last executing test programs: 12.534622684s ago: executing program 3 (id=303): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfa, 0x400000}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYBLOB="eeeaffff616d250b50c83b2a6a3400", @ANYRES32=0x0], 0x50) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x10b121) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x11) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x49be, 0x0, &(0x7f00000001c0), &(0x7f00000003c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0x3}, {0xc, 0xe}, {0x8, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x70, 0x16, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x10) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900020073797a31000000"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) connect$llc(0xffffffffffffffff, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0xf000000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r6 = socket$nl_generic(0x11, 0x3, 0x10) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 9.858722388s ago: executing program 3 (id=306): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000240)=0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYRES16=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000040)="aa1d489355d67ea72c6774e253765eda27e0a00000f7fc08fcd111fbdf23ea32db", 0x21}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x180, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x1a8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040880) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 7.10363767s ago: executing program 3 (id=315): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) read(r0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x20000000000}, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000440)={'team_slave_1\x00', &(0x7f0000000340)=@ethtool_eeprom={0x18, 0x2, 0x80000001}}) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000140), 0x14) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0xa, {0x2, 0x800, @multicast2}, 'wg0\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0x100, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) 6.184221163s ago: executing program 3 (id=319): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r7, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x0, 0x4, 0x0, 0x1}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000003800048034000180090001007866726d00000000240002800500030000000000080001400000000008"], 0x8c}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x0) 5.184332933s ago: executing program 2 (id=322): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_setup(0x1, &(0x7f0000000000)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x101000, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x20}, 0x48) io_submit(r3, 0x1, &(0x7f0000000a40)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfff, r4, &(0x7f0000000300)="e83924", 0x3}]) io_uring_enter(0xffffffffffffffff, 0x3517, 0x173d, 0x42, 0x0, 0x0) 4.907646026s ago: executing program 1 (id=323): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="050000000100", 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x100010, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) 4.658703626s ago: executing program 1 (id=324): fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000002c0)={0x0, 0x0, 0xff34}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0xc, 0xa}, {0x5, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) 4.396340107s ago: executing program 1 (id=325): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socketpair(0x25, 0x1, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) socket$inet_smc(0x2b, 0x1, 0x0) read$FUSE(r1, &(0x7f0000004140)={0x2020}, 0x2020) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x2, 0x4, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x6a, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x9dc6, 0x2000e66, 0x3, 0x8, 0x4086, 0x0, 0xfffffffc]}) 4.128865878s ago: executing program 0 (id=327): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) read(r0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x20000000000}, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000440)={'team_slave_1\x00', &(0x7f0000000340)=@ethtool_eeprom={0x18, 0x2, 0x80000001}}) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000140), 0x14) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0xa, {0x2, 0x800, @multicast2}, 'wg0\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0x100, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) 3.657631666s ago: executing program 3 (id=328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 3.644912267s ago: executing program 2 (id=329): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) fcntl$setstatus(r0, 0x4, 0x42400) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r2, @empty, @loopback}}}], 0x18}}], 0x1, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.555475134s ago: executing program 0 (id=330): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000480)={0x28, r1, 0x403, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4040) 2.49205622s ago: executing program 2 (id=331): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) fcntl$setstatus(r0, 0x4, 0x42400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2400) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) 2.459472512s ago: executing program 1 (id=332): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) dup3(r1, r0, 0x0) 2.391331808s ago: executing program 0 (id=333): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b01) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80800) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="33040000000000000105000000000000010201000000000000000000ce0a00"/48], 0x30) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) modify_ldt$read_default(0x2, 0x0, 0x17) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x10) dup3(r5, r5, 0x0) write$uinput_user_dev(r4, &(0x7f0000000580)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x50, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x200006, 0xf5, 0x9, 0x39, 0x747d5a11, 0x4000008, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x3959, 0x8, 0xe, 0x3, 0x2, 0xde, 0x8, 0x9, 0x1, 0x1, 0x80000001, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x0, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x800, 0xfffffffe, 0x0, 0x1000001, 0x10, 0x1, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x7fd, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x8, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x1004, 0x7, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x7, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x6, 0x9, 0x2, 0x4, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2, 0x7, 0x4, 0xea, 0x2, 0x5, 0x6, 0xd9, 0x0, 0x8, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x3, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x8, 0xe47, 0x3, 0x203, 0x4, 0x103, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x4, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x3, 0x9, 0x200, 0x7, 0x4ee1, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0x2000b, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) readv(r4, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) 2.304542145s ago: executing program 2 (id=334): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000140)="b7", 0x1}], 0x1, &(0x7f00000000c0)=[@rights={{0x10, 0x1, 0x1, [r0]}}], 0x10}, 0x0) recvmsg(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) 1.396985758s ago: executing program 2 (id=335): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x800) 1.395351588s ago: executing program 1 (id=336): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x7, 0x2, r3}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = eventfd2(0x8, 0x80001) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r5, 0x80007, 0x2, r2}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.349267041s ago: executing program 0 (id=337): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_setup(0x1, &(0x7f0000000000)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x101000, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002071a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010071ec7c45f2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050505f8e6fb0fd7ddcb12b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c20500000000000000cceaede3faedc51d29a47fc8136bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b001000000a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72323cc924e627f2f4b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fda4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b0600000000000000564a2b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1a5e1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9cdf99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f9166965a53beb05142e1b1550a8cb7852f6750b6ec962802c0320f8059195729d60c534ee8e8ff0010067fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b9617432e251d14b283f7d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b0000000032a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6fd9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205111b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e800fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a086535bd07820e690d2755768612bb7330a8b285f2584892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd0700000000000011b64b378ee96af15cbbc65d72ae980b6df22b5ca3ea377f36beb44b45c6f84b3f4d2c62ca91b4df16fc8cc5d18b35213e5f67ec200e768ab28feaff2195724b2965ebca822af6c0a4e598d34f9b5f1eb43de209cd5541fe72d89d5f9819c1529c242b72ccdb9541e54fcccf12457df695126458ebffaaebe98748dea4f0a0b0a1683ff327ca05070000000000000088a571761be31e4fdd530604d32149c22f81adc983adc81b335d0579f47763a97af46500c91d5b2640242661beca1b4e695f7aac5ae46a72ac99ec395bdf16e3fc75e7acbb2d10060bef6a793082f8cfd4721588787c8a8c6257a8a11d49f7f7ed9de6efb7dd8058fb0c8125ee9c1691afa39b5a70d489efcd3e95a483c59f8fa7443e795eac454a68ab647e0d5381df6528858895d57274e97046659ac9488c85e5728987fa9d43660eb28b7befbb981f8fde8754d792146e49ee14bff102540e247a8780c80e3ff0688e8cb5c500446756d0b76244766deecc69c4c3435c125f0f06c772a051b690113e59485586e0ff"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x20}, 