last executing test programs: 48.143897602s ago: executing program 1 (id=63): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f028, 0x3}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="dfab4d85d47fab3f5852323481422e0f382a7fff4f2f6544e6018dbd8ab7448ced0cb6d971aa93e8b234fd2ceb6c160545bc47d95cb6f68a98ee9ea4686093a60d1e90430c08857fd0c428cdd40ea133631f9993733758d144b78ac24b59a54138ada8c18089c1250c7de9ef6ad3b2f7f28322211b5313b263f34c07a174f7d1d0f000f2bd2a60f9e4f18a82318f990d85778a2b77c73764d2d187c87800f0905ca84dbdd9002b572b0928a92da591fbaa566464e5cb6dbaf6a6945d91b66259944c62c5090ca50c"}) r3 = fsmount(0xffffffffffffffff, 0x1, 0x6) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)=@multiplanar_mmap={0x5, 0x3, 0x4, 0x2, 0x4, {0x77359400}, {0x0, 0x1, 0x1, 0x9, 0x4, 0x1, "d36dda14"}, 0xd6, 0x1, {&(0x7f0000000140)=[{0xfff, 0xa, {0xffffffffffff1743}, 0x6}, {0x9, 0x4, {0xfffffffffffffffc}, 0x3}]}, 0x1, 0x0, r3}) syz_genetlink_get_family_id$tipc2(0x0, r3) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x87f80c43e0b39625}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0xc001}, 0x40) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 45.754760476s ago: executing program 1 (id=77): prlimit64(0x0, 0xd, &(0x7f0000000300)={0x3b37, 0x7}, 0x0) 45.483156889s ago: executing program 1 (id=79): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r2, @ANYRES64=r2, @ANYRES32], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x74, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x0, 0xff13, 0x0, 0xffff8000, 0xfffffffb}, [@TCA_NETEM_CORR={0x10, 0x1, {0x8001}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xfff, 0x2}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x80000000}]}}}]}, 0x74}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f", 0x7, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="480cfd48", 0x4}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304, 0x36}, "b1de5ab71f5ef2fe", "9e8ecc7bb5352776725e1047711330ff2bb17b550800", "dc5d3f00"}, 0x38) read$msr(r3, &(0x7f0000001340)=""/102378, 0x7706c522012798af) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000300)='bic\x00', 0x4) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket(0x10, 0x3, 0x0) 8.65176706s ago: executing program 3 (id=206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000030603000000000000006517912bfd3b0000000000000500010007000000225865c369c711b258e1f6f510f42699356406c004fedc7ea912a0b7e3c11bb16e6252550f9c98a6f91621a1c36729fc6a823eeb9849f87b2f133fd0aa88718bb0a6f96a03c62eeeab79630fb34d7624"], 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r7, 0x701, 0x0, 0x0, {0xb}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000040)={0x1, 0x0, 0x7, &(0x7f0000000140)={0xc, "b7fc741714bd8325de9540e3cfc840d0b9358338de5fdb7ad189aa80277f6cd2e2"}}) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 7.544802562s ago: executing program 3 (id=207): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x24}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.365213452s ago: executing program 3 (id=210): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) 7.257294632s ago: executing program 4 (id=212): syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bond_slave_1\x00', &(0x7f0000000080)=@ethtool_cmd={0x26, 0x10000080}}) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x16) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioperm(0x0, 0x69, 0x4) getgid() keyctl$setperm(0x5, 0x0, 0x4002410) 7.084070116s ago: executing program 4 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x5) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f00000001c0)=0x9, 0x4) 7.080529022s ago: executing program 3 (id=214): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) 6.022128565s ago: executing program 2 (id=217): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 5.957729068s ago: executing program 4 (id=218): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000080)="1c0000001a009b602ded3e640d20e1748e2027158a140000003b9b301f0000", 0x1f) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x41, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r3 = syz_open_pts(r2, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x2) 5.957117285s ago: executing program 3 (id=219): bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) utimensat(r1, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_io_uring_setup(0x543c, &(0x7f00000008c0), &(0x7f0000000080), &(0x7f0000000200)) mkdir(0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030022003505d25a806f8c2394f90435fc600400110a0a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) 4.965655483s ago: executing program 2 (id=221): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) 4.927194684s ago: executing program 0 (id=222): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 4.823331227s ago: executing program 4 (id=223): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001440)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454ce, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080), 0x4) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) io_setup(0x7, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 4.746586597s ago: executing program 2 (id=224): r0 = openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, 0x0, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000640)={&(0x7f0000121000/0x1000)=nil, 0x1000}) 4.740201818s ago: executing program 0 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x1c}}, 0x5) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x1, 0x0, 0xfffffffffffffffe) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r5, &(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r4, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) syz_open_procfs$namespace(r0, &(0x7f0000000340)='ns/ipc\x00') 4.538514506s ago: executing program 3 (id=226): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_open_dev$loop(0x0, 0x6, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x6, 0x0, 0x0, 0x0) close(r6) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x5, 0x4044c0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0) 3.456764711s ago: executing program 0 (id=227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x5) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f00000001c0)=0x9, 0x4) 3.37980704s ago: executing program 2 (id=228): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="2c726f6f746d6f6fadd590f2c0098b30303030aadfdbcd75085b690dd8276ad94fb73371fb7a876bc5972daa2b76616a1ca23c5f85b6011ec8f4c56fe77be8b21364cfd2f77665406713d0a4f63d"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.167306615s ago: executing program 1 (id=132): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008001100020073797a31000000000800410073697700140033"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001340)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x21, 0x0, @dev, @local}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) syz_open_pts(r2, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'lo\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x7b) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000240)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2a, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@bridge_getneigh={0x2c, 0x1e, 0x1, 0x0, 0x25dfdbfe, {0x7, 0x0, 0x0, r6, 0x800, 0x40}, [@IFLA_BROADCAST={0xa, 0x2, @random="75db931198e5"}]}, 0x2c}}, 0x80) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f0000000000)={0xc1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000600)={0x2, 0x103, 0x3, {0x1433, 0x3ff, 0x4e1, 0x8001}}) 2.165669033s ago: executing program 0 (id=229): r0 = socket$unix(0x1, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}], [], 0x6b}}) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.996175049s ago: executing program 0 (id=230): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) getrandom(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000100)=[{0x25, 0x2, 0x2}, {}, {}, {0x6}]}) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000000600), 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x5, 0xc, 0x32a, 0x0, 0x3}) 1.83583211s ago: executing program 2 (id=231): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[], 0x298}}, 0x0) 1.444224407s ago: executing program 2 (id=232): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.247308226s ago: executing program 1 (id=233): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x9237, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="b27aac", 0xfffffffffffffcb2}) pipe2$9p(&(0x7f00000001c0), 0x80000) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="100000001114010300000000"], 0x10}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000180)='ramfs\x00', 0x1) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) epoll_create1(0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x2, 0xf0, 0x4}}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/warn_count', 0x80102, 0x95) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1ff, @loopback, 0xffffeffe}, 0x20) bind$l2tp6(0xffffffffffffffff, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) 1.246848443s ago: executing program 4 (id=234): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8c}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 971.317051ms ago: executing program 4 (id=235): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) creat(&(0x7f0000003dc0)='./file0\x00', 