last executing test programs: 12.113931964s ago: executing program 4 (id=925): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = epoll_create1(0x0) socket$key(0xf, 0x3, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000040)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000340)={0xa000001c}) 11.523368114s ago: executing program 3 (id=927): socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r5, r6, 0x4, 0x0, 0xffffffff, 0x3, {0xac7c, 0x1, 0x3, 0x68, 0xf4b, 0xdd, 0x22, 0x5, 0x412f, 0xe155, 0x1000, 0x7f, 0x2000200, 0xfffffffe, "fefe00051413000000fbff3fb42817e47f00"}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c03, 0xffffffffffffffff) syz_open_dev$MSR(0x0, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7}) mq_timedreceive(r7, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) 10.374601591s ago: executing program 3 (id=928): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 10.050934396s ago: executing program 3 (id=931): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000380)="64f3466d2e3e672e452f0f070729d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410069e648b80010000000000000440f01c20f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c249dba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x100000000, 0xf, 0x401, 0x9, 0xfffffffffffffff7, 0x9e, 0x2, 0xffff, 0x1, 0x3, 0x5, 0x4b, 0x7, 0x3a, 0x9, 0x7], 0x0, 0x481}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) 9.914208678s ago: executing program 2 (id=932): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prlimit64(r0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) semop(0x0, &(0x7f00000003c0), 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0x0, 0x0) getdents64(r2, &(0x7f0000001180)=""/4089, 0xff9) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x800, 0x1000) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) 9.285248818s ago: executing program 2 (id=934): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) semop(0x0, &(0x7f00000003c0), 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(0x0, 0x0) getdents64(r3, &(0x7f0000001180)=""/4089, 0xff9) r4 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x800, 0x1000) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblc\x00', 0x0, 0xfffffffd, 0x33}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x2, 0x3}}, './file0\x00'}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x294ef98252e47195, 0x31, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0xf05, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, 0x0, 0x0) r8 = dup(r2) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 9.274019598s ago: executing program 3 (id=935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fe8800000000000000000000000000010000000000000000000000000000000000000000ff020000000000000000000000000001000000003200000002000000fe8000"/395], 0x254}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xd0}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x4008080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 7.557350194s ago: executing program 3 (id=937): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) semop(0x0, &(0x7f00000003c0), 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0x0, 0x0) getdents64(r2, &(0x7f0000001180)=""/4089, 0xff9) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x800, 0x1000) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblc\x00', 0x0, 0xfffffffd, 0x33}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) r4 = io_uring_setup(0xf05, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, 0x0, 0x0) r6 = dup(r1) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 7.551498284s ago: executing program 2 (id=938): socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r5, r6, 0x4, 0x0, 0xffffffff, 0x3, {0xac7c, 0x1, 0x3, 0x68, 0xf4b, 0xdd, 0x22, 0x5, 0x412f, 0xe155, 0x1000, 0x7f, 0x2000200, 0xfffffffe, "fefe00051413000000fbff3fb42817e47f00"}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c03, 0xffffffffffffffff) syz_open_dev$MSR(0x0, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7}) mq_timedreceive(r7, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) 7.098219261s ago: executing program 1 (id=941): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r0}, 0x1e) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x2, 0x3, 0x0, 0x2, 0xa, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd, 0xfffffffb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}}]}, 0x50}, 0x1, 0x7}, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000280), &(0x7f0000000440)=0x8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES32=r2], 0x0, 0x26, 0x0, 0x0, 0xffffffff}, 0x28) fchdir(0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x14) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f00", 0x59) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0xffffffffffffffff) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r6) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) socket$netlink(0x10, 0x3, 0x15) sendmsg$key(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 6.376195523s ago: executing program 3 (id=942): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',gro', @ANYRESDEC]) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x40402, 0x0) io_setup(0x8, &(0x7f00000003c0)) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) openat(0xffffffffffffff9c, 0x0, 0xc5001, 0x104) 6.291947044s ago: executing program 2 (id=943): syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0xd0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x38) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x60009c0e, 0x10100, 0x0, 0xfffffffc}, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00') preadv(r6, &(0x7f0000000700)=[{&(0x7f0000000300)=""/210, 0xd2}, {&(0x7f00000001c0)=""/45, 0x2d}, {&(0x7f0000000400)=""/40, 0x28}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000680)=""/65, 0x41}], 0x5, 0x401, 0x6c19) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) 6.258974134s ago: executing program 1 (id=945): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3}, 0x65) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x108001, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f0000000280)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f00000004c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000006c0)={0x5, @win={{0x6, 0xf44, 0x8, 0x7}, 0x7, 0x10001, &(0x7f0000000600)={{0x689, 0x9, 0x1000}, &(0x7f00000005c0)={{0x40, 0x2, 0x4, 0x7}, &(0x7f0000000580)={{0x34b7a378, 0x9, 0x200, 0x8}}}}, 0x9, &(0x7f0000000640)="914f2385dd24b1dddfd0256ddf794c9916c42c85c01390a8ce6123efb98b0f77fd6613e248f9c18e5b493715e0e0aa07e490918c6d7ad0b851a10310da43b8c447", 0x12}}) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x8000000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000002b40), &(0x7f0000002b80)=0x30) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c000000000b010300000000000000000300000a080002400000000508000340000000000000000000000000857bfe239c34c2dd38e0d09d0193f32be62670693cb3d968b8606ee5a5f9d9ac8a8d4b3edbac337b16feffb1bb80dd996bbfac557d0a0d48493155a23978429edb3fd9e74e57cf0fc47668e5f85da9e916f9578300ead469fc"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000014) 4.979064164s ago: executing program 2 (id=946): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$x25(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000400)="f81da85b6eb73d7efae6dc5fedb3bdc4321d31f81d5fb67acf37aca1dae3ac9912892ee476427a4bbd411e4c0036bababb0e6be02c4eb7e0a3f8ab12fea481114fe0205162e00d1e3912292836c4ccdf73852960582592c8c027869bcd79550fa18ecd713844cebe898000"/120, 0x78, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0xc4) r5 = epoll_create1(0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x68}, 0x1, 0x7}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000040)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000340)={0xa000001c}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) 4.908643585s ago: executing program 0 (id=947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) 4.773952217s ago: executing program 0 (id=948): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r5 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r5, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r5, r5, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 4.662031249s ago: executing program 1 (id=949): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) mount$9p_fd(0x0, 0x0, 0x0, 0x800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) write(r2, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x1, 0x3, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000600)=""/56, 0x38}], 0x1, 0x3c, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 4.521851941s ago: executing program 4 (id=950): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) semop(0x0, &(0x7f00000003c0), 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(0x0, 0x0) getdents64(r3, &(0x7f0000001180)=""/4089, 0xff9) r4 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x800, 0x1000) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblc\x00', 0x0, 0xfffffffd, 0x33}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x2, 0x3}}, './file0\x00'}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x294ef98252e47195, 0x31, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0xf05, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, 0x0, 0x0) r8 = dup(r2) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 3.402230838s ago: executing program 1 (id=951): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0x4, 0x0, 0x7}}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x2cc002, 0x22) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000140)={0xd000, 0xdddd0000, 0x8, 0x1, 0x74}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, r3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='io_uring_req_failed\x00', r5, 0x0, 0xffffffffffff3bac}, 0x18) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.910079655s ago: executing program 4 (id=952): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0xffffffff) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0x5, 0x9}) 2.744125608s ago: executing program 0 (id=953): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) mknod(0x0, 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r2, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) write$char_usb(r3, &(0x7f0000000040)="e2", 0xff0f) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) dup(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140001007465616d300000000000000000000000080007"], 0xd8}, 0x1, 0x0, 0x0, 0x4008005}, 0x8d4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) 2.60413453s ago: executing program 4 (id=954): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000001c0)={0x4, 0x6, '\x00', [@pad1, @ra={0x5, 0x2, 0x5243}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x2d00c8cc}, @ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x20, {0x1, 0x6, 0x2, 0x2, [0x8000, 0x2, 0x0]}}]}, 0x40) 2.137486717s ago: executing program 4 (id=955): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000013c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') 1.415585488s ago: executing program 4 (id=956): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000300)={0x29, 0x24, 0x16, 0x1b, 0x0, 0x2, 0x9, 0x122, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000000000003900000008000300", @ANYRES32, @ANYBLOB="10005a800c0000800400020004000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x38) r7 = syz_open_procfs(r4, &(0x7f00000003c0)='net/ip_vs\x00') preadv(r7, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000200)=""/163, 0xa3}], 0x2, 0x401, 0x6) 1.35842267s ago: executing program 1 (id=957): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @win={{0x4, 0x6, 0x800, 0x5}, 0x6, 0x0, &(0x7f00000005c0)={{0x10, 0x4, 0x10, 0x9}}, 0x573, 0x0, 0x91}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x1, 