0x48) io_submit(r3, 0x1, &(0x7f0000000a40)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfff, r4, &(0x7f0000000300)="e83924", 0x3}]) io_uring_enter(0xffffffffffffffff, 0x3517, 0x173d, 0x42, 0x0, 0x0) 1.216282142s ago: executing program 2 (id=338): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB="0000000000000000560240e799acd98bb8ea22d7a50000e8cf520000000000000000"], 0x50) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000000079"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000080000000000000000000000000000000000000000c466541cc719193fdf941c3dd13ee04312555f138e9da6d3cb76c145e2"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r1}, 0x38) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000002c0)=0x1) ppoll(&(0x7f0000000080)=[{r2, 0x1010}], 0x1, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0x3, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0xfffff, 0xffffffffffffffff) 661.563607ms ago: executing program 1 (id=339): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b23, 0x0) 298.404766ms ago: executing program 3 (id=340): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socketpair(0x25, 0x1, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) socket$inet_smc(0x2b, 0x1, 0x0) read$FUSE(r1, &(0x7f0000004140)={0x2020}, 0x2020) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 216.866282ms ago: executing program 0 (id=341): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000480)={0x28, r1, 0x403, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4040) 0s ago: executing program 0 (id=342): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. [ 82.912170][ T5776] cgroup: Unknown subsys name 'net' [ 83.045943][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.769614][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.954320][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.963316][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.971617][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.979906][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.987699][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.995138][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.049867][ T5102] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.058338][ T5102] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.066038][ T5102] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.074890][ T5102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.089990][ T5102] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.097833][ T5102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.126037][ T5102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.134962][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.157795][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.178348][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.194009][ T5102] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.212699][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.220428][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.229046][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.237738][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.250151][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.258882][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.266463][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.633066][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 87.830582][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 87.994049][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.009706][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.022523][ T5786] bridge_slave_0: entered allmulticast mode [ 88.031720][ T5786] bridge_slave_0: entered promiscuous mode [ 88.062453][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.071222][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.079693][ T5786] bridge_slave_1: entered allmulticast mode [ 88.088723][ T5786] bridge_slave_1: entered promiscuous mode [ 88.106624][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 88.134173][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 88.183166][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.190584][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.199041][ T5790] bridge_slave_0: entered allmulticast mode [ 88.205977][ T5790] bridge_slave_0: entered promiscuous mode [ 88.215778][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.228687][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.264708][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.272159][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.279640][ T5790] bridge_slave_1: entered allmulticast mode [ 88.287383][ T5790] bridge_slave_1: entered promiscuous mode [ 88.384512][ T5786] team0: Port device team_slave_0 added [ 88.398594][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.432243][ T5786] team0: Port device team_slave_1 added [ 88.464319][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.486121][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.493644][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.500952][ T5794] bridge_slave_0: entered allmulticast mode [ 88.508478][ T5794] bridge_slave_0: entered promiscuous mode [ 88.540579][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.547887][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.555273][ T5793] bridge_slave_0: entered allmulticast mode [ 88.562913][ T5793] bridge_slave_0: entered promiscuous mode [ 88.583921][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.591522][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.600293][ T5794] bridge_slave_1: entered allmulticast mode [ 88.607490][ T5794] bridge_slave_1: entered promiscuous mode [ 88.615343][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.622600][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.648788][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.665625][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.673098][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.680662][ T5793] bridge_slave_1: entered allmulticast mode [ 88.688270][ T5793] bridge_slave_1: entered promiscuous mode [ 88.698236][ T5790] team0: Port device team_slave_0 added [ 88.715477][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.722710][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.750208][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.790197][ T5790] team0: Port device team_slave_1 added [ 88.822813][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.835690][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.860746][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.873585][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.950100][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.957551][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.984673][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.013598][ T5794] team0: Port device team_slave_0 added [ 89.036535][ T5793] team0: Port device team_slave_0 added [ 89.043095][ T5797] Bluetooth: hci0: command tx timeout [ 89.048642][ T5793] team0: Port device team_slave_1 added [ 89.055397][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.062480][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.089411][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.108233][ T5794] team0: Port device team_slave_1 added [ 89.119152][ T5786] hsr_slave_0: entered promiscuous mode [ 89.125720][ T5786] hsr_slave_1: entered promiscuous mode [ 89.158816][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.165831][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.192466][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.203194][ T5797] Bluetooth: hci1: command tx timeout [ 89.252687][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.260302][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.286519][ T5797] Bluetooth: hci2: command tx timeout [ 89.286692][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.317472][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.324484][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.351374][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.357034][ T5797] Bluetooth: hci3: command tx timeout [ 89.392367][ T5790] hsr_slave_0: entered promiscuous mode [ 89.399327][ T5790] hsr_slave_1: entered promiscuous mode [ 89.406085][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.415627][ T5790] Cannot create hsr debugfs directory [ 