0x27) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x12) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffc71) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) 258.924222ms ago: executing program 0 (id=236): r0 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth1\x00', @ifru_mtu=0x5}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000001900)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080029bd7000ffdbdf2515000000040002800c10068004000200041003007b7e62adcb314d9538db71afeb8890ab6367d6995e04a0f8f8d82fe51af5f1d1ada24bcadc1f440d93476842e84dc5f0ecce768a374812fefefa8bf0b86ee24b25239aacd43424615c75337df13331018b66c207a1cdec2b4c1e41d810c12d7bbf76ff46e2c5493dfc745d88037ad48ed8e4be84026e7bbc906d48e8efaecb43bec544a07c5fabd5da2d49e7cbab2b4a8f0e8f4c58acaa0a7451479ea2e1efc85f6fdbf4e7e06ad42159dc897ab503447bd9d31c0776e420c67413a8242d75fd164d18ba818a21e54e86467a80ad7b20555de0c4490e696aa9a89d79ce8ef4eb7143c6318a50d984c5f87feeb75fffed1cfdd3ac4755b010097d5ffb4a7c1b9592626dda59acb1d021416c36c0b0a872e43f549217d46caa345c9223b45942968d2808fa3d6a9682214e3ed8fcc2572541bd7132c072ee922b61c25fedf44e725579959895b12cb9438e5748636f6c955945124718cf29723b9f7ba93bd11785a3fbf7b650a8d70d445aea1c6dcdae30169a491d786cb0389837c2f8d516e0db72896ba002328dadf1384757f80a0f5a2f00bed183fa6505cddad02de6b6b6a2d6ca2780a1e868446a87f4f742630f6e0365ce95577ff950b9277e3ab821993783b96e23165e4fa1ca9a00edfaad498cb8915f8e374441eca946012604eca2e43f6c8803c8a5dff1466ca46875dbcfe3712e95b054a4861d0807623b8e50865fbf3549fa967211732022e69d3e45fad069a8ef6d2329c7264ec9bdceae7c6ddabf05db53e71aac2460e6e899da3b5997e4d53d15c0e4cee6d1914c11799a649e192cca19ad5f2718d6bec462ae3ac99184c7746a02deb8ed8c6444a7fa3acae813bcf2dd796664614eac4e6732cb7d7aec7a9555bbf0a0cfe5733f04125e9e5cd36265263cbd79447f007aab469a06cdaae814a3e814318ca87d2900c5da55347ec9ac9205a85bc27b0057c16117b7420899d1c94e8e14b562ab6004b870dfcfe502abb15ba1bcf6c417b082b48db0711b413d7191921adf0e1383f09cc6f00752fc32dcede21a1c1af32dccd1303731f3ceb9e0af72af53438e0b464965a42e534c227d91be78a876e490ddf092950139925251707a93d8e733ca0acbb442111d826371f8450f16ac94443e7c299cc3379fca2462518455cdfd5fb727cf27cadbab06c866996893df508003707888819cedd8116e5e6f319535ba0edfcad05bf3f2a1ce16b3afd92ef99b0457a3acaf27674e0ab1e51098bee0d002c074620aa2f574d2bf5173c21d244b3cc76984df19459525982b50a5a54160679f950d5c463f80a95515ce741affc58c703270af7a9111c5612e1a9661f7aa9293799d5b3dff502271259b580f4dc8cdd167a1f6692e1f241d0bd9542e870f8598956822fb87e140a31f400c18566a7cfaab21200710ceb5d653e8e8f6eb21148288d20efc1a4e5ac918b61adb37854daa59d3a79322e279fc8b0e32cff51e49ff89c918bba7b669afbf1c5d72e721c5b81541fba37d109ab63932b85caeba482b1f0edb30c0a293ca4143cbc27265d593f7b298f8705b5b6decb6719a418b0e53f7d847b6e5e76e847fd190537cd3f854da9a3a04e25fc5f7ded9fda3ecc84980c57d6bb503bb36255e0a707ea779ab3e1a0c46e0e00a34b68d3844546a35c5d72c089e0ce45e4285c044266369a40ea268269223bbaa82880d025bd85ea6bfc73a1a836b6c6e8a2cc5906843af5fdd5d10f389d5d2550b1212f580cc4f51da2c6fc37458ce555ce1964f5955a832561f9f62130b0f2bca54d4ace8894256305650e0a0eab4a3d35e311564e84eac822b3acadaa7cee39ce9decd19c63b3b3ebe8928b9aa3fd33d1ab882d3497f78d3d6affbe559f91948fbca9f2a71f6d8bd8ba91c93f8d559fe7dd0564cab8a7b8c78625101a9eaa152057a958659cdb8ae3a372606e51beded1ae5952d552b1f7ba1e9f811d9093757e91758b9c41d869fad97ebb8bd6753570a06f58591e72a45721d88b40b80281e87aab4d86ede5ea17a65e5e7f1e7a871ce1f211794d46da63e5fada48be5f6cca1f4f2da5c1e7884d873c31984c589c03637e731547463fd6273e942ebba7720703c5e4f4914b21f51c01b967f4aa4145c85d413a4188c1944b14fddb9edf3ee88313cf59bb510d1eb2dfca9538cb880df2348c6e74ecec662c7ff5a31fb7a050279c8775b93e13ffbc99607daf7f054c28436dd668f090da65f7f91e8c963f049f40db05a590411683fd2f66d3b39bc683bd7b780db72d269acc924a4c68b2f5265b84d37cc9efe144a714d1bf8446a6bbc9470bddf1b63080edfba28c794ea782818642374741e056b01b3b99072e7170575caa1e5e23eb4ef928e35cd0109913cbf51344c30556480f8b975ad13f260ca75774ad3b3f1982dfddd584d42165e8490bc591fe3c19d16a7648a73547a4c738545562f17cc5e73adc8fce48a809f0f358b1d1cbde4c3dfdf9f45a7f09c7f7badddf6c2bff03a5e06fb778a7f5ba295c9287ddadd63464c4f5bc1173078aecc57a05f3fc3b23a12bf1f64fd0f418ee17e21258e0e96007d4a6ac79f86a6ca93e20c26ba703f50ef536bd92f030267b805032cb869367d69d3d8603d264587994d62588daf24b1cb52de0598058d90142461f9d60cc9224a4cb3d9479ae96167c9a19be44fca38df25191cff952e4838d65bacf91edaec30c789f9fc05afa3fafc61e49b484bce00515bacd2d86eb1b630e6c079a36ee7d0828b648ecb7fdae8896bdcafd9a8b8b581a2a31600196cf550cf450382ee29bf33e3f8463a5cfbf3b2e6e8799b84aa9628816ec1cb3d92a42c4963ddcec464492b6a2f4f3b95879495c773486130014b94ea1f6ec6774633531bbb556439551f45f8e21ffb4d7bc3ad5dfdeb801cc3f4f1db40b8e4d26da1a6b4bed7c39c25fe2b43e5eebe45797513d395888c7109eabf36243fc0f6e329e32b20d8dac2ff6b86d2b67e4360883bcbaa1bb8d2ade7cc478cc6542bae76c38ee817695e9b51ad74a56abe19e4b1d9da0bb0c89c6f9022a57daf544c9d6329de25347d244b93cfe6ff110c5458b27f153deab607c4396cc2af535ded4fa3b0aa56bae9adb08aa0f6be96e68f40aa896eb0c2334c0d1ab1f52752efbd1de49335c0377aadeef329039d9be8816bd501660eaf61668afc08795cab8d30b3851458d55b5d97a0efac4ae211e1a8e243076fcd2f461b83b3f6d860383159cdd146e6c913a39dc6b1fa050a9832602642bcab9eef6f46fd6753fd9d45253659d20c80067de0ad1d336a587c4e95323145f2e6fde4d5a42110d3c62827706f5d55ae0130f0536d4f51e98905de15dc3f719106d9eee0c814200566fd5c35dae6f551644984f91c18fa372808a4f7cdda7bce64ed27db1b98ad11ccd9a27affa7c630fb009abe5e9decda8d6d1d35fa1731453605dfa5bc743ae63bc02f140fbb10b88242f554ec842e0c4522ec79a274e9f01203e36a0d5e7bdc7ffc579b732055cfeb6887cefc6f576764cf6fecd91f85ae34d0a58745e6cd19431f9d3016caa4ac5d1308cd3b53bbc3917258b03cd3ad81753c71a3a865a14107f7b5ea505a9973ed3046d3b4035336823cef04b034b55ab1c379ed4c557c339da921984bcd1b928cf0a2715d6fbc9a36f6e38082314d84f2687f196557b35becc73d19d2c5d5713c4adab299086b3b3ef6786305f6f2ea75747852846f9be6d3a873a48c2373c5acc22e52191e3466fe491d578255a9a2af61340415df0ceb1269c088c93a7b228222c5eb784197d954b2c760bf781dd903918926306888ac11b1acdd2cde41147157deba67bcdfc0b8f13f737498f7db629efbc801d45075990b771728193877d92a6c42055f0bf081e9ba708025f92fda9b31243d8c91fde51423bc8a3d4964d4694dc9d2d8b5b319542cf288c94abae947c90f9274c07d72e4d04500e08458d82f251e54320698ff9edd442bfae40724b06392e0cfb4495ed42cad2295c7eb1be93d26db407f7fd13891a20421cf82a13b5109fb597835f7e18314330846a5594ec517b95404fd3efda8e6fc16cc453e6b90f6364dff449c7627d131d73dd9b4891816183569a0f06bdbd4cacedf1e639b31755080713103436f53b1546129a92d42e122484a656761fef3b90e2d611f66f7690d88145d017c2236be14271e0af4e4f675815111b2f0c7891d9d6f47ee5f37a6ce88c246bd152619596aea5c24e69717e0fc0b787e3e0244f1a3e89d65000588dbb270d8c92363ba184755f430755a8fc22a671e6a02491dd4bb837f69b30f0a3e0cbff07448693cae9881cdfcdf9bb693c08105a05f5e73bae9d1975cbc99337cd00f8594573a516580c9cf70ab7f5f0138361918cdc006cca744fbbbc071830da859c39f6f68a86da8cd2c95aa088d5cb61d0aa85092c0e8e189bbe2caf16e7d5b960bf4f4e8f8419589ba75853e44f9898481808c7ad805e732ef9c2d76646c94690649110426a2e6616c0f050d8ee50c1ba727e7c4f185fed954922946a739d6a4362ca57ad1b98f806aabfa19917279c4525379e0282db0ff9c9383466965116725ba269453ac90631c091db251c502eec08fda6ca96f030d99be59ebadf7ede81ee13fc6cc7f6cc66bbf2bec7dc9728bc58a9084233335205986b99b8af84ad678d017e076fc15d0f4d6476d77c61dcd78e2b3bbddd4a674e36bf8a79d8ae4361b101776878df361aac1c9ff9f9387c0906f4fc8ba765eb0a46aa1d0bceb93351b2d3b894b44160c1865098a435cc25c7217cc61f171b763b6735eb99b011c348fef799692a16c3962eb07e945a183f395aad13813f3269dae6ad8181f14aed3e255ad399c6ecdd24ed9da5352a5ec143a3fdbb40848716803a7610e09e85e421388aafcf7f9cba333a2584000fc3dd3e334d48c77e785d4bed63cf04fdf71bd60c97b4b12006a89b326ab995e9fcfb1589196fa5e228caec6b83b9203d23634f204ff2d1efed12cb6c7003a0ef64253507fe03380daadcee5d2b795fa06ddd08d42adc642385a532b4d6ab0110c4a5b886897a0fd146b5dbe540eee3cff88648b8d08cc1548be0298ca030f889a965cb459135c682a7590c7abc751da51036089b4d30ae001cc53e019c53192e752b1a01e77595d07c79575cc7414c8501bb3d0ba80080f8af28460950f154d5b8322d5ee4dec517c7203961f843b6515b00988ede4239e94bdf50d5ae9381a574ac7ecaf16b40644b2c98e0e4a5d61fafeafb4aaa78322b1159dfeadb0ee6bc00568eb631b6be4d8838685fe93c6bd5b9249c8d71dcdce0c71404a441581ead963f23eec435451fa325926e09c1006f308d6fb6a96bd9c4584f8beccc5ca7810eddd5bd9c8f0b31cd725bfdf0ea874e49a797ff5fab1ec0f5a177ae0eb480773ca30240623d5f3f337f7e6ae93d41522747016aefdeb4c8e778767db065fb33fed48f466fab23c185558c0f1b6b1077682b53ef320dfdbd5f0e050f297451b4dddc9ea1a38f63d152225da99b54f29dcbdcb82b7feed5573d7bb6cbd3aebdae61d939683765eddb5fed6f0583dada031919e33ed65d47944dd1cc55f1e24ceedd64179d7b59f99fd446160af2aa623ad8d65f5273961f81c50ca2e98998db9235770c7800b99f5d914cb115d664bf088f4955764f9ad0c5112e6718de7d968414f28f39a1030c0f4aa1faa235d349598ad4647eb26e0c21ecc80330034eeb5f2074315d71f9e050eae879f1fdbceb2d652006606d6bfea7ec00ac717200ea4b1b87ead54820c00098008000100810000001400078008000100090000000800020000020000"], 0x1044}, 0x1, 0x0, 0x0, 0x2008}, 0x45) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340), 0x800040, &(0x7f0000000240)=ANY=[@ANYBLOB="6d70632c67727071756f74615f626c6f636b5f686172646c696d698a3d67342d2d377034328e850000000000000000000800000000"]) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0) getpid() pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r4, 0x406, r3) socket$nl_generic(0x11, 0x3, 0x10) getpid() openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f00000013c0)) read$dsp(r6, &(0x7f0000000440)=""/171, 0xab) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000f, 0x12, r5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000014000000d4ce000000001100080000000a000000"], 0x28}}, 0x40880) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) r7 