last executing test programs: 5.731918587s ago: executing program 2 (id=579): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b900000000109021200"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x77, &(0x7f0000000d40)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x24, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "60d7d66e86"}, {0x5, 0x24, 0x0, 0xf58}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1c00, 0xb, 0xa}, {0x6, 0x24, 0x1a, 0x0, 0x50}, [@acm={0x4, 0x24, 0x2, 0xa}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xa, 0x16, 0x32}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x2, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x10, 0x7f, 0xb}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x4, 0x2, 0x8, 0x8, 0xca}, 0x12, &(0x7f0000000c40)=ANY=[], 0x5, [{0x65, &(0x7f0000000900)=@string={0x65, 0x3, "38bd8b295aa1d47b02e7f02689a11fa82df5477a560b550672619b2428b287624e1818af256dc89c06e05e8d152d461b2baeb7166b8429feeb8189a2e88136b0b78764658b36453eb6bf1ee70da1f87bc071f6eac77cc2afe2e1c508595db46319584f"}}, {0x0, 0x0}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x42b}}, {0xe9, &(0x7f0000000b40)=@string={0xe9, 0x3, "1a2ce7568646390c8a679d81fd3a9f4f6d2bf573d2a0e145bcb736a0241d239700213c918ac3e2fbfc6aa73643fd5d50053fb9f51c58054515f211e74283759878f8eb85ae8acf5a2b8cc75943c6df01c43ddc7c84cdb3be1a8b7fcc6d16f0ee9c5c87af6c0c81b88c12587bc89077a402bb3a1f7db975237e9662d1acf9618db2b072ab91f51444e3ba6beb45dd3c0efc2428b129200a1db02409faa163277b500a5081e35435d41afa29bce2435820d2ea76d93680a162fc0838601df6a49c5bba933f39ec180e8c1c6394b052a8b0fa8bd752fc16ad28e3c8883ed9cf0e106f391dc77729e1"}}]}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x80002, 0x2) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r4, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff, 0x3}) socket$inet6(0xa, 0xeee1f5804a5b0510, 0x3) socket$netlink(0x10, 0x3, 0x0) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') futimesat(r6, 0x0, 0x0) write$apparmor_current(r5, &(0x7f0000000100)=@hat={'changehat ', 0x2, 0x5e, ['/dev/ttyS3\x00', ']\x99D!/ttyS3\x00', '/dev/ttyS3\x00', '\xce\xb5']}, 0x40) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x383940, 0x0) r8 = epoll_create(0x4000100) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000300)={0xb0000004}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.443721972s ago: executing program 3 (id=604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4a000, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200048e5}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.160440257s ago: executing program 3 (id=607): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) 1.98813029s ago: executing program 3 (id=609): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x42000, 0x10) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x373}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}, {0x0}], 0x2, 0x0, 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x8ac, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x87c, 0x2, [@TCA_ROUTE4_POLICE={0x868, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0x2, 0x8, 0x8, {0x5, 0x2, 0x9, 0x9, 0x31, 0x17}, {0x4, 0x0, 0x101, 0x2, 0x67, 0x400}, 0x3, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x8b57, 0xc, 0x5, 0x3, 0x1, 0x8cc8, 0xffffffff, 0x7, 0x9, 0x8, 0x9, 0x5, 0x3, 0x10, 0x96d7, 0x2f, 0x5, 0x1, 0x4, 0x4, 0xdab, 0xffffffbf, 0x7, 0x1, 0xb2d, 0x7, 0x9, 0x1ff, 0x9, 0xfffffff7, 0x2, 0x3, 0x59e, 0x7fffffff, 0xfffffffc, 0x4, 0x4, 0xffff, 0x5, 0x1000, 0x2, 0x4, 0x3, 0x5, 0x2, 0x0, 0x8, 0x2, 0xb, 0x2, 0x2, 0x5, 0x0, 0x39c, 0x7f, 0x1, 0x98, 0x4748, 0xfff, 0x3, 0x6, 0x7f, 0x0, 0xb, 0x1ff, 0x1, 0x4, 0x1, 0x3, 0x81, 0x5, 0x7ff, 0x7ff, 0x0, 0x1, 0x800, 0x0, 0x9, 0x7, 0x5, 0x4, 0x3, 0x0, 0xffff, 0x134, 0x0, 0x9, 0x6, 0x6, 0x6, 0x4, 0x8, 0x9, 0x5, 0x6, 0x0, 0x1ff, 0x6, 0x9, 0xe, 0x8, 0x7, 0x8, 0x80000001, 0x5, 0x3, 0xfffffffe, 0x6, 0xad46, 0x3c5, 0x0, 0x20000000, 0x1ff, 0x80000000, 0xfffffff7, 0x3, 0x7, 0x0, 0x1ff, 0x0, 0x2, 0x8, 0x5, 0x9, 0x8, 0x2, 0x7, 0x0, 0x2, 0x5, 0x4, 0x9, 0x89, 0x4, 0x9, 0xe, 0x9fc, 0x8, 0x7, 0xbff, 0x1, 0xc, 0x9, 0x9, 0x8001, 0x8001, 0x9, 0x6, 0x8, 0x4, 0x8, 0x3, 0x8, 0xb2, 0xfffff800, 0x5, 0x0, 0xffff, 0x8c, 0x6, 0x3, 0x4, 0x5, 0x1, 0x15e, 0x5, 0x2, 0xfffffffc, 0x1000, 0x8, 0x400, 0x8, 0x6, 0x4, 0xa, 0xe, 0x100, 0x101, 0x0, 0x800, 0x7b, 0xe04, 0x3ff, 0xfffffffe, 0x9, 0x5ec, 0x6, 0xa, 0xfffffffd, 0xc7, 0xd, 0xfc, 0xfff, 0x0, 0x5, 0x5, 0x6, 0xe, 0x8, 0x7fff, 0x4, 0x10001, 0xfffffffd, 0x5, 0x3, 0xffff5545, 0x5, 0x3, 0x10, 0xfffffffe, 0x400, 0x6, 0x2, 0x1000, 0x1, 0x7fff, 0x8, 0x6, 0x40a2, 0x6, 0x27e9, 0x6, 0x80000000, 0x47, 0xfffffffc, 0x7fff, 0x1, 0xf4fa, 0x5, 0xffff, 0x4, 0x9, 0x8, 0xc, 0x5, 0x9, 0x3ff, 0xf, 0xd, 0x1, 0x7, 0x5, 0xfff, 0xe, 0x4, 0x5, 0x9, 0xfffffff8, 0xffffffff, 0xffff, 0xa13, 0xb, 0x80000001, 0x5, 0x767b63f]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5b, 0x9adf, 0x0, 0x1, 0x9, 0x6, 0x1781, 0x5d, 0x6, 0x7, 0x72e4, 0xac, 0x9, 0x9, 0x2, 0x1, 0x1000, 0x3ff, 0x1, 0x5, 0x5, 0x1800000, 0x8, 0x5, 0x38000, 0xf10, 0x6, 0xfff, 0xb92a, 0x10, 0x4, 0xf, 0x4, 0x0, 0x80000000, 0xb4d4, 0x8, 0x0, 0x3ff, 0x0, 0x2, 0x9, 0x4, 0xfffffffa, 0x5, 0xa, 0xffff0001, 0x1000, 0x10000, 0xda, 0x0, 0x7f, 0x6, 0x1, 0x2, 0x7, 0x8, 0x9, 0x3ff, 0xc, 0x6, 0x2, 0x4, 0x5, 0x7, 0x7f, 0x0, 0x5, 0x200, 0x3, 0x3, 0x4, 0x630908e5, 0xfffffff3, 0x2c4e, 0x9, 0x0, 0x1, 0x1, 0xe3, 0x4, 0x19adac4d, 0x7f, 0x5, 0x50, 0x4, 0xfb, 0x3, 0x2793, 0x6a, 0x100, 0x8000, 0x8, 0x6, 0xc8, 0x3, 0x3, 0x101, 0x10, 0x5, 0x6, 0x1, 0x0, 0x6, 0x3, 0x7, 0x7d0fd779, 0x1, 0x4, 0x19b7, 0xd, 0xfffffffd, 0x1, 0x1, 0x5, 0x1, 0x5, 0x3955a6de, 0x8000, 0x2, 0x9, 0x7ff, 0x5, 0x4, 0x3, 0x5, 0x5, 0x5d, 0x100, 0x4, 0xf, 0x90000000, 0xbf5, 0x3, 0x300000, 0x7, 0x5, 0x9, 0x4, 0xe80, 0x0, 0x5, 0x64, 0xfffffff1, 0x7fff, 0xcc0, 0x80000, 0x5afaf6c5, 0x0, 0x6, 0x7, 0x7, 0x6c000000, 0x10001, 0x8, 0x4, 0x5, 0x400, 0xe, 0x0, 0x5, 0x15, 0x1da, 0x0, 0x9, 0xd638, 0x7fffffff, 0x4c0, 0xbe9, 0x0, 0x8, 0x8, 0x3, 0x3, 0x6, 0x72c, 0xfffffffb, 0x10001, 0x10, 0x9, 0x1, 0x401, 0x5, 0x4, 0xffff, 0x7, 0x4, 0x54e, 0x1, 0x3dba, 0x40, 0x1ff, 0x2, 0x4, 0x3, 0x5, 0x3, 0x7f, 0x0, 0xdc6, 0xd, 0x7f, 0x5, 0x5, 0x1000, 0x6, 0x86f, 0x8001, 0x1, 0x8, 0x1ff, 0x81, 0x1, 0x6, 0x5, 0x7, 0x80000000, 0x9, 0x1, 0x6, 0x4, 0xffffffff, 0x80, 0xc, 0x8, 0xfffffffe, 0x9, 0x1, 0xd, 0x100, 0x1, 0xff, 0x1125, 0x7, 0x850, 0x7fffffff, 0x3edc, 0x10000, 0x10001, 0x2, 0x0, 0x40, 0x5, 0x5, 0x7, 0x7, 0xfff, 0x7, 0xe, 0xd0, 0x5, 0x101, 0x3, 0x2214, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7f}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000000}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0x2}}]}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) 1.895703112s ago: executing program 2 (id=610): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r1, &(0x7f0000000240)=""/4096, 0x1000) getdents(r1, &(0x7f0000000000)=""/43, 0x3b) 1.432257772s ago: executing program 0 (id=612): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001"], 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='A', 0x1}], 0x1}, 0x24008051) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) 1.371282513s ago: executing program 0 (id=613): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.266116295s ago: executing program 0 (id=614): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x16, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.176335887s ago: executing program 0 (id=615): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x24, 0x3c, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 1.152615987s ago: executing program 1 (id=616): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4a000, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200048e5}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.136744657s ago: executing program 2 (id=617): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80004, {0x0, 0x0, 0x0, r5, {}, {0x9, 0xb}, {0x9, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x9}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x9f8b8a2ee701f9b2}, 0x24008004) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.044230699s ago: executing program 3 (id=618): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) 989.611171ms ago: executing program 0 (id=619): socket$vsock_stream(0x28, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x8100, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 771.904145ms ago: executing program 1 (id=620): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 714.614626ms ago: executing program 2 (id=621): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001"], 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='A', 0x1}], 0x1}, 0x24008051) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) 592.416398ms ago: executing program 2 (id=622): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 464.131011ms ago: executing program 2 (id=623): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f00000001c0)=""/4103, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x401}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x500, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x7, 0x6, 0xffff, 0x8251c, 0xcfab, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3506, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000b00000000000000000000010001079c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000001f00)=""/4093, 0xffd) 437.020611ms ago: executing program 1 (id=624): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x16, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 342.679293ms ago: executing program 1 (id=625): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0xffffffffffffffff, 0xa3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x1, r1, 0x0, 0x6, 0x100000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) 225.021475ms ago: executing program 3 (id=626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x24, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 224.167856ms ago: executing program 1 (id=627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x64, 0x2, [@TCA_BASIC_ACT={0x60, 0x3, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xe42ef}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x204, 0xffff, 0x6, 0x2, 0x6}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x4) 122.417827ms ago: executing program 3 (id=628): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffbf) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 324.96µs ago: executing program 1 (id=629): gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x891a, 0x0) 0s ago: executing program 0 (id=630): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001"], 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='A', 0x1}], 0x1}, 0x24008051) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts. [ 74.656474][ T5774] cgroup: Unknown subsys name 'net' [ 74.824711][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.434295][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.534820][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.552484][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.553517][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.561389][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.567740][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.576060][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.581700][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.596428][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.596762][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.605198][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.618172][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.618297][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.625632][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.634333][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.641430][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.647783][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.653607][ T5803] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.660967][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.668592][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.675837][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.681537][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.695785][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.707790][ T5803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.715345][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.134008][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 79.284708][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 79.344947][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.352280][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.360684][ T5786] bridge_slave_0: entered allmulticast mode [ 79.368335][ T5786] bridge_slave_0: entered promiscuous mode [ 79.382921][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 79.416117][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.423745][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.431209][ T5786] bridge_slave_1: entered allmulticast mode [ 79.438676][ T5786] bridge_slave_1: entered promiscuous mode [ 79.514399][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 79.542373][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.562273][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.569591][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.577217][ T5785] bridge_slave_0: entered allmulticast mode [ 79.584071][ T5785] bridge_slave_0: entered promiscuous mode [ 79.594319][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.628647][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.635784][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.643199][ T5785] bridge_slave_1: entered allmulticast mode [ 79.650694][ T5785] bridge_slave_1: entered promiscuous mode [ 79.673305][ T5786] team0: Port device team_slave_0 added [ 79.713563][ T5786] team0: Port device team_slave_1 added [ 79.793229][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.803827][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.811296][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.837362][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.851760][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.858843][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.884869][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.896433][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.903641][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.910933][ T5784] bridge_slave_0: entered allmulticast mode [ 79.917872][ T5784] bridge_slave_0: entered promiscuous mode [ 79.937611][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.979780][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.987032][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.994199][ T5784] bridge_slave_1: entered allmulticast mode [ 80.002414][ T5784] bridge_slave_1: entered promiscuous mode [ 80.021530][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.028751][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.035941][ T5788] bridge_slave_0: entered allmulticast mode [ 80.043105][ T5788] bridge_slave_0: entered promiscuous mode [ 80.051191][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.058743][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.065898][ T5788] bridge_slave_1: entered allmulticast mode [ 80.072974][ T5788] bridge_slave_1: entered promiscuous mode [ 80.082867][ T5785] team0: Port device team_slave_0 added [ 80.092714][ T5785] team0: Port device team_slave_1 added [ 80.168009][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.203053][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.225782][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.240277][ T5786] hsr_slave_0: entered promiscuous mode [ 80.248356][ T5786] hsr_slave_1: entered promiscuous mode [ 80.258380][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.268635][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.275690][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.302005][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.350664][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.358003][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.384029][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.417055][ T5784] team0: Port device team_slave_0 added [ 80.444629][ T5784] team0: Port device team_slave_1 added [ 80.467933][ T5788] team0: Port device team_slave_0 added [ 80.515711][ T5788] team0: Port device team_slave_1 added [ 80.539552][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.547165][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.573692][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.600203][ T5785] hsr_slave_0: entered promiscuous mode [ 80.607170][ T5785] hsr_slave_1: entered promiscuous mode [ 80.613419][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.621366][ T5785] Cannot create hsr debugfs directory [ 80.644647][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.651718][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.677925][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.708175][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.715213][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.727600][ T5795] Bluetooth: hci1: command tx timeout [ 80.742014][ T5803] Bluetooth: hci2: command tx timeout [ 80.752685][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.769975][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.776979][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.802925][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.813679][ T5803] Bluetooth: hci3: command tx timeout [ 80.813751][ T5795] Bluetooth: hci0: command tx timeout [ 80.955811][ T5784] hsr_slave_0: entered promiscuous mode [ 80.962525][ T5784] hsr_slave_1: entered promiscuous mode [ 80.969220][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.977631][ T5784] Cannot create hsr debugfs directory [ 81.012493][ T5788] hsr_slave_0: entered promiscuous mode [ 81.019051][ T5788] hsr_slave_1: entered promiscuous mode [ 81.025243][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.033103][ T5788] Cannot create hsr debugfs directory [ 