89.469425][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.476431][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.503658][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.606044][ T5793] hsr_slave_0: entered promiscuous mode [ 89.613730][ T5793] hsr_slave_1: entered promiscuous mode [ 89.620254][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.628870][ T5793] Cannot create hsr debugfs directory [ 89.711563][ T5794] hsr_slave_0: entered promiscuous mode [ 89.719946][ T5794] hsr_slave_1: entered promiscuous mode [ 89.726522][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.734396][ T5794] Cannot create hsr debugfs directory [ 90.056398][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.075112][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.088002][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.123867][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.197203][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.219026][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.251206][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.272598][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.321623][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.352132][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.378913][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.390529][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.453385][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.465793][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.476595][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.489812][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.583524][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.631333][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.662883][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.670349][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.693454][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.700660][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.780920][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.821655][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.864767][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.871958][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.890218][ T2981] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.897457][ T2981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.916274][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.953238][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.012336][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.048995][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.056188][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.073945][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.121580][ T5797] Bluetooth: hci0: command tx timeout [ 91.155105][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.162417][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.179257][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.186452][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.198098][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.205299][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.278509][ T5797] Bluetooth: hci1: command tx timeout [ 91.357795][ T5797] Bluetooth: hci2: command tx timeout [ 91.437200][ T5797] Bluetooth: hci3: command tx timeout [ 91.536377][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.558934][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.713620][ T5786] veth0_vlan: entered promiscuous mode [ 91.750512][ T5790] veth0_vlan: entered promiscuous mode [ 91.765197][ T5786] veth1_vlan: entered promiscuous mode [ 91.811122][ T5790] veth1_vlan: entered promiscuous mode [ 91.864348][ T5786] veth0_macvtap: entered promiscuous mode [ 91.885900][ T5786] veth1_macvtap: entered promiscuous mode [ 91.907778][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.951703][ T5790] veth0_macvtap: entered promiscuous mode [ 91.965360][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.987347][ T5790] veth1_macvtap: entered promiscuous mode [ 91.996636][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.009291][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.047678][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.056579][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.065894][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.074996][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.096478][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.107558][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.123031][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.153310][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.165253][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.177672][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.194321][ T5793] veth0_vlan: entered promiscuous mode [ 92.209487][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.219923][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.229027][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.238156][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.292249][ T5793] veth1_vlan: entered promiscuous mode [ 92.364651][ T5794] veth0_vlan: entered promiscuous mode [ 92.401049][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.410716][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.432732][ T5794] veth1_vlan: entered promiscuous mode [ 92.504514][ T5793] veth0_macvtap: entered promiscuous mode [ 92.518504][ T5793] veth1_macvtap: entered promiscuous mode [ 92.536621][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.544896][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.556122][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.574928][ T28] cfg80211: failed to load regulatory.db [ 92.585574][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.613666][ T5794] veth0_macvtap: entered promiscuous mode [ 92.668584][ T5794] veth1_macvtap: entered promiscuous mode [ 92.676027][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.687568][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.697613][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.708271][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.721724][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.733960][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.744954][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.755636][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.766526][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.778308][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.789834][ T5793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.800646][ T5793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.809456][ T5793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.818391][ T5793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.848303][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.856653][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.915203][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.936397][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.947677][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.967297][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.978209][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.990252][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.004900][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.019896][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.030898][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.041026][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.051892][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.062113][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.074741][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.086235][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.140608][ T5794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.158251][ T5794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.175896][ T5794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.185127][ T5794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.197390][ T5797] Bluetooth: hci0: command tx timeout [ 93.274843][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.318348][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.358118][ T5797] Bluetooth: hci1: command tx timeout [ 93.398761][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.431996][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.447338][ T5797] Bluetooth: hci2: command tx timeout [ 93.518100][ T5797] Bluetooth: hci3: command tx timeout [ 93.536377][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.562523][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.647512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.976985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.985700][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.008657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.037095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.067163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.075976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.085626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.181915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.190712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.507829][ T2981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.569760][ T2981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.626242][ T5892] 9pnet_virtio: no channels available for device syz [ 95.032704][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.218447][ T5895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.276955][ T5797] Bluetooth: hci0: command tx timeout [ 95.340272][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.437119][ T5797] Bluetooth: hci1: command tx timeout [ 95.527578][ T5797] Bluetooth: hci2: command tx timeout [ 95.597102][ T5797] Bluetooth: hci3: command tx timeout [ 95.777177][ T5874] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.288811][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.343810][ T5874] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 96.369123][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.410958][ T5874] usb 3-1: config 0 descriptor?? [ 97.009436][ T5914] program syz.0.11 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.049996][ T5916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.557508][ T5916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.566812][ C0] sched: RT throttling activated [ 98.587348][ T5874] usbhid 3-1:0.0: can't add hid device: -71 [ 98.593652][ T5874] usbhid: probe of 3-1:0.0 failed with error -71 [ 98.860405][ T5874] usb 3-1: USB disconnect, device number 2 [ 99.285921][ T5933] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.433755][ T5933] capability: warning: `syz.0.18' uses 32-bit capabilities (legacy support in use) [ 99.658579][ T5943] syzkaller0: entered promiscuous mode [ 99.667981][ T5943] syzkaller0: entered allmulticast mode [ 99.913756][ T5948] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.921314][ T5948] IPv6: NLM_F_CREATE should be set when creating new route [ 100.209731][ T5840] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.667416][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.711710][ T5840] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 100.770522][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.793644][ T5840] usb 2-1: config 0 descriptor?? [ 101.119243][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 101.161792][ T27] audit: type=1326 audit(1756333175.811:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.3.27" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e6258ebe9 code=0x0 [ 101.196193][ T5840] usbhid 2-1:0.0: can't add hid device: -71 [ 101.202821][ T5840] usbhid: probe of 2-1:0.0 failed with error -71 [ 101.276228][ T5840] usb 2-1: USB disconnect, device number 2 [ 101.459388][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 101.482446][ T5960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.852146][ T5989] syzkaller0: entered promiscuous mode [ 102.857871][ T5989] syzkaller0: entered allmulticast mode [ 103.434861][ T5992] lo speed is unknown, defaulting to 1000 [ 103.450319][ T5992] lo speed is unknown, defaulting to 1000 [ 103.465389][ T5992] lo speed is unknown, defaulting to 1000 [ 103.493225][ T5992] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 103.545628][ T5992] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 103.770300][ T5992] lo speed is unknown, defaulting to 1000 [ 103.785142][ T5992] lo speed is unknown, defaulting to 1000 [ 103.797014][ T5992] lo speed is unknown, defaulting to 1000 [ 103.809620][ T5992] lo speed is unknown, defaulting to 1000 [ 104.214809][ T27] audit: type=1326 audit(1756333178.861:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.3.39" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e6258ebe9 code=0x0 [ 104.719001][ T786] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.745087][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 104.785551][ T6012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.942792][ T6012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.42'. [ 105.265967][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.306981][ T786] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 105.327604][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.385315][ T786] usb 1-1: config 0 descriptor?? [ 105.626335][ T6019] 9pnet_virtio: no channels available for device syz [ 105.628555][ T786] usbhid 1-1:0.0: can't add hid device: -71 [ 105.649857][ T786] usbhid: probe of 1-1:0.0 failed with error -71 [ 105.682174][ T786] usb 1-1: USB disconnect, device number 2 [ 106.293270][ T6026] comedi comedi0: Minor 3 could not be opened [ 106.691266][ T6034] syzkaller0: entered promiscuous mode [ 106.702817][ T786] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.709587][ T6034] syzkaller0: entered allmulticast mode [ 106.811618][ T786] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 106.974680][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.080215][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.187727][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 108.286143][ T6060] netlink: 32 bytes leftover after parsing attributes in process `syz.2.57'. [ 108.507412][ T6058] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.763750][ T6068] netlink: 32 bytes leftover after parsing attributes in process `syz.0.55'. [ 108.877272][ T5840] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.079213][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.093340][ T5840] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 109.103529][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.157482][ T5840] usb 2-1: config 0 descriptor?? [ 109.375997][ T5840] usbhid 2-1:0.0: can't add hid device: -71 [ 109.394965][ T5840] usbhid: probe of 2-1:0.0 failed with error -71 [ 109.426570][ T5840] usb 2-1: USB disconnect, device number 3 [ 110.920578][ T5797] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 111.100238][ T5840] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.275511][ T6100] netlink: 3 bytes leftover after parsing attributes in process `syz.2.70'. [ 111.363453][ T6100] batadv1: entered allmulticast mode [ 111.510767][ T5840] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 111.528845][ T5840] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.657841][ T5840] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.676339][ T5840] usb 1-1: config 0 interface 0 has no altsetting 0 [ 111.685927][ T5840] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.702769][ T5840] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.724025][ T5840] usb 1-1: config 0 interface 0 has no altsetting 0 [ 111.745716][ T5840] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.755173][ T5840] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.838917][ T5840] usb 1-1: config 0 interface 0 has no altsetting 0 [ 111.914734][ T5840] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.930480][ T5840] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.948639][ T5840] usb 1-1: config 0 interface 0 has no altsetting 0 [ 111.956580][ T5840] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.967715][ T5840] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.985598][ T5840] usb 1-1: config 0 interface 0 has no altsetting 0 [ 112.010144][ T5840] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.029482][ T5840] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.065371][ T5840] usb 1-1: config 0 interface 0 has no altsetting 0 [ 112.103857][ T5840] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.132956][ T5840] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.166845][ T5840] usb 1-1: config 0 interface 0 has no altsetting 0 [ 112.197375][ T5840] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.215228][ T5840] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.245000][ T5840] usb 1-1: config 0 interface 0 has no altsetting 0 [ 112.272735][ T5840] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 112.305966][ T5840] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 112.356245][ T5840] usb 1-1: Product: syz [ 112.367147][ T5840] usb 1-1: Manufacturer: syz [ 112.382050][ T5840] usb 1-1: SerialNumber: syz [ 112.457120][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'. [ 112.473280][ T6107] 9pnet_virtio: no channels available for device syz [ 112.589543][ T5840] usb 1-1: config 0 descriptor?? [ 112.747343][ T5840] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 113.004557][ T28] usb 1-1: USB disconnect, device number 3 [ 113.048675][ T28] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 113.406920][ T5840] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.448731][ T27] audit: type=1326 audit(1756333188.091:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6117 comm="syz.1.77" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5185b8ebe9 code=0x0 [ 113.491876][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.75'. [ 113.618395][ T6119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.699136][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.736965][ T5840] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 113.765070][ T6119] netlink: 32 bytes leftover after parsing attributes in process `syz.2.75'. [ 113.948974][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.994632][ T5840] usb 4-1: config 0 descriptor?? [ 114.351259][ T6111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.363339][ T6111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.626350][ T6126] netlink: 'syz.0.78': attribute type 4 has an invalid length. [ 114.782725][ T5840] usbhid 4-1:0.0: can't add hid device: -71 [ 114.791421][ T5840] usbhid: probe of 4-1:0.0 failed with error -71 [ 114.823433][ T5840] usb 4-1: USB disconnect, device number 2 [ 115.907567][ T6141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.82'. [ 115.939987][ T6141] 9pnet_virtio: no channels available for device syz [ 119.578217][ T6164] netlink: 32 bytes leftover after parsing attributes in process `syz.0.91'. [ 119.597135][ T5840] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.832940][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.874602][ T5840] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 120.048183][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.93'. [ 120.058599][ T6169] 9pnet_virtio: no channels available for device syz [ 120.078687][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.147782][ T5840] usb 3-1: config 0 descriptor?? [ 120.187163][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 120.303365][ T6170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.441272][ T6170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.92'. [ 120.508031][ T6161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.552115][ T6161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.766275][ T6180] Zero length message leads to an empty skb [ 120.779267][ T5840] usbhid 3-1:0.0: can't add hid device: -71 [ 120.791981][ T5840] usbhid: probe of 3-1:0.0 failed with error -71 [ 120.817668][ T5840] usb 3-1: USB disconnect, device number 3 [ 120.837117][ T786] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 121.029127][ T786] usb 2-1: Using ep0 maxpacket: 32 [ 121.049070][ T786] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 121.060623][ T786] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 121.073091][ T786] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 1083, setting to 1024 [ 121.088254][ T786] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 121.101675][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 121.111601][ T786] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 121.131832][ T786] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 121.140948][ T786] usb 2-1: Product: syz [ 121.145828][ T786] usb 2-1: Manufacturer: syz [ 121.156894][ T786] usb 2-1: SerialNumber: syz [ 121.173538][ T786] usb 2-1: config 0 descriptor?? [ 121.184098][ T6175] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 121.196415][ T786] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 121.218109][ T786] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 121.552838][ T6175] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 121.561427][ T5840] usb 2-1: USB disconnect, device number 4 [ 121.561475][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 122.993870][ T5840] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 123.540193][ T6204] syz.0.102[6204]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 123.903109][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.103'. [ 123.915937][ T6208] 9pnet_virtio: no channels available for device syz [ 124.466831][ T6214] siw: device registration error -23 [ 125.706974][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.899461][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.918480][ T23] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.936303][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.977598][ T23] usb 1-1: config 0 descriptor?? [ 127.157758][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.185424][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.052523][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 128.079081][ T6231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.166435][ T6234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.110'. [ 128.256377][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 128.268916][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 128.283594][ T23] usb 1-1: USB disconnect, device number 4 [ 128.776505][ T6254] netlink: 'syz.2.117': attribute type 1 has an invalid length. [ 128.789989][ T6254] netlink: 56 bytes leftover after parsing attributes in process `syz.2.117'. [ 128.811332][ T6254] netlink: 'syz.2.117': attribute type 1 has an invalid length. [ 128.821087][ T6254] netlink: 56 bytes leftover after parsing attributes in process `syz.2.117'. [ 129.582460][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 129.914033][ T6271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.996215][ T6269] netlink: 16 bytes leftover after parsing attributes in process `syz.3.122'. [ 133.247188][ T786] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 133.567600][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.574377][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.839211][ T6294] netlink: 3 bytes leftover after parsing attributes in process `syz.2.129'. [ 135.969938][ T6294] batadv1: entered allmulticast mode [ 136.889057][ T6312] input: syz1 as /devices/virtual/input/input5 [ 138.199133][ T6316] 9pnet_virtio: no channels available for device syz [ 138.355762][ T6319] syzkaller0: entered promiscuous mode [ 138.362677][ T6319] syzkaller0: entered allmulticast mode [ 138.787561][ T6327] binder: 6326:6327 unknown command 1074553619 [ 138.807113][ T6327] binder: 6326:6327 ioctl c0306201 200000000040 returned -22 [ 138.827151][ T6327] binder: 6326:6327 ioctl 40044591 0 returned -22 [ 138.898110][ T6329] binder: 6326:6329 unknown command 1074553620 [ 138.910394][ T6329] binder: 6326:6329 ioctl c0306201 200000000640 returned -22 [ 138.957497][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 139.216867][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 139.235472][ T23] usb 4-1: no configurations [ 139.259111][ T23] usb 4-1: can't read configurations, error -22 [ 139.492642][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 139.716866][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 139.800625][ T6332] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 139.875122][ T23] usb 4-1: no configurations [ 139.895752][ T23] usb 4-1: can't read configurations, error -22 [ 140.141295][ T23] usb usb4-port1: attempt power cycle [ 140.616960][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.657704][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 140.672081][ T23] usb 4-1: no configurations [ 140.676762][ T23] usb 4-1: can't read configurations, error -22 [ 140.866951][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 140.918042][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 140.925576][ T23] usb 4-1: no configurations [ 140.946197][ T23] usb 4-1: can't read configurations, error -22 [ 140.960591][ T23] usb usb4-port1: unable to enumerate USB device [ 141.421643][ T6347] input: syz1 as /devices/virtual/input/input6 [ 145.670672][ T6364] netlink: 3 bytes leftover after parsing attributes in process `syz.1.147'. [ 147.989258][ T6359] sctp: failed to load transform for md5: -2 [ 148.215270][ T6364] batadv1: entered allmulticast mode [ 149.690163][ T6396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.157'. [ 149.703334][ T6396] 9pnet_virtio: no channels available for device syz [ 150.102540][ T6400] ptrace attach of "./syz-executor exec"[5790] was attempted by "./syz-executor exec"[6400] [ 150.147568][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 150.187156][ T786] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 150.377065][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 150.392558][ T786] usb 1-1: no configurations [ 150.401016][ T786] usb 1-1: can't read configurations, error -22 [ 150.581577][ T786] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 150.776926][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 150.783518][ T786] usb 1-1: no configurations [ 150.792991][ T786] usb 1-1: can't read configurations, error -22 [ 150.804537][ T786] usb usb1-port1: attempt power cycle [ 151.281042][ T786] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 151.346754][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 151.358927][ T786] usb 1-1: no configurations [ 151.382529][ T786] usb 1-1: can't read configurations, error -22 [ 151.967180][ T786] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 152.831847][ T786] usb 1-1: device descriptor read/8, error -71 [ 152.882710][ T6417] netlink: 76 bytes leftover after parsing attributes in process `syz.3.162'. [ 152.968031][ T786] usb usb1-port1: unable to enumerate USB device [ 154.593799][ T6441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.168'. [ 154.607235][ T6441] 9pnet_virtio: no channels available for device syz [ 155.563963][ T6452] netlink: 76 bytes leftover after parsing attributes in process `syz.0.174'. [ 155.896996][ T28] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 156.136923][ T28] usb 3-1: Using ep0 maxpacket: 32 [ 156.144535][ T28] usb 3-1: no configurations [ 156.160532][ T28] usb 3-1: can't read configurations, error -22 [ 156.336954][ T28] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 156.559523][ T28] usb 3-1: Using ep0 maxpacket: 32 [ 156.570339][ T28] usb 3-1: no configurations [ 156.575604][ T28] usb 3-1: can't read configurations, error -22 [ 156.588129][ T28] usb usb3-port1: attempt power cycle [ 157.097485][ T28] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 157.244409][ T28] usb 3-1: Using ep0 maxpacket: 32 [ 157.250396][ T28] usb 3-1: no