ T3551] device bridge_slave_0 entered promiscuous mode [ 49.377879][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.385158][ T3551] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.393479][ T3551] device bridge_slave_1 entered promiscuous mode [ 49.409007][ T3552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.418816][ T3545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.426167][ T3545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.452311][ T3545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.483178][ T3552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.492668][ T3545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.499613][ T3545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.525787][ T3545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.537405][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.544794][ T3543] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.552687][ T3543] device bridge_slave_0 entered promiscuous mode [ 49.559855][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.567134][ T3544] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.574841][ T3544] device bridge_slave_0 entered promiscuous mode [ 49.583953][ T3551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.606276][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.613502][ T3543] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.621102][ T3543] device bridge_slave_1 entered promiscuous mode [ 49.628323][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.635633][ T3544] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.643446][ T3544] device bridge_slave_1 entered promiscuous mode [ 49.651484][ T3551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.701849][ T3552] team0: Port device team_slave_0 added [ 49.739740][ T3552] team0: Port device team_slave_1 added [ 49.747821][ T3545] device hsr_slave_0 entered promiscuous mode [ 49.754776][ T3545] device hsr_slave_1 entered promiscuous mode [ 49.763552][ T3543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.775221][ T3544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.787050][ T3551] team0: Port device team_slave_0 added [ 49.799070][ T3543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.809976][ T3544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.840378][ T3551] team0: Port device team_slave_1 added [ 49.861744][ T3552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.868756][ T3552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.894894][ T3552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.931581][ T3552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.938603][ T3552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.970279][ T3552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.996539][ T3543] team0: Port device team_slave_0 added [ 50.005425][ T3544] team0: Port device team_slave_0 added [ 50.012683][ T3543] team0: Port device team_slave_1 added [ 50.026637][ T3544] team0: Port device team_slave_1 added [ 50.033146][ T3551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.040084][ T3551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.066337][ T3551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.092500][ T3543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.099441][ T3543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.126033][ T3543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.140750][ T3543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.147921][ T3543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.173960][ T3543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.191451][ T3551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.198638][ T3551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.224744][ T3551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.278949][ T3544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.286243][ T3544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.312388][ T3544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.324331][ T3544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.331271][ T3544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.357256][ T3544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.373143][ T3552] device hsr_slave_0 entered promiscuous mode [ 50.379748][ T3552] device hsr_slave_1 entered promiscuous mode [ 50.386804][ T3552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.395070][ T3552] Cannot create hsr debugfs directory [ 50.479482][ T3543] device hsr_slave_0 entered promiscuous mode [ 50.486321][ T3543] device hsr_slave_1 entered promiscuous mode [ 50.493303][ T3543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.500852][ T3543] Cannot create hsr debugfs directory [ 50.509954][ T3551] device hsr_slave_0 entered promiscuous mode [ 50.516879][ T3551] device hsr_slave_1 entered promiscuous mode [ 50.523136][ T3561] Bluetooth: hci2: command tx timeout [ 50.523258][ T3560] Bluetooth: hci0: command tx timeout [ 50.528698][ T3561] Bluetooth: hci4: command tx timeout [ 50.534496][ T3550] Bluetooth: hci3: command tx timeout [ 50.539533][ T3561] Bluetooth: hci1: command tx timeout [ 50.551756][ T3551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.559342][ T3551] Cannot create hsr debugfs directory [ 50.624079][ T3544] device hsr_slave_0 entered promiscuous mode [ 50.630813][ T3544] device hsr_slave_1 entered promiscuous mode [ 50.637505][ T3544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.645127][ T3544] Cannot create hsr debugfs directory [ 50.860126][ T3545] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.883236][ T3545] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.896435][ T3545] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.907884][ T3545] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.928186][ T3551] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.937802][ T3551] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.946320][ T3551] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.957058][ T3551] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.038411][ T3552] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.047322][ T3552] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.057960][ T3552] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.080920][ T3552] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.132705][ T3544] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 51.142678][ T3544] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.163022][ T3544] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.212519][ T3544] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.243081][ T3551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.259321][ T3545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.287599][ T3543] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.296325][ T3543] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.315446][ T3543] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.337943][ T3545] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.349638][ T3543] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.365926][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.375589][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.383926][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.391625][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.400627][ T3551] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.428912][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.437748][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.446694][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.453948][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.462553][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.470983][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.479350][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.486425][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.494296][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.502787][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.511016][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.518111][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.527160][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.536170][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.544145][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.586698][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.595747][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.605463][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.614170][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.622861][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.631093][ T3590] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.638179][ T3590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.646818][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.658859][ T3552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.670375][ T3544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.695414][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.704389][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.713653][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.730083][ T3551] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.741333][ T3551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.759590][ T3544] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.772547][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.781129][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.790138][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.798606][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.807268][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.815120][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.823294][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.831743][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.839428][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.847634][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.856209][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.865003][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.873104][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.884221][ T3552] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.911573][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.923201][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.931694][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.940634][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.950499][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.959953][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.969591][ T3565] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.976750][ T3565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.985054][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.993763][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.003031][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.010091][ T3565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.017776][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.026755][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.047902][ T3545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.061432][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.073774][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.088541][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.098163][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.105290][ T3590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.119322][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.128241][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.136958][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.146016][ T3590] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.153117][ T3590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.160595][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.169276][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.177893][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.186479][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.220913][ T3544] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.231953][ T3544] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.251687][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.260493][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.269862][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.285264][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.298201][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.308158][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.321375][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.330033][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.338706][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.347218][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.381916][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.389791][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.413290][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.421793][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.450922][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.472950][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.480430][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.492967][ T3543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.505511][ T3552] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.527237][ T3552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.551168][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.559399][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.567757][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.576492][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.585323][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.593934][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.601323][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.603538][ T3561] Bluetooth: hci3: command tx timeout [ 52.608923][ T3553] Bluetooth: hci0: command tx timeout [ 52.614170][ T3560] Bluetooth: hci4: command tx timeout [ 52.619427][ T3553] Bluetooth: hci2: command tx timeout [ 52.625157][ T3550] Bluetooth: hci1: command tx timeout [ 52.640170][ T3543] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.647255][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.655240][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.672998][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.683662][ T3551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.697975][ T3545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.760817][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.771865][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.780784][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.787911][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.795708][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.804497][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.813091][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.820177][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.827924][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.836764][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.845478][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.876772][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.885252][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.894031][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.903689][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.912279][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.920957][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.937837][ T3543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.955050][ T3543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.978234][ T3551] device veth0_vlan entered promiscuous mode [ 52.987682][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.998810][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.010964][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.021780][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.035737][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.046644][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.057738][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.067591][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.076915][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.084905][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.112530][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.119944][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.132659][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.141475][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.155992][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.164955][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.178214][ T3544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.195287][ T3551] device veth1_vlan entered promiscuous mode [ 53.205694][ T3545] device veth0_vlan entered promiscuous mode [ 53.225004][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.243234][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.251046][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.287538][ T3545] device veth1_vlan entered promiscuous mode [ 53.299239][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.308386][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.319986][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.327748][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.343653][ T3552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.353893][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.361355][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.369032][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.377625][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.389767][ T3551] device veth0_macvtap entered promiscuous mode [ 53.401218][ T3543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.458539][ T3545] device veth0_macvtap entered promiscuous mode [ 53.478781][ T3551] device veth1_macvtap entered promiscuous mode [ 53.487195][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.504457][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.512814][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.520713][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.529307][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.538322][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.547748][ T3545] device veth1_macvtap entered promiscuous mode [ 53.597616][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.613274][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.621958][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.631738][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.640955][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.649984][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.659161][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.671229][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.700391][ T3551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.711431][ T3551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.724156][ T3551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.732929][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.740549][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.748532][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.757876][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.766757][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.775282][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.787427][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.796220][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.805440][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.815157][ T3552] device veth0_vlan entered promiscuous mode [ 53.827759][ T3543] device veth0_vlan entered promiscuous mode [ 53.837841][ T3545] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.847456][ T3545] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.856372][ T3545] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.865170][ T3545] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.876008][ T3551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.887020][ T3551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.897939][ T3551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.908862][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.918487][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.928462][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.938097][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.951526][ T3543] device veth1_vlan entered promiscuous mode [ 53.989098][ T3552] device veth1_vlan entered promiscuous mode [ 54.004376][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.013088][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.020858][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.029823][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.054891][ T3551] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.068280][ T3551] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.077263][ T3551] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.086111][ T3551] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.108153][ T3544] device veth0_vlan entered promiscuous mode [ 54.149272][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.158592][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.159643][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.168168][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.184045][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.197877][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.206812][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.219975][ T3544] device veth1_vlan entered promiscuous mode [ 54.238226][ T3552] device veth0_macvtap entered promiscuous mode [ 54.250090][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.258913][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.267721][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.277007][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.299853][ T3543] device veth0_macvtap entered promiscuous mode [ 54.307789][ T3552] device veth1_macvtap entered promiscuous mode [ 54.340778][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.354456][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.363415][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.372694][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.382286][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.390864][ T3543] device veth1_macvtap entered promiscuous mode [ 54.436635][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.442455][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.448957][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.466209][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.476848][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.484187][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.485719][ T3552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.505836][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.518972][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.529828][ T3552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.540520][ T3552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.551761][ T3552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.564202][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.572249][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.595574][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.604915][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.613130][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.621544][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.630761][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.639298][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.647778][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.662694][ T3552] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.671387][ T3552] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.680207][ T3552] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.689481][ T3550] Bluetooth: hci4: command tx timeout [ 54.694962][ T3550] Bluetooth: hci3: command tx timeout [ 54.695218][ T3552] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.700334][ T3550] Bluetooth: hci1: command tx timeout [ 54.714921][ T3560] Bluetooth: hci2: command tx timeout [ 54.714949][ T3561] Bluetooth: hci0: command tx timeout [ 54.748461][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.752866][ T3543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.767708][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.774784][ T3543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.784841][ T3543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.795283][ T3543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.805359][ T3543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.816005][ T3543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.828080][ T3543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.839600][ T3543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.850316][ T3543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.860223][ T3543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.870926][ T3543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.880838][ T3543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.891641][ T3543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.904589][ T3543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.915175][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.930585][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.939597][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.954708][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.971015][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.985422][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.996452][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.007381][ T3544] device veth0_macvtap entered promiscuous mode [ 55.051589][ T3543] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.060391][ T3543] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.077701][ T3543] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.087072][ T3543] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.104924][ T3544] device veth1_macvtap entered promiscuous mode [ 55.216798][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.254296][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.264445][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.275098][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.285267][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.296597][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.306951][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.317752][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.341951][ T3544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.366188][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.402553][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.419416][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.441040][ T3636] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 55.464978][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.488536][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.499985][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.510564][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.520737][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.531345][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.542784][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.553288][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.570834][ T3544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.592292][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.608762][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.621113][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.637958][ T3544] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.650753][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.655147][ T3544] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.669727][ T3544] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.678465][ T3544] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.723421][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.748278][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.760737][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.765100][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.791909][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.853627][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.878789][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.918524][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.961019][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.999302][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.018152][ T3643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.037957][ T3643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.079832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.150307][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.161632][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.191923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.262967][ T3595] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 56.402198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.432215][ T22] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 56.504979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.513357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 57.069595][ T3550] Bluetooth: hci1: command tx timeout [ 57.076559][ T3561] Bluetooth: hci0: command tx timeout [ 57.082838][ T3546] Bluetooth: hci2: command tx timeout [ 57.088380][ T3546] Bluetooth: hci3: command tx timeout [ 57.093900][ T3550] Bluetooth: hci4: command tx timeout [ 57.776477][ T3595] usb 3-1: New USB device found, idVendor=13d3, idProduct=3275, bcdDevice=a1.c0 [ 57.785794][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.819112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 57.827360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 57.835604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 57.843783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 57.852039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 57.862039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 57.870243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 57.959014][ T3595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.979305][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.010074][ T3595] usb 3-1: Product: syz [ 58.030570][ T22] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.041514][ T3684] device