0x5, 0x9}}, 0x28) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc04c5609, &(0x7f0000000480)=@userptr={0x7f, 0x2, 0x4, 0x4, 0x9, {0x77359400}, {0x2, 0x1, 0x6, 0x9, 0x7, 0x2, "dc2f4dc6"}, 0x6, 0x2, {&(0x7f0000000280)}, 0xffffff9b}) prlimit64(0x0, 0xe, 0x0, 0x0) getrusage(0x0, 0x0) 1.161697643s ago: executing program 0 (id=958): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008005}, 0x8d4) 1.018083475s ago: executing program 1 (id=959): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0x2e) sendmsg$kcm(r0, 0x0, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x4f2b, 0x5, 0x3, 0x4, 0x5, 0xcc7, 0xf, 0xb, 0xa, 0x100, 0x2, 0x1, 0xfffffffd, 0x40, 0x6, 0x101, 0x0, 0x1a449, 0x2, 0x40000003, 0x99, 0xcaa7, 0x0, 0x20001e58, 0xa, 0xe69, 0x3f, 0x8, 0x2, 0x0, 0xfffffff8]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) listen(0xffffffffffffffff, 0x9) 989.208625ms ago: executing program 2 (id=960): syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x26, 0x17, 0xc, 0x40, 0x1934, 0x706, 0xe29e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd1, 0x5e, 0xa4}}]}}]}}, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000001100)={0x3}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r1, &(0x7f0000001600)=""/4103, 0x1007, 0x9b) pipe2$9p(0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000000c0)=@x86={0x8, 0x1, 0x44, 0x0, 0x6, 0x58, 0x7, 0xfb, 0x3, 0x80, 0x5, 0x9, 0x0, 0x1b, 0x5, 0xb, 0x5, 0x7, 0x0, '\x00', 0x80, 0x1}) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000000)=0x1) close(0x3) 948.377936ms ago: executing program 0 (id=961): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000400)={r9, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000100)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r11}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=962): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) semop(0x0, &(0x7f00000003c0), 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(0x0, 0x0) getdents64(r3, &(0x7f0000001180)=""/4089, 0xff9) r4 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x800, 0x1000) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblc\x00', 0x0, 0xfffffffd, 0x33}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x2, 0x3}}, './file0\x00'}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x294ef98252e47195, 0x31, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0xf05, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, 0x0, 0x0) r8 = dup(r2) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. [ 65.642231][ T4253] cgroup: Unknown subsys name 'net' [ 65.832659][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.149171][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.968261][ T4265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.980237][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.988485][ T4272] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.997398][ T4272] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.007856][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.014826][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.016183][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.022729][ T4276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.030447][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.038321][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.044521][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.050446][ T4276] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.057787][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.066112][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.072937][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.080627][ T4276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.086104][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.093736][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.108004][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.109412][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.115893][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.123379][ T4276] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.130633][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.138035][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.144464][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.151431][ T4276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.158007][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.165787][ T4276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.185203][ T4268] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.193337][ T4270] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.612426][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 69.732335][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 69.748837][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 69.781920][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 69.831552][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 69.858366][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.866094][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.876677][ T4277] device bridge_slave_0 entered promiscuous mode [ 69.890212][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.899495][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.908757][ T4277] device bridge_slave_1 entered promiscuous mode [ 69.989663][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.018373][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.026481][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.034423][ T4274] device bridge_slave_0 entered promiscuous mode [ 70.047010][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.056531][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.063638][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.072542][ T4269] device bridge_slave_0 entered promiscuous mode [ 70.096853][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.104209][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.112281][ T4274] device bridge_slave_1 entered promiscuous mode [ 70.134226][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.141645][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.150784][ T4269] device bridge_slave_1 entered promiscuous mode [ 70.162968][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.170483][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.178680][ T4264] device bridge_slave_0 entered promiscuous mode [ 70.219662][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.230264][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.237925][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.245711][ T4264] device bridge_slave_1 entered promiscuous mode [ 70.258057][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.265251][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.276818][ T4266] device bridge_slave_0 entered promiscuous mode [ 70.286866][ T4277] team0: Port device team_slave_0 added [ 70.295304][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.314753][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.324414][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.332235][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.340367][ T4266] device bridge_slave_1 entered promiscuous mode [ 70.349762][ T4277] team0: Port device team_slave_1 added [ 70.371160][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.406730][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.438145][ T4269] team0: Port device team_slave_0 added [ 70.444893][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.452323][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.478570][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.492384][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.512339][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.522733][ T4269] team0: Port device team_slave_1 added [ 70.529648][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.537455][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.564541][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.589731][ T4274] team0: Port device team_slave_0 added [ 70.598360][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.640335][ T4274] team0: Port device team_slave_1 added [ 70.660518][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.667916][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.694617][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.708905][ T4264] team0: Port device team_slave_0 added [ 70.734469][ T4266] team0: Port device team_slave_0 added [ 70.741039][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.748403][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.774821][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.787702][ T4264] team0: Port device team_slave_1 added [ 70.810105][ T4266] team0: Port device team_slave_1 added [ 70.835118][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.842472][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.869258][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.882751][ T4277] device hsr_slave_0 entered promiscuous mode [ 70.889975][ T4277] device hsr_slave_1 entered promiscuous mode [ 70.911711][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.918821][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.945144][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.967171][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.974237][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.000931][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.014637][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.022641][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.052845][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.090196][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.097442][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.123468][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.135133][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.142348][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.168497][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.191437][ T4269] device hsr_slave_0 entered promiscuous mode [ 71.198425][ T4269] device hsr_slave_1 entered promiscuous mode [ 71.205106][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.213007][ T4269] Cannot create hsr debugfs directory [ 71.256442][ T4268] Bluetooth: hci4: command 0x0409 tx timeout [ 71.256452][ T4272] Bluetooth: hci2: command 0x0409 tx timeout [ 71.256644][ T4272] Bluetooth: hci3: command 0x0409 tx timeout [ 71.262781][ T4268] Bluetooth: hci0: command 0x0409 tx timeout [ 71.269663][ T4272] Bluetooth: hci1: command 0x0409 tx timeout [ 71.301704][ T4274] device hsr_slave_0 entered promiscuous mode [ 71.308652][ T4274] device hsr_slave_1 entered promiscuous mode [ 71.315221][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.323377][ T4274] Cannot create hsr debugfs directory [ 71.338219][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.344823][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.370703][ T4264] device hsr_slave_0 entered promiscuous mode [ 71.377761][ T4264] device hsr_slave_1 entered promiscuous mode [ 71.384376][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.393756][ T4264] Cannot create hsr debugfs directory [ 71.433610][ T4266] device hsr_slave_0 entered promiscuous mode [ 71.440754][ T4266] device hsr_slave_1 entered promiscuous mode [ 71.450973][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.458948][ T4266] Cannot create hsr debugfs directory [ 71.737869][ T4277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.765675][ T4277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.786713][ T4277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.807469][ T4277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.848144][ T4269] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.877239][ T4269] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.889438][ T4269] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.904827][ T4269] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.950398][ T4274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.979662][ T4274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.991375][ T4274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.016049][ T4274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.047438][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.094002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.103853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.123476][ T4264] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.133693][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.154324][ T4264] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.178212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.188724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.199115][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.206528][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.215904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.224798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.234072][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.241323][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.249275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.268229][ T4264] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.281300][ T4264] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.296833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.306693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.349955][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.364283][ T4266] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.374993][ T4266] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.392932][ T4266] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.402905][ T4266] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.415175][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.441731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.453363][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.463155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.472388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.483015][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.501341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.511561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.523715][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.555311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.565031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.575144][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.584655][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.596517][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.613975][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.623715][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.637992][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.647364][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.657332][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.664718][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.673792][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.701437][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.736309][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.745342][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.761564][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.768771][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.782371][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.808134][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.830938][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.841910][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.872008][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.882298][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.897465][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.910342][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.917544][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.931727][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.939824][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.949035][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.957715][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.973511][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.993530][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.002767][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.011485][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.020753][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.030256][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.039955][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.048740][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.055973][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.063671][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.071540][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.099371][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.106847][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.120545][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.132517][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.145400][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.160817][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.168187][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.184160][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.204931][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.214630][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.224459][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.237097][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.244742][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.253340][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.264468][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.280157][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.288589][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.297529][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.306589][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.315179][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.335795][ T4272] Bluetooth: hci1: command 0x041b tx timeout [ 73.336581][ T4268] Bluetooth: hci0: command 0x041b tx timeout [ 73.341846][ T4272] Bluetooth: hci3: command 0x041b tx timeout [ 73.348777][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 73.354491][ T4272] Bluetooth: hci2: command 0x041b tx timeout [ 73.372061][ T4269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.390721][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.410133][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.421070][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.434200][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.446873][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.456418][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.470197][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.512277][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.540233][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.562441][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.576886][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.607281][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.636353][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.646977][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.691830][ T4264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.732696][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.772325][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.784605][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.799752][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.812480][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.829968][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.842489][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.881067][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.897029][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.919397][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.958943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.986345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.995207][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.002470][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.023153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.050484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.063897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.105184][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.117600][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.127784][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.136841][ T4360] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.144021][ T4360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.153527][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.162311][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.171673][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.183391][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.192630][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.200435][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.207952][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.215325][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.223320][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.255150][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.295276][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.310394][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.321763][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.332931][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.343369][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.353270][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.381885][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.396014][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.404909][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.414048][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.423011][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.431749][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.439522][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.447489][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.455444][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.481569][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.492511][ T4277] device veth0_vlan entered promiscuous mode [ 74.500219][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.510691][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.523187][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.535012][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.572345][ T4274] device veth0_vlan entered promiscuous mode [ 74.591983][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.602121][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.620964][ T4277] device veth1_vlan entered promiscuous mode [ 74.640138][ T4274] device veth1_vlan entered promiscuous mode [ 74.651879][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.661416][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.669959][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.678895][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.688889][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.698654][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.727216][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.738241][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.751674][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.760539][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.774423][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.796662][ T4269] device veth0_vlan entered promiscuous mode [ 74.818857][ T4264] device veth0_vlan entered promiscuous mode [ 74.825807][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.837467][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.845385][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.866833][ T4277] device veth0_macvtap entered promiscuous mode [ 74.880739][ T4269] device veth1_vlan entered promiscuous mode [ 74.902536][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.913809][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.923548][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.939008][ T4277] device veth1_macvtap entered promiscuous mode [ 74.952356][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.962492][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.971437][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.996666][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.007556][ T4274] device veth0_macvtap entered promiscuous mode [ 75.017522][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.026394][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.034521][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.042640][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.050555][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.060067][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.070361][ T4264] device veth1_vlan entered promiscuous mode [ 75.090682][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.110892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.120312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.138820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.148504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.161107][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.171908][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.182758][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.192620][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.210036][ T4274] device veth1_macvtap entered promiscuous mode [ 75.228566][ T4269] device veth0_macvtap entered promiscuous mode [ 75.246066][ T4269] device veth1_macvtap entered promiscuous mode [ 75.262862][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.273748][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.286123][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.297477][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.309106][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.321191][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.329892][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.340257][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.348929][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.366416][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.376747][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.386579][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.396403][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.406813][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.416429][ T4272] Bluetooth: hci2: command 0x040f tx timeout [ 75.418167][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.422951][ T4272] Bluetooth: hci0: command 0x040f tx timeout [ 75.434510][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.441577][ T4268] Bluetooth: hci4: command 0x040f tx timeout [ 75.451708][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 75.459454][ T4268] Bluetooth: hci1: command 0x040f tx timeout [ 75.474085][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.493443][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.505953][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.515915][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.526537][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.539603][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.554428][ T4264] device veth0_macvtap entered promiscuous mode [ 75.565134][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.575240][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.585674][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.594551][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.608085][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.616795][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.625577][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.637051][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.648052][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.659030][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.669848][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.681377][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.710922][ T4264] device veth1_macvtap entered promiscuous mode [ 75.727321][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.737077][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.746125][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.757272][ T4269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.767082][ T4269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.776252][ T4269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.784953][ T4269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.804772][ T4266] device veth0_vlan entered promiscuous mode [ 75.839616][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.851288][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.861225][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.869973][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.895318][ T4266] device veth1_vlan entered promiscuous mode [ 75.912815][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.924679][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.937323][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.948253][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.958848][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.969422][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.980992][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.022314][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.032087][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.077316][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.085312][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.097670][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.114711][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.125035][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.137072][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.146947][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.159054][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.171335][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.183442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.191509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.200827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.209712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.218872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.237991][ T4266] device veth0_macvtap entered promiscuous mode [ 76.248727][ T4264] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.258758][ T4264] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.268778][ T4264] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.277913][ T4264] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.309320][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.318227][ T4266] device veth1_macvtap entered promiscuous mode [ 76.333962][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.365784][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.374126][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.385076][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.396556][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.401711][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.412053][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.422298][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.433309][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.451547][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.492847][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.508912][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.521587][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.530565][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.549949][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.564976][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.583565][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.594412][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.610122][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.621871][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.636292][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.670946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.692832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.708970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.722982][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.740524][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.751359][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.768874][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.781784][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.800353][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.811758][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.828488][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.842093][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.859670][ T4266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.874239][ T4266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.885311][ T4266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.900867][ T4266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.923129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.957067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.025212][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.046528][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.107111][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.122839][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.165953][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.175211][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.240193][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.283176][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.298201][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.349592][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.374099][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.408389][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.421289][ T26] audit: type=1326 audit(1752848755.414:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3916f8e9a9 code=0x7ffc0000 [ 77.459503][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.474842][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.503431][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 77.503454][ T4272] Bluetooth: hci1: command 0x0419 tx timeout [ 77.509545][ T4268] Bluetooth: hci3: command 0x0419 tx timeout [ 77.515684][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 77.521651][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 77.555068][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.596411][ T26] audit: type=1326 audit(1752848755.414:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f3916f8e9a9 code=0x7ffc0000 [ 77.662556][ T26] audit: type=1326 audit(1752848755.414:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3916f8e9a9 code=0x7ffc0000 [ 77.689787][ T26] audit: type=1326 audit(1752848755.414:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3916f8e9a9 code=0x7ffc0000 [ 77.824699][ T26] audit: type=1326 audit(1752848755.414:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f3916f8e9a9 code=0x7ffc0000 [ 77.928905][ T4404] Bluetooth: MGMT ver 1.22 [ 77.943340][ T26] audit: type=1326 audit(1752848755.414:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3916f8e9a9 code=0x7ffc0000 [ 78.115777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.135513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 78.144154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 78.152569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 78.161187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 78.170541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 78.179325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 78.188568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 78.197138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 78.205548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 78.432038][ T26] audit: type=1326 audit(1752848755.414:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4391 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3916f8e9a9 code=0x7ffc0000 [ 79.254249][ T4414] process 'syz.0.1' launched './file2' with NULL argv: empty string added [ 79.455431][ T4414] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.981887][ T4268] Bluetooth: hci0: command 0x0c1a tx timeout [ 79.988688][ T4280] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 80.733809][ T4438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16'. [ 80.765919][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.005559][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 81.013936][ T7] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 81.043965][ T7] usb 2-1: config 179 has no interface number 0 [ 81.060038][ T7] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 81.085849][ T7] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 81.105259][ T7] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 81.132563][ T7] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 81.160534][ T7] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 81.175254][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.183803][ T4447] fuse: Bad value for 'fd' [ 81.218159][ T4434] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 81.757948][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 81.766415][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 81.777317][ T7] usb 2-1: USB disconnect, device number 2 [ 81.913205][ T41] cfg80211: failed to load regulatory.db [ 83.835588][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.026092][ T4338] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.073767][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 84.167319][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.458877][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.552196][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 84.620397][ T4338] usb 1-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 84.640195][ T4338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.653509][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.670379][ T4338] usb 1-1: Product: syz [ 84.678184][ T4338] usb 1-1: Manufacturer: syz [ 84.683848][ T4338] usb 1-1: SerialNumber: syz [ 84.703980][ T4338] usb 1-1: config 0 descriptor?? [ 84.711418][ T7] usb 4-1: config 0 descriptor?? [ 84.731929][ T4338] f81232 1-1:0.0: f81232 converter detected [ 84.751717][ T4338] usb 1-1: f81232 converter now attached to ttyUSB0 [ 84.814986][ T7] hub 4-1:0.0: USB hub found [ 86.019322][ T7] hub 4-1:0.0: 1 port detected [ 86.034869][ T4314] usb 1-1: USB disconnect, device number 2 [ 86.043088][ T4482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27'. [ 86.087785][ T4314] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 86.131396][ T4482] syz.4.27 uses obsolete (PF_INET,SOCK_PACKET) [ 86.136399][ T4314] f81232 1-1:0.0: device disconnected [ 87.560828][ T4355] hub 4-1:0.0: activate --> -90 [ 87.771151][ T4355] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 87.778400][ T7] usb 4-1: USB disconnect, device number 2 [ 87.800429][ T4355] usb 4-1-port1: connect-debounce failed [ 90.323750][ T4533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 91.060494][ T4541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.39'. [ 96.218377][ T4587] netlink: 36 bytes leftover after parsing attributes in process `syz.1.53'. [ 102.105579][ T4328] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.463511][ T4328] usb 3-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 102.579222][ T4328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.641185][ T4328] usb 3-1: Product: syz [ 103.080084][ T4328] usb 3-1: Manufacturer: syz [ 103.084720][ T4328] usb 3-1: SerialNumber: syz [ 103.092347][ T4328] usb 3-1: config 0 descriptor?? [ 103.123969][ T4328] f81232 3-1:0.0: f81232 converter detected [ 103.152989][ T4328] usb 3-1: f81232 converter now attached to ttyUSB0 [ 103.759385][ T4328] usb 3-1: USB disconnect, device number 2 [ 103.789538][ T4328] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 103.844874][ T4328] f81232 3-1:0.0: device disconnected [ 106.735122][ T4671] netlink: 92 bytes leftover after parsing attributes in process `syz.0.70'. [ 106.744097][ T4671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.70'. [ 106.752921][ T4671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.70'. [ 108.375630][ T4355] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 108.992856][ T4720] netlink: 20 bytes leftover after parsing attributes in process `syz.1.82'. [ 109.149775][ T4355] usb 5-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 109.172955][ T4355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.209633][ T4355] usb 5-1: Product: syz [ 109.224406][ T4355] usb 5-1: Manufacturer: syz [ 109.241903][ T4355] usb 5-1: SerialNumber: syz [ 109.273049][ T4355] usb 5-1: config 0 descriptor?? [ 109.303360][ T4355] f81232 5-1:0.0: f81232 converter detected [ 109.342720][ T4355] usb 5-1: f81232 converter now attached to ttyUSB0 [ 110.389526][ T126] usb 5-1: USB disconnect, device number 2 [ 110.432398][ T126] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 110.482411][ T126] f81232 5-1:0.0: device disconnected [ 112.150139][ T4748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 112.275646][ T4314] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.575264][ T4755] delete_channel: no stack [ 112.634998][ T4314] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 112.853375][ T4314] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 112.991646][ T4314] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 113.041796][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 113.102189][ T4314] usb 2-1: Product: syz [ 113.172732][ T4314] usb 2-1: invalid MIDI out EP 0 [ 115.472775][ T4355] hid (null): global environment stack underflow [ 115.574414][ T4355] hid-generic 0000:FFFFF87C:0007.0001: global environment stack underflow [ 115.584457][ T4355] hid-generic 0000:FFFFF87C:0007.0001: item 0 2 1 11 parsing failed [ 115.609406][ T4355] hid-generic: probe of 0000:FFFFF87C:0007.0001 failed with error -22 [ 115.875551][ T4314] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 115.889417][ T4775] kernel profiling enabled (shift: 63) [ 115.895874][ T4775] profiling shift: 63 too large [ 115.922322][ T4314] usb 2-1: USB disconnect, device number 3 [ 116.151912][ T4779] udevd[4779]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.629972][ T4328] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.075592][ T4328] usb 2-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 118.086731][ T4328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.094914][ T4328] usb 2-1: Product: syz [ 118.099385][ T4328] usb 2-1: Manufacturer: syz [ 118.104890][ T4328] usb 2-1: SerialNumber: syz [ 118.128247][ T4328] usb 2-1: config 0 descriptor?? [ 118.187187][ T4328] f81232 2-1:0.0: f81232 converter detected [ 118.235212][ T4328] usb 2-1: f81232 converter now attached to ttyUSB0 [ 118.284228][ T4798] program syz.0.100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.384731][ T4802] autofs4:pid:4802:autofs_fill_super: called with bogus options [ 119.569662][ T4328] usb 2-1: USB disconnect, device number 4 [ 119.598993][ T4328] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 119.634541][ T4328] f81232 2-1:0.0: device disconnected [ 120.732836][ T4826] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 120.739894][ T4826] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 120.812516][ T4826] vhci_hcd vhci_hcd.0: Device attached [ 120.995794][ T4833] ip6_vti0 speed is unknown, defaulting to 1000 [ 121.013266][ T4833] ip6_vti0 speed is unknown, defaulting to 1000 [ 121.026221][ T4833] ip6_vti0 speed is unknown, defaulting to 1000 [ 121.105578][ T4355] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 121.445197][ T4833] infiniband syz2: set active [ 121.450931][ T4336] ip6_vti0 speed is unknown, defaulting to 1000 [ 121.450964][ T4833] infiniband syz2: added ip6_vti0 [ 121.832768][ T4827] vhci_hcd: connection reset by peer [ 121.933581][ T4833] RDS/IB: syz2: added [ 121.940015][ T4833] smc: adding ib device syz2 with port count 1 [ 121.947454][ T4833] smc: ib device syz2 port 1 has pnetid [ 122.269125][ T4457] vhci_hcd: stop threads [ 122.313771][ T4833] ip6_vti0 speed is unknown, defaulting to 1000 [ 122.354792][ T4457] vhci_hcd: release socket [ 122.360146][ T4457] vhci_hcd: disconnect device [ 122.377588][ T4336] ip6_vti0 speed is unknown, defaulting to 1000 [ 123.226138][ T4833] ip6_vti0 speed is unknown, defaulting to 1000 [ 123.406570][ T4382] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.699817][ T4382] usb 3-1: Using ep0 maxpacket: 32 [ 123.778643][ T4382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.934721][ T4382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.955916][ T4382] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 123.985560][ T4382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.024579][ T4382] usb 3-1: config 0 descriptor?? [ 124.030283][ T4833] ip6_vti0 speed is unknown, defaulting to 1000 [ 124.040785][ T4382] hub 3-1:0.0: USB hub found [ 124.205718][ T4856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.110'. [ 124.242728][ T4382] hub 3-1:0.0: 1 port detected [ 124.251853][ T4833] ip6_vti0 speed is unknown, defaulting to 1000 [ 124.619387][ T4833] ip6_vti0 speed is unknown, defaulting to 1000 [ 125.160664][ T7] hub 3-1:0.0: activate --> -90 [ 125.371843][ T7] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 125.389784][ T4382] usb 3-1: USB disconnect, device number 3 [ 127.527131][ T4355] vhci_hcd: vhci_device speed not set [ 127.593644][ T4887] syz.0.117 (4887) used greatest stack depth: 17856 bytes left [ 127.691621][ T4906] tmpfs: Unknown parameter '' [ 129.075958][ T4917] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 129.336487][ T4917] usb 5-1: Using ep0 maxpacket: 32 [ 129.354908][ T4917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.366099][ T4917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.375989][ T4917] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 129.385279][ T4917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.437236][ T4917] usb 5-1: config 0 descriptor?? [ 129.486256][ T4917] hub 5-1:0.0: USB hub found [ 129.601881][ T4932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.130'. [ 129.690189][ T4917] hub 5-1:0.0: 1 port detected [ 130.996991][ T4950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 131.056020][ T4917] hub 5-1:0.0: activate --> -90 [ 131.257406][ T4917] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 131.260558][ T4355] usb 5-1: USB disconnect, device number 3 [ 133.053135][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.059621][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.582091][ T4967] netlink: 16 bytes leftover after parsing attributes in process `syz.4.137'. [ 135.259029][ T4991] input: syz1 as /devices/virtual/input/input7 [ 138.375569][ T4355] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 