configurations [ 157.255060][ T28] usb 3-1: can't read configurations, error -22 [ 157.347038][ T2944] Bluetooth: hci4: Frame reassembly failed (-84) [ 157.520096][ T28] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 157.570956][ T28] usb 3-1: Using ep0 maxpacket: 32 [ 157.589848][ T28] usb 3-1: no configurations [ 157.596823][ T28] usb 3-1: can't read configurations, error -22 [ 157.617477][ T28] usb usb3-port1: unable to enumerate USB device [ 158.654912][ T6482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.182'. [ 158.668221][ T6482] 9pnet_virtio: no channels available for device syz [ 160.145374][ T5789] Bluetooth: hci4: command 0x1003 tx timeout [ 160.152226][ T5797] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 160.708569][ T6500] tipc: Started in network mode [ 160.714025][ T6500] tipc: Node identity 56754fc2be08, cluster identity 4711 [ 160.721882][ T6500] tipc: Enabled bearer , priority 0 [ 160.735054][ T6500] tipc: Resetting bearer [ 160.775341][ T6499] tipc: Disabling bearer [ 161.296916][ T28] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 161.521863][ T28] usb 4-1: Using ep0 maxpacket: 32 [ 162.320842][ T28] usb 4-1: no configurations [ 162.325477][ T28] usb 4-1: can't read configurations, error -22 [ 162.502185][ T6514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.193'. [ 162.514161][ T6514] 9pnet_virtio: no channels available for device syz [ 162.547081][ T28] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 162.662463][ T6516] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 162.682274][ T6516] team0: Port device virt_wifi0 added [ 162.847963][ T28] usb 4-1: Using ep0 maxpacket: 32 [ 162.866717][ T28] usb 4-1: no configurations [ 162.871543][ T28] usb 4-1: can't read configurations, error -22 [ 162.882813][ T28] usb usb4-port1: attempt power cycle [ 163.441896][ T6533] netlink: 48 bytes leftover after parsing attributes in process `syz.0.201'. [ 163.456922][ T28] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 163.501250][ T28] usb 4-1: Using ep0 maxpacket: 32 [ 163.524738][ T28] usb 4-1: no configurations [ 163.556105][ T28] usb 4-1: can't read configurations, error -22 [ 163.826930][ T28] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 163.987980][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.204'. [ 164.086993][ T28] usb 4-1: device not accepting address 10, error -71 [ 164.207725][ T28] usb usb4-port1: unable to enumerate USB device [ 164.336820][ T6549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.206'. [ 164.368390][ T6549] 9pnet_virtio: no channels available for device syz [ 166.279746][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'. [ 166.461615][ T6569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.575396][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'. [ 166.616916][ T6569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.213'. [ 166.697388][ T5874] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 166.993222][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 167.001091][ T5874] usb 3-1: no configurations [ 167.016825][ T5874] usb 3-1: can't read configurations, error -22 [ 167.200620][ T5874] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 167.497109][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 167.511080][ T5874] usb 3-1: no configurations [ 167.517419][ T5874] usb 3-1: can't read configurations, error -22 [ 167.526147][ T5874] usb usb3-port1: attempt power cycle [ 167.638562][ T6580] netlink: 3 bytes leftover after parsing attributes in process `syz.3.215'. [ 167.789264][ T6580] batadv1: entered allmulticast mode [ 167.977041][ T5874] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 168.017700][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 168.023512][ T5874] usb 3-1: no configurations [ 168.028383][ T5874] usb 3-1: can't read configurations, error -22 [ 168.207394][ T5874] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 168.237616][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 168.243786][ T5874] usb 3-1: no configurations [ 168.248760][ T5874] usb 3-1: can't read configurations, error -22 [ 168.255411][ T5874] usb usb3-port1: unable to enumerate USB device [ 168.402687][ T6587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.217'. [ 168.415022][ T6587] 9pnet_virtio: no channels available for device syz [ 169.151497][ T27] audit: type=1326 audit(1756333243.791:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c9d8ebe9 code=0x7ffc0000 [ 169.224300][ T27] audit: type=1326 audit(1756333243.791:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7c9d8ebe9 code=0x7ffc0000 [ 169.247174][ T27] audit: type=1326 audit(1756333243.791:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c9d8ebe9 code=0x7ffc0000 [ 169.270518][ T27] audit: type=1326 audit(1756333243.791:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7c9d8ebe9 code=0x7ffc0000 [ 170.134449][ T6606] ptrace attach of "./syz-executor exec"[5794] was attempted by "./syz-executor exec"[6606] [ 170.151857][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.224'. [ 171.332240][ T6619] netlink: 20 bytes leftover after parsing attributes in process `syz.0.228'. [ 171.344978][ T6619] 9pnet_virtio: no channels available for device syz [ 171.546690][ T6620] ubi31: attaching mtd0 [ 171.593343][ T6620] ubi31: scanning is finished [ 171.666385][ T6620] ubi31: empty MTD device detected [ 172.370092][ T6620] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 172.378030][ T6620] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 172.385378][ T6620] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 172.392629][ T6620] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 172.402694][ T6620] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 172.410735][ T6620] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 172.461109][ T6620] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1633032419 [ 172.474942][ T6620] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 172.488252][ T6624] ubi31: background thread "ubi_bgt31d" started, PID 6624 [ 172.787010][ T5874] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 173.659835][ T5874] usb 2-1: device descriptor read/64, error -71 [ 173.929458][ T5874] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 174.087474][ T5874] usb 2-1: device descriptor read/64, error -71 [ 174.227493][ T5874] usb usb2-port1: attempt power cycle [ 175.273373][ T6648] syz.2.233: attempt to access beyond end of device [ 175.273373][ T6648] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 175.286853][ T6648] vxfs: unable to read disk superblock at 1 [ 175.293242][ T6648] syz.2.233: attempt to access beyond end of device [ 175.293242][ T6648] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 175.306145][ T6648] vxfs: unable to read disk superblock at 8 [ 175.312156][ T6648] vxfs: can't find superblock. [ 175.606909][ T5874] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 175.836972][ T5874] usb 2-1: device not accepting address 7, error -71 [ 177.079611][ T6661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.238'. [ 177.092537][ T6661] 9pnet_virtio: no channels available for device syz [ 177.117558][ T5789] Bluetooth: hci4: command 0x1003 tx timeout [ 177.124419][ T5797] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 180.274623][ T6677] process 'syz.1.244' launched '/dev/fd/3' with NULL argv: empty string added [ 180.627077][ T28] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 180.816881][ T28] usb 4-1: device descriptor read/64, error -71 [ 181.740599][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 181.742158][ T6694] netlink: 48 bytes leftover after parsing attributes in process `syz.1.249'. [ 181.833967][ T6695] netlink: 3 bytes leftover after parsing attributes in process `syz.2.248'. [ 181.847250][ T28] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 181.889045][ T6695] batadv1: entered allmulticast mode [ 182.036896][ T28] usb 4-1: device descriptor read/64, error -71 [ 182.161886][ T28] usb usb4-port1: attempt power cycle [ 182.626388][ T28] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 182.680666][ T28] usb 4-1: device descriptor read/8, error -71 [ 182.869410][ T6700] tmpfs: Unknown parameter 'usrquota$' [ 182.956942][ T28] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 183.017413][ T28] usb 4-1: device descriptor read/8, error -71 [ 183.147093][ T28] usb usb4-port1: unable to enumerate USB device [ 183.756923][ T5789] Bluetooth: hci4: command 0x1003 tx timeout [ 183.770998][ T5797] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 185.823279][ T6729] ptrace attach of "./syz-executor exec"[5786] was attempted by "./syz-executor exec"[6729] [ 185.844085][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.259'. [ 186.602077][ T6733] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.222423][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.257'. [ 188.246168][ T6735] bridge_slave_1: left allmulticast mode [ 188.252862][ T6735] bridge_slave_1: left promiscuous mode [ 188.262950][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.284881][ T6735] bridge_slave_0: left allmulticast mode [ 188.309427][ T6735] bridge_slave_0: left promiscuous mode [ 188.327166][ T6735] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.516978][ T5874] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 