81.311576][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.324315][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.351213][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.366040][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.442971][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.463308][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.483923][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.494132][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.593429][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.629263][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.645712][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.658775][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.751023][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.762234][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.774209][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.786910][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.830576][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.924006][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.958019][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.994180][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.001782][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.028789][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.035989][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.091227][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.154162][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.161366][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.197894][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.205085][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.223837][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.238389][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.339362][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.381338][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.417734][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.424886][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.502563][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.509816][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.524746][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.532014][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.561668][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.568893][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.800913][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.828413][ T5795] Bluetooth: hci1: command tx timeout [ 82.833884][ T5795] Bluetooth: hci2: command tx timeout [ 82.886926][ T5795] Bluetooth: hci3: command tx timeout [ 82.892517][ T5803] Bluetooth: hci0: command tx timeout [ 83.013284][ T5786] veth0_vlan: entered promiscuous mode [ 83.041303][ T5786] veth1_vlan: entered promiscuous mode [ 83.110727][ T5786] veth0_macvtap: entered promiscuous mode [ 83.144524][ T5786] veth1_macvtap: entered promiscuous mode [ 83.161568][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.197913][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.224301][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.249051][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.260665][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.270460][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.279330][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.295955][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.329830][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.427307][ T5785] veth0_vlan: entered promiscuous mode [ 83.455118][ T5784] veth0_vlan: entered promiscuous mode [ 83.481630][ T5785] veth1_vlan: entered promiscuous mode [ 83.530211][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.545251][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.570989][ T5784] veth1_vlan: entered promiscuous mode [ 83.604552][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.607850][ T5788] veth0_vlan: entered promiscuous mode [ 83.621134][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.671213][ T5785] veth0_macvtap: entered promiscuous mode [ 83.691894][ T5788] veth1_vlan: entered promiscuous mode [ 83.734143][ T5784] veth0_macvtap: entered promiscuous mode [ 83.744083][ T5785] veth1_macvtap: entered promiscuous mode [ 83.764041][ T5784] veth1_macvtap: entered promiscuous mode [ 83.813909][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.831320][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.844456][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.872078][ T5788] veth0_macvtap: entered promiscuous mode [ 83.892276][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.907356][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.919953][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.934184][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.952135][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.962686][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.973533][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.990678][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.008706][ T5788] veth1_macvtap: entered promiscuous mode [ 84.020313][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.032200][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.042463][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.057972][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.074325][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.105623][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.118749][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.128358][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.137679][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.162692][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.176678][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.185435][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.200633][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.297863][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.313718][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.324172][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.335586][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.345843][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.356742][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.368794][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.401472][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.430080][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.442588][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.453401][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.463770][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.474567][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.490779][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.542941][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.555393][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.565199][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.575601][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.593296][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.615651][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.680527][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.703496][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.753381][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.791871][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.801786][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.829722][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.889120][ T5803] Bluetooth: hci2: command tx timeout [ 84.894583][ T5795] Bluetooth: hci1: command tx timeout [ 84.915571][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.931238][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.958951][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.979506][ T5795] Bluetooth: hci0: command tx timeout [ 84.984959][ T5795] Bluetooth: hci3: command tx timeout [ 84.988584][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.591700][ T5919] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9'. [ 86.166057][ T5935] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.966726][ T5803] Bluetooth: hci2: command tx timeout [ 86.972402][ T5795] Bluetooth: hci1: command tx timeout [ 86.977851][ T23] cfg80211: failed to load regulatory.db [ 87.062952][ T5803] Bluetooth: hci0: command tx timeout [ 87.066674][ T5795] Bluetooth: hci3: command tx timeout [ 87.592052][ T5939] syzkaller0: entered promiscuous mode [ 87.597936][ T5939] syzkaller0: entered allmulticast mode [ 87.633536][ T5955] syzkaller0: entered promiscuous mode [ 87.658447][ T5955] syzkaller0: entered allmulticast mode [ 87.666125][ T5964] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.20'. [ 88.068039][ T5972] syzkaller0: entered promiscuous mode [ 88.073574][ T5972] syzkaller0: entered allmulticast mode [ 88.285253][ T5985] Zero length message leads to an empty skb [ 88.293680][ T5984] netlink: 48 bytes leftover after parsing attributes in process `syz.1.28'. [ 88.366931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.376835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.385757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.443700][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 88.546964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.596204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.967444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.005813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.385147][ T6000] syzkaller0: entered promiscuous mode [ 89.392347][ T6000] syzkaller0: entered allmulticast mode [ 89.640480][ T6006] ªªªªªª: renamed from dummy0 (while UP) [ 89.647169][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.681588][ T6010] syzkaller0: entered promiscuous mode [ 89.697685][ T6010] syzkaller0: entered allmulticast mode [ 89.875682][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 89.908051][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 89.926524][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.946211][ T9] usb 2-1: Product: syz [ 89.951024][ T9] usb 2-1: Manufacturer: syz [ 89.955657][ T9] usb 2-1: SerialNumber: syz [ 90.035944][ T9] usb 2-1: config 0 descriptor?? [ 90.427448][ T6032] netlink: 'syz.2.49': attribute type 39 has an invalid length. [ 91.204884][ T6050] block device autoloading is deprecated and will be removed. [ 91.571769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.608517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 91.877172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.256544][ T6073] syz.2.65 uses obsolete (PF_INET,SOCK_PACKET) [ 93.440565][ T6077] ip6gre1: entered allmulticast mode [ 93.525518][ T6080] netlink: 'syz.3.67': attribute type 39 has an invalid length. [ 93.734835][ T6084] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 93.745244][ T6084] netlink: 'syz.3.69': attribute type 4 has an invalid length. [ 93.757642][ T6084] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.69'. [ 93.852082][ T5776] usb 2-1: USB disconnect, device number 2 [ 94.517644][ T6116] tipc: Started in network mode [ 94.522810][ T6116] tipc: Node identity 0e53e50556c7, cluster identity 4711 [ 94.535800][ T6116] tipc: Enabled bearer , priority 0 [ 94.558446][ T6116] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 94.595387][ T6116] tipc: Resetting bearer [ 94.644137][ T6109] tipc: Disabling bearer [ 94.765644][ T6123] tipc: Started in network mode [ 94.771093][ T6123] tipc: Node identity 92d5ac9f6e3d, cluster identity 4711 [ 94.781376][ T6123] tipc: Enabled bearer , priority 0 [ 94.886871][ T6123] syzkaller0: entered promiscuous mode [ 94.894493][ T6123] syzkaller0: entered allmulticast mode [ 94.907034][ T6123] tipc: Resetting bearer [ 94.950813][ T6122] tipc: Resetting bearer [ 95.838708][ T8] tipc: Node number set to 4243106975 [ 96.772295][ T6122] tipc: Disabling bearer [ 96.793751][ T6140] tipc: Enabling of bearer rejected, failed to enable media [ 96.806124][ T6142] syzkaller0: entered promiscuous mode [ 96.811847][ T6142] syzkaller0: entered allmulticast mode [ 97.079191][ T6171] tipc: Enabled bearer , priority 0 [ 97.104359][ T6171] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 97.134140][ T6171] tipc: Resetting bearer [ 97.188463][ T6170] tipc: Disabling bearer [ 97.601864][ T6198] tipc: Enabling of bearer rejected, failed to enable media [ 97.630558][ T6198] syzkaller0: entered promiscuous mode [ 97.645823][ T6198] syzkaller0: entered allmulticast mode [ 98.361549][ T6222] warning: `syz.2.114' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.435542][ T6224] tipc: Enabling of bearer rejected, failed to enable media [ 98.601628][ T6233] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 98.782729][ T6243] netlink: 'syz.2.120': attribute type 13 has an invalid length. [ 98.871272][ T6243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.714396][ T6279] tipc: Enabling of bearer rejected, failed to enable media [ 99.727250][ T6279] syzkaller0: entered promiscuous mode [ 99.732959][ T6279] syzkaller0: entered allmulticast mode [ 99.981204][ T6285] syzkaller0: entered promiscuous mode [ 99.988659][ T6285] syzkaller0: entered allmulticast mode [ 100.206998][ T6289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.133'. [ 100.293915][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 102.102591][ T6302] tipc: Enabled bearer , priority 0 [ 102.111626][ T6308] tipc: Resetting bearer [ 102.128063][ T6299] tipc: Disabling bearer [ 102.142599][ T6321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.143'. [ 102.735834][ T6345] tipc: Enabled bearer , priority 0 [ 102.761566][ T6345] tipc: Resetting bearer [ 102.803213][ T6348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.154'. [ 102.863007][ T6344] tipc: Disabling bearer [ 105.159437][ T6395] netlink: 'syz.3.168': attribute type 1 has an invalid length. [ 105.176096][ T6395] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.168'. [ 105.403922][ T8] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0 [ 105.438980][ T8] hid-generic 0005:0007:0008.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 105.634497][ T6409] fido_id[6409]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 105.657293][ T6412] tipc: Enabling of bearer rejected, failed to enable media [ 106.659995][ T6462] tipc: Started in network mode [ 106.665038][ T6462] tipc: Node identity 1a62b920ec98, cluster identity 4711 [ 106.714370][ T6462] tipc: Enabled bearer , priority 0 [ 106.739249][ T6464] syzkaller0: entered promiscuous mode [ 106.744792][ T6464] syzkaller0: entered allmulticast mode [ 106.817955][ T6462] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 106.849788][ T6462] tipc: Resetting bearer [ 106.866792][ T6461] tipc: Resetting bearer [ 106.883433][ T6474] process 'syz.0.197' launched './file0' with NULL argv: empty string added [ 106.937361][ T6461] tipc: Disabling bearer [ 107.347188][ T6495] netlink: 48 bytes leftover after parsing attributes in process `syz.3.204'. [ 107.472258][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.204'. [ 108.212511][ T6504] syzkaller0: entered promiscuous mode [ 108.229768][ T6504] syzkaller0: entered allmulticast mode [ 108.341628][ T6508] tipc: Enabling of bearer rejected, failed to enable media [ 109.461003][ T6558] tipc: Enabling of bearer rejected, failed to enable media [ 109.835267][ T6567] tipc: Enabled bearer , priority 0 [ 109.867573][ T6567] tipc: Resetting bearer [ 109.910146][ T6565] tipc: Disabling bearer [ 109.992724][ T6573] syzkaller0: entered promiscuous mode [ 110.001002][ T6573] syzkaller0: entered allmulticast mode [ 110.224165][ T6577] netlink: 14 bytes leftover after parsing attributes in process `syz.1.230'. [ 110.640352][ T6594] tipc: Enabling of bearer rejected, failed to enable media [ 111.035501][ T6613] syz_tun: entered allmulticast mode [ 111.062497][ T6612] syz_tun: left allmulticast mode [ 111.146523][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.245838][ T6619] tipc: Enabled bearer , priority 0 [ 111.262652][ T6619] tipc: Resetting bearer [ 111.294338][ T6618] tipc: Disabling bearer [ 111.368456][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 111.397075][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 111.420380][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.439315][ T8] usb 1-1: Product: syz [ 111.449436][ T8] usb 1-1: Manufacturer: syz [ 111.454273][ T8] usb 1-1: SerialNumber: syz [ 111.467927][ T8] usb 1-1: config 0 descriptor?? [ 112.372211][ T6652] syzkaller0: entered promiscuous mode [ 112.389830][ T6652] syzkaller0: entered allmulticast mode [ 113.006159][ T6671] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 114.616643][ T6694] tipc: Started in network mode [ 114.631063][ T6694] tipc: Node identity 460c59b3d4c6, cluster identity 4711 [ 114.649191][ T6694] tipc: Enabled bearer , priority 0 [ 114.672565][ T6694] tipc: Resetting bearer [ 114.702697][ T8] usb 1-1: USB disconnect, device number 2 [ 114.741079][ T6693] tipc: Disabling bearer [ 115.051186][ T6702] syzkaller0: entered promiscuous mode [ 115.073832][ T6702] syzkaller0: entered allmulticast mode [ 115.489596][ T6721] tipc: Enabled bearer , priority 0 [ 115.503170][ T6721] tipc: Resetting bearer [ 115.531589][ T6720] tipc: Disabling bearer [ 115.643551][ T6726] tipc: Enabled bearer , priority 0 [ 115.651620][ T6726] syzkaller0: entered promiscuous mode [ 115.657690][ T6726] syzkaller0: entered allmulticast mode [ 115.684331][ T6725] tipc: Resetting bearer [ 115.722613][ T6725] tipc: Disabling bearer [ 115.733128][ T42] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.763714][ T6731] syzkaller0: entered promiscuous mode [ 115.771452][ T6731] syzkaller0: entered allmulticast mode [ 115.868602][ T6734] 8021q: VLANs not supported on nlmon0 [ 115.918684][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 115.940275][ T42] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 115.950771][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.958977][ T42] usb 3-1: Product: syz [ 115.960409][ T6736] tipc: Enabled bearer , priority 0 [ 115.969601][ T42] usb 3-1: Manufacturer: syz [ 115.976378][ T42] usb 3-1: SerialNumber: syz [ 115.977593][ T6736] syzkaller0: entered promiscuous mode [ 115.991034][ T6736] syzkaller0: entered allmulticast mode [ 115.997327][ T42] usb 3-1: config 0 descriptor?? [ 116.026399][ T6736] tipc: Resetting bearer [ 116.034550][ T6735] tipc: Resetting bearer [ 116.083864][ T6735] tipc: Disabling bearer [ 116.576412][ T5776] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 116.711616][ T42] usb 3-1: USB disconnect, device number 2 [ 116.737240][ T6757] tipc: Enabled bearer , priority 0 [ 116.774940][ T6757] syzkaller0: entered promiscuous mode [ 116.782103][ T5776] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 116.782782][ T6757] syzkaller0: entered allmulticast mode [ 116.804873][ T5776] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 116.831270][ T6756] tipc: Resetting bearer [ 116.866211][ T6756] tipc: Disabling bearer [ 116.882913][ T5776] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 116.893348][ T5776] usb 4-1: config 220 has no interface number 2 [ 116.903342][ T5776] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 116.931973][ T5776] usb 4-1: config 220 interface 0 has no altsetting 0 [ 116.988586][ T5776] usb 4-1: config 220 interface 76 has no altsetting 0 [ 117.015678][ T6762] syzkaller0: entered promiscuous mode [ 117.022533][ T6762] syzkaller0: entered allmulticast mode [ 117.028509][ T5776] usb 4-1: config 220 interface 1 has no altsetting 0 [ 117.039627][ T5776] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 117.049054][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.060171][ T5776] usb 4-1: Product: syz [ 117.064394][ T5776] usb 4-1: Manufacturer: syz [ 117.070777][ T5776] usb 4-1: SerialNumber: syz [ 117.318924][ T5776] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 117.325574][ T5776] usb 4-1: No valid video chain found. [ 117.335215][ T5776] usb 4-1: selecting invalid altsetting 0 [ 117.387625][ T5776] usb 4-1: selecting invalid altsetting 0 [ 117.410579][ T5776] usbtest: probe of 4-1:220.1 failed with error -22 [ 117.469852][ T5776] usb 4-1: USB disconnect, device number 2 [ 118.429560][ T6783] ip6gre1: entered allmulticast mode [ 118.462513][ T6782] tipc: Enabled bearer , priority 0 [ 118.655211][ T6782] syzkaller0: entered promiscuous mode [ 118.675566][ T6782] syzkaller0: entered allmulticast mode [ 118.694481][ T6782] tipc: Resetting bearer [ 118.892946][ T6781] tipc: Resetting bearer [ 119.018109][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.228365][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 119.243404][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 119.252866][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.265752][ T9] usb 3-1: Product: syz [ 119.273459][ T9] usb 3-1: Manufacturer: syz [ 119.281288][ T9] usb 3-1: SerialNumber: syz [ 119.302334][ T9] usb 3-1: config 0 descriptor?? [ 119.476364][ T5835] tipc: Node number set to 1486152965 [ 120.081723][ T5835] usb 3-1: USB disconnect, device number 3 [ 121.558065][ T6781] tipc: Disabling bearer [ 121.568034][ T6789] syzkaller0: entered promiscuous mode [ 121.574727][ T6789] syzkaller0: entered allmulticast mode [ 121.610491][ T6807] syz_tun: entered allmulticast mode [ 121.616981][ T6808] syz_tun: left allmulticast mode [ 121.750861][ T6816] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 122.117896][ T6832] ======================================================= [ 122.117896][ T6832] WARNING: The mand mount option has been deprecated and [ 122.117896][ T6832] and is ignored by this kernel. Remove the mand [ 122.117896][ T6832] option from the mount to silence this warning. [ 122.117896][ T6832] ======================================================= [ 122.283021][ T6838] syz_tun: entered allmulticast mode [ 122.319304][ T6837] syz_tun: left allmulticast mode [ 122.425822][ T6842] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 122.466375][ T5835] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.669110][ T5835] usb 1-1: config index 0 descriptor too short (expected 1106, got 82) [ 122.686074][ T5835] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 136 [ 122.772559][ T5835] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.795549][ T5835] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 122.828797][ T5835] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 122.843132][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.851371][ T5835] usb 1-1: Product: syz [ 122.855568][ T5835] usb 1-1: Manufacturer: syz [ 122.872808][ T5835] usb 1-1: SerialNumber: syz [ 122.894190][ T5835] usb 1-1: config 0 descriptor?? [ 122.910689][ T5835] usb-storage 1-1:0.0: USB Mass Storage device detected [ 122.943910][ T5835] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 122.962223][ T6853] tipc: Enabling of bearer rejected, failed to enable media [ 123.180488][ T5794] usb 1-1: USB disconnect, device number 3 [ 123.608302][ T6864] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 124.315010][ T6880] tipc: Enabled bearer , priority 0 [ 124.336968][ T6880] syzkaller0: entered promiscuous mode [ 124.362759][ T6880] syzkaller0: entered allmulticast mode [ 124.452516][ T6880] tipc: Resetting bearer [ 124.483018][ T6879] tipc: Resetting bearer [ 124.526019][ T6879] tipc: Disabling bearer [ 124.537083][ T6882] tipc: Enabled bearer , priority 0 [ 124.545905][ T6885] tipc: Enabling of bearer rejected, failed to enable media [ 124.569631][ T6883] syzkaller0: entered promiscuous mode [ 124.575189][ T6883] syzkaller0: entered allmulticast mode [ 124.614586][ T6882] tipc: Resetting bearer [ 124.638851][ T6881] tipc: Resetting bearer [ 124.691344][ T6881] tipc: Disabling bearer [ 125.032023][ T6899] IPVS: length: 238 != 24 [ 125.356003][ T27] audit: type=1326 audit(1758990317.195:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513bf8eec9 code=0x7ffc0000 [ 125.416354][ T27] audit: type=1326 audit(1758990317.195:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f513bf8eec9 code=0x7ffc0000 [ 125.450341][ T27] audit: type=1326 audit(1758990317.195:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513bf8eec9 code=0x7ffc0000 [ 125.529828][ T27] audit: type=1326 audit(1758990317.195:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f513bf8eec9 code=0x7ffc0000 [ 125.568274][ T27] audit: type=1326 audit(1758990317.205:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513bf8eec9 code=0x7ffc0000 [ 125.631005][ T27] audit: type=1326 audit(1758990317.205:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f513bf8eec9 code=0x7ffc0000 [ 125.719189][ T27] audit: type=1326 audit(1758990317.205:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513bf8eec9 code=0x7ffc0000 [ 125.794293][ T27] audit: type=1326 audit(1758990317.205:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f513bf8eec9 code=0x7ffc0000 [ 125.885923][ T27] audit: type=1326 audit(1758990317.245:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513bf8eec9 code=0x7ffc0000 [ 125.959935][ T6906] tipc: Enabled bearer , priority 0 [ 125.982133][ T27] audit: type=1326 audit(1758990317.255:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f513bf8eec9 code=0x7ffc0000 [ 126.006071][ T6906] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 126.066708][ T6907] tipc: Resetting bearer [ 126.107235][ T6905] tipc: Disabling bearer [ 126.787593][ T6925] syzkaller0: entered promiscuous mode [ 126.834806][ T6925] syzkaller0: entered allmulticast mode [ 127.045639][ T6930] tipc: Enabling of bearer rejected, failed to enable media [ 127.095291][ T6933] netlink: 'syz.0.344': attribute type 1 has an invalid length. [ 127.120452][ T6933] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.344'. [ 128.660293][ T6964] netlink: 'syz.2.355': attribute type 1 has an invalid length. [ 128.698994][ T6964] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.355'. [ 128.789191][ T6966] tipc: Enabling of bearer rejected, failed to enable media [ 129.043013][ T6980] tipc: Enabled bearer , priority 0 [ 129.054973][ T6980] syzkaller0: entered promiscuous mode [ 129.060613][ T6980] syzkaller0: entered allmulticast mode [ 129.087844][ T6980] tipc: Resetting bearer [ 129.102001][ T6979] tipc: Resetting bearer [ 129.138988][ T6979] tipc: Disabling bearer [ 129.385312][ T6987] tipc: Enabled bearer , priority 0 [ 129.399590][ T6987] syzkaller0: entered promiscuous mode [ 129.405806][ T6987] syzkaller0: entered allmulticast mode [ 129.436032][ T6987] tipc: Resetting bearer [ 129.455728][ T6986] tipc: Resetting bearer [ 129.497181][ T6986] tipc: Disabling bearer [ 129.856118][ T7005] tipc: Enabled bearer , priority 0 [ 129.865598][ T7005] syzkaller0: entered promiscuous mode [ 129.875082][ T7005] syzkaller0: entered allmulticast mode [ 129.902048][ T7005] tipc: Resetting bearer [ 129.914134][ T7004] tipc: Resetting bearer [ 129.984471][ T7004] tipc: Disabling bearer [ 130.216321][ T7016] team_slave_0: entered promiscuous mode [ 130.223242][ T7016] team_slave_1: entered promiscuous mode [ 130.230576][ T7016] macsec1: entered promiscuous mode [ 130.243576][ T7016] team0: entered promiscuous mode [ 130.264447][ T7016] team0: Device macsec1 is already an upper device of the team interface [ 130.280898][ T7016] team0: left promiscuous mode [ 130.296433][ T7016] team_slave_0: left promiscuous mode [ 130.301938][ T7016] team_slave_1: left promiscuous mode [ 130.444044][ T7022] syzkaller0: entered promiscuous mode [ 130.449924][ T7022] syzkaller0: entered allmulticast mode [ 130.488720][ T7022] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 130.899919][ T7040] tipc: Enabled bearer , priority 0 [ 130.912557][ T7040] syzkaller0: entered promiscuous mode [ 130.947726][ T7040] syzkaller0: entered allmulticast mode [ 131.025882][ T7040] tipc: Resetting bearer [ 131.045089][ T7038] tipc: Resetting bearer [ 131.112988][ T7038] tipc: Disabling bearer [ 131.347822][ T7050] tipc: Enabled bearer , priority 0 [ 131.406685][ T7050] tipc: Resetting bearer [ 131.414894][ T7054] syzkaller0: entered promiscuous mode [ 131.425265][ T7054] syzkaller0: entered allmulticast mode [ 131.452397][ T7049] tipc: Disabling bearer [ 131.481257][ T7054] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 131.924371][ T7067] ip6gre1: entered allmulticast mode [ 132.348471][ T7083] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 132.656430][ T5835] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 132.708553][ T7089] syzkaller0: entered promiscuous mode [ 132.719225][ T7089] syzkaller0: entered allmulticast mode [ 132.744381][ T7089] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 132.848309][ T5835] usb 2-1: config 0 has no interfaces? [ 132.867394][ T5835] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 132.876775][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 132.885071][ T5835] usb 2-1: Product: syz [ 132.891350][ T5835] usb 2-1: Manufacturer: syz [ 132.896100][ T5835] usb 2-1: SerialNumber: syz [ 132.905705][ T5835] usb 2-1: config 0 descriptor?? [ 133.066874][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.075880][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.157915][ T8] usb 2-1: USB disconnect, device number 3 [ 134.287030][ T7120] netlink: 'syz.1.419': attribute type 1 has an invalid length. [ 134.326408][ T7120] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.419'. [ 134.579395][ T7122] tipc: Enabled bearer , priority 0 [ 134.597134][ T7122] syzkaller0: entered promiscuous mode [ 134.602630][ T7122] syzkaller0: entered allmulticast mode [ 134.734487][ T7122] tipc: Resetting bearer [ 134.859229][ T7121] tipc: Resetting bearer [ 134.944999][ T7121] tipc: Disabling bearer [ 134.976415][ T7128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.423'. [ 135.065236][ T7128] vlan2: entered promiscuous mode [ 135.078958][ T7128] bridge0: entered promiscuous mode [ 135.992456][ T7156] syzkaller0: entered promiscuous mode [ 135.998914][ T7156] syzkaller0: entered allmulticast mode [ 136.018337][ T7156] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 136.197618][ T7165] syzkaller0: entered promiscuous mode [ 136.203308][ T7165] syzkaller0: entered allmulticast mode [ 136.213842][ T7166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.434'. [ 136.229272][ T7166] vlan2: entered promiscuous mode [ 136.234405][ T7166] bridge0: entered promiscuous mode [ 137.176447][ T7185] capability: warning: `syz.3.439' uses deprecated v2 capabilities in a way that may be insecure [ 140.303321][ T7193] netlink: 'syz.0.442': attribute type 1 has an invalid length. [ 140.311860][ T7193] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.442'. [ 140.716487][ T5856] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.956716][ T5856] usb 1-1: Using ep0 maxpacket: 8 [ 140.967415][ T5856] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 140.983569][ T5856] usb 1-1: config 0 has no interface number 0 [ 141.001284][ T5856] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 141.021135][ T5856] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 141.033804][ T5856] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 141.064019][ T5856] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 141.112433][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.142894][ T5856] usb 1-1: config 0 descriptor?? [ 141.148148][ T7221] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 141.169383][ T5856] ldusb 1-1:0.55: Interrupt in endpoint not found [ 141.267437][ T5991] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 141.410136][ T8] usb 1-1: USB disconnect, device number 4 [ 141.477884][ T5991] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 141.489426][ T5991] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.499912][ T5991] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 141.509441][ T5991] usb 3-1: config 1 has no interface number 1 [ 141.515804][ T5991] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 141.531776][ T5991] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.552398][ T5991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.570448][ T5991] usb 3-1: Product: syz [ 141.579573][ T5991] usb 3-1: Manufacturer: syz [ 141.586018][ T5991] usb 3-1: SerialNumber: syz [ 142.197195][ T7231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.456'. [ 143.442794][ T7251] syzkaller0: entered promiscuous mode [ 143.459639][ T7251] syzkaller0: entered allmulticast mode [ 144.577938][ T5991] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 144.585865][ T5991] usb 3-1: MIDIStreaming interface descriptor not found [ 144.762123][ T5991] usb 3-1: USB disconnect, device number 4 [ 144.780626][ T7281] tipc: Enabled bearer , priority 0 [ 144.825178][ T7281] syzkaller0: entered promiscuous mode [ 144.894482][ T7281] syzkaller0: entered allmulticast mode [ 144.981777][ T7284] tipc: Resetting bearer [ 145.017425][ T7283] syzkaller0: entered promiscuous mode [ 145.022974][ T7283] syzkaller0: entered allmulticast mode [ 145.058048][ T7279] tipc: Resetting bearer [ 145.102146][ T7279] tipc: Disabling bearer [ 145.598547][ T7311] netlink: 'syz.3.485': attribute type 1 has an invalid length. [ 145.616566][ T7311] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.485'. [ 146.042369][ T7336] tipc: Enabled bearer , priority 0 [ 146.050666][ T7336] syzkaller0: entered promiscuous mode [ 146.060689][ T7336] syzkaller0: entered allmulticast mode [ 146.102143][ T7336] tipc: Resetting bearer [ 146.125027][ T7335] tipc: Resetting bearer [ 146.195356][ T7335] tipc: Disabling bearer [ 146.599886][ T7359] tipc: Enabled bearer , priority 0 [ 146.607918][ T7359] syzkaller0: entered promiscuous mode [ 146.613564][ T7359] syzkaller0: entered allmulticast mode [ 146.629816][ T7359] tipc: Resetting bearer [ 146.649095][ T7358] tipc: Resetting bearer [ 146.676143][ T7358] tipc: Disabling bearer [ 146.965623][ T7374] syzkaller0: entered promiscuous mode [ 146.973432][ T7374] syzkaller0: entered allmulticast mode [ 147.449735][ T5991] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 147.689758][ T5991] usb 3-1: Using ep0 maxpacket: 8 [ 147.733328][ T5991] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 147.768894][ T5991] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.805258][ T5991] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 147.835651][ T5991] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 147.876288][ T5991] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.929238][ T5991] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 147.946465][ T5991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.137893][ T7401] tipc: Enabling of bearer rejected, failed to enable media [ 148.188600][ T7404] fuse: Unknown parameter '00000000000000000005' [ 148.248215][ T5991] usb 3-1: GET_CAPABILITIES returned 0 [ 148.254974][ T5991] usbtmc 3-1:16.0: can't read capabilities [ 148.988711][ T42] usb 3-1: USB disconnect, device number 5 [ 148.996651][ T7375] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 149.284852][ T7421] syzkaller0: entered promiscuous mode [ 149.290681][ T7421] syzkaller0: entered allmulticast mode [ 149.615345][ T7425] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 149.840553][ T7433] syzkaller0: entered promiscuous mode [ 149.850297][ T7433] syzkaller0: entered allmulticast mode [ 150.166250][ T7441] syzkaller0: entered promiscuous mode [ 150.188358][ T7441] syzkaller0: entered allmulticast mode [ 150.621418][ T7450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.530'. [ 150.946824][ T5991] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 151.007533][ T7463] tipc: Enabled bearer , priority 0 [ 151.015558][ T7463] syzkaller0: entered promiscuous mode [ 151.021256][ T7463] syzkaller0: entered allmulticast mode [ 151.055556][ T7463] tipc: Resetting bearer [ 151.062688][ T7463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.077187][ T7462] tipc: Resetting bearer [ 151.095296][ T7462] tipc: Disabling bearer [ 151.154143][ T5991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 151.174024][ T5991] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 151.184701][ T5991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.199557][ T5991] usb 3-1: Product: syz [ 151.204384][ T5991] usb 3-1: Manufacturer: syz [ 151.216333][ T5991] usb 3-1: SerialNumber: syz [ 151.226872][ T5991] usb 3-1: config 0 descriptor?? [ 151.985119][ T7477] tipc: Enabled bearer , priority 0 [ 152.006127][ T7477] syzkaller0: entered promiscuous mode [ 152.020983][ T7477] syzkaller0: entered allmulticast mode [ 152.144537][ T7477] tipc: Resetting bearer [ 152.172866][ T7476] tipc: Resetting bearer [ 152.199354][ T7476] tipc: Disabling bearer [ 152.206480][ T5991] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 152.398448][ T5991] usb 4-1: Using ep0 maxpacket: 16 [ 152.429098][ T5991] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 152.450241][ T5991] usb 4-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 152.671642][ T5991] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 152.705048][ T5991] usb 4-1: config 1 has no interface number 1 [ 152.723414][ T5991] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 152.751756][ T5991] usb 4-1: config 1 interface 2 altsetting 1 has an invalid endpoint with address 0x2E, skipping [ 152.780980][ T5991] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.793708][ T5991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.841263][ T5991] usb 4-1: Product: syz [ 152.854945][ T5991] usb 4-1: Manufacturer: syz [ 152.874781][ T5991] usb 4-1: SerialNumber: syz [ 152.993635][ T7492] tipc: Enabled bearer , priority 0 [ 153.005329][ T7492] syzkaller0: entered promiscuous mode [ 153.012835][ T7492] syzkaller0: entered allmulticast mode [ 153.046125][ T7492] tipc: Resetting bearer [ 153.056942][ T7491] tipc: Resetting bearer [ 153.081968][ T7491] tipc: Disabling bearer [ 153.153422][ T7475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.167001][ T7475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.240885][ T7495] syzkaller0: entered promiscuous mode [ 153.247499][ T7495] syzkaller0: entered allmulticast mode [ 153.267552][ T7495] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 153.606147][ T5991] usb 4-1: USB disconnect, device number 3 [ 153.972866][ T5991] usb 3-1: USB disconnect, device