138.565622][ T4355] usb 2-1: Using ep0 maxpacket: 32 [ 138.760234][ T4355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.186627][ T4355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.379976][ T4355] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 139.546652][ T4355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.587389][ T4355] usb 2-1: config 0 descriptor?? [ 139.675806][ T4355] hub 2-1:0.0: USB hub found [ 140.022401][ T4355] hub 2-1:0.0: 1 port detected [ 141.076051][ T4355] hub 2-1:0.0: activate --> -90 [ 141.372398][ T4338] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 141.696474][ T4338] usb 2-1: USB disconnect, device number 5 [ 142.016153][ T5062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.158'. [ 144.787209][ T5111] device geneve2 entered promiscuous mode [ 144.840888][ T5112] ======================================================= [ 144.840888][ T5112] WARNING: The mand mount option has been deprecated and [ 144.840888][ T5112] and is ignored by this kernel. Remove the mand [ 144.840888][ T5112] option from the mount to silence this warning. [ 144.840888][ T5112] ======================================================= [ 144.875758][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.635756][ T4326] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 147.556384][ T4326] usb 5-1: Using ep0 maxpacket: 32 [ 147.569515][ T4326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.581139][ T4326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.592662][ T4326] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 147.602063][ T4326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.656982][ T4326] usb 5-1: config 0 descriptor?? [ 147.671696][ T4326] hub 5-1:0.0: USB hub found [ 147.972766][ T4326] hub 5-1:0.0: 1 port detected [ 149.737841][ T4326] hub 5-1:0.0: activate --> -90 [ 149.747871][ T126] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 149.845105][ T126] usb 5-1: Failed to suspend device, error -71 [ 149.883220][ T4355] usb 5-1: USB disconnect, device number 4 [ 149.956496][ T5153] netlink: 32 bytes leftover after parsing attributes in process `syz.3.184'. [ 151.853470][ T5168] netlink: 36 bytes leftover after parsing attributes in process `syz.3.190'. [ 152.316048][ T4338] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 152.936121][ T4338] usb 5-1: Using ep0 maxpacket: 16 [ 152.970631][ T4338] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 153.210312][ T4338] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.277992][ T4338] usb 5-1: config 0 has no interface number 0 [ 153.302333][ T4338] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 153.319602][ T4338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.330126][ T4338] usb 5-1: Product: syz [ 153.334296][ T4338] usb 5-1: Manufacturer: syz [ 153.371751][ T4338] usb 5-1: SerialNumber: syz [ 153.409621][ T4338] usb 5-1: config 0 descriptor?? [ 153.441268][ T4338] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 153.483155][ T4338] usb 5-1: No valid video chain found. [ 154.517353][ T4338] usb 5-1: USB disconnect, device number 5 [ 157.440300][ T5228] netlink: 36 bytes leftover after parsing attributes in process `syz.2.205'. [ 157.824754][ T5230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'. [ 161.537336][ T5273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 164.815644][ T5307] wg1 speed is unknown, defaulting to 1000 [ 164.822351][ T5307] wg1 speed is unknown, defaulting to 1000 [ 164.917130][ T5307] wg1 speed is unknown, defaulting to 1000 [ 167.737750][ T5307] infiniband syz0: set active [ 167.742577][ T4338] wg1 speed is unknown, defaulting to 1000 [ 168.418929][ T5307] infiniband syz0: added wg1 [ 168.423835][ T5307] rdma_rxe: unable to create cq [ 168.445854][ T5307] infiniband syz0: Couldn't create ib_mad CQ [ 168.460334][ T5307] infiniband syz0: Couldn't open port 1 [ 168.583740][ T5307] RDS/IB: syz0: added [ 168.624018][ T5307] smc: adding ib device syz0 with port count 1 [ 168.667474][ T5307] smc: ib device syz0 port 1 has pnetid [ 168.675148][ T4338] wg1 speed is unknown, defaulting to 1000 [ 168.689399][ T5307] wg1 speed is unknown, defaulting to 1000 [ 168.789012][ T5334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.236'. [ 168.985403][ T5307] wg1 speed is unknown, defaulting to 1000 [ 169.879598][ T5307] wg1 speed is unknown, defaulting to 1000 [ 171.140970][ T5307] wg1 speed is unknown, defaulting to 1000 [ 172.414721][ T5307] wg1 speed is unknown, defaulting to 1000 [ 175.683930][ T5381] sched: RT throttling activated [ 176.092505][ T5397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.250'. [ 183.828623][ T5476] input: syz1 as /devices/virtual/input/input8 [ 188.097612][ T5500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 190.643987][ T5522] netlink: 32 bytes leftover after parsing attributes in process `syz.4.276'. [ 194.229615][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.243997][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.675102][ T5560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.286'. [ 196.456801][ T5571] netlink: 32 bytes leftover after parsing attributes in process `syz.0.290'. [ 198.985627][ T4255] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 199.291142][ T4255] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 199.540470][ T4255] usb 5-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 199.799108][ T4255] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.387132][ T4255] usb 5-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 200.395722][ T4255] usb 5-1: Product: syz [ 200.406751][ T4255] usb 5-1: invalid MIDI out EP 0 [ 200.962031][ T4255] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 201.508925][ T4778] udevd[4778]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.531219][ T4255] hid (null): global environment stack underflow [ 202.004679][ T4255] hid-generic 0000:FFFFF87C:0007.0002: global environment stack underflow [ 202.013775][ T4255] hid-generic 0000:FFFFF87C:0007.0002: item 0 2 1 11 parsing failed [ 202.038363][ T4255] hid-generic: probe of 0000:FFFFF87C:0007.0002 failed with error -22 [ 202.085768][ T4255] usb 5-1: USB disconnect, device number 6 [ 204.499867][ T5644] can0: slcan on ptm0. [ 204.846787][ T5638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'. [ 205.166352][ T5635] can0 (unregistered): slcan off ptm0. [ 208.150197][ T5677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 208.645888][ T5681] program syz.2.312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.138513][ T5688] netlink: 92 bytes leftover after parsing attributes in process `syz.4.313'. [ 209.148160][ T5688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.313'. [ 209.157295][ T5688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.313'. [ 212.318246][ T5706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'. [ 215.595614][ T5749] netlink: 92 bytes leftover after parsing attributes in process `syz.4.329'. [ 215.605706][ T5749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.329'. [ 215.614971][ T5749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.329'. [ 217.990564][ T5770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.333'. [ 223.213173][ T5826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.347'. [ 231.329539][ T5887] netlink: 92 bytes leftover after parsing attributes in process `syz.1.360'. [ 231.339534][ T5887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.360'. [ 231.349051][ T5887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.360'. [ 231.803509][ T5889] delete_channel: no stack [ 237.861652][ T5930] input: syz1 as /devices/virtual/input/input9 [ 241.379478][ T5960] Zero length message leads to an empty skb [ 242.515617][ T4382] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 243.031847][ T4382] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 243.065964][ T4382] usb 4-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 243.088489][ T4382] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 243.119976][ T4382] usb 4-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 243.142581][ T4382] usb 4-1: Product: syz [ 243.276847][ T4382] usb 4-1: invalid MIDI out EP 0 [ 243.621140][ T4382] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 244.747347][ T41] hid (null): global environment stack underflow [ 244.898833][ T4488] udevd[4488]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.558985][ T41] hid-generic 0000:FFFFF87C:0007.0003: global environment stack underflow [ 245.572702][ T41] hid-generic 0000:FFFFF87C:0007.0003: item 0 2 1 11 parsing failed [ 245.586082][ T41] hid-generic: probe of 0000:FFFFF87C:0007.0003 failed with error -22 [ 248.120506][ T5044] usb 4-1: USB disconnect, device number 3 [ 250.235430][ T6038] input: syz1 as /devices/virtual/input/input11 [ 253.045628][ T6049] netlink: 132 bytes leftover after parsing attributes in process `syz.3.406'. [ 253.235696][ T41] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 253.426901][ T41] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 253.460967][ T41] usb 5-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 253.675575][ T6073] delete_channel: no stack [ 253.930669][ T41] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 253.971058][ T41] usb 5-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 253.997698][ T41] usb 5-1: Product: syz [ 254.016923][ T41] usb 5-1: invalid MIDI out EP 0 [ 254.068759][ T41] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 254.156960][ T4387] udevd[4387]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.276430][ T5906] hid (null): global environment stack underflow [ 254.651750][ T41] usb 5-1: USB disconnect, device number 7 [ 255.620341][ T5906] hid-generic 0000:FFFFF87C:0007.0004: global environment stack underflow [ 255.667248][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.673603][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.712126][ T5906] hid-generic 0000:FFFFF87C:0007.0004: item 0 2 1 11 parsing failed [ 255.746930][ T5906] hid-generic: probe of 0000:FFFFF87C:0007.0004 failed with error -22 [ 272.047860][ T6215] delete_channel: no stack [ 277.394307][ T6277] netlink: 32 bytes leftover after parsing attributes in process `syz.4.461'. [ 289.135804][ T126] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 289.925680][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 289.939875][ T126] usb 3-1: config 162 has an invalid interface number: 45 but max is 0 [ 290.260565][ T126] usb 3-1: config 162 has no interface number 0 [ 290.268302][ T126] usb 3-1: config 162 interface 45 altsetting 2 endpoint 0x8 has an invalid bInterval 251, changing to 11 [ 290.351894][ T126] usb 3-1: config 162 interface 45 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 290.444833][ T126] usb 3-1: config 162 interface 45 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 290.513495][ T126] usb 3-1: config 162 interface 45 has no altsetting 0 [ 290.562672][ T126] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=c0.56 [ 290.605729][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.645643][ T126] usb 3-1: Product: syz [ 290.672035][ T126] usb 3-1: Manufacturer: syz [ 290.704872][ T126] usb 3-1: SerialNumber: syz [ 290.991355][ T126] adutux 3-1:162.45: interrupt endpoints not found [ 291.041233][ T126] usb 3-1: USB disconnect, device number 4 [ 293.147306][ T6414] netlink: 92 bytes leftover after parsing attributes in process `syz.0.502'. [ 293.156882][ T6414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.502'. [ 293.165912][ T6414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.502'. [ 295.475674][ T4314] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 295.988921][ T4314] usb 5-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 296.017763][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.165834][ T4314] usb 5-1: Product: syz [ 