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0xffffffffffffffff, r7) ioctl$sock_netdev_private(r1, 0x8943, &(0x7f0000000000)) 0s ago: executing program 1 (id=237): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$loop(0x0, 0x6, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = fsopen(&(0x7f0000000000)='nfsd\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0) close(r2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts. [ 62.900659][ T5216] cgroup: Unknown subsys name 'net' [ 63.019594][ T5216] cgroup: Unknown subsys name 'cpuset' [ 63.027735][ T5216] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.665083][ T5216] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.966521][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.977538][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.985125][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.996415][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.004392][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.004434][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.012645][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.026871][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.035181][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.036919][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.043135][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.049600][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.063008][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.070863][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.085024][ T5241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.092629][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.117271][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.124836][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.147328][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.153619][ T5241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.160062][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.177540][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.184910][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.192630][ T5246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.200442][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.208900][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.219447][ T5231] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.226821][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.234612][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.242156][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.502740][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 67.707365][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.719184][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.738482][ T5227] bridge_slave_0: entered allmulticast mode [ 67.750993][ T5227] bridge_slave_0: entered promiscuous mode [ 67.763403][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.770557][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.777805][ T5227] bridge_slave_1: entered allmulticast mode [ 67.784613][ T5227] bridge_slave_1: entered promiscuous mode [ 67.795491][ T5243] chnl_net:caif_netlink_parms(): no params data found [ 67.805140][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 67.830681][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 67.858943][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.869759][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 67.902996][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.040761][ T5227] team0: Port device team_slave_0 added [ 68.049352][ T5227] team0: Port device team_slave_1 added [ 68.100721][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.108308][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.115502][ T5226] bridge_slave_0: entered allmulticast mode [ 68.123298][ T5226] bridge_slave_0: entered promiscuous mode [ 68.139638][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.147049][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.154239][ T5243] bridge_slave_0: entered allmulticast mode [ 68.162054][ T5243] bridge_slave_0: entered promiscuous mode [ 68.203546][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.210768][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.218107][ T5226] bridge_slave_1: entered allmulticast mode [ 68.224899][ T5226] bridge_slave_1: entered promiscuous mode [ 68.240758][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.248785][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.255928][ T5243] bridge_slave_1: entered allmulticast mode [ 68.263802][ T5243] bridge_slave_1: entered promiscuous mode [ 68.271225][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.278367][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.304715][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.324662][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.332551][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.339837][ T5237] bridge_slave_0: entered allmulticast mode [ 68.347028][ T5237] bridge_slave_0: entered promiscuous mode [ 68.354428][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.362124][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.369831][ T5235] bridge_slave_0: entered allmulticast mode [ 68.376788][ T5235] bridge_slave_0: entered promiscuous mode [ 68.401275][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.408466][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.435198][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.450565][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.458141][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.465291][ T5237] bridge_slave_1: entered allmulticast mode [ 68.472113][ T5237] bridge_slave_1: entered promiscuous mode [ 68.479151][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.488900][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.496027][ T5235] bridge_slave_1: entered allmulticast mode [ 68.503416][ T5235] bridge_slave_1: entered promiscuous mode [ 68.513190][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.524199][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.543390][ T5243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.610243][ T5243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.631856][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.648563][ T5226] team0: Port device team_slave_0 added [ 68.655998][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.685052][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.695611][ T5226] team0: Port device team_slave_1 added [ 68.714995][ T5227] hsr_slave_0: entered promiscuous mode [ 68.722123][ T5227] hsr_slave_1: entered promiscuous mode [ 68.747864][ T5243] team0: Port device team_slave_0 added [ 68.755347][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.785162][ T5243] team0: Port device team_slave_1 added [ 68.811769][ T5235] team0: Port device team_slave_0 added [ 68.819825][ T5235] team0: Port device team_slave_1 added [ 68.852715][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.859911][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.886595][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.919599][ T5237] team0: Port device team_slave_0 added [ 68.925887][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.933674][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.960247][ T5243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.973133][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.981338][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.008446][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.038787][ T5237] team0: Port device team_slave_1 added [ 69.045054][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.052283][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.078422][ T5243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.097406][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.104400][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.131407][ T5246] Bluetooth: hci0: command tx timeout [ 69.138217][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.151428][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.158767][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.184770][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.196394][ T5246] Bluetooth: hci2: command tx timeout [ 69.197575][ T5241] Bluetooth: hci1: command tx timeout [ 69.222790][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.229823][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.255875][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.277054][ T5241] Bluetooth: hci4: command tx timeout [ 69.277063][ T5246] Bluetooth: hci3: command tx timeout [ 69.299837][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.310756][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.341026][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.364577][ T5243] hsr_slave_0: entered promiscuous mode [ 69.371080][ T5243] hsr_slave_1: entered promiscuous mode [ 69.378306][ T5243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.386183][ T5243] Cannot create hsr debugfs directory [ 69.404062][ T5226] hsr_slave_0: entered promiscuous mode [ 69.410864][ T5226] hsr_slave_1: entered promiscuous mode [ 69.417383][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.425007][ T5226] Cannot create hsr debugfs directory [ 69.488119][ T5235] hsr_slave_0: entered promiscuous mode [ 69.495236][ T5235] hsr_slave_1: entered promiscuous mode [ 69.502067][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.509890][ T5235] Cannot create hsr debugfs directory [ 69.625981][ T5237] hsr_slave_0: entered promiscuous mode [ 69.632567][ T5237] hsr_slave_1: entered promiscuous mode [ 69.642338][ T5237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.649978][ T5237] Cannot create hsr debugfs directory [ 69.848787][ T5227] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.868496][ T5227] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.899866][ T5227] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.922076][ T5227] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.003138][ T5226] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.031602][ T5226] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.054597][ T5226] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.072660][ T5226] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.092722][ T5235] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.103727][ T5235] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.116800][ T5235] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.125974][ T5235] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.206046][ T5237] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.224977][ T5237] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.250700][ T5237] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.278176][ T5237] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.324836][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.371966][ T5243] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.381034][ T5243] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.395371][ T5243] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.415693][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.423360][ T5243] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.472861][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.480121][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.512728][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.519873][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.545452][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.560335][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.593433][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.622105][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.629226][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.683648][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.690808][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.714804][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.774358][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.805867][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.813044][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.833522][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.840958][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.900785][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.943576][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.989374][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.996551][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.013296][ T5243] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.028761][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.035876][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.064462][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.071660][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.113441][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.120609][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.194976][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.202355][ T5241] Bluetooth: hci0: command tx timeout [ 71.277348][ T5241] Bluetooth: hci1: command tx timeout [ 71.284548][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.291677][ T5241] Bluetooth: hci2: command tx timeout [ 71.357126][ T5241] Bluetooth: hci4: command tx timeout [ 71.357921][ T5246] Bluetooth: hci3: command tx timeout [ 71.393378][ T5227] veth0_vlan: entered promiscuous mode [ 71.439432][ T5227] veth1_vlan: entered promiscuous mode [ 71.519413][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.529540][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.565281][ T5227] veth0_macvtap: entered promiscuous mode [ 71.622889][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.681889][ T5227] veth1_macvtap: entered promiscuous mode [ 71.699007][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.716049][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.761276][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.775650][ T5226] veth0_vlan: entered promiscuous mode [ 71.815612][ T5226] veth1_vlan: entered promiscuous mode [ 71.842705][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.859403][ T5237] veth0_vlan: entered promiscuous mode [ 71.871588][ T5227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.880877][ T5227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.890207][ T5227] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.899218][ T5227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.941681][ T5243] veth0_vlan: entered promiscuous mode [ 71.961793][ T5237] veth1_vlan: entered promiscuous mode [ 72.002101][ T5243] veth1_vlan: entered promiscuous mode [ 72.019460][ T5226] veth0_macvtap: entered promiscuous mode [ 72.055416][ T5226] veth1_macvtap: entered promiscuous mode [ 72.097552][ T5235] veth0_vlan: entered promiscuous mode [ 72.123146][ T5243] veth0_macvtap: entered promiscuous mode [ 72.142131][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.152298][ T5235] veth1_vlan: entered promiscuous mode [ 72.161188][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.168320][ T5243] veth1_macvtap: entered promiscuous mode [ 72.187865][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.203487][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.216092][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.229473][ T5237] veth0_macvtap: entered promiscuous mode [ 72.237899][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.248411][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.259903][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.298368][ T5226] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.308125][ T5226] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.317500][ T5226] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.327049][ T5226] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.342496][ T5237] veth1_macvtap: entered promiscuous mode [ 72.371529][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.382909][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.384307][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.392419][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.410744][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.421882][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.433427][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.456544][ T5235] veth0_macvtap: entered promiscuous mode [ 72.489925][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.506160][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.517132][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.527647][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.539288][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.553262][ T5237] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.564288][ T5237] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.573489][ T5237] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.582415][ T5237] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.598789][ T5235] veth1_macvtap: entered promiscuous mode [ 72.616000][ T5227] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.617356][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.643941][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.654183][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.665215][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.675195][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.685788][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.697316][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.762659][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.782449][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.792999][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.805550][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.815743][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.828431][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.839527][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.853402][ T5309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 72.897779][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.910097][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.923369][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.934023][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.945700][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.957072][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.968000][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.978962][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.990247][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.008629][ T5243] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.023869][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.033058][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.041029][ T5243] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.056370][ T5243] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.065105][ T5243] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.141225][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.158540][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.173230][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.184197][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.194833][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.205457][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.215340][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.226526][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.238537][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.277238][ T5246] Bluetooth: hci0: command tx timeout [ 73.307193][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.316101][ T5235] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.325294][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.328452][ T5235] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.341478][ T5235] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.354487][ T5235] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.364593][ T5246] Bluetooth: hci2: command tx timeout [ 73.364650][ T5241] Bluetooth: hci1: command tx timeout [ 73.391485][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.403131][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.410927][ T5278] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.439068][ T5241] Bluetooth: hci3: command tx timeout [ 73.439133][ T5246] Bluetooth: hci4: command tx timeout [ 73.528697][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.547221][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.592740][ T5278] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 73.595575][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.614652][ T5278] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 73.615765][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.640155][ T5278] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 73.652805][ T5278] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 73.673907][ T5278] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 73.702175][ T5278] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 73.715809][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 73.725473][ T5278] usb 1-1: Product: syz [ 73.739098][ T5278] usb 1-1: Manufacturer: syz [ 73.753852][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.779520][ T5278] cdc_wdm 1-1:1.0: skipping garbage [ 73.786841][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.796471][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.833379][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.840893][ T5278] cdc_wdm 1-1:1.0: skipping garbage [ 73.868234][ T5278] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 73.887676][ T5278] cdc_wdm 1-1:1.0: Unknown control protocol [ 73.920063][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.934988][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.119430][ T5325] tap0: tun_chr_ioctl cmd 1074025678 [ 74.129225][ T5325] tap0: group set to 0 [ 74.319136][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 74.322045][ T5230] usb 1-1: USB disconnect, device number 2 [ 74.326098][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 74.337953][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 74.351502][ T5312] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 74.360181][ T5327] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 74.713341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.340305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.391564][ T5246] Bluetooth: hci0: command tx timeout [ 75.436358][ T5246] Bluetooth: hci1: command tx timeout [ 75.448182][ T5246] Bluetooth: hci2: command tx timeout [ 75.516632][ T5246] Bluetooth: hci3: command tx timeout [ 75.522111][ T5246] Bluetooth: hci4: command tx timeout [ 76.042534][ T5354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15'. [ 76.146973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 76.196563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.199461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.205555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.216640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.636634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 76.966708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.826613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.947321][ T5380] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.009524][ T5376] libceph: resolve '. [ 78.009524][ T5376] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 78.009524][ T5376] ' (ret=-3): failed [ 78.035527][ T29] audit: type=1326 audit(1727821248.956:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5377 comm="syz.2.24" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f009497dff9 code=0x0 [ 78.218099][ T5374] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 78.230234][ T5374] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 78.349469][ T5374] netlink: 60 bytes leftover after parsing attributes in process `syz.3.22'. [ 78.569865][ T5384] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 78.592571][ T5384] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 78.757001][ T5384] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 78.909738][ T5384] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 78.936399][ T5384] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 78.971018][ T5384] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 78.986612][ T5404] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.065093][ T5384] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 79.088716][ T5384] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.123483][ T5384] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 79.474780][ T5384] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.517574][ T5384] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.597835][ T5384] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.696699][ T5384] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 79.708218][ T5384] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 79.813631][ T5384] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 80.084196][ T5421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.36'. [ 80.196478][ T5241] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.410890][ T5425] mkiss: ax0: crc mode is auto. [ 80.947228][ T5430] virtio-fs: tag <(null)> not found [ 81.064554][ T5241] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.201485][ T5241] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.151168][ T5241] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.158550][ T5241] Bluetooth: hci4: command 0x0c1a tx timeout [ 82.238988][ T5246] Bluetooth: hci0: command 0x0c1a tx timeout [ 82.303092][ T8] cfg80211: failed to load regulatory.db [ 82.692048][ T5442] tipc: Started in network mode [ 82.716447][ T5442] tipc: Node identity 1e73ffbb6c62, cluster identity 4711 [ 82.725818][ T5442] tipc: Enabled bearer , priority 0 [ 83.026882][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 83.053283][ T5442] syzkaller0: entered promiscuous mode [ 83.071100][ T5442] syzkaller0: entered allmulticast mode [ 83.163671][ T5459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.47'. [ 83.267044][ T5442] tipc: Resetting bearer [ 83.276593][ T5241] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.282656][ T5241] Bluetooth: hci1: command 0x0c1a tx timeout [ 83.316670][ T5246] Bluetooth: hci5: sending frame failed (-49) [ 83.324057][ T5241] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 83.425886][ T5455] Bluetooth: hci5: Frame reassembly failed (-84) [ 83.448108][ T5450] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.456301][ T5450] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.474313][ T5455] Bluetooth: hci5: Frame reassembly failed (-84) [ 83.474521][ T5450] bridge0: entered allmulticast mode [ 83.485171][ T5455] Bluetooth: hci5: Frame reassembly failed (-84) [ 83.539458][ T5465] netlink: 'syz.0.48': attribute type 1 has an invalid length. [ 83.551930][ T5455] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.559164][ T5455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.567354][ T5455] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.574442][ T5455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.583875][ T5465] netlink: 9344 bytes leftover after parsing attributes in process `syz.0.48'. [ 83.590502][ T5455] bridge0: entered promiscuous mode [ 83.777827][ T9] tipc: Node number set to 1913782203 [ 84.114233][ T5441] tipc: Resetting bearer [ 84.236664][ T5241] Bluetooth: hci4: command 0x0c1a tx timeout [ 84.236675][ T5246] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.320224][ T5241] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.360847][ T5241] Bluetooth: hci1: command 0x0c1a tx timeout [ 85.371618][ T5246] Bluetooth: hci2: command 0x0c1a tx timeout [ 86.316495][ T5246] Bluetooth: hci3: command 0x0c1a tx timeout [ 86.326495][ T5241] Bluetooth: hci4: command 0x0c1a tx timeout [ 86.753971][ T5441] tipc: Disabling bearer [ 86.790007][ T5492] netlink: 'syz.2.59': attribute type 10 has an invalid length. [ 86.812354][ T5492] batman_adv: batadv0: Adding interface: team0 [ 86.818620][ T5492] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.843765][ T5492] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 86.866947][ T5493] netlink: 'syz.2.59': attribute type 10 has an invalid length. [ 86.906575][ T5493] netlink: 2 bytes leftover after parsing attributes in process `syz.2.59'. [ 86.921388][ T5493] team0: entered promiscuous mode [ 87.005310][ T5493] team_slave_0: entered promiscuous mode [ 87.024247][ T5246] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 87.057743][ T5493] team_slave_1: entered promiscuous mode [ 87.159778][ T5493] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.222195][ T5493] batman_adv: batadv0: Interface activated: team0 [ 87.240465][ T5493] batman_adv: batadv0: Interface deactivated: team0 [ 87.253906][ T5493] batman_adv: batadv0: Removing interface: team0 [ 87.264650][ T5493] bridge0: port 3(team0) entered blocking state [ 87.275735][ T5493] bridge0: port 3(team0) entered disabled state [ 87.291984][ T5493] team0: entered allmulticast mode [ 87.320567][ T5507] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.334198][ T5493] team_slave_0: entered allmulticast mode [ 87.341418][ T5493] team_slave_1: entered allmulticast mode [ 87.358874][ T5493] bridge0: port 3(team0) entered blocking state [ 87.365254][ T5493] bridge0: port 3(team0) entered forwarding state [ 87.376497][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.553853][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.586437][ T8] usb 2-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 87.605005][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.641100][ T8] usb 2-1: config 0 descriptor?? [ 87.736876][ T5513] lo: entered allmulticast mode [ 87.876677][ T5513] tunl0: entered allmulticast mode [ 87.901377][ T5513] gre0: entered allmulticast mode [ 88.845735][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 88.853247][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 88.865043][ T5513] gretap0: entered allmulticast mode [ 88.887825][ T8] usb 2-1: USB disconnect, device number 2 [ 88.939093][ T5523] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.71'. [ 89.042509][ T5513] erspan0: entered allmulticast mode [ 89.103052][ T5513] ip_vti0: entered allmulticast mode [ 89.160923][ T5513] ip6_vti0: entered allmulticast mode [ 89.181218][ T5513] sit0: entered allmulticast mode [ 89.189682][ T5517] netlink: 76 bytes leftover after parsing attributes in process `syz.0.70'. [ 89.209257][ T5513] ip6tnl0: entered allmulticast mode [ 89.259609][ T5513] ip6gre0: entered allmulticast mode [ 89.299607][ T5513] syz_tun: entered allmulticast mode [ 89.326493][ T5513] ip6gretap0: entered allmulticast mode [ 89.345383][ T5513] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.353501][ T5513] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.375197][ T5513] bridge0: entered allmulticast mode [ 89.406875][ T5513] vcan0: entered allmulticast mode [ 89.436138][ T5513] bond0: entered allmulticast mode [ 89.453140][ T5513] bond_slave_0: entered allmulticast mode [ 89.468112][ T5513] bond_slave_1: entered allmulticast mode [ 89.525741][ T5513] team0: entered allmulticast mode [ 89.534329][ T5513] team_slave_0: entered allmulticast mode [ 89.549103][ T5513] team_slave_1: entered allmulticast mode [ 89.588653][ T5513] dummy0: entered allmulticast mode [ 89.633306][ T5513] nlmon0: entered allmulticast mode [ 89.651591][ T5513] caif0: entered allmulticast mode [ 89.669880][ T5513] batadv0: entered allmulticast mode [ 89.696020][ T5513] vxcan0: entered allmulticast mode [ 89.721381][ T5513] vxcan1: entered allmulticast mode [ 89.737634][ T5513] veth0: entered allmulticast mode [ 89.760787][ T5513] veth1: entered allmulticast mode [ 89.832846][ T5513] wg0: entered allmulticast mode [ 89.845314][ T5513] wg1: entered allmulticast mode [ 89.853842][ T5513] wg2: entered allmulticast mode [ 89.863346][ T5513] veth0_to_bridge: entered allmulticast mode [ 89.902280][ T5513] veth1_to_bridge: entered allmulticast mode [ 89.949006][ T5513] veth0_to_bond: entered allmulticast mode [ 89.964551][ T5513] veth1_to_bond: entered allmulticast mode [ 89.997918][ T5513] veth0_to_team: entered allmulticast mode [ 90.018774][ T5513] veth1_to_team: entered allmulticast mode [ 90.034097][ T5513] veth0_to_batadv: entered allmulticast mode [ 90.043439][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.052178][ T5513] batadv_slave_0: entered allmulticast mode [ 90.062488][ T5513] veth1_to_batadv: entered allmulticast mode [ 90.073334][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.082571][ T5513] batadv_slave_1: entered allmulticast mode [ 90.092429][ T5513] xfrm0: entered allmulticast mode [ 90.101406][ T5513] veth0_to_hsr: entered allmulticast mode [ 90.119179][ T5513] hsr_slave_0: entered allmulticast mode [ 90.130863][ T5513] veth1_to_hsr: entered allmulticast mode [ 90.152761][ T5513] hsr_slave_1: entered allmulticast mode [ 90.171176][ T5513] hsr0: entered allmulticast mode [ 90.181377][ T5513] veth1_virt_wifi: entered allmulticast mode [ 90.192031][ T5513] veth0_virt_wifi: entered allmulticast mode [ 90.229396][ T5513] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 90.241122][ T5513] veth1_vlan: entered allmulticast mode [ 90.251319][ T5513] veth0_vlan: entered allmulticast mode [ 90.270116][ T5513] vlan0: entered allmulticast mode [ 90.275586][ T5513] vlan1: entered allmulticast mode [ 90.292194][ T5513] macvlan0: entered allmulticast mode [ 90.315055][ T5513] macvlan1: entered allmulticast mode [ 90.330632][ T5513] ipvlan0: entered allmulticast mode [ 90.339577][ T5513] ipvlan1: entered allmulticast mode [ 90.345950][ T5513] veth1_macvtap: entered allmulticast mode [ 90.368536][ T5513] veth0_macvtap: entered allmulticast mode [ 90.390503][ T5513] macvtap0: entered allmulticast mode [ 90.417686][ T5513] macsec0: entered allmulticast mode [ 90.439902][ T5513] geneve0: entered allmulticast mode [ 90.452755][ T5513] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.469059][ T5513] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.484498][ T5513] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.495014][ T5513] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.515184][ T5513] geneve1: entered allmulticast mode [ 90.533138][ T5513] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 90.566965][ T5513] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 90.582064][ T5513] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 90.610556][ T5513] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 90.659480][ T5513] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 90.695696][ T5513] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 90.715195][ T5517] : entered promiscuous mode [ 90.751417][ T5542] Zero length message leads to an empty skb [ 91.928065][ T5573] netlink: 32 bytes leftover after parsing attributes in process `syz.0.87'. [ 91.996075][ T868] libceph: connect (1)[c::]:6789 error -101 [ 92.132159][ T868] libceph: mon0 (1)[c::]:6789 connect error [ 92.242901][ T5573] ceph: No mds server is up or the cluster is laggy [ 92.296488][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.486435][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 92.513427][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.541381][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.591913][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.616314][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.676334][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.685437][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.966845][ T8] usb 4-1: GET_CAPABILITIES returned 0 [ 93.011925][ T8] usbtmc 4-1:16.0: can't read capabilities [ 93.227639][ T5279] usb 4-1: USB disconnect, device number 2 [ 95.653004][ T5626] sit0: entered promiscuous mode [ 95.674552][ T5626] netlink: 'syz.0.107': attribute type 1 has an invalid length. [ 95.699860][ T5626] netlink: 1 bytes leftover after parsing attributes in process `syz.0.107'. [ 97.458231][ T5637] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 97.466829][ T5637] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 97.475254][ T5637] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 98.132583][ T5665] 9pnet_virtio: no channels available for device syz [ 98.255794][ T5669] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 98.268308][ T5669] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 98.284188][ T5669] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 100.177086][ T5698] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 107.437929][ T5233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 107.455103][ T5233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 107.463168][ T5233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 107.472569][ T5233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 107.482019][ T5233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 107.490190][ T5233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 107.705152][ T5719] xt_hashlimit: max too large, truncated to 1048576 [ 107.725173][ T5719] Cannot find set identified by id 0 to match [ 108.952530][ T5733] IPVS: set_ctl: invalid protocol: 7902 119.237.202.194:0 [ 109.085770][ T5741] overlayfs: missing 'lowerdir' [ 109.126877][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.498860][ T5755] random: crng reseeded on system resumption [ 110.306477][ T5233] Bluetooth: hci5: command tx timeout [ 110.319572][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.367703][ T5711] chnl_net:caif_netlink_parms(): no params data found [ 110.528536][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.564879][ T5760] tipc: Started in network mode [ 110.571714][ T5760] tipc: Node identity ac1414aa, cluster identity 4711 [ 110.588958][ T5760] tipc: Enabled bearer , priority 10 [ 110.745828][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.325341][ T5711] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.338975][ T5711] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.353157][ T5711] bridge_slave_0: entered allmulticast mode [ 111.387896][ T5711] bridge_slave_0: entered promiscuous mode [ 111.388153][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 111.406179][ T5711] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.420465][ T5711] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.434159][ T5711] bridge_slave_1: entered allmulticast mode [ 111.461441][ T5711] bridge_slave_1: entered promiscuous mode [ 111.563835][ T5779] IPVS: set_ctl: invalid protocol: 7902 119.237.202.194:0 [ 111.597649][ T5230] tipc: Node number set to 2886997162 [ 111.659851][ T5711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.716230][ T5711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.320126][ T5233] Bluetooth: hci5: command tx timeout [ 112.500266][ T5711] team0: Port device team_slave_0 added [ 112.502687][ T5711] team0: Port device team_slave_1 added [ 112.616788][ T11] bridge_slave_1: left allmulticast mode [ 112.645225][ T11] bridge_slave_1: left promiscuous mode [ 112.676368][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.714109][ T11] bridge_slave_0: left allmulticast mode [ 112.730883][ T11] bridge_slave_0: left promiscuous mode [ 112.754213][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.272421][ T5824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.162'. [ 114.000117][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.022651][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.044600][ T11] bond0 (unregistering): Released all slaves [ 114.189768][ T5820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'. [ 114.212773][ T5820] bridge0: left allmulticast mode [ 114.251558][ T5711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.283453][ T5711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.314977][ T5832] IPVS: set_ctl: invalid protocol: 7902 119.237.202.194:0 [ 114.350658][ T5711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.396711][ T5233] Bluetooth: hci5: command tx timeout [ 114.407580][ T5711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.414563][ T5711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.452607][ T11] tipc: Left network mode [ 114.498277][ T5711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.695529][ T5834] netlink: set zone limit has 4 unknown bytes [ 114.727561][ T5711] hsr_slave_0: entered promiscuous mode [ 114.769227][ T5711] hsr_slave_1: entered promiscuous mode [ 114.785427][ T5711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.804677][ T5711] Cannot create hsr debugfs directory [ 116.278112][ T5860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 116.584876][ T5233] Bluetooth: hci5: command tx timeout [ 116.764766][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 116.993644][ T11] hsr_slave_0: left promiscuous mode [ 117.026378][ T11] hsr_slave_1: left promiscuous mode [ 117.056399][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.064043][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.107567][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.115043][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.173875][ T11] veth1_macvtap: left promiscuous mode [ 117.216683][ T11] veth0_macvtap: left promiscuous mode [ 117.226951][ T11] veth1_vlan: left promiscuous mode [ 117.233824][ T11] veth0_vlan: left promiscuous mode [ 117.358468][ T5875] kvm: emulating exchange as write [ 119.815805][ T5898] netlink: 32 bytes leftover after parsing attributes in process `syz.2.182'. [ 119.912976][ T11] team0 (unregistering): Port device team_slave_1 removed [ 120.146631][ T11] team0 (unregistering): Port device team_slave_0 removed [ 120.769755][ T5912] capability: warning: `syz.0.185' uses deprecated v2 capabilities in a way that may be insecure [ 121.014837][ T5889] warning: `syz.4.180' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.417640][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.192'. [ 125.218729][ T5967] wireguard0: entered promiscuous mode [ 125.235380][ T5967] wireguard0: entered allmulticast mode [ 125.521365][ T5963] netlink: 32 bytes leftover after parsing attributes in process `syz.4.196'. [ 125.576302][ T5978] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.739494][ T5978] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.767027][ T5277] libceph: connect (1)[c::]:6789 error -101 [ 125.886255][ T5277] libceph: mon0 (1)[c::]:6789 connect error [ 125.903824][ T5978] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.083273][ T5963] ceph: No mds server is up or the cluster is laggy [ 126.191470][ T5277] libceph: connect (1)[c::]:6789 error -101 [ 126.206358][ T5978] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 126.235094][ T5978] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 126.262861][ T5277] libceph: mon0 (1)[c::]:6789 connect error [ 126.298751][ T5978] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 126.359620][ T5711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 126.454757][ T5711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 126.473626][ T5711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 126.543454][ T5711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 126.835140][ T5711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.921321][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'. [ 127.676884][ T5711] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.686801][ T5233] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.734878][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.742075][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.757846][ T5233] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.806682][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.813815][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.916965][ T5233] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.956813][ T5711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.967642][ T5711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.237860][ T5233] Bluetooth: hci5: command 0x0c1a tx timeout [ 128.519433][ T5711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.219065][ T5711] veth0_vlan: entered promiscuous mode [ 129.470744][ T5711] veth1_vlan: entered promiscuous mode [ 129.501236][ T6049] input: syz1 as /devices/virtual/input/input7 [ 129.531944][ T5711] veth0_macvtap: entered promiscuous mode [ 129.562981][ T5711] veth1_macvtap: entered promiscuous mode [ 130.218732][ T6051] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.219'. [ 130.270224][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.288092][ T6051] netlink: 183228 bytes leftover after parsing attributes in process `syz.3.219'. [ 130.323126][ T5233] Bluetooth: hci5: command 0x0c1a tx timeout [ 130.327420][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.419631][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.460836][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.495879][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.526331][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.547812][ T5711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.568242][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.582048][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.591993][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.602582][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.612445][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.623226][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.637655][ T5711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.690306][ T5711] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.706267][ T5711] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.715371][ T5711] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.726714][ T5279] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 130.734094][ T5711] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.168676][ T5279] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.180078][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.310091][ T5279] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 131.381646][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.656536][ T5279] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.711707][ T5279] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 131.806276][ T5279] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 131.853039][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.893160][ T5279] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.899401][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.144063][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.152355][ T5279] usb 5-1: Product: syz [ 132.157103][ T5279] usb 5-1: Manufacturer: syz [ 132.169462][ T5279] cdc_wdm 5-1:1.0: skipping garbage [ 132.174762][ T5279] cdc_wdm 5-1:1.0: skipping garbage [ 132.182089][ T5279] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 132.188205][ T5279] cdc_wdm 5-1:1.0: Unknown control protocol [ 132.448697][ T5233] Bluetooth: hci5: command 0x0c1a tx timeout [ 132.841870][ T6061] tap0: tun_chr_ioctl cmd 1074025678 [ 132.856913][ T6092] dccp_invalid_packet: pskb_may_pull failed [ 132.886339][ T6061] tap0: group set to 0 [ 132.927531][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 132.934209][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 132.940646][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 132.947284][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 132.953660][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 132.960308][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 132.969744][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 132.976394][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 132.984220][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 132.990876][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 132.993965][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.997422][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 133.003936][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.009829][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 133.010516][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 133.028809][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 133.036391][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 133.043014][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 133.049959][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 133.056618][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 133.063163][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 133.069787][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 133.091409][ T5279] usb 5-1: USB disconnect, device number 2 [ 133.097354][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 133.503105][ T29] audit: type=1326 audit(1727821304.416:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.0.230" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0aaf7dff9 code=0x0 [ 133.607314][ T5279] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.809800][ T5279] usb 4-1: Using ep0 maxpacket: 8 [ 133.849851][ T5279] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.909367][ T5279] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 133.971918][ T5279] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 134.040821][ T5279] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 134.117707][ T5279] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 134.172646][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.271121][ T5279] hub 4-1:1.0: bad descriptor, ignoring hub [ 134.309167][ T5279] hub 4-1:1.0: probe with driver hub failed with error -5 [ 134.350397][ T5279] cdc_wdm 4-1:1.0: skipping garbage [ 134.381508][ T5279] cdc_wdm 4-1:1.0: skipping garbage [ 134.410991][ T5279] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 134.449040][ T5279] cdc_wdm 4-1:1.0: Unknown control protocol [ 135.119693][ T6138] ======================================================= [ 135.119693][ T6138] WARNING: The mand mount option has been deprecated and [ 135.119693][ T6138] and is ignored by this kernel. Remove the mand [ 135.119693][ T6138] option from the mount to silence this warning. [ 135.119693][ T6138] ======================================================= [ 135.154574][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.161632][ T6138] tmpfs: Unknown parameter 'mpc' [ 135.473806][ T6141] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN PTI [ 135.486439][ T6141] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 135.494877][ T6141] CPU: 1 UID: 0 PID: 6141 Comm: syz.0.236 Not tainted 6.12.0-rc1-next-20241001-syzkaller #0 [ 135.504949][ T6141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 135.514998][ T6141] RIP: 0010:follow_pfnmap_start+0x1a7/0xfd0 [ 135.520908][ T6141] Code: 8d 9f 80 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 d7 25 1a 00 48 8b 1b 48 83 c3 58 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 ba 25 1a 00 4c 8b 23 48 c7 c0 bc [ 135.540525][ T6141] RSP: 0018:ffffc90003387100 EFLAGS: 00010202 [ 135.546622][ T6141] RAX: 000000000000000b RBX: 0000000000000058 RCX: 0000000000040000 [ 135.554604][ T6141] RDX: ffffc90009d32000 RSI: 00000000000018ae RDI: ffffc900033871e0 [ 135.562586][ T6141] RBP: ffffc90003387290 R08: ffffc90003387311 R09: 0000000000000000 [ 135.570644][ T6141] R10: ffffc900033872f0 R11: fffff52000670e63 R12: dffffc0000000000 [ 135.578617][ T6141] R13: 1ffff1100bd8bdb4 R14: ffffc900033872e0 R15: ffff88805ec5ed90 [ 135.586583][ T6141] FS: 00007fd0abd796c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 135.595503][ T6141] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.602080][ T6141] CR2: 00007fd0abd78f98 CR3: 000000005d39c000 CR4: 00000000003526f0 [ 135.610050][ T6141] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 135.618027][ T6141] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 135.626000][ T6141] Call Trace: [ 135.629267][ T6141] [ 135.632190][ T6141] ? __die_body+0x5f/0xb0 [ 135.636529][ T6141] ? die_addr+0xb0/0xe0 [ 135.640679][ T6141] ? exc_general_protection+0x3dd/0x5d0 [ 135.646241][ T6141] ? asm_exc_general_protection+0x26/0x30 [ 135.652003][ T6141] ? follow_pfnmap_start+0x1a7/0xfd0 [ 135.657375][ T6141] ? __pfx_follow_pfnmap_start+0x10/0x10 [ 135.663031][ T6141] ? __pfx_validate_chain+0x10/0x10 [ 135.668221][ T6141] ? __pfx_validate_chain+0x10/0x10 [ 135.673413][ T6141] get_pat_info+0x182/0x3f0 [ 135.677922][ T6141] ? __pfx_get_pat_info+0x10/0x10 [ 135.682949][ T6141] untrack_pfn+0x327/0x640 [ 135.687355][ T6141] ? __pfx_untrack_pfn+0x10/0x10 [ 135.692293][ T6141] ? unmap_vmas+0x1f1/0x5f0 [ 135.696794][ T6141] ? __pfx_lock_release+0x10/0x10 [ 135.701818][ T6141] unmap_single_vma+0x1f6/0x2b0 [ 135.706674][ T6141] unmap_vmas+0x3cc/0x5f0 [ 135.711012][ T6141] ? __pfx_unmap_vmas+0x10/0x10 [ 135.715857][ T6141] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 135.721849][ T6141] ? tlb_gather_mmu+0x24e/0x310 [ 135.726699][ T6141] unmap_region+0x214/0x380 [ 135.731198][ T6141] ? __pfx_unmap_region+0x10/0x10 [ 135.736225][ T6141] ? __mas_set_range+0x133/0x3c0 [ 135.741164][ T6141] ? fput+0x1a8/0x230 [ 135.745146][ T6141] mmap_region+0x22f9/0x2990 [ 135.749750][ T6141] ? __pfx_mmap_region+0x10/0x10 [ 135.754688][ T6141] ? __asan_memset+0x23/0x50 [ 135.759272][ T6141] ? process_measurement+0x3ca/0x1fb0 [ 135.764662][ T6141] ? __pfx_lock_acquire+0x10/0x10 [ 135.769695][ T6141] ? mm_get_unmapped_area_vmflags+0xb9/0xf0 [ 135.775579][ T6141] ? bpf_lsm_mmap_addr+0x9/0x10 [ 135.780417][ T6141] ? security_mmap_addr+0x6f/0x250 [ 135.785540][ T6141] ? __get_unmapped_area+0x2ed/0x350 [ 135.790840][ T6141] do_mmap+0x8f0/0x1000 [ 135.794994][ T6141] ? __pfx_do_mmap+0x10/0x10 [ 135.799581][ T6141] ? __pfx_down_write_killable+0x10/0x10 [ 135.805224][ T6141] ? common_file_perm+0x1a6/0x210 [ 135.810353][ T6141] vm_mmap_pgoff+0x1dd/0x3d0 [ 135.814952][ T6141] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 135.820054][ T6141] ? __fget_files+0x29/0x470 [ 135.824648][ T6141] ? __fget_files+0x3f3/0x470 [ 135.829311][ T6141] ? __fget_files+0x29/0x470 [ 135.833891][ T6141] ksys_mmap_pgoff+0x4eb/0x720 [ 135.838652][ T6141] ? __x64_sys_mmap+0x7f/0x140 [ 135.843404][ T6141] do_syscall_64+0xf3/0x230 [ 135.847919][ T6141] ? clear_bhb_loop+0x35/0x90 [ 135.852593][ T6141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.858506][ T6141] RIP: 0033:0x7fd0aaf7dff9 [ 135.862921][ T6141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.882523][ T6141] RSP: 002b:00007fd0abd79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 135.890937][ T6141] RAX: ffffffffffffffda RBX: 00007fd0ab136058 RCX: 00007fd0aaf7dff9 [ 135.898904][ T6141] RDX: 000000000200000f RSI: 0000000000004000 RDI: 0000000020ff9000 [ 135.906897][ T6141] RBP: 00007fd0aaff0296 R08: 0000000000000008 R09: 0000000000000000 [ 135.914863][ T6141] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 135.922838][ T6141] R13: 0000000000000001 R14: 00007fd0ab136058 R15: 00007ffff5478bf8 [ 135.930825][ T6141] [ 135.933844][ T6141] Modules linked in: [ 135.937873][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.944692][ T6141] ---[ end trace 0000000000000000 ]--- [ 135.988090][ T6141] RIP: 0010:follow_pfnmap_start+0x1a7/0xfd0 [ 135.995785][ T6141] Code: 8d 9f 80 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 d7 25 1a 00 48 8b 1b 48 83 c3 58 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 ba 25 1a 00 4c 8b 23 48 c7 c0 bc [ 136.015883][ T6141] RSP: 0018:ffffc90003387100 EFLAGS: 00010202 [ 136.022642][ T6141] RAX: 000000000000000b RBX: 0000000000000058 RCX: 0000000000040000 [ 136.030827][ T6141] RDX: ffffc90009d32000 RSI: 00000000000018ae RDI: ffffc900033871e0 [ 136.038864][ T6141] RBP: ffffc90003387290 R08: ffffc90003387311 R09: 0000000000000000 [ 136.046998][ T6141] R10: ffffc900033872f0 R11: fffff52000670e63 R12: dffffc0000000000 [ 136.055312][ T6141] R13: 1ffff1100bd8bdb4 R14: ffffc900033872e0 R15: ffff88805ec5ed90 [ 136.064990][ T6141] FS: 00007fd0abd796c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 136.095529][ T6141] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.105606][ T6141] CR2: 00007fa8c3545d58 CR3: 000000005d39c000 CR4: 00000000003526f0 [ 136.126457][ T9] usb 4-1: USB disconnect, device number 3 [ 136.151707][ T6141] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 136.168243][ T6141] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 136.196743][ T6141] Kernel panic - not syncing: Fatal exception [ 136.203323][ T6141] Kernel Offset: disabled [ 136.207653][ T6141] Rebooting in 86400 seconds..