number 6 [ 154.546917][ T7520] tipc: Enabled bearer , priority 0 [ 154.581643][ T7520] syzkaller0: entered promiscuous mode [ 154.592708][ T7520] syzkaller0: entered allmulticast mode [ 154.622602][ T7519] tipc: Resetting bearer [ 154.674149][ T7519] tipc: Disabling bearer [ 154.706361][ T7522] syzkaller0: entered promiscuous mode [ 154.722792][ T7522] syzkaller0: entered allmulticast mode [ 155.384173][ T7543] syzkaller0: entered promiscuous mode [ 155.395500][ T7543] syzkaller0: entered allmulticast mode [ 155.428027][ T7545] tipc: Enabled bearer , priority 0 [ 155.440815][ T7545] syzkaller0: entered promiscuous mode [ 155.448503][ T7545] syzkaller0: entered allmulticast mode [ 155.510200][ T7544] tipc: Resetting bearer [ 155.559689][ T7544] tipc: Disabling bearer [ 156.580193][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 156.745140][ T7572] tipc: Enabled bearer , priority 0 [ 156.768507][ T7572] syzkaller0: entered promiscuous mode [ 156.788079][ T7572] syzkaller0: entered allmulticast mode [ 156.841910][ T7572] tipc: Resetting bearer [ 156.872916][ T7571] tipc: Resetting bearer [ 156.902699][ T7571] tipc: Disabling bearer [ 157.092201][ T7574] syzkaller0: entered promiscuous mode [ 157.102035][ T7574] syzkaller0: entered allmulticast mode [ 157.152083][ T7574] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 157.215527][ T7577] syzkaller0: entered promiscuous mode [ 157.221428][ T7577] syzkaller0: entered allmulticast mode [ 157.381991][ T7578] tipc: Enabled bearer , priority 0 [ 157.389784][ T7578] syzkaller0: entered promiscuous mode [ 157.395343][ T7578] syzkaller0: entered allmulticast mode [ 157.415733][ T7575] tipc: Resetting bearer [ 157.465875][ T7575] tipc: Disabling bearer [ 157.588133][ T7588] syzkaller0: entered promiscuous mode [ 157.594036][ T7588] syzkaller0: entered allmulticast mode [ 157.616530][ T5776] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 157.731481][ T7591] tipc: Enabled bearer , priority 0 [ 157.746087][ T7591] tipc: Resetting bearer [ 157.762140][ T7590] tipc: Disabling bearer [ 157.806775][ T5776] usb 3-1: Using ep0 maxpacket: 8 [ 157.815310][ T5776] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.825922][ T5776] usb 3-1: config 0 has no interfaces? [ 157.831848][ T5776] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 157.845732][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.861392][ T5776] usb 3-1: config 0 descriptor?? [ 158.199670][ T7600] program syz.2.579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.232708][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 158.232722][ T27] audit: type=1326 audit(1758990350.125:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513bf8eec9 code=0x7ffc0000 [ 158.282033][ T27] audit: type=1326 audit(1758990350.165:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f513bf8d710 code=0x7ffc0000 [ 158.305083][ T27] audit: type=1326 audit(1758990350.165:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f513bf8d710 code=0x7ffc0000 [ 158.330385][ T27] audit: type=1326 audit(1758990350.165:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513bf8eec9 code=0x7ffc0000 [ 158.354841][ T27] audit: type=1326 audit(1758990350.165:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f513bf8eec9 code=0x7ffc0000 [ 158.380584][ T27] audit: type=1326 audit(1758990350.165:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513bf8eec9 code=0x7ffc0000 [ 158.447342][ T27] audit: type=1326 audit(1758990350.165:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513bf8eec9 code=0x7ffc0000 [ 158.470273][ T27] audit: type=1326 audit(1758990350.165:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f513bf8eec9 code=0x7ffc0000 [ 158.505964][ T27] audit: type=1400 audit(1758990350.165:41): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7579 comm="syz.2.579" [ 158.526302][ T27] audit: type=1326 audit(1758990350.165:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.2.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513bf8eec9 code=0x7ffc0000 [ 158.710396][ T7604] syzkaller0: entered promiscuous mode [ 158.735916][ T7604] syzkaller0: entered allmulticast mode [ 159.066405][ T5794] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 159.256589][ T5794] usb 4-1: Using ep0 maxpacket: 8 [ 159.265359][ T5794] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 159.283962][ T5794] usb 4-1: config 0 has no interface number 0 [ 159.331449][ T5794] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 159.402514][ T5794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.434233][ T5794] usb 4-1: Product: syz [ 159.454021][ T5794] usb 4-1: Manufacturer: syz [ 159.482476][ T5794] usb 4-1: SerialNumber: syz [ 159.508478][ T5794] usb 4-1: config 0 descriptor?? [ 159.533838][ T5794] as10x_usb: device has been detected [ 159.544622][ T5794] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 159.593994][ T5794] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 159.638406][ T5794] as10x_usb: error during firmware upload part1 [ 159.645476][ T5794] Registered device PCTV Systems picoStick (74e) [ 159.779786][ T5776] usb 4-1: USB disconnect, device number 4 [ 159.822096][ T5776] Unregistered device PCTV Systems picoStick (74e) [ 159.825783][ T5776] as10x_usb: device has been disconnected [ 160.660613][ T7644] tipc: Enabled bearer , priority 0 [ 160.668993][ T7644] syzkaller0: entered promiscuous mode [ 160.674600][ T7644] syzkaller0: entered allmulticast mode [ 160.709678][ T7644] tipc: Resetting bearer [ 160.740455][ T7643] tipc: Resetting bearer [ 160.774729][ T7643] tipc: Disabling bearer [ 161.109070][ T5776] usb 3-1: USB disconnect, device number 7 [ 161.269008][ T7662] netlink: 32 bytes leftover after parsing attributes in process `syz.0.611'. [ 161.351778][ T7662] netlink: 32 bytes leftover after parsing attributes in process `syz.0.611'. [ 161.989214][ T7674] tipc: Enabled bearer , priority 0 [ 162.018302][ T7674] syzkaller0: entered promiscuous mode [ 162.037578][ T7674] syzkaller0: entered allmulticast mode [ 162.083953][ T7677] syzkaller0: entered promiscuous mode [ 162.091036][ T7677] syzkaller0: entered allmulticast mode [ 162.107858][ T7674] tipc: Resetting bearer [ 162.130554][ T7673] tipc: Resetting bearer [ 162.156660][ T7673] tipc: Disabling bearer [ 162.311258][ T7683] syzkaller0: entered promiscuous mode [ 162.316875][ T7683] syzkaller0: entered allmulticast mode [ 162.715125][ T7695] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 162.808486][ T7696] mmap: syz.2.623 (7696) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 163.024363][ T7696] ================================================================== [ 163.032484][ T7696] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6b2/0x8d0 [ 163.040587][ T7696] Read of size 2 at addr ffff88805d6f4522 by task syz.2.623/7696 [ 163.048339][ T7696] [ 163.050691][ T7696] CPU: 1 PID: 7696 Comm: syz.2.623 Not tainted syzkaller #0 [ 163.058091][ T7696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 163.068168][ T7696] Call Trace: [ 163.071461][ T7696] [ 163.074398][ T7696] dump_stack_lvl+0x16c/0x230 [ 163.079122][ T7696] ? __lock_acquire+0x7c80/0x7c80 [ 163.084175][ T7696] ? show_regs_print_info+0x20/0x20 [ 163.089388][ T7696] ? load_image+0x3b0/0x3b0 [ 163.093900][ T7696] ? __virt_addr_valid+0x469/0x540 [ 163.099049][ T7696] print_report+0xac/0x220 [ 163.103473][ T7696] ? __xfrm_state_lookup+0x6b2/0x8d0 [ 163.108764][ T7696] kasan_report+0x117/0x150 [ 163.113279][ T7696] ? __xfrm_state_lookup+0x6b2/0x8d0 [ 163.118576][ T7696] __xfrm_state_lookup+0x6b2/0x8d0 [ 163.123703][ T7696] ? xfrm_state_lookup+0x1a0/0x1a0 [ 163.128830][ T7696] ? lockdep_hardirqs_on+0x98/0x150 [ 163.134059][ T7696] xfrm_state_lookup+0xef/0x1a0 [ 163.138928][ T7696] ? xfrm_state_lookup+0x36/0x1a0 [ 163.143975][ T7696] ipcomp4_init_state+0x1fc/0x9f0 [ 163.149029][ T7696] __xfrm_init_state+0xd8b/0x11c0 [ 163.154063][ T7696] ? __xfrm_init_state+0x7fc/0x11c0 [ 163.159270][ T7696] xfrm_add_sa+0x236d/0x30a0 [ 163.163865][ T7696] ? xfrm_user_rcv_msg+0x870/0x870 [ 163.168991][ T7696] ? __nla_parse+0x40/0x50 [ 163.173423][ T7696] xfrm_user_rcv_msg+0x596/0x870 [ 163.178372][ T7696] ? lockdep_hardirqs_on+0x98/0x150 [ 163.183579][ T7696] ? xfrm_netlink_rcv+0x90/0x90 [ 163.188435][ T7696] ? __local_bh_enable_ip+0x12e/0x1c0 [ 163.193817][ T7696] ? __dev_queue_xmit+0x245/0x35a0 [ 163.198933][ T7696] ? __mutex_trylock_common+0x153/0x250 [ 163.204500][ T7696] netlink_rcv_skb+0x216/0x480 [ 163.209276][ T7696] ? xfrm_netlink_rcv+0x90/0x90 [ 163.214220][ T7696] ? netlink_ack+0x1110/0x1110 [ 163.219002][ T7696] ? netlink_deliver_tap+0x2e/0x1b0 [ 163.224384][ T7696] ? __lock_acquire+0x7c80/0x7c80 [ 163.229420][ T7696] xfrm_netlink_rcv+0x79/0x90 [ 163.234115][ T7696] netlink_unicast+0x751/0x8d0 [ 163.238912][ T7696] netlink_sendmsg+0x8c1/0xbe0 [ 163.243692][ T7696] ? netlink_getsockopt+0x580/0x580 [ 163.248923][ T7696] ? aa_sock_msg_perm+0x94/0x150 [ 163.253882][ T7696] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 163.259173][ T7696] ? security_socket_sendmsg+0x80/0xa0 [ 163.264633][ T7696] ? netlink_getsockopt+0x580/0x580 [ 163.269842][ T7696] ____sys_sendmsg+0x5bf/0x950 [ 163.274623][ T7696] ? __asan_memset+0x22/0x40 [ 163.279224][ T7696] ? __sys_sendmsg_sock+0x30/0x30 [ 163.284277][ T7696] ? __import_iovec+0x5f2/0x860 [ 163.289161][ T7696] ? import_iovec+0x73/0xa0 [ 163.293674][ T7696] ___sys_sendmsg+0x220/0x290 [ 163.298366][ T7696] ? __sys_sendmsg+0x270/0x270 [ 163.303168][ T7696] __se_sys_sendmsg+0x1a5/0x270 [ 163.308036][ T7696] ? __x64_sys_sendmsg+0x80/0x80 [ 163.313001][ T7696] ? lockdep_hardirqs_on+0x98/0x150 [ 163.318215][ T7696] do_syscall_64+0x55/0xb0 [ 163.322634][ T7696] ? clear_bhb_loop+0x40/0x90 [ 163.327315][ T7696] ? clear_bhb_loop+0x40/0x90 [ 163.332013][ T7696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.337948][ T7696] RIP: 0033:0x7f513bf8eec9 [ 163.342381][ T7696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.362045][ T7696] RSP: 002b:00007f513ce79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.370463][ T7696] RAX: ffffffffffffffda RBX: 00007f513c1e6180 RCX: 00007f513bf8eec9 [ 163.378438][ T7696] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000009 [ 163.386432][ T7696] RBP: 00007f513c011f91 R08: 0000000000000000 R09: 0000000000000000 [ 163.394490][ T7696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.402463][ T7696] R13: 00007f513c1e6218 R14: 00007f513c1e6180 R15: 00007ffc45c08878 [ 163.410448][ T7696] [ 163.413480][ T7696] [ 163.415816][ T7696] Allocated by task 5951: [ 163.420139][ T7696] kasan_set_track+0x4e/0x70 [ 163.424740][ T7696] __kasan_slab_alloc+0x6c/0x80 [ 163.429617][ T7696] slab_post_alloc_hook+0x6e/0x4d0 [ 163.434737][ T7696] kmem_cache_alloc+0x11e/0x2e0 [ 163.439609][ T7696] xfrm_state_alloc+0x22/0x2a0 [ 163.444374][ T7696] __find_acq_core+0x7d8/0x19d0 [ 163.449231][ T7696] xfrm_find_acq+0x6a/0x90 [ 163.453661][ T7696] xfrm_alloc_userspi+0x57a/0xa90 [ 163.458691][ T7696] xfrm_user_rcv_msg+0x596/0x870 [ 163.463629][ T7696] netlink_rcv_skb+0x216/0x480 [ 163.468402][ T7696] xfrm_netlink_rcv+0x79/0x90 [ 163.473103][ T7696] netlink_unicast+0x751/0x8d0 [ 163.477874][ T7696] netlink_sendmsg+0x8c1/0xbe0 [ 163.482649][ T7696] ____sys_sendmsg+0x5bf/0x950 [ 163.487423][ T7696] ___sys_sendmsg+0x220/0x290 [ 163.492110][ T7696] __se_sys_sendmsg+0x1a5/0x270 [ 163.496969][ T7696] do_syscall_64+0x55/0xb0 [ 163.501393][ T7696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.507299][ T7696] [ 163.509627][ T7696] The buggy address belongs to the object at ffff88805d6f4400 [ 163.509627][ T7696] which belongs to the cache xfrm_state of size 848 [ 163.523594][ T7696] The buggy address is located 290 bytes inside of [ 163.523594][ T7696] freed 848-byte region [ffff88805d6f4400, ffff88805d6f4750) [ 163.537403][ T7696] [ 163.539728][ T7696] The buggy address belongs to the physical page: [ 163.546148][ T7696] page:ffffea000175bd00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805d6f4000 pfn:0x5d6f4 [ 163.557612][ T7696] head:ffffea000175bd00 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 163.566549][ T7696] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 163.574536][ T7696] page_type: 0xffffffff() [ 163.578870][ T7696] raw: 00fff00000000840 ffff88801b2f3c80 dead000000000122 0000000000000000 [ 163.587458][ T7696] raw: ffff88805d6f4000 000000008010000d 00000001ffffffff 0000000000000000 [ 163.596038][ T7696] page dumped because: kasan: bad access detected [ 163.602453][ T7696] page_owner tracks the page as allocated [ 163.608170][ T7696] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5878, tgid 5877 (syz.2.3), ts 83887094879, free_ts 83886140635 [ 163.628411][ T7696] post_alloc_hook+0x1cd/0x210 [ 163.633196][ T7696] get_page_from_freelist+0x195c/0x19f0 [ 163.638755][ T7696] __alloc_pages+0x1e3/0x460 [ 163.643363][ T7696] alloc_slab_page+0x5d/0x170 [ 163.648052][ T7696] new_slab+0x87/0x2e0 [ 163.652132][ T7696] ___slab_alloc+0xc6d/0x1300 [ 163.656843][ T7696] kmem_cache_alloc+0x1b7/0x2e0 [ 163.661709][ T7696] xfrm_state_alloc+0x22/0x2a0 [ 163.666499][ T7696] pfkey_add+0x6e1/0x2da0 [ 163.670865][ T7696] pfkey_sendmsg+0xbed/0x1050 [ 163.675566][ T7696] ____sys_sendmsg+0x5bf/0x950 [ 163.680339][ T7696] ___sys_sendmsg+0x220/0x290 [ 163.685023][ T7696] __se_sys_sendmsg+0x1a5/0x270 [ 163.689891][ T7696] do_syscall_64+0x55/0xb0 [ 163.694320][ T7696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.700231][ T7696] page last free stack trace: [ 163.704916][ T7696] free_unref_page_prepare+0x7ce/0x8e0 [ 163.710395][ T7696] free_unref_page+0x32/0x2e0 [ 163.715085][ T7696] __stack_depot_save+0x572/0x630 [ 163.720116][ T7696] kasan_set_track+0x5f/0x70 [ 163.724709][ T7696] __kasan_slab_alloc+0x6c/0x80 [ 163.729570][ T7696] slab_post_alloc_hook+0x6e/0x4d0 [ 163.734687][ T7696] kmem_cache_alloc_node+0x150/0x330 [ 163.739983][ T7696] __alloc_skb+0x108/0x2c0 [ 163.744409][ T7696] pfkey_sendmsg+0x18a/0x1050 [ 163.749143][ T7696] ____sys_sendmsg+0x5bf/0x950 [ 163.753940][ T7696] ___sys_sendmsg+0x220/0x290 [ 163.758642][ T7696] __se_sys_sendmsg+0x1a5/0x270 [ 163.763511][ T7696] do_syscall_64+0x55/0xb0 [ 163.767956][ T7696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.773875][ T7696] [ 163.776203][ T7696] Memory state around the buggy address: [ 163.781836][ T7696] ffff88805d6f4400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 163.789900][ T7696] ffff88805d6f4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 163.797965][ T7696] >ffff88805d6f4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 163.806032][ T7696] ^ [ 163.811156][ T7696] ffff88805d6f4580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 163.819220][ T7696] ffff88805d6f4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 163.827367][ T7696] ================================================================== [ 163.902344][ T7696] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 163.909599][ T7696] CPU: 1 PID: 7696 Comm: syz.2.623 Not tainted syzkaller #0 [ 163.916913][ T7696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 163.926999][ T7696] Call Trace: [ 163.930325][ T7696] [ 163.933279][ T7696] dump_stack_lvl+0x16c/0x230 [ 163.937976][ T7696] ? show_regs_print_info+0x20/0x20 [ 163.943252][ T7696] ? load_image+0x3b0/0x3b0 [ 163.947796][ T7696] panic+0x2c0/0x710 [ 163.951709][ T7696] ? bpf_jit_dump+0xd0/0xd0 [ 163.956244][ T7696] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 163.962165][ T7696] ? _raw_spin_unlock+0x40/0x40 [ 163.967059][ T7696] ? print_memory_metadata+0x314/0x400 [ 163.972574][ T7696] ? __xfrm_state_lookup+0x6b2/0x8d0 [ 163.977896][ T7696] check_panic_on_warn+0x84/0xa0 [ 163.982864][ T7696] ? __xfrm_state_lookup+0x6b2/0x8d0 [ 163.988164][ T7696] end_report+0x6f/0x140 [ 163.992420][ T7696] kasan_report+0x128/0x150 [ 163.996929][ T7696] ? __xfrm_state_lookup+0x6b2/0x8d0 [ 164.002227][ T7696] __xfrm_state_lookup+0x6b2/0x8d0 [ 164.007350][ T7696] ? xfrm_state_lookup+0x1a0/0x1a0 [ 164.012484][ T7696] ? lockdep_hardirqs_on+0x98/0x150 [ 164.017697][ T7696] xfrm_state_lookup+0xef/0x1a0 [ 164.022555][ T7696] ? xfrm_state_lookup+0x36/0x1a0 [ 164.027671][ T7696] ipcomp4_init_state+0x1fc/0x9f0 [ 164.032713][ T7696] __xfrm_init_state+0xd8b/0x11c0 [ 164.037752][ T7696] ? __xfrm_init_state+0x7fc/0x11c0 [ 164.042962][ T7696] xfrm_add_sa+0x236d/0x30a0 [ 164.047568][ T7696] ? xfrm_user_rcv_msg+0x870/0x870 [ 164.052686][ T7696] ? __nla_parse+0x40/0x50 [ 164.057199][ T7696] xfrm_user_rcv_msg+0x596/0x870 [ 164.062153][ T7696] ? lockdep_hardirqs_on+0x98/0x150 [ 164.067368][ T7696] ? xfrm_netlink_rcv+0x90/0x90 [ 164.072222][ T7696] ? __local_bh_enable_ip+0x12e/0x1c0 [ 164.077610][ T7696] ? __dev_queue_xmit+0x245/0x35a0 [ 164.082727][ T7696] ? __mutex_trylock_common+0x153/0x250 [ 164.088287][ T7696] netlink_rcv_skb+0x216/0x480 [ 164.093069][ T7696] ? xfrm_netlink_rcv+0x90/0x90 [ 164.097922][ T7696] ? netlink_ack+0x1110/0x1110 [ 164.102699][ T7696] ? netlink_deliver_tap+0x2e/0x1b0 [ 164.107904][ T7696] ? __lock_acquire+0x7c80/0x7c80 [ 164.112938][ T7696] xfrm_netlink_rcv+0x79/0x90 [ 164.117618][ T7696] netlink_unicast+0x751/0x8d0 [ 164.122394][ T7696] netlink_sendmsg+0x8c1/0xbe0 [ 164.127172][ T7696] ? netlink_getsockopt+0x580/0x580 [ 164.132381][ T7696] ? aa_sock_msg_perm+0x94/0x150 [ 164.137339][ T7696] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 164.142625][ T7696] ? security_socket_sendmsg+0x80/0xa0 [ 164.148086][ T7696] ? netlink_getsockopt+0x580/0x580 [ 164.153292][ T7696] ____sys_sendmsg+0x5bf/0x950 [ 164.158071][ T7696] ? __asan_memset+0x22/0x40 [ 164.162670][ T7696] ? __sys_sendmsg_sock+0x30/0x30 [ 164.167710][ T7696] ? __import_iovec+0x5f2/0x860 [ 164.172583][ T7696] ? import_iovec+0x73/0xa0 [ 164.177097][ T7696] ___sys_sendmsg+0x220/0x290 [ 164.181791][ T7696] ? __sys_sendmsg+0x270/0x270 [ 164.186580][ T7696] __se_sys_sendmsg+0x1a5/0x270 [ 164.191442][ T7696] ? __x64_sys_sendmsg+0x80/0x80 [ 164.196393][ T7696] ? lockdep_hardirqs_on+0x98/0x150 [ 164.201596][ T7696] do_syscall_64+0x55/0xb0 [ 164.206014][ T7696] ? clear_bhb_loop+0x40/0x90 [ 164.210697][ T7696] ? clear_bhb_loop+0x40/0x90 [ 164.215373][ T7696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.221281][ T7696] RIP: 0033:0x7f513bf8eec9 [ 164.225699][ T7696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.245308][ T7696] RSP: 002b:00007f513ce79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.253722][ T7696] RAX: ffffffffffffffda RBX: 00007f513c1e6180 RCX: 00007f513bf8eec9 [ 164.261693][ T7696] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000009 [ 164.269680][ T7696] RBP: 00007f513c011f91 R08: 0000000000000000 R09: 0000000000000000 [ 164.277657][ T7696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.285650][ T7696] R13: 00007f513c1e6218 R14: 00007f513c1e6180 R15: 00007ffc45c08878 [ 164.293630][ T7696] [ 164.297074][ T7696] Kernel Offset: disabled [ 164.301399][ T7696] Rebooting in 86400 seconds..