bond0 entered promiscuous mode [ 58.044757][ T3595] usb 3-1: Manufacturer: syz [ 58.061867][ T3595] usb 3-1: SerialNumber: syz [ 58.066824][ T22] usb 2-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 58.076646][ T3684] device bond_slave_0 entered promiscuous mode [ 58.082282][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.091096][ T3684] device bond_slave_1 entered promiscuous mode [ 58.093368][ T3595] usb 3-1: config 0 descriptor?? [ 58.107127][ T3684] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 58.138841][ T22] usb 2-1: config 0 descriptor?? [ 58.363279][ T3595] dvb-usb: found a 'AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)' in warm state. [ 58.382697][ T3595] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 58.412554][ T3595] dvbdev: DVB: registering new adapter (AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)) [ 58.427413][ T3595] usb 3-1: media controller created [ 58.460631][ T3595] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 58.567675][ T3650] Zero length message leads to an empty skb [ 58.595522][ T3595] az6027: usb out operation failed. (-71) [ 58.614062][ T3595] az6027: usb out operation failed. (-71) [ 58.619809][ T3595] stb0899_attach: Driver disabled by Kconfig [ 58.631132][ T3595] az6027: no front-end attached [ 58.631132][ T3595] [ 58.639270][ T22] hid (null): invalid report_count 55726 [ 58.650586][ T22] wacom 0003:056A:0043.0001: unknown main item tag 0xd [ 58.657711][ T22] wacom 0003:056A:0043.0001: invalid report_count 55726 [ 58.667659][ T3595] az6027: usb out operation failed. (-71) [ 58.677734][ T3595] dvb-usb: no frontend was attached by 'AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)' [ 58.687597][ T22] wacom 0003:056A:0043.0001: item 0 2 1 9 parsing failed [ 58.703590][ T3595] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 58.716270][ T22] wacom 0003:056A:0043.0001: parse failed [ 58.722107][ T22] wacom: probe of 0003:056A:0043.0001 failed with error -22 [ 58.736363][ T3595] dvb-usb: schedule remote query interval to 400 msecs. [ 58.761292][ T3595] dvb-usb: AZUREWAVE DVB-S/S2 USB2.0 (AZ6027) successfully initialized and connected. [ 58.805780][ T3595] usb 3-1: USB disconnect, device number 2 [ 58.845903][ T22] usb 2-1: USB disconnect, device number 2 [ 58.898988][ T3595] dvb-usb: AZUREWAVE DVB-S/S2 USB2.0 (AZ6027) successfully deinitialized and disconnected. [ 62.982225][ T3592] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 63.140986][ T3775] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 63.358363][ T3592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 63.374516][ T3592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.398639][ T3592] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 63.417124][ T3592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.446807][ T3592] usb 1-1: config 0 descriptor?? [ 63.522756][ T3592] hub 1-1:0.0: USB hub found [ 63.588908][ T3792] loop0: detected capacity change from 0 to 7 [ 63.614720][ T3792] Dev loop0: unable to read RDB block 7 [ 63.630883][ T3792] loop0: unable to read partition table [ 63.638098][ T3792] loop0: partition table beyond EOD, truncated [ 63.645805][ T3792] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 63.645805][ T3792] ) failed (rc=-5) [ 63.742200][ T3592] hub 1-1:0.0: 1 port detected [ 64.675974][ T3592] usb 1-1: USB disconnect, device number 2 [ 68.410502][ T3864] hub 9-0:1.0: USB hub found [ 68.418600][ T3864] hub 9-0:1.0: 8 ports detected [ 68.478924][ T27] audit: type=1326 audit(1719833575.759:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3856 comm="syz.4.79" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac3e775b99 code=0x0 [ 68.592119][ T3595] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.622393][ T3565] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 68.658942][ T3867] kvm: emulating exchange as write [ 68.832189][ T3595] usb 4-1: Using ep0 maxpacket: 16 [ 68.952666][ T3595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 68.969149][ T3595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 68.984949][ T3565] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 68.996925][ T3565] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.014166][ T3565] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.025068][ T3565] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.036974][ T3565] usb 1-1: config 0 descriptor?? [ 69.098434][ T3565] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 69.132305][ T3595] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 69.151800][ T3595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.167082][ T3595] usb 4-1: Product: syz [ 69.171269][ T3595] usb 4-1: Manufacturer: syz [ 69.177562][ T3595] usb 4-1: SerialNumber: syz [ 69.192175][ T3595] usb 4-1: config 0 descriptor?? [ 69.233022][ T3595] kobil_sct 4-1:0.0: KOBIL USB smart card terminal converter detected [ 69.272212][ T3595] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 69.439357][ T3595] usb 4-1: USB disconnect, device number 2 [ 69.467151][ T3595] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 69.496528][ T3595] kobil_sct 4-1:0.0: device disconnected [ 70.739105][ T3884] Bluetooth: MGMT ver 1.22 [ 70.868989][ T3891] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.877064][ T3891] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.165324][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.171826][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.110714][ T22] usb 1-1: USB disconnect, device number 3 [ 72.242047][ T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.502101][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 72.652162][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 72.731771][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.932218][ T14] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 73.009087][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.031247][ T14] usb 5-1: Product: syz [ 73.038184][ T14] usb 5-1: Manufacturer: syz [ 73.049384][ T14] usb 5-1: SerialNumber: syz [ 73.063404][ T3939] device wlan0 entered promiscuous mode [ 73.118991][ T14] usb 5-1: config 0 descriptor?? [ 73.244706][ T14] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 73.323029][ T14] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 73.463823][ T14] usb 5-1: USB disconnect, device number 2 [ 73.493925][ T14] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 73.640060][ T14] kobil_sct 5-1:0.0: device disconnected [ 75.192781][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 75.346644][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 75.452211][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 76.317055][ T3590] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.383604][ T152] cfg80211: failed to load regulatory.db [ 76.422379][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.613449][ T14] usb 1-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=57.47 [ 76.782770][ T3590] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 76.864096][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.927516][ T3590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.200636][ T14] usb 1-1: Product: syz [ 77.205839][ T14] usb 1-1: Manufacturer: syz [ 77.213435][ T3590] usb 5-1: config 0 descriptor?? [ 77.218612][ T14] usb 1-1: SerialNumber: syz [ 77.229473][ T14] usb 1-1: config 0 descriptor?? [ 77.252811][ T14] usb 1-1: can't set config #0, error -71 [ 77.264100][ T3590] dw2102: su3000_identify_state [ 77.270575][ T3590] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 77.282204][ T14] usb 1-1: USB disconnect, device number 4 [ 77.303325][ T3590] dw2102: su3000_power_ctrl: 1, initialized 0 [ 77.309684][ T3590] dvb-usb: bulk message failed: -22 (2/0) [ 77.353138][ T3590] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 77.414936][ T3590] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 77.441812][ T3590] usb 5-1: media controller created [ 77.458792][ T3590] dvb-usb: bulk message failed: -22 (6/0) [ 77.468569][ T3986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.500830][ T3986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.509535][ T3590] dw2102: i2c transfer failed. [ 77.533134][ T3590] dvb-usb: bulk message failed: -22 (6/0) [ 77.559915][ T3590] dw2102: i2c transfer failed. [ 77.583456][ T3590] dvb-usb: bulk message failed: -22 (6/0) [ 77.601305][ T3590] dw2102: i2c transfer failed. [ 77.614669][ T3590] dvb-usb: bulk message failed: -22 (6/0) [ 77.632884][ T3590] dw2102: i2c transfer failed. [ 77.646232][ T3590] dvb-usb: bulk message failed: -22 (6/0) [ 77.663994][ T3590] dw2102: i2c transfer failed. [ 77.681465][ T3590] dvb-usb: bulk message failed: -22 (6/0) [ 77.709011][ T3590] dw2102: i2c transfer failed. [ 77.716248][ T3590] dvb-usb: MAC address: 02:02:02:02:02:02 [ 77.958746][ T4029] process 'syz.0.139' launched './file0' with NULL argv: empty string added [ 78.009233][ T3590] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.711408][ T3590] dvb-usb: bulk message failed: -22 (3/0) [ 78.719752][ T3590] dw2102: command 0x0e transfer failed. [ 78.759328][ T3590] dvb-usb: bulk message failed: -22 (3/0) [ 78.801232][ T3590] dw2102: command 0x0e transfer failed. [ 79.252157][ T3565] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.644820][ T3590] dvb-usb: bulk message failed: -22 (3/0) [ 79.650599][ T3590] dw2102: command 0x0e transfer failed. [ 79.742124][ T3590] dvb-usb: bulk message failed: -22 (3/0) [ 79.772075][ T3590] dw2102: command 0x0e transfer failed. [ 79.782970][ T3590] dvb-usb: bulk message failed: -22 (1/0) [ 79.799469][ T3590] dw2102: command 0x51 transfer failed. [ 79.817535][ T3590] dvb-usb: bulk message failed: -22 (5/0) [ 79.835378][ T3590] dw2102: i2c probe for address 0x68 failed. [ 79.871250][ T3590] dvb-usb: bulk message failed: -22 (5/0) [ 79.887398][ T3590] dw2102: i2c probe for address 0x69 failed. [ 79.906156][ T3590] dvb-usb: bulk message failed: -22 (5/0) [ 79.962312][ T3565] usb 2-1: Using ep0 maxpacket: 16 [ 80.317143][ T3590] dw2102: i2c probe for address 0x6a failed. [ 80.332173][ T3590] dw2102: probing for demodulator failed. Is the external power switched on? [ 80.341112][ T3590] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 80.353199][ T4057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.381278][ T4057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.482079][ T3590] rc_core: IR keymap rc-tt-1500 not found [ 80.488011][ T3590] Registered IR keymap rc-empty [ 80.492435][ T3565] usb 2-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 80.503626][ T3590] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 80.520386][ T3565] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.530212][ T3565] usb 2-1: Product: syz [ 80.531161][ T3590] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input6 [ 80.547519][ T3565] usb 2-1: Manufacturer: syz [ 80.552429][ T3565] usb 2-1: SerialNumber: syz [ 80.565438][ T3590] dvb-usb: schedule remote query interval to 250 msecs. [ 80.582061][ T3590] dw2102: su3000_power_ctrl: 0, initialized 1 [ 80.596864][ T3565] usb 2-1: config 0 descriptor?? [ 80.602077][ T3590] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 80.606240][ T3590] usb 5-1: USB disconnect, device number 3 [ 80.683992][ T3565] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 80.690473][ T3565] pctv452e: pctv452e_power_ctrl: 1 [ 80.690473][ T3565] [ 80.695690][ T3590] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 80.748291][ T3565] usb 2-1: selecting invalid altsetting 3 [ 80.774279][ T3565] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 80.774279][ T3565] [ 80.790992][ T3565] dvb-usb: bulk message failed: -22 (5/0) [ 80.822632][ T3565] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 80.902239][ T3565] dvbdev: DVB: registering new adapter (PCTV HDTV USB) [ 80.927385][ T3565] usb 2-1: media controller created [ 81.087219][ T4042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.114382][ T4042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.127801][ T3565] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.145901][ T3565] DVB: Unable to find symbol stb0899_attach() [ 82.156278][ T3565] dvb-usb: no frontend was attached by 'PCTV HDTV USB' [ 82.602259][ T3565] rc_core: IR keymap rc-dib0700-rc5 not found [ 82.653678][ T3565] Registered IR keymap rc-empty [ 82.688398][ T3565] rc rc0: PCTV HDTV USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 83.378148][ T3565] input: PCTV HDTV USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input7 [ 83.426537][ T3565] dvb-usb: schedule remote query interval to 100 msecs. [ 83.457547][ T3565] pctv452e: pctv452e_power_ctrl: 0 [ 83.457547][ T3565] [ 83.494388][ T3565] dvb-usb: PCTV HDTV USB successfully initialized and connected. [ 83.551395][ T3565] usb 2-1: USB disconnect, device number 3 [ 83.585892][ T3555] dvb-usb: bulk message failed: -22 (4/0) [ 83.597857][ T3555] dvb-usb: error -22 while querying for an remote control event. [ 83.745309][ T3565] dvb-usb: PCTV HDTV USB successfully deinitialized and disconnected. [ 83.799769][ T4108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.907096][ T4108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.482109][ T3565] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 84.732233][ T3565] usb 1-1: Using ep0 maxpacket: 16 [ 84.751086][ T3546] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 85.012277][ T3565] usb 1-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 85.021589][ T3565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.030814][ T3565] usb 1-1: Product: syz [ 85.049161][ T3565] usb 1-1: Manufacturer: syz [ 85.054222][ T3565] usb 1-1: SerialNumber: syz [ 85.075923][ T3565] usb 1-1: config 0 descriptor?? [ 85.123148][ T3565] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 85.137834][ T3565] pctv452e: pctv452e_power_ctrl: 1 [ 85.137834][ T3565] [ 85.145715][ T3565] usb 1-1: selecting invalid altsetting 3 [ 85.151722][ T3565] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 85.151722][ T3565] [ 85.162767][ T3565] dvb-usb: bulk message failed: -22 (5/0) [ 85.185610][ T3565] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 85.212212][ T3565] dvbdev: DVB: registering new adapter (PCTV HDTV USB) [ 85.220397][ T3565] usb 1-1: media controller created [ 85.222411][ T4143] capability: warning: `syz.4.178' uses 32-bit capabilities (legacy support in use) [ 85.295572][ T3565] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 85.532561][ T3565] DVB: Unable to find symbol stb0899_attach() [ 85.540516][ T3565] dvb-usb: no frontend was attached by 'PCTV HDTV USB' [ 85.569417][ T4121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.591700][ T4121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.842090][ T3565] rc_core: IR keymap rc-dib0700-rc5 not found [ 85.850722][ T3565] Registered IR keymap rc-empty [ 85.899264][ T3565] rc rc0: PCTV HDTV USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 85.929310][ T3565] input: PCTV HDTV USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input8 [ 85.958266][ T3565] dvb-usb: schedule remote query interval to 100 msecs. [ 85.975293][ T3565] pctv452e: pctv452e_power_ctrl: 0 [ 85.975293][ T3565] [ 85.983227][ T3565] dvb-usb: PCTV HDTV USB successfully initialized and connected. [ 86.021854][ T4160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.027943][ T3565] usb 1-1: USB disconnect, device number 5 [ 86.131028][ T3565] dvb-usb: PCTV HDTV USB successfully deinitialized and disconnected. [ 86.149978][ T4160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.439949][ T27] audit: type=1800 audit(1719833593.719:3): pid=4156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.182" name="/root/syzkaller.CCCmIk/32/file0" dev="sda1" ino=1968 res=0 errno=0 [ 86.604973][ T3560] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 86.762491][ T3560] Bluetooth: hci1: command tx timeout [ 86.826306][ T4184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.192'. [ 87.193082][ T3590] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.522186][ T3590] usb 4-1: Using ep0 maxpacket: 16 [ 87.612494][ T4202] sp0: Synchronizing with TNC [ 87.657844][ T4201] [U] ` [ 87.733692][ T4210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.805616][ T3546] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 87.832629][ T3590] usb 4-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 87.844552][ T4214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.871569][ T3590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.884229][ T3590] usb 4-1: Product: syz [ 87.900068][ T3590] usb 4-1: Manufacturer: syz [ 87.905729][ T3590] usb 4-1: SerialNumber: syz [ 87.926226][ T3590] usb 4-1: config 0 descriptor?? [ 87.977489][ T3590] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 87.987737][ T3590] pctv452e: pctv452e_power_ctrl: 1 [ 87.987737][ T3590] [ 87.998241][ T3590] usb 4-1: selecting invalid altsetting 3 [ 88.006149][ T3590] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 88.006149][ T3590] [ 88.031118][ T3590] dvb-usb: bulk message failed: -22 (5/0) [ 88.077977][ T3590] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 88.107822][ T3590] dvbdev: DVB: registering new adapter (PCTV HDTV USB) [ 88.117030][ T3590] usb 4-1: media controller created [ 88.163647][ T3590] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.339448][ T3590] DVB: Unable to find symbol stb0899_attach() [ 88.346114][ T3590] dvb-usb: no frontend was attached by 'PCTV HDTV USB' [ 88.398644][ T4188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.424072][ T4188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.642230][ T3590] rc_core: IR keymap rc-dib0700-rc5 not found [ 88.648432][ T3590] Registered IR keymap rc-empty [ 88.669736][ T3590] rc rc0: PCTV HDTV USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 88.682157][ T3546] Bluetooth: hci4: command tx timeout [ 88.699161][ T3590] input: PCTV HDTV USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input9 [ 88.728570][ T3590] dvb-usb: schedule remote query interval to 100 msecs. [ 88.741901][ T3590] pctv452e: pctv452e_power_ctrl: 0 [ 88.741901][ T3590] [ 88.756408][ T3590] dvb-usb: PCTV HDTV USB successfully initialized and connected. [ 88.803504][ T3590] usb 4-1: USB disconnect, device number 3 [ 88.886953][ T3590] dvb-usb: PCTV HDTV USB successfully deinitialized and disconnected. [ 89.627960][ T4243] kernel profiling enabled (shift: 0) [ 89.672003][ C1] ================================================================== [ 89.680074][ C1] BUG: KASAN: stack-out-of-bounds in profile_pc+0xa4/0xe0 [ 89.687180][ C1] Read of size 8 at addr ffffc90013b57600 by task syz.2.211/4236 [ 89.694868][ C1] [ 89.697174][ C1] CPU: 1 PID: 4236 Comm: syz.2.211 Not tainted 6.1.96-syzkaller #0 [ 89.705037][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 89.715064][ C1] Call Trace: [ 89.718319][ C1] [ 89.721140][ C1] dump_stack_lvl+0x1e3/0x2cb [ 89.725803][ C1] ? nf_tcp_handle_invalid+0x642/0x642 [ 89.731240][ C1] ? panic+0x764/0x764 [ 89.735289][ C1] ? _printk+0xd1/0x111 [ 89.739429][ C1] print_report+0x15f/0x4f0 [ 89.743910][ C1] ? __virt_addr_valid+0xb9/0x520 [ 89.748909][ C1] ? profile_pc+0xa4/0xe0 [ 89.753215][ C1] kasan_report+0x136/0x160 [ 89.757691][ C1] ? profile_pc+0xa4/0xe0 [ 89.762002][ C1] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 89.767877][ C1] profile_pc+0xa4/0xe0 [ 89.772016][ C1] profile_tick+0xee/0x170 [ 89.776411][ C1] tick_sched_timer+0x390/0x550 [ 89.781233][ C1] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 89.786749][ C1] __hrtimer_run_queues+0x5a7/0xe50 [ 89.791926][ C1] ? hrtimer_interrupt+0x980/0x980 [ 89.797012][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 89.803056][ C1] hrtimer_interrupt+0x392/0x980 [ 89.808059][ C1] __sysvec_apic_timer_interrupt+0x156/0x580 [ 89.814033][ C1] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 89.819640][ C1] [ 89.822550][ C1] [ 89.825456][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 89.831419][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 [ 89.837896][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 c2 b8 4c f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 67 06 c9 f6 65 8b 05 08 13 6d 75 85 c0 74 3f 48 c7 04 24 0e 36 [ 89.857504][ C1] RSP: 0018:ffffc90013b57600 EFLAGS: 00000206 [ 89.863546][ C1] RAX: 3670b82b0dd39600 RBX: 1ffff9200276aec4 RCX: ffffffff91c94103 [ 89.871493][ C1] RDX: dffffc0000000000 RSI: ffffffff8aec0240 RDI: 0000000000000001 [ 89.879438][ C1] RBP: ffffc90013b57690 R08: dffffc0000000000 R09: ffffed1004a0d141 [ 89.887384][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 89.895331][ C1] R13: 1ffff9200276aec0 R14: ffffc90013b57620 R15: 0000000000000246 [ 89.903283][ C1] ? _raw_spin_unlock+0x40/0x40 [ 89.908110][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 89.913283][ C1] ? set_next_task_fair+0x1e3/0x370 [ 89.918462][ C1] __set_cpus_allowed_ptr_locked+0x613/0x1690 [ 89.924504][ C1] ? sched_core_unlock+0x260/0x260 [ 89.929590][ C1] ? lock_release+0xa20/0xa20 [ 89.934241][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 89.939676][ C1] ? raw_spin_rq_lock_nested+0xa8/0x140 [ 89.945199][ C1] migrate_enable+0x12c/0x290 [ 89.949938][ C1] ? migrate_disable+0x170/0x170 [ 89.954853][ C1] bpf_test_timer_leave+0x61/0x150 [ 89.959939][ C1] bpf_test_timer_continue+0x25c/0x350 [ 89.965388][ C1] bpf_test_run+0x44b/0x8b0 [ 89.969867][ C1] ? convert___skb_to_skb+0x610/0x610 [ 89.975210][ C1] ? eth_type_trans+0x3cd/0x7a0 [ 89.980057][ C1] ? eth_get_headlen+0x240/0x240 [ 89.984972][ C1] ? convert___skb_to_skb+0x41/0x610 [ 89.990231][ C1] ? build_skb+0x112/0x250 [ 89.994626][ C1] bpf_prog_test_run_skb+0xaf1/0x13a0 [ 89.999979][ C1] ? cpu_online+0xb0/0xb0 [ 90.004283][ C1] ? cpu_online+0xb0/0xb0 [ 90.008589][ C1] bpf_prog_test_run+0x32f/0x3a0 [ 90.013506][ C1] __sys_bpf+0x3eb/0x6c0 [ 90.017746][ C1] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 90.023098][ C1] ? print_irqtrace_events+0x210/0x210 [ 90.028532][ C1] ? print_irqtrace_events+0x210/0x210 [ 90.033964][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 90.039918][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 90.045088][ C1] __x64_sys_bpf+0x78/0x90 [ 90.049478][ C1] do_syscall_64+0x3b/0xb0 [ 90.053870][ C1] ? clear_bhb_loop+0x45/0xa0 [ 90.058523][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.064393][ C1] RIP: 0033:0x7f54eb175b99 [ 90.068790][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.088368][ C1] RSP: 002b:00007f54ebf23048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.096754][ C1] RAX: ffffffffffffffda RBX: 00007f54eb303fa0 RCX: 00007f54eb175b99 [ 90.104718][ C1] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 90.112667][ C1] RBP: 00007f54eb1f677e R08: 0000000000000000 R09: 0000000000000000 [ 90.120609][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.128556][ C1] R13: 000000000000000b R14: 00007f54eb303fa0 R15: 00007ffea0282f28 [ 90.136505][ C1] [ 90.139498][ C1] [ 90.141794][ C1] The buggy address belongs to stack of task syz.2.211/4236 [ 90.149042][ C1] and is located at offset 0 in frame: [ 90.154554][ C1] _raw_spin_unlock_irqrestore+0x0/0x130 [ 90.160179][ C1] [ 90.162478][ C1] This frame has 1 object: [ 90.166862][ C1] [32, 40) 'flags.i.i.i.i' [ 90.166868][ C1] [ 90.173634][ C1] The buggy address belongs to the virtual mapping at [ 90.173634][ C1] [ffffc90013b50000, ffffc90013b59000) created by: [ 90.173634][ C1] copy_process+0x637/0x4060 [ 90.191252][ C1] [ 90.193558][ C1] The buggy address belongs to the physical page: [ 90.199952][ C1] page:ffffea0001d6b2c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75acb [ 90.210079][ C1] memcg:ffff88802196e782 [ 90.214294][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 90.221391][ C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 90.229949][ C1] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff88802196e782 [ 90.238503][ C1] page dumped because: kasan: bad access detected [ 90.244892][ C1] page_owner tracks the page as allocated [ 90.250576][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 3545, tgid 3545 (syz-executor), ts 87697376245, free_ts 85777799582 [ 90.268867][ C1] post_alloc_hook+0x18d/0x1b0 [ 90.273608][ C1] get_page_from_freelist+0x31a1/0x3320 [ 90.279128][ C1] __alloc_pages+0x28d/0x770 [ 90.283699][ C1] __vmalloc_node_range+0x92b/0x1490 [ 90.288960][ C1] dup_task_struct+0x3e5/0x6d0 [ 90.293697][ C1] copy_process+0x637/0x4060 [ 90.298257][ C1] kernel_clone+0x222/0x920 [ 90.302733][ C1] __x64_sys_clone+0x231/0x280 [ 90.307472][ C1] do_syscall_64+0x3b/0xb0 [ 90.311883][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.317764][ C1] page last free stack trace: [ 90.322408][ C1] free_unref_page_prepare+0xf63/0x1120 [ 90.327924][ C1] free_unref_page_list+0x663/0x900 [ 90.333092][ C1] release_pages+0x2836/0x2b40 [ 90.337828][ C1] tlb_flush_mmu+0xfc/0x210 [ 90.342304][ C1] tlb_finish_mmu+0xce/0x1f0 [ 90.346863][ C1] exit_mmap+0x3c3/0x9f0 [ 90.351074][ C1] __mmput+0x115/0x3c0 [ 90.355131][ C1] exit_mm+0x226/0x300 [ 90.359198][ C1] do_exit+0x9f6/0x26a0 [ 90.363335][ C1] do_group_exit+0x202/0x2b0 [ 90.367901][ C1] get_signal+0x16f7/0x17d0 [ 90.372387][ C1] arch_do_signal_or_restart+0xb0/0x1a10 [ 90.377993][ C1] exit_to_user_mode_loop+0x6a/0x100 [ 90.383249][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 90.388766][ C1] syscall_exit_to_user_mode+0x60/0x270 [ 90.394285][ C1] do_syscall_64+0x47/0xb0 [ 90.398676][ C1] [ 90.400974][ C1] Memory state around the buggy address: [ 90.406574][ C1] ffffc90013b57500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.414606][ C1] ffffc90013b57580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.422637][ C1] >ffffc90013b57600: f1 f1 f1 f1 00 f3 f3 f3 00 00 00 00 00 00 00 00 [ 90.430665][ C1] ^ [ 90.434705][ C1] ffffc90013b57680: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 [ 90.442736][ C1] ffffc90013b57700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.450766][ C1] ================================================================== [ 90.458796][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 90.465958][ C1] CPU: 1 PID: 4236 Comm: syz.2.211 Not tainted 6.1.96-syzkaller #0 [ 90.473819][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 90.483849][ C1] Call Trace: [ 90.487106][ C1] [ 90.489926][ C1] dump_stack_lvl+0x1e3/0x2cb [ 90.494588][ C1] ? nf_tcp_handle_invalid+0x642/0x642 [ 90.500022][ C1] ? panic+0x764/0x764 [ 90.504065][ C1] ? rcu_is_watching+0x11/0xb0 [ 90.508802][ C1] ? lock_release+0xd6/0xa20 [ 90.513380][ C1] ? vscnprintf+0x59/0x80 [ 90.517682][ C1] panic+0x318/0x764 [ 90.521549][ C1] ? __wake_up_klogd+0xcc/0x100 [ 90.526371][ C1] ? check_panic_on_warn+0x1d/0xa0 [ 90.531457][ C1] ? memcpy_page_flushcache+0xfc/0xfc [ 90.536800][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 90.541971][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 90.547850][ C1] ? _raw_spin_unlock+0x40/0x40 [ 90.552675][ C1] check_panic_on_warn+0x7e/0xa0 [ 90.557600][ C1] ? profile_pc+0xa4/0xe0 [ 90.561903][ C1] end_report+0x66/0x110 [ 90.566119][ C1] kasan_report+0x143/0x160 [ 90.570593][ C1] ? profile_pc+0xa4/0xe0 [ 90.574902][ C1] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 90.580769][ C1] profile_pc+0xa4/0xe0 [ 90.584900][ C1] profile_tick+0xee/0x170 [ 90.589292][ C1] tick_sched_timer+0x390/0x550 [ 90.594116][ C1] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 90.599644][ C1] __hrtimer_run_queues+0x5a7/0xe50 [ 90.604819][ C1] ? hrtimer_interrupt+0x980/0x980 [ 90.609902][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 90.615941][ C1] hrtimer_interrupt+0x392/0x980 [ 90.620856][ C1] __sysvec_apic_timer_interrupt+0x156/0x580 [ 90.626811][ C1] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 90.632416][ C1] [ 90.635320][ C1] [ 90.638224][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 90.644180][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 [ 90.650653][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 c2 b8 4c f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 67 06 c9 f6 65 8b 05 08 13 6d 75 85 c0 74 3f 48 c7 04 24 0e 36 [ 90.670229][ C1] RSP: 0018:ffffc90013b57600 EFLAGS: 00000206 [ 90.676368][ C1] RAX: 3670b82b0dd39600 RBX: 1ffff9200276aec4 RCX: ffffffff91c94103 [ 90.684328][ C1] RDX: dffffc0000000000 RSI: ffffffff8aec0240 RDI: 0000000000000001 [ 90.692288][ C1] RBP: ffffc90013b57690 R08: dffffc0000000000 R09: ffffed1004a0d141 [ 90.700230][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 90.708172][ C1] R13: 1ffff9200276aec0 R14: ffffc90013b57620 R15: 0000000000000246 [ 90.716121][ C1] ? _raw_spin_unlock+0x40/0x40 [ 90.720959][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 90.726130][ C1] ? set_next_task_fair+0x1e3/0x370 [ 90.731300][ C1] __set_cpus_allowed_ptr_locked+0x613/0x1690 [ 90.737340][ C1] ? sched_core_unlock+0x260/0x260 [ 90.742425][ C1] ? lock_release+0xa20/0xa20 [ 90.747079][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 90.752511][ C1] ? raw_spin_rq_lock_nested+0xa8/0x140 [ 90.758031][ C1] migrate_enable+0x12c/0x290 [ 90.762683][ C1] ? migrate_disable+0x170/0x170 [ 90.767607][ C1] bpf_test_timer_leave+0x61/0x150 [ 90.772706][ C1] bpf_test_timer_continue+0x25c/0x350 [ 90.778138][ C1] bpf_test_run+0x44b/0x8b0 [ 90.782620][ C1] ? convert___skb_to_skb+0x610/0x610 [ 90.787964][ C1] ? eth_type_trans+0x3cd/0x7a0 [ 90.792788][ C1] ? eth_get_headlen+0x240/0x240 [ 90.797694][ C1] ? convert___skb_to_skb+0x41/0x610 [ 90.802965][ C1] ? build_skb+0x112/0x250 [ 90.807359][ C1] bpf_prog_test_run_skb+0xaf1/0x13a0 [ 90.812710][ C1] ? cpu_online+0xb0/0xb0 [ 90.817010][ C1] ? cpu_online+0xb0/0xb0 [ 90.821311][ C1] bpf_prog_test_run+0x32f/0x3a0 [ 90.826225][ C1] __sys_bpf+0x3eb/0x6c0 [ 90.830440][ C1] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 90.835789][ C1] ? print_irqtrace_events+0x210/0x210 [ 90.841221][ C1] ? print_irqtrace_events+0x210/0x210 [ 90.846653][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 90.852604][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 90.857775][ C1] __x64_sys_bpf+0x78/0x90 [ 90.862181][ C1] do_syscall_64+0x3b/0xb0 [ 90.866571][ C1] ? clear_bhb_loop+0x45/0xa0 [ 90.871220][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.877086][ C1] RIP: 0033:0x7f54eb175b99 [ 90.881472][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.901046][ C1] RSP: 002b:00007f54ebf23048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.909429][ C1] RAX: ffffffffffffffda RBX: 00007f54eb303fa0 RCX: 00007f54eb175b99 [ 90.917385][ C1] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 90.925342][ C1] RBP: 00007f54eb1f677e R08: 0000000000000000 R09: 0000000000000000 [ 90.933290][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.941243][ C1] R13: 000000000000000b R14: 00007f54eb303fa0 R15: 00007ffea0282f28 [ 90.949204][ C1] [ 90.952415][ C1] Kernel Offset: disabled [ 90.956718][ C1] Rebooting in 86400 seconds..