188.674150][ T6741] netlink: 3 bytes leftover after parsing attributes in process `syz.1.261'. [ 188.688247][ T6741] batadv1: entered allmulticast mode [ 188.701310][ T5874] usb 3-1: device descriptor read/64, error -71 [ 188.976871][ T5874] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 189.177134][ T5874] usb 3-1: device descriptor read/64, error -71 [ 189.337650][ T5874] usb usb3-port1: attempt power cycle [ 189.667035][ T6768] netlink: 20 bytes leftover after parsing attributes in process `syz.3.270'. [ 189.679364][ T6768] 9pnet_virtio: no channels available for device syz [ 189.855537][ T5874] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 190.038731][ T5874] usb 3-1: device descriptor read/8, error -71 [ 190.223425][ T6774] ptrace attach of "./syz-executor exec"[5794] was attempted by "./syz-executor exec"[6774] [ 190.246415][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'. [ 190.317103][ T5874] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 190.356728][ T5874] usb 3-1: device descriptor read/8, error -71 [ 190.489770][ T5874] usb usb3-port1: unable to enumerate USB device [ 191.183520][ T6784] netlink: 3 bytes leftover after parsing attributes in process `syz.0.275'. [ 191.233656][ T6784] batadv1: entered allmulticast mode [ 191.325090][ T5797] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 192.740200][ T6801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.281'. [ 192.753488][ T6801] 9pnet_virtio: no channels available for device syz [ 193.621421][ T5874] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 193.634244][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 193.733532][ T6816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.859237][ T5874] usb 2-1: config 0 has no interfaces? [ 193.864928][ T5874] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 193.874578][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.892092][ T5874] usb 2-1: config 0 descriptor?? [ 193.918714][ T6816] netlink: 16 bytes leftover after parsing attributes in process `syz.2.285'. [ 195.477448][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.483858][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.933774][ T6831] netlink: 3 bytes leftover after parsing attributes in process `syz.3.290'. [ 196.003472][ T6831] batadv1: entered allmulticast mode [ 196.233401][ T5815] usb 2-1: USB disconnect, device number 9 [ 196.362481][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.293'. [ 196.374694][ T6837] 9pnet_virtio: no channels available for device syz [ 198.935055][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 198.966930][ T6863] ubi: mtd0 is already attached to ubi31 [ 199.200465][ T6862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.463812][ T6869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.303'. [ 199.477306][ T6869] 9pnet_virtio: no channels available for device syz [ 202.661841][ T6884] netlink: 3 bytes leftover after parsing attributes in process `syz.3.306'. [ 202.906116][ T6884] batadv1: entered allmulticast mode [ 204.171239][ T5789] Bluetooth: hci3: link tx timeout [ 204.177428][ T5789] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 204.365840][ T6903] tipc: Enabled bearer , priority 0 [ 204.387542][ T6903] syzkaller0: entered promiscuous mode [ 204.404430][ T6903] syzkaller0: entered allmulticast mode [ 204.462575][ T6903] tipc: Resetting bearer [ 204.801003][ T6902] tipc: Resetting bearer [ 205.044415][ T6902] tipc: Disabling bearer [ 205.562112][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 205.740788][ T6919] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.982393][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 206.236889][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 206.525420][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'. [ 206.577333][ T6923] bridge_slave_1: left allmulticast mode [ 206.591614][ T6923] bridge_slave_1: left promiscuous mode [ 206.597993][ T6923] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.625942][ T6923] bridge_slave_0: left allmulticast mode [ 206.633482][ T6923] bridge_slave_0: left promiscuous mode [ 206.640352][ T6923] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.685496][ T5789] Bluetooth: hci3: ISO packet too small [ 209.188899][ T6959] input: syz1 as /devices/virtual/input/input7 [ 211.036953][ T5796] Bluetooth: hci4: command 0x1003 tx timeout [ 211.037025][ T5789] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 211.157534][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 211.474240][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 211.875862][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 211.993533][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.026404][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 212.045307][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.081977][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.098455][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 212.108774][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.154480][ T6980] ================================================================== [ 212.162597][ T6980] BUG: KASAN: slab-use-after-free in __lock_acquire+0xff/0x7c80 [ 212.170283][ T6980] Read of size 8 at addr ffff88802d24e4b8 by task syz.3.340/6980 [ 212.178013][ T6980] [ 212.180361][ T6980] CPU: 1 PID: 6980 Comm: syz.3.340 Not tainted 6.6.102-syzkaller #0 [ 212.188348][ T6980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.198440][ T6980] Call Trace: [ 212.201732][ T6980] [ 212.204678][ T6980] dump_stack_lvl+0x16c/0x230 [ 212.209380][ T6980] ? __lock_acquire+0x7c80/0x7c80 [ 212.214418][ T6980] ? show_regs_print_info+0x20/0x20 [ 212.219630][ T6980] ? load_image+0x3b0/0x3b0 [ 212.224156][ T6980] ? __virt_addr_valid+0x469/0x540 [ 212.229317][ T6980] print_report+0xac/0x220 [ 212.233750][ T6980] ? __lock_acquire+0xff/0x7c80 [ 212.238612][ T6980] kasan_report+0x117/0x150 [ 212.243130][ T6980] ? __lock_acquire+0xff/0x7c80 [ 212.248002][ T6980] __lock_acquire+0xff/0x7c80 [ 212.252730][ T6980] ? verify_lock_unused+0x140/0x140 [ 212.257945][ T6980] ? __schedule+0x14da/0x44d0 [ 212.262642][ T6980] ? verify_lock_unused+0x140/0x140 [ 212.267868][ T6980] lock_acquire+0x197/0x410 [ 212.272388][ T6980] ? remove_wait_queue+0x24/0x120 [ 212.277515][ T6980] ? read_lock_is_recursive+0x20/0x20 [ 212.282904][ T6980] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 212.288904][ T6980] _raw_spin_lock_irqsave+0xa8/0xf0 [ 212.294123][ T6980] ? remove_wait_queue+0x24/0x120 [ 212.299151][ T6980] ? _raw_spin_lock+0x40/0x40 [ 212.303856][ T6980] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 212.309760][ T6980] ? _raw_spin_unlock+0x40/0x40 [ 212.314629][ T6980] remove_wait_queue+0x24/0x120 [ 212.319512][ T6980] poll_freewait+0xb1/0x240 [ 212.324034][ T6980] do_select+0x175b/0x1840 [ 212.328474][ T6980] ? do_select+0xef/0x1840 [ 212.332907][ T6980] ? core_sys_select+0x950/0x950 [ 212.337872][ T6980] ? __ia32_compat_sys_ppoll_time64+0x300/0x300 [ 212.344164][ T6980] ? __ia32_compat_sys_ppoll_time64+0x300/0x300 [ 212.350427][ T6980] ? __ia32_compat_sys_ppoll_time64+0x300/0x300 [ 212.356811][ T6980] ? __ia32_compat_sys_ppoll_time64+0x300/0x300 [ 212.363103][ T6980] ? __ia32_compat_sys_ppoll_time64+0x300/0x300 [ 212.369391][ T6980] ? __ia32_compat_sys_ppoll_time64+0x300/0x300 [ 212.375668][ T6980] ? __ia32_compat_sys_ppoll_time64+0x300/0x300 [ 212.381965][ T6980] ? __ia32_compat_sys_ppoll_time64+0x300/0x300 [ 212.388233][ T6980] ? __lock_acquire+0x7c80/0x7c80 [ 212.393270][ T6980] ? __lock_acquire+0x7c80/0x7c80 [ 212.398311][ T6980] ? __might_fault+0xaa/0x120 [ 212.403006][ T6980] ? __might_fault+0xc6/0x120 [ 212.407693][ T6980] ? __might_fault+0xaa/0x120 [ 212.412390][ T6980] core_sys_select+0x71c/0x950 [ 212.417176][ T6980] ? futex_wait_setup+0x260/0x260 [ 212.422220][ T6980] ? poll_select_set_timeout+0x160/0x160 [ 212.427879][ T6980] ? sigprocmask+0x190/0x190 [ 212.432487][ T6980] ? bpf_link_show_fdinfo+0x350/0x350 [ 212.437874][ T6980] __se_sys_pselect6+0x285/0x310 [ 212.442832][ T6980] ? __x64_sys_pselect6+0xf0/0xf0 [ 212.447874][ T6980] ? __x64_sys_pselect6+0x21/0xf0 [ 212.452916][ T6980] do_syscall_64+0x55/0xb0 [ 212.457349][ T6980] ? clear_bhb_loop+0x40/0x90 [ 212.462046][ T6980] ? clear_bhb_loop+0x40/0x90 [ 212.466727][ T6980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.472658][ T6980] RIP: 0033:0x7f5e6258ebe9 [ 212.477105][ T6980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.496724][ T6980] RSP: 002b:00007f5e633c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 212.505152][ T6980] RAX: ffffffffffffffda RBX: 00007f5e627b5fa0 RCX: 00007f5e6258ebe9 [ 212.513152][ T6980] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 212.521132][ T6980] RBP: 00007f5e62611e19 R08: 0000000000000000 R09: 0000000000000000 [ 212.529113][ T6980] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 212.537117][ T6980] R13: 00007f5e627b6038 R14: 00007f5e627b5fa0 R15: 00007fffe8db1ad8 [ 212.545109][ T6980] [ 212.548138][ T6980] [ 212.550477][ T6980] Allocated by task 6717: [ 212.554818][ T6980] kasan_set_track+0x4e/0x70 [ 212.559430][ T6980] __kasan_kmalloc+0x8f/0xa0 [ 212.564035][ T6980] comedi_device_postconfig+0x496/0xc50 [ 212.569601][ T6980] comedi_device_attach+0x533/0x660 [ 212.574813][ T6980] comedi_unlocked_ioctl+0x68d/0xf90 [ 212.580108][ T6980] __se_sys_ioctl+0xfd/0x170 [ 212.584713][ T6980] do_syscall_64+0x55/0xb0 [ 212.589136][ T6980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.595040][ T6980] [ 212.597368][ T6980] Freed by task 6984: [ 212.601347][ T6980] kasan_set_track+0x4e/0x70 [ 212.605938][ T6980] kasan_save_free_info+0x2e/0x50 [ 212.610973][ T6980] ____kasan_slab_free+0x126/0x1e0 [ 212.616119][ T6980] slab_free_freelist_hook+0x130/0x1b0 [ 212.621642][ T6980] __kmem_cache_free+0xba/0x1f0 [ 212.626503][ T6980] comedi_device_detach+0x363/0x6f0 [ 212.631717][ T6980] comedi_unlocked_ioctl+0xbd0/0xf90 [ 212.637019][ T6980] __se_sys_ioctl+0xfd/0x170 [ 212.641621][ T6980] do_syscall_64+0x55/0xb0 [ 212.646061][ T6980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.651971][ T6980] [ 212.654297][ T6980] Last potentially related work creation: [ 212.660014][ T6980] kasan_save_stack+0x3e/0x60 [ 212.664700][ T6980] __kasan_record_aux_stack+0xaf/0xc0 [ 212.670091][ T6980] call_rcu+0x158/0x930 [ 212.674265][ T6980] fib_release_info+0x688/0x740 [ 212.679137][ T6980] fib_table_flush+0x9a7/0x11b0 [ 212.683997][ T6980] fib_disable_ip+0xfd/0x170 [ 212.688595][ T6980] fib_netdev_event+0x31f/0x490 [ 212.693451][ T6980] notifier_call_chain+0x197/0x390 [ 212.698589][ T6980] dev_close_many+0x297/0x400 [ 212.703279][ T6980] unregister_netdevice_many_notify+0x4c1/0x1810 [ 212.709620][ T6980] unregister_netdevice_queue+0x324/0x360 [ 212.715358][ T6980] unregister_vlan_dev+0x342/0x4e0 [ 212.720487][ T6980] vlan_ioctl_handler+0x319/0x650 [ 212.725638][ T6980] sock_ioctl+0x524/0x7a0 [ 212.729980][ T6980] __se_sys_ioctl+0xfd/0x170 [ 212.734584][ T6980] do_syscall_64+0x55/0xb0 [ 212.739008][ T6980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.744913][ T6980] [ 212.747243][ T6980] The buggy address belongs to the object at ffff88802d24e400 [ 212.747243][ T6980] which belongs to the cache kmalloc-256 of size 256 [ 212.761328][ T6980] The buggy address is located 184 bytes inside of [ 212.761328][ T6980] freed 256-byte region [ffff88802d24e400, ffff88802d24e500) [ 212.775130][ T6980] [ 212.777453][ T6980] The buggy address belongs to the physical page: [ 212.783875][ T6980] page:ffffea0000b49380 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802d24e200 pfn:0x2d24e [ 212.795333][ T6980] head:ffffea0000b49380 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 212.804272][ T6980] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 212.812266][ T6980] page_type: 0xffffffff() [ 212.816611][ T6980] raw: 00fff00000000840 ffff888017841b40 ffffea0000b01610 ffffea0000c08290 [ 212.825226][ T6980] raw: ffff88802d24e200 000000000010000d 00000001ffffffff 0000000000000000 [ 212.833817][ T6980] page dumped because: kasan: bad access detected [ 212.840243][ T6980] page_owner tracks the page as allocated [ 212.845965][ T6980] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5786, tgid 5786 (syz-executor), ts 91711329468, free_ts 91655121218 [ 212.867354][ T6980] post_alloc_hook+0x1cd/0x210 [ 212.872157][ T6980] get_page_from_freelist+0x195c/0x19f0 [ 212.877735][ T6980] __alloc_pages+0x1e3/0x460 [ 212.882374][ T6980] alloc_slab_page+0x5d/0x170 [ 212.887099][ T6980] new_slab+0x87/0x2e0 [ 212.891188][ T6980] ___slab_alloc+0xc6d/0x12f0 [ 212.895881][ T6980] __kmem_cache_alloc_node+0x1a2/0x260 [ 212.901360][ T6980] __kmalloc+0xa4/0x240 [ 212.905550][ T6980] fib_create_info+0xa61/0x2460 [ 212.910431][ T6980] fib_table_insert+0xc7/0x1b50 [ 212.915305][ T6980] fib_magic+0x2c5/0x390 [ 212.919570][ T6980] fib_add_ifaddr+0x3fb/0x5e0 [ 212.924268][ T6980] fib_inetaddr_event+0x140/0x1d0 [ 212.929315][ T6980] notifier_call_chain+0x197/0x390 [ 212.934443][ T6980] blocking_notifier_call_chain+0x6a/0x90 [ 212.940181][ T6980] __inet_insert_ifa+0x9ae/0xbb0 [ 212.945135][ T6980] page last free stack trace: [ 212.949811][ T6980] free_unref_page_prepare+0x7ce/0x8e0 [ 212.955288][ T6980] free_unref_page+0x32/0x2e0 [ 212.960021][ T6980] __slab_free+0x35e/0x410 [ 212.964454][ T6980] qlist_free_all+0x75/0xe0 [ 212.968974][ T6980] kasan_quarantine_reduce+0x143/0x160 [ 212.974459][ T6980] __kasan_slab_alloc+0x22/0x80 [ 212.979335][ T6980] slab_post_alloc_hook+0x6e/0x4d0 [ 212.984476][ T6980] __kmem_cache_alloc_node+0x13e/0x260 [ 212.989947][ T6980] __kmalloc+0xa4/0x240 [ 212.994123][ T6980] fib_create_info+0xa61/0x2460 [ 212.999002][ T6980] fib_table_insert+0xc7/0x1b50 [ 213.003870][ T6980] fib_magic+0x2c5/0x390 [ 213.008122][ T6980] fib_add_ifaddr+0x144/0x5e0 [ 213.012823][ T6980] fib_inetaddr_event+0x140/0x1d0 [ 213.017884][ T6980] notifier_call_chain+0x197/0x390 [ 213.023024][ T6980] blocking_notifier_call_chain+0x6a/0x90 [ 213.028756][ T6980] [ 213.031092][ T6980] Memory state around the buggy address: [ 213.036753][ T6980] ffff88802d24e380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 213.044829][ T6980] ffff88802d24e400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 213.052896][ T6980] >ffff88802d24e480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 213.060956][ T6980] ^ [ 213.066878][ T6980] ffff88802d24e500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 213.075037][ T6980] ffff88802d24e580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 213.083117][ T6980] ================================================================== [ 213.091340][ T6980] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 213.098539][ T6980] CPU: 1 PID: 6980 Comm: syz.3.340 Not tainted 6.6.102-syzkaller #0 [ 213.106524][ T6980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.116582][ T6980] Call Trace: [ 213.119873][ T6980] [ 213.122815][ T6980] dump_stack_lvl+0x16c/0x230 [ 213.127509][ T6980] ? show_regs_print_info+0x20/0x20 [ 213.132720][ T6980] ? load_image+0x3b0/0x3b0 [ 213.137257][ T6980] panic+0x2c0/0x710 [ 213.141176][ T6980] ? bpf_jit_dump+0xd0/0xd0 [ 213.145697][ T6980] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 213.151605][ T6980] ? _raw_spin_unlock+0x40/0x40 [ 213.156467][ T6980] ? print_memory_metadata+0x314/0x400 [ 213.161931][ T6980] ? __lock_acquire+0xff/0x7c80 [ 213.166790][ T6980] check_panic_on_warn+0x84/0xa0 [ 213.171744][ T6980] ? __lock_acquire+0xff/0x7c80 [ 213.176694][ T6980] end_report+0x6f/0x140 [ 213.180958][ T6980] kasan_report+0x128/0x150 [ 213.185487][ T6980] ? __lock_acquire+0xff/0x7c80 [ 213.190367][ T6980] __lock_acquire+0xff/0x7c80 [ 213.195124][ T6980] ? verify_lock_unused+0x140/0x140 [ 213.200349][ T6980] ? __schedule+0x14da/0x44d0 [ 213.205055][ T6980] ? verify_lock_unused+0x140/0x140 [ 213.210299][ T6980] lock_acquire+0x197/0x410 [ 213.214813][ T6980] ? remove_wait_queue+0x24/0x120 [ 213.219861][ T6980] ? read_lock_is_recursive+0x20/0x20 [ 213.225253][ T6980] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 213.231270][ T6980] _raw_spin_lock_irqsave+0xa8/0xf0 [ 213.236491][ T6980] ? remove_wait_queue+0x24/0x120 [ 213.241528][ T6980] ? _raw_spin_lock+0x40/0x40 [ 213.246217][ T6980] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 213.252132][ T6980] ? _raw_spin_unlock+0x40/0x40 [ 213.257012][ T6980] remove_wait_queue+0x24/0x120 [ 213.261878][ T6980] poll_freewait+0xb1/0x240 [ 213.266399][ T6980] do_select+0x175b/0x1840 [ 213.270832][ T6980] ? do_select+0xef/0x1840 [ 213.275283][ T6980] ? core_sys_select+0x950/0x950 [ 213.280248][ T6980] ? __ia32_compat_sys_ppoll_time64+0x300/0x300 [ 213.286518][ T6980] ? __ia32_compat_sys_ppoll_time64+0x300/0x300 [ 213.292774][ T6980] ? __ia32_compat_sys_ppoll_time64+0x300/0x300 [ 213.299036][ T6980] ? __ia32_compat_sys_ppoll_time64+0x300/0x300 [ 213.305289][ T6980] ? __ia32_compat_sys_ppoll_time64+0x300/0x300 [ 213.311558][ T6980] ? __ia32_compat_sys_ppoll_time64+0x300/0x300 [ 213.317849][ T6980] ? __ia32_compat_sys_ppoll_time64+0x300/0x300 [ 213.324110][ T6980] ? __ia32_compat_sys_ppoll_time64+0x300/0x300 [ 213.330385][ T6980] ? __lock_acquire+0x7c80/0x7c80 [ 213.335425][ T6980] ? __lock_acquire+0x7c80/0x7c80 [ 213.340495][ T6980] ? __might_fault+0xaa/0x120 [ 213.345185][ T6980] ? __might_fault+0xc6/0x120 [ 213.349866][ T6980] ? __might_fault+0xaa/0x120 [ 213.354551][ T6980] core_sys_select+0x71c/0x950 [ 213.359337][ T6980] ? futex_wait_setup+0x260/0x260 [ 213.364374][ T6980] ? poll_select_set_timeout+0x160/0x160 [ 213.370040][ T6980] ? sigprocmask+0x190/0x190 [ 213.374736][ T6980] ? bpf_link_show_fdinfo+0x350/0x350 [ 213.380143][ T6980] __se_sys_pselect6+0x285/0x310 [ 213.385125][ T6980] ? __x64_sys_pselect6+0xf0/0xf0 [ 213.390184][ T6980] ? __x64_sys_pselect6+0x21/0xf0 [ 213.395225][ T6980] do_syscall_64+0x55/0xb0 [ 213.399651][ T6980] ? clear_bhb_loop+0x40/0x90 [ 213.404359][ T6980] ? clear_bhb_loop+0x40/0x90 [ 213.409048][ T6980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.414964][ T6980] RIP: 0033:0x7f5e6258ebe9 [ 213.419395][ T6980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.439009][ T6980] RSP: 002b:00007f5e633c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 213.447481][ T6980] RAX: ffffffffffffffda RBX: 00007f5e627b5fa0 RCX: 00007f5e6258ebe9 [ 213.455463][ T6980] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 213.463442][ T6980] RBP: 00007f5e62611e19 R08: 0000000000000000 R09: 0000000000000000 [ 213.471658][ T6980] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 213.479654][ T6980] R13: 00007f5e627b6038 R14: 00007f5e627b5fa0 R15: 00007fffe8db1ad8 [ 213.487657][ T6980] [ 213.491031][ T6980] Kernel Offset: disabled [ 213.495363][ T6980] Rebooting in 86400 seconds..