296.181460][ T4314] usb 5-1: Manufacturer: syz [ 296.190926][ T4314] usb 5-1: SerialNumber: syz [ 296.965287][ T4314] usb 5-1: config 0 descriptor?? [ 297.006491][ T4314] f81232 5-1:0.0: f81232 converter detected [ 297.073085][ T4314] usb 5-1: f81232 converter now attached to ttyUSB0 [ 309.082133][ T126] usb 5-1: USB disconnect, device number 8 [ 309.095185][ T126] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 309.104445][ T126] f81232 5-1:0.0: device disconnected [ 313.800775][ T6566] delete_channel: no stack [ 314.925686][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 315.135120][ T7] usb 5-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 315.160351][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.195607][ T7] usb 5-1: Product: syz [ 315.214011][ T7] usb 5-1: Manufacturer: syz [ 315.221083][ T7] usb 5-1: SerialNumber: syz [ 315.243281][ T7] usb 5-1: config 0 descriptor?? [ 315.390733][ T6589] netlink: 92 bytes leftover after parsing attributes in process `syz.3.545'. [ 315.399877][ T6589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.545'. [ 315.409469][ T6589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.545'. [ 315.746187][ T7] f81232 5-1:0.0: f81232 converter detected [ 315.762446][ T7] usb 5-1: f81232 converter now attached to ttyUSB0 [ 317.100342][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.107250][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.731712][ T6631] delete_channel: no stack [ 323.237916][ T41] usb 5-1: USB disconnect, device number 9 [ 324.066805][ T41] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 324.107813][ T41] f81232 5-1:0.0: device disconnected [ 327.325536][ T5044] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 328.004177][ T5044] usb 3-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 328.253772][ T5044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.261977][ T5044] usb 3-1: Product: syz [ 328.266284][ T5044] usb 3-1: Manufacturer: syz [ 328.272591][ T5044] usb 3-1: SerialNumber: syz [ 328.288103][ T5044] usb 3-1: config 0 descriptor?? [ 328.297619][ T5044] f81232 3-1:0.0: f81232 converter detected [ 328.306089][ T5044] usb 3-1: f81232 converter now attached to ttyUSB0 [ 331.005154][ T6727] netlink: 300 bytes leftover after parsing attributes in process `syz.1.583'. [ 331.515734][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 331.875938][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 331.887898][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.924660][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.961393][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 332.029069][ T7] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 332.205923][ T6742] netlink: 92 bytes leftover after parsing attributes in process `syz.4.587'. [ 332.215201][ T6742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.587'. [ 332.224901][ T6742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.587'. [ 332.562232][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.579862][ T7] usb 4-1: config 0 descriptor?? [ 332.929658][ T6750] delete_channel: no stack [ 333.230206][ T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x2 [ 333.317221][ T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 333.324763][ T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 333.333568][ T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 333.351313][ T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 333.365412][ T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 333.373119][ T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 333.381138][ T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 333.389123][ T7] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 333.422187][ T7] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input12 [ 333.455708][ T7] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 333.483089][ T7] usb 4-1: USB disconnect, device number 4 [ 335.318496][ T6754] fido_id[6754]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 335.441425][ T4314] usb 3-1: USB disconnect, device number 5 [ 336.073114][ T4314] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 336.127377][ T4314] f81232 3-1:0.0: device disconnected [ 336.459151][ T6786] netlink: 36 bytes leftover after parsing attributes in process `syz.0.601'. [ 343.207754][ T6852] netlink: 300 bytes leftover after parsing attributes in process `syz.2.617'. [ 344.035608][ T6866] netlink: 36 bytes leftover after parsing attributes in process `syz.1.619'. [ 347.545558][ T4315] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 347.746976][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.776708][ T4315] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 347.818841][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.878696][ T4315] usb 2-1: config 0 descriptor?? [ 348.317534][ T4315] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 348.340165][ T4315] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0006/input/input13 [ 348.502588][ T4315] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 348.523758][ T6901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.544063][ T6901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.676973][ T4338] usb 2-1: USB disconnect, device number 6 [ 349.858724][ T6921] fido_id[6921]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 351.236146][ T4338] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 351.625780][ T4338] usb 3-1: Using ep0 maxpacket: 8 [ 351.728475][ T4338] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 351.847138][ T4338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.165083][ T4338] pvrusb2: Hardware description: Terratec Grabster AV400 [ 352.182494][ T4338] pvrusb2: ********** [ 352.187371][ T4338] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 352.203621][ T4338] pvrusb2: Important functionality might not be entirely working. [ 352.215412][ T4338] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 352.235556][ T4338] pvrusb2: ********** [ 352.391513][ T2305] pvrusb2: Invalid write control endpoint [ 352.601105][ T4315] usb 3-1: USB disconnect, device number 6 [ 352.713420][ T2305] pvrusb2: Invalid write control endpoint [ 352.857708][ T2305] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 352.869804][ T2305] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 352.877848][ T2305] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 352.898331][ T2305] pvrusb2: Device being rendered inoperable [ 353.062138][ T2305] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 353.069739][ T2305] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 353.096428][ T2305] pvrusb2: Attached sub-driver cx25840 [ 353.115558][ T2305] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 353.127639][ T2305] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 353.486884][ T6973] delete_channel: no stack [ 375.294990][ T7194] netlink: 32 bytes leftover after parsing attributes in process `syz.1.711'. [ 379.685182][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.694181][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.921217][ T7246] netlink: 92 bytes leftover after parsing attributes in process `syz.3.723'. [ 382.931722][ T7246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.723'. [ 382.941036][ T7246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.723'. [ 388.678011][ T7297] netlink: 32 bytes leftover after parsing attributes in process `syz.0.739'. [ 391.975309][ T7339] netlink: 32 bytes leftover after parsing attributes in process `syz.4.756'. [ 394.162477][ T7358] netlink: 40 bytes leftover after parsing attributes in process `syz.4.760'. [ 394.228880][ T7358] netlink: 40 bytes leftover after parsing attributes in process `syz.4.760'. [ 405.703217][ T7466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.792'. [ 405.776312][ T7468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.792'. [ 405.955947][ T7466] Can't find ip_set type hash:ip,p [ 408.859503][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.800'. [ 410.167332][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.804'. [ 411.706090][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.808'. [ 413.350339][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.812'. [ 416.135676][ T4416] Bluetooth: hci5: Frame reassembly failed (-84) [ 416.360783][ T7562] Error: Driver 'c6xdigio' is already registered, aborting... [ 416.995551][ T126] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 417.195813][ T126] usb 4-1: Using ep0 maxpacket: 32 [ 417.202957][ T7565] sctp: failed to load transform for md5: -2 [ 417.212102][ T126] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 417.314228][ T126] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.403247][ T126] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 417.421614][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.825'. [ 417.433301][ T126] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 417.443442][ T126] usb 4-1: Product: syz [ 417.463679][ T126] usb 4-1: Manufacturer: syz [ 417.475340][ T126] usb 4-1: SerialNumber: syz [ 417.501477][ T126] usb 4-1: config 0 descriptor?? [ 417.543004][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.824'. [ 417.564425][ T126] ldusb 4-1:0.0: Interrupt in endpoint not found [ 418.340546][ T7557] Bluetooth: hci5: command 0x1003 tx timeout [ 418.347849][ T4280] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 418.370568][ T4328] usb 4-1: USB disconnect, device number 5 [ 419.696199][ T7603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.831'. [ 422.824152][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 424.969584][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'. [ 426.160473][ T7679] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(16) [ 426.167119][ T7679] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 426.928353][ T7679] vhci_hcd vhci_hcd.0: Device attached [ 427.215720][ T22] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 429.716799][ T7710] netlink: 92 bytes leftover after parsing attributes in process `syz.1.860'. [ 429.726424][ T7710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.860'. [ 429.735369][ T7710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.860'. [ 429.890978][ T7686] vhci_hcd: connection reset by peer [ 429.901859][ T4557] vhci_hcd: stop threads [ 429.915753][ T4557] vhci_hcd: release socket [ 429.921802][ T4557] vhci_hcd: disconnect device [ 431.058293][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.864'. [ 432.609397][ T22] vhci_hcd: vhci_device speed not set [ 437.593338][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.878'. [ 438.558802][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.883'. [ 439.558260][ T7794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.885'. [ 439.990310][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.005979][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.701023][ T7802] tmpfs: Bad value for 'mpol' [ 443.387500][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'. [ 446.631529][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.900'. [ 446.976691][ T7858] netlink: 32 bytes leftover after parsing attributes in process `syz.0.904'. [ 451.700245][ T7901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.915'. [ 451.835104][ T7909] delete_channel: no stack [ 453.197967][ T4588] Bluetooth: hci5: Frame reassembly failed (-84) [ 455.285594][ T4268] Bluetooth: hci5: command 0x1003 tx timeout [ 455.285697][ T7581] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 458.066388][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.935'. [ 461.875282][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'. [ 464.302383][ T8023] usb usb8: usbfs: process 8023 (syz.4.952) did not claim interface 5 before use [ 467.145544][ T126] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 467.201842][ T8044] ================================================================== [ 467.209910][ T8044] BUG: KASAN: use-after-free in sysfs_remove_file_ns+0x39/0x70 [ 467.217458][ T8044] Read of size 8 at addr ffff88807d2cca30 by task syz.1.959/8044 [ 467.225161][ T8044] [ 467.227482][ T8044] CPU: 0 PID: 8044 Comm: syz.1.959 Not tainted 6.1.146-syzkaller #0 [ 467.235440][ T8044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 467.245504][ T8044] Call Trace: [ 467.248772][ T8044] [ 467.251688][ T8044] dump_stack_lvl+0x168/0x22e [ 467.256358][ T8044] ? __lock_acquire+0x7c50/0x7c50 [ 467.261374][ T8044] ? show_regs_print_info+0x12/0x12 [ 467.266550][ T8044] ? load_image+0x3b0/0x3b0 [ 467.271034][ T8044] ? __virt_addr_valid+0x465/0x540 [ 467.276132][ T8044] ? sysfs_remove_file_ns+0x39/0x70 [ 467.281312][ T8044] print_report+0xa8/0x200 [ 467.285714][ T8044] kasan_report+0x10b/0x140 [ 467.290199][ T8044] ? sysfs_remove_file_ns+0x39/0x70 [ 467.295378][ T8044] sysfs_remove_file_ns+0x39/0x70 [ 467.300388][ T8044] bus_remove_driver+0x89/0x230 [ 467.305218][ T8044] ? sysfs_remove_groups+0x8a/0xa0 [ 467.310312][ T8044] comedi_device_detach+0x12d/0x6e0 [ 467.315517][ T8044] comedi_unlocked_ioctl+0xbd0/0xe90 [ 467.320807][ T8044] ? comedi_poll+0x8b0/0x8b0 [ 467.325391][ T8044] ? __fget_files+0x28/0x4d0 [ 467.329973][ T8044] ? bpf_lsm_file_ioctl+0x5/0x10 [ 467.334907][ T8044] ? security_file_ioctl+0x7c/0xa0 [ 467.340127][ T8044] ? comedi_poll+0x8b0/0x8b0 [ 467.344714][ T8044] __se_sys_ioctl+0xfa/0x170 [ 467.349306][ T8044] do_syscall_64+0x4c/0xa0 [ 467.353712][ T8044] ? clear_bhb_loop+0x60/0xb0 [ 467.358374][ T8044] ? clear_bhb_loop+0x60/0xb0 [ 467.363032][ T8044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.368973][ T8044] RIP: 0033:0x7f27ab58e9a9 [ 467.373388][ T8044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.392996][ T8044] RSP: 002b:00007f27ac35f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.401397][ T8044] RAX: ffffffffffffffda RBX: 00007f27ab7b5fa0 RCX: 00007f27ab58e9a9 [ 467.409357][ T8044] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000007 [ 467.417310][ T8044] RBP: 00007f27ab610ca1 R08: 0000000000000000 R09: 0000000000000000 [ 467.425256][ T8044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.433204][ T8044] R13: 0000000000000000 R14: 00007f27ab7b5fa0 R15: 00007fffab62aaa8 [ 467.441162][ T8044] [ 467.444160][ T8044] [ 467.446463][ T8044] Allocated by task 8010: [ 467.450765][ T8044] kasan_set_track+0x4b/0x70 [ 467.455335][ T8044] __kasan_kmalloc+0x8e/0xa0 [ 467.459913][ T8044] __kmalloc+0xb0/0x240 [ 467.464053][ T8044] iter_file_splice_write+0x185/0xc50 [ 467.469408][ T8044] direct_splice_actor+0xe1/0x130 [ 467.474412][ T8044] splice_direct_to_actor+0x480/0xb60 [ 467.479761][ T8044] do_splice_direct+0x1b0/0x2b0 [ 467.484601][ T8044] do_sendfile+0x5cc/0xeb0 [ 467.489012][ T8044] __se_sys_sendfile64+0xd6/0x190 [ 467.494025][ T8044] do_syscall_64+0x4c/0xa0 [ 467.498423][ T8044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.504309][ T8044] [ 467.506674][ T8044] Freed by task 8010: [ 467.510660][ T8044] kasan_set_track+0x4b/0x70 [ 467.515240][ T8044] kasan_save_free_info+0x2d/0x50 [ 467.520262][ T8044] ____kasan_slab_free+0x126/0x1e0 [ 467.525369][ T8044] slab_free_freelist_hook+0x131/0x1a0 [ 467.530820][ T8044] __kmem_cache_free+0xb6/0x1f0 [ 467.535657][ T8044] iter_file_splice_write+0xaa6/0xc50 [ 467.541028][ T8044] direct_splice_actor+0xe1/0x130 [ 467.546035][ T8044] splice_direct_to_actor+0x480/0xb60 [ 467.551404][ T8044] do_splice_direct+0x1b0/0x2b0 [ 467.556247][ T8044] do_sendfile+0x5cc/0xeb0 [ 467.560653][ T8044] __se_sys_sendfile64+0xd6/0x190 [ 467.565657][ T8044] do_syscall_64+0x4c/0xa0 [ 467.570060][ T8044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.575940][ T8044] [ 467.578241][ T8044] Last potentially related work creation: [ 467.584034][ T8044] kasan_save_stack+0x3a/0x60 [ 467.588701][ T8044] __kasan_record_aux_stack+0xb2/0xc0 [ 467.594063][ T8044] kvfree_call_rcu+0x108/0x870 [ 467.598810][ T8044] drop_sysctl_table+0x2fa/0x430 [ 467.603727][ T8044] drop_sysctl_table+0x2e9/0x430 [ 467.608642][ T8044] unregister_sysctl_table+0x85/0x130 [ 467.613990][ T8044] retire_mq_sysctls+0x5a/0x80 [ 467.618732][ T8044] free_ipc+0x89/0x1d0 [ 467.622776][ T8044] process_one_work+0x898/0x1160 [ 467.627698][ T8044] worker_thread+0xaa2/0x1250 [ 467.632353][ T8044] kthread+0x29d/0x330 [ 467.636411][ T8044] ret_from_fork+0x1f/0x30 [ 467.640819][ T8044] [ 467.643140][ T8044] Second to last potentially related work creation: [ 467.649708][ T8044] kasan_save_stack+0x3a/0x60 [ 467.654372][ T8044] __kasan_record_aux_stack+0xb2/0xc0 [ 467.659806][ T8044] call_rcu+0x154/0x980 [ 467.663954][ T8044] fib_create_info+0x1871/0x2490 [ 467.668878][ T8044] fib_table_insert+0xc3/0x1b50 [ 467.673709][ T8044] fib_magic+0x2c1/0x390 [ 467.677933][ T8044] fib_add_ifaddr+0x140/0x5e0 [ 467.682594][ T8044] fib_netdev_event+0x361/0x470 [ 467.687523][ T8044] raw_notifier_call_chain+0xcb/0x160 [ 467.692872][ T8044] __dev_notify_flags+0x178/0x2d0 [ 467.697872][ T8044] dev_change_flags+0xe3/0x1a0 [ 467.702610][ T8044] do_setlink+0xc31/0x3c40 [ 467.707013][ T8044] rtnl_newlink+0x17d6/0x1ff0 [ 467.711668][ T8044] rtnetlink_rcv_msg+0x79b/0xed0 [ 467.716594][ T8044] netlink_rcv_skb+0x1de/0x420 [ 467.721336][ T8044] netlink_unicast+0x74d/0x8d0 [ 467.726079][ T8044] netlink_sendmsg+0x89e/0xbc0 [ 467.730821][ T8044] __sys_sendto+0x44f/0x5c0 [ 467.735382][ T8044] __x64_sys_sendto+0xda/0xf0 [ 467.740055][ T8044] do_syscall_64+0x4c/0xa0 [ 467.744458][ T8044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.750349][ T8044] [ 467.752656][ T8044] The buggy address belongs to the object at ffff88807d2cca00 [ 467.752656][ T8044] which belongs to the cache kmalloc-256 of size 256 [ 467.766689][ T8044] The buggy address is located 48 bytes inside of [ 467.766689][ T8044] 256-byte region [ffff88807d2cca00, ffff88807d2ccb00) [ 467.779945][ T8044] [ 467.782252][ T8044] The buggy address belongs to the physical page: [ 467.788648][ T8044] page:ffffea0001f4b300 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d2cc [ 467.798776][ T8044] head:ffffea0001f4b300 order:1 compound_mapcount:0 compound_pincount:0 [ 467.807078][ T8044] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 467.815071][ T8044] raw: 00fff00000010200 ffffea0000c19200 dead000000000003 ffff888017441b40 [ 467.823646][ T8044] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 467.832244][ T8044] page dumped because: kasan: bad access detected [ 467.838674][ T8044] page_owner tracks the page as allocated [ 467.844374][ T8044] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4266, tgid 4266 (syz-executor), ts 72539848232, free_ts 72492273459 [ 467.865726][ T8044] post_alloc_hook+0x173/0x1a0 [ 467.870479][ T8044] get_page_from_freelist+0x1a26/0x1ac0 [ 467.876026][ T8044] __alloc_pages+0x1df/0x4e0 [ 467.880601][ T8044] alloc_slab_page+0x5d/0x160 [ 467.885253][ T8044] new_slab+0x87/0x2c0 [ 467.889297][ T8044] ___slab_alloc+0xbc6/0x1220 [ 467.893977][ T8044] __kmem_cache_alloc_node+0x1a0/0x260 [ 467.899413][ T8044] __kmalloc+0xa0/0x240 [ 467.903548][ T8044] fib_create_info+0xa53/0x2490 [ 467.908427][ T8044] fib_table_insert+0xc3/0x1b50 [ 467.913259][ T8044] fib_magic+0x2c1/0x390 [ 467.917484][ T8044] fib_add_ifaddr+0x140/0x5e0 [ 467.922143][ T8044] fib_inetaddr_event+0x13c/0x1c0 [ 467.927150][ T8044] blocking_notifier_call_chain+0x103/0x1b0 [ 467.933040][ T8044] __inet_insert_ifa+0x9aa/0xb60 [ 467.937955][ T8044] inet_rtm_newaddr+0x930/0x1890 [ 467.942874][ T8044] page last free stack trace: [ 467.947522][ T8044] free_unref_page_prepare+0x8b4/0x9a0 [ 467.952981][ T8044] free_unref_page+0x2e/0x3f0 [ 467.957639][ T8044] __unfreeze_partials+0x1a5/0x200 [ 467.962729][ T8044] put_cpu_partial+0x17c/0x250 [ 467.967470][ T8044] qlist_free_all+0x76/0xe0 [ 467.971950][ T8044] kasan_quarantine_reduce+0x144/0x160 [ 467.977389][ T8044] __kasan_slab_alloc+0x1e/0x80 [ 467.982218][ T8044] slab_post_alloc_hook+0x4b/0x480 [ 467.987305][ T8044] kmem_cache_alloc_node+0x14d/0x320 [ 467.992567][ T8044] __alloc_skb+0xfc/0x7e0 [ 467.996877][ T8044] alloc_skb_with_frags+0xa7/0x710 [ 468.001995][ T8044] sock_alloc_send_pskb+0x853/0x980 [ 468.007169][ T8044] unix_dgram_sendmsg+0x592/0x16c0 [ 468.012262][ T8044] __sys_sendto+0x44f/0x5c0 [ 468.016741][ T8044] __x64_sys_sendto+0xda/0xf0 [ 468.021396][ T8044] do_syscall_64+0x4c/0xa0 [ 468.025790][ T8044] [ 468.028090][ T8044] Memory state around the buggy address: [ 468.033693][ T8044] ffff88807d2cc900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 468.041728][ T8044] ffff88807d2cc980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 468.049768][ T8044] >ffff88807d2cca00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 468.057818][ T8044] ^ [ 468.063424][ T8044] ffff88807d2cca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 468.071461][ T8044] ffff88807d2ccb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 468.079497][ T8044] ================================================================== [ 468.087589][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.109879][ T8044] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 468.117100][ T8044] CPU: 0 PID: 8044 Comm: syz.1.959 Not tainted 6.1.146-syzkaller #0 [ 468.125079][ T8044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 468.135140][ T8044] Call Trace: [ 468.138430][ T8044] [ 468.141366][ T8044] dump_stack_lvl+0x168/0x22e [ 468.146036][ T8044] ? memcpy+0x3c/0x60 [ 468.149999][ T8044] ? show_regs_print_info+0x12/0x12 [ 468.155176][ T8044] ? load_image+0x3b0/0x3b0 [ 468.159674][ T8044] panic+0x2c9/0x710 [ 468.163557][ T8044] ? bpf_jit_dump+0xd0/0xd0 [ 468.168042][ T8044] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 468.173919][ T8044] ? _raw_spin_unlock+0x40/0x40 [ 468.178756][ T8044] ? print_memory_metadata+0x314/0x400 [ 468.184285][ T8044] check_panic_on_warn+0x80/0xa0 [ 468.189208][ T8044] ? sysfs_remove_file_ns+0x39/0x70 [ 468.194389][ T8044] end_report+0x66/0x110 [ 468.198613][ T8044] kasan_report+0x118/0x140 [ 468.203097][ T8044] ? sysfs_remove_file_ns+0x39/0x70 [ 468.208289][ T8044] sysfs_remove_file_ns+0x39/0x70 [ 468.213334][ T8044] bus_remove_driver+0x89/0x230 [ 468.214961][ T126] usb 3-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 468.214984][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.215001][ T126] usb 3-1: Product: syz [ 468.215012][ T126] usb 3-1: Manufacturer: syz [ 468.215023][ T126] usb 3-1: SerialNumber: syz [ 468.248349][ T8044] ? sysfs_remove_groups+0x8a/0xa0 [ 468.253462][ T8044] comedi_device_detach+0x12d/0x6e0 [ 468.258663][ T8044] comedi_unlocked_ioctl+0xbd0/0xe90 [ 468.263964][ T8044] ? comedi_poll+0x8b0/0x8b0 [ 468.268560][ T8044] ? __fget_files+0x28/0x4d0 [ 468.273141][ T8044] ? bpf_lsm_file_ioctl+0x5/0x10 [ 468.278062][ T8044] ? security_file_ioctl+0x7c/0xa0 [ 468.283159][ T8044] ? comedi_poll+0x8b0/0x8b0 [ 468.287736][ T8044] __se_sys_ioctl+0xfa/0x170 [ 468.292315][ T8044] do_syscall_64+0x4c/0xa0 [ 468.296718][ T8044] ? clear_bhb_loop+0x60/0xb0 [ 468.301375][ T8044] ? clear_bhb_loop+0x60/0xb0 [ 468.306033][ T8044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 468.311915][ T8044] RIP: 0033:0x7f27ab58e9a9 [ 468.316312][ T8044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.335932][ T8044] RSP: 002b:00007f27ac35f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 468.344333][ T8044] RAX: ffffffffffffffda RBX: 00007f27ab7b5fa0 RCX: 00007f27ab58e9a9 [ 468.352291][ T8044] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000007 [ 468.360245][ T8044] RBP: 00007f27ab610ca1 R08: 0000000000000000 R09: 0000000000000000 [ 468.368196][ T8044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.376155][ T8044] R13: 0000000000000000 R14: 00007f27ab7b5fa0 R15: 00007fffab62aaa8 [ 468.384123][ T8044] [ 468.387386][ T8044] Kernel Offset: disabled [ 468.391697][ T8044] Rebooting in 86400 seconds..