last executing test programs: 25.034327692s ago: executing program 0 (id=359): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x101902, 0x0) r5 = openat$mixer(0xffffff9c, &(0x7f00000007c0), 0x300, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r5, 0x80044dfb, &(0x7f0000000040)) r6 = io_uring_setup(0x1336, &(0x7f00000003c0)={0x0, 0x20c8a2, 0x20000, 0x0, 0x3b4}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r6, 0x0, 0x2, 0x17, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r8, @ANYBLOB="080003"], 0x80}}, 0x8000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) 24.048327269s ago: executing program 0 (id=363): r0 = add_key$user(&(0x7f0000000440), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)='7\f', 0x2, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f00000000c0), 0x0) 23.766414737s ago: executing program 0 (id=364): r0 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}}, 0x0) 20.351761424s ago: executing program 0 (id=378): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$igmp6(0xa, 0x3, 0x2) 18.515907385s ago: executing program 0 (id=381): mkdir(0x0, 0x82) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffffedc7fff, 0x1000, 0x4, 0x5}, 0x20) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) sendfile(r2, r2, 0x0, 0x40008) 17.477845067s ago: executing program 0 (id=387): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x7}, 0x8) 9.931744611s ago: executing program 3 (id=408): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r6, 0x40046104, &(0x7f0000000000)) 7.891357242s ago: executing program 3 (id=411): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r4, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [{}, {0x2, 0x6}], {}, [], {0x10, 0x2}}, 0x34, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f0000000780)=0x7d8, &(0x7f0000000180)='%pK \x00'}, 0x20) signalfd(r2, &(0x7f00000001c0)={[0x901]}, 0x8) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000380), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00', 0x4}, 0x1c) sendto$inet6(r5, &(0x7f0000000100)='c', 0x1, 0x28011, 0x0, 0x0) shutdown(r5, 0x1) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={0x1c, r6, 0x225, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x40800) 7.582305623s ago: executing program 4 (id=412): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x81, 0x408000) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000180)={0x4, 0x4}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1ff, 0x0, 0x0, 0x1c, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c5c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) 5.561570012s ago: executing program 1 (id=416): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sched_getaffinity(0x0, 0x8, &(0x7f0000000000)) 5.47660542s ago: executing program 3 (id=417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000950304001080080015"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 5.332112784s ago: executing program 1 (id=418): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff000}, {0x6}]}, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000240), &(0x7f0000000280)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="b6c9f7e595b809a2b371bb6c"], 0x8) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0xfffffffe]}}, 0x5c) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5.255156642s ago: executing program 3 (id=419): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa32, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.153945192s ago: executing program 1 (id=420): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = dup2(r4, r3) getsockname$packet(r5, 0x0, &(0x7f0000002380)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$netlink(0x10, 0x3, 0xc) 4.267275369s ago: executing program 1 (id=422): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x10, &(0x7f0000000600)=ANY=[@ANYRESHEX=r1, @ANYBLOB]) write$FUSE_INIT(r1, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 4.092828756s ago: executing program 2 (id=423): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 4.019601053s ago: executing program 3 (id=424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x8, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 3.64637912s ago: executing program 4 (id=425): socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x101902, 0x0) r1 = openat$mixer(0xffffff9c, &(0x7f00000007c0), 0x300, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000040)) 3.595347375s ago: executing program 2 (id=426): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '}'}, {0x20, 'GPL\xf3'}, {0x20, 'GPL\x00'}, {0x20, ')-'}], 0xa, "a598b349ba6abe4a121cdf1a4989c2991d9b1c4ce58c7fcde415d6ed3b2ec0bcaa150f4ffafa5b48b57a794d4bd47880ed23dc1537db9f317ac99d4a9cf6bc641fa10b5ebc2682cec9c6194095b8939d7d4a2b5b"}, 0x6e) close(r0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.314794953s ago: executing program 4 (id=427): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r4, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [{}, {0x2, 0x6}], {}, [], {0x10, 0x2}}, 0x34, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f0000000780)=0x7d8, &(0x7f0000000180)='%pK \x00'}, 0x20) signalfd(r2, &(0x7f00000001c0)={[0x901]}, 0x8) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000380), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00', 0x4}, 0x1c) sendto$inet6(r5, &(0x7f0000000100)='c', 0x1, 0x28011, &(0x7f0000000200)={0xa, 0x4e20, 0xdc3c, @local, 0x1}, 0x1c) shutdown(r5, 0x1) r6 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={0x1c, r6, 0x225, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x40800) 1.61619168s ago: executing program 32 (id=387): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x7}, 0x8) 1.603726022s ago: executing program 4 (id=429): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) 1.454512466s ago: executing program 2 (id=430): socket(0x1000000000000010, 0x80802, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2c, 0x9}) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x0, 0x2, 0x1}) 1.452939656s ago: executing program 4 (id=431): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 1.436479398s ago: executing program 1 (id=432): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = dup2(r4, r3) getsockname$packet(r5, 0x0, &(0x7f0000002380)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$netlink(0x10, 0x3, 0xc) 1.346408677s ago: executing program 2 (id=433): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000003080)=0x0) io_getevents(r3, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000001940)={0x0, 0x0, 0x0, 0x7, 0x2, r2, 0x0}]) 1.279565963s ago: executing program 4 (id=434): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa32, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.141016378s ago: executing program 3 (id=435): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x4001, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) 319.790528ms ago: executing program 1 (id=436): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000001500)={0x0, 0x0, 0x80}) 250.318805ms ago: executing program 2 (id=437): socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x101902, 0x0) r1 = openat$mixer(0xffffff9c, &(0x7f00000007c0), 0x300, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000040)) 0s ago: executing program 2 (id=438): socket$inet6(0xa, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x41}, 0x14819) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) syz_clone(0x48002000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x801, 0x0) socket$unix(0x1, 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.170' (ED25519) to the list of known hosts. [ 64.895108][ T4172] cgroup: Unknown subsys name 'net' [ 65.060885][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.587063][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.486254][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 68.569196][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.576872][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.585483][ T4186] device bridge_slave_0 entered promiscuous mode [ 68.597936][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.605087][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.612873][ T4186] device bridge_slave_1 entered promiscuous mode [ 68.659463][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.705132][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.772953][ T4186] team0: Port device team_slave_0 added [ 68.782688][ T4186] team0: Port device team_slave_1 added [ 68.829584][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 68.840257][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.847336][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.873584][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.888379][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.895420][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.921463][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.950208][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 68.992146][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 69.064866][ T4186] device hsr_slave_0 entered promiscuous mode [ 69.071730][ T4186] device hsr_slave_1 entered promiscuous mode [ 69.078998][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 69.139718][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.147088][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.155511][ T4184] device bridge_slave_0 entered promiscuous mode [ 69.191297][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.198844][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.207008][ T4184] device bridge_slave_1 entered promiscuous mode [ 69.214300][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.221373][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.229370][ T4185] device bridge_slave_0 entered promiscuous mode [ 69.263877][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.271103][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.278973][ T4185] device bridge_slave_1 entered promiscuous mode [ 69.296965][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.304274][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.312195][ T4191] device bridge_slave_0 entered promiscuous mode [ 69.351157][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.358451][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.366958][ T4191] device bridge_slave_1 entered promiscuous mode [ 69.381809][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.401281][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.427620][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.450432][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.468635][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.475870][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.483701][ T4183] device bridge_slave_0 entered promiscuous mode [ 69.509431][ T4184] team0: Port device team_slave_0 added [ 69.524753][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.542357][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.550024][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.558507][ T4183] device bridge_slave_1 entered promiscuous mode [ 69.577056][ T4184] team0: Port device team_slave_1 added [ 69.584415][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.595893][ T4185] team0: Port device team_slave_0 added [ 69.640700][ T4185] team0: Port device team_slave_1 added [ 69.658273][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.685467][ T4191] team0: Port device team_slave_0 added [ 69.703353][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.710468][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.736930][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.750853][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.760962][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.768595][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.794554][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.807415][ T4191] team0: Port device team_slave_1 added [ 69.813640][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.820869][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.848220][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.863032][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.870192][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.896839][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.955946][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.962929][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.989694][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.012607][ T4183] team0: Port device team_slave_0 added [ 70.026891][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.033891][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.060334][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.079200][ T4184] device hsr_slave_0 entered promiscuous mode [ 70.086175][ T4184] device hsr_slave_1 entered promiscuous mode [ 70.092710][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.100805][ T4184] Cannot create hsr debugfs directory [ 70.117295][ T4183] team0: Port device team_slave_1 added [ 70.142167][ T4185] device hsr_slave_0 entered promiscuous mode [ 70.149140][ T4185] device hsr_slave_1 entered promiscuous mode [ 70.156059][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.163636][ T4185] Cannot create hsr debugfs directory [ 70.193452][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.200723][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.227024][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.253837][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.261066][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.287492][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.305279][ T1326] Bluetooth: hci3: command 0x0409 tx timeout [ 70.314189][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 70.314659][ T1326] Bluetooth: hci2: command 0x0409 tx timeout [ 70.324745][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 70.333587][ T1326] Bluetooth: hci0: command 0x0409 tx timeout [ 70.375804][ T4191] device hsr_slave_0 entered promiscuous mode [ 70.382581][ T4191] device hsr_slave_1 entered promiscuous mode [ 70.389575][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.397282][ T4191] Cannot create hsr debugfs directory [ 70.439376][ T4183] device hsr_slave_0 entered promiscuous mode [ 70.446399][ T4183] device hsr_slave_1 entered promiscuous mode [ 70.453067][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.460795][ T4183] Cannot create hsr debugfs directory [ 70.470331][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.503768][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.543756][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.573554][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.764513][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.774491][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.783957][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.793575][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.866254][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.873904][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.883533][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.895829][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.905519][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.946380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.957872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.972735][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.991887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.001082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.010687][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.017964][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.027540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.037142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.045565][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.052713][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.060751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.109679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.118663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.128347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.137804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.146929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.166722][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.177136][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.196123][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.205583][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.215852][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.225507][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.242988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.252184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.261531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.270648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.294377][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.318910][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.345935][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.348902][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.361136][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.371174][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.392099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.400651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.411838][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.431211][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.448424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.458849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.467608][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.474726][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.483310][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.512293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.552847][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.560216][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.569573][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.578842][ T1268] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.585964][ T1268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.624682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.635297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.645436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.657681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.667066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.675167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.682666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.690870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.700651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.715108][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.726869][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.735803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.745823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.761999][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.772521][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.803914][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.811166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.820210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.830431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.838975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.847381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.857637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.866971][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.874121][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.882184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.890179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.939310][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.970360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.979449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.990214][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.997339][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.006637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.015420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.024077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.031819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.068554][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.078141][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.089706][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.105793][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.120234][ T1268] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.127380][ T1268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.140916][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.150925][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.159700][ T1268] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.166899][ T1268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.177246][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.186136][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.207865][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.224835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.234832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.243941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.253918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.262597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.271929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.281106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.289196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.302272][ T4186] device veth0_vlan entered promiscuous mode [ 72.325000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.336964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.346333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.356891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.367029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.376190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.384424][ T4265] Bluetooth: hci2: command 0x041b tx timeout [ 72.384436][ T4190] Bluetooth: hci0: command 0x041b tx timeout [ 72.390454][ T4265] Bluetooth: hci1: command 0x041b tx timeout [ 72.403425][ T4190] Bluetooth: hci3: command 0x041b tx timeout [ 72.403701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.418399][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 72.421309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.432927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.441779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.450483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.459527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.468333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.477392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.488534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.502848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.511293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.522502][ T4186] device veth1_vlan entered promiscuous mode [ 72.534374][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.551339][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.567177][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.582930][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.593306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.609932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.620196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.654796][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.662938][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.682941][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.697821][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.704982][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.745481][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.753609][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.765749][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.780896][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.788044][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.803848][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.813472][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.828348][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.839396][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.850261][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.864025][ T4186] device veth0_macvtap entered promiscuous mode [ 72.893249][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.910821][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.923057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.933726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.942769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.956669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.965546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.974933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.983359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.990917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.998704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.007580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.019862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.029069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.044368][ T4186] device veth1_macvtap entered promiscuous mode [ 73.055072][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.094126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.102294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.114537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.122036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.131719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.152338][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.176977][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.205334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.216213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.225201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.233549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.242329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.251244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.261242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.271155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.282133][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.306103][ T4184] device veth0_vlan entered promiscuous mode [ 73.326929][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.336306][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.346643][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.355561][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.366704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.376323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.385196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.393873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.411756][ T4183] device veth0_vlan entered promiscuous mode [ 73.423775][ T4184] device veth1_vlan entered promiscuous mode [ 73.433660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.442671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.451794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.461093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.469068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.482038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.490059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.498386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.509536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.522177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.532297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.545930][ T4185] device veth0_vlan entered promiscuous mode [ 73.559791][ T4183] device veth1_vlan entered promiscuous mode [ 73.581045][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.611610][ T4185] device veth1_vlan entered promiscuous mode [ 73.637830][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.659327][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.669965][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.678891][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.688205][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.698212][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.751110][ T4184] device veth0_macvtap entered promiscuous mode [ 73.767421][ T4183] device veth0_macvtap entered promiscuous mode [ 73.784628][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.793646][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.802190][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.817020][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.832882][ T4184] device veth1_macvtap entered promiscuous mode [ 73.845510][ T4183] device veth1_macvtap entered promiscuous mode [ 73.869492][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.877884][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.895537][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.903852][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.919281][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.929547][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.973750][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.986406][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.998983][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.008049][ T4185] device veth0_macvtap entered promiscuous mode [ 74.016047][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.026668][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.037009][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.048144][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.060628][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.081297][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.090462][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.092312][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.109551][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.123305][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.131168][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.140228][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.156067][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.165626][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.174521][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.183205][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.192321][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.201493][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.209714][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.218367][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.230690][ T4185] device veth1_macvtap entered promiscuous mode [ 74.240552][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.251711][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.261976][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.273580][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.285181][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.308413][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.317866][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.328088][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.337420][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.349916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.358566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.370596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.400423][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.410449][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.419599][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.429325][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.456637][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.465932][ T4252] Bluetooth: hci1: command 0x040f tx timeout [ 74.472003][ T4252] Bluetooth: hci3: command 0x040f tx timeout [ 74.488186][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.488228][ T4245] Bluetooth: hci4: command 0x040f tx timeout [ 74.496383][ T4252] Bluetooth: hci0: command 0x040f tx timeout [ 74.509531][ T4252] Bluetooth: hci2: command 0x040f tx timeout [ 74.532667][ T4191] device veth0_vlan entered promiscuous mode [ 74.542898][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.558576][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.571197][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.583113][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.593376][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.604292][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.616159][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.623756][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.636575][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.644670][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.653235][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.691848][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.711174][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.734352][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.750290][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.760833][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.772412][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.791661][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.801931][ T4191] device veth1_vlan entered promiscuous mode [ 74.903717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.935202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.016246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.039378][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.048644][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.063205][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.077574][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.494814][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 75.507840][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 75.521678][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 75.542156][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 75.583286][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 75.630456][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 75.640918][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 75.755532][ T4298] syz.3.4 (4298) used greatest stack depth: 21152 bytes left [ 75.776868][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.798819][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.813147][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.880107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.893182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.904017][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 76.104215][ T4191] device veth0_macvtap entered promiscuous mode [ 76.120462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.175547][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.184238][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.297851][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 76.339009][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.444852][ T4191] device veth1_macvtap entered promiscuous mode [ 76.555052][ T4238] Bluetooth: hci2: command 0x0419 tx timeout [ 76.563079][ T4238] Bluetooth: hci4: command 0x0419 tx timeout [ 76.578557][ T4238] Bluetooth: hci0: command 0x0419 tx timeout [ 76.585701][ T4238] Bluetooth: hci3: command 0x0419 tx timeout [ 76.591788][ T4238] Bluetooth: hci1: command 0x0419 tx timeout [ 76.672121][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.681186][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.694309][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.706657][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.717993][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.734212][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.751065][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.760850][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.773403][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.785590][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.798258][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.824598][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.832629][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.876638][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.897970][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.906249][ T4309] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 76.915718][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.926993][ T4309] CUSE: unknown device info "3ܟ,̘" [ 76.933026][ T4309] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 76.933026][ T4309] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 76.953328][ T4309] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 76.962062][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.966342][ T4309] CUSE: DEVNAME unspecified [ 76.991965][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.003105][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.022151][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.022214][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.049858][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.061455][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.072701][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.085984][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.096671][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.108243][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.132511][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.159530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.174823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.187906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.205687][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.221066][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.240431][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.255275][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.264880][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.277019][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.310291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.056659][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 78.065937][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 78.075015][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 78.084094][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 78.094042][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 78.646433][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.655425][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 78.664527][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 78.990757][ T1268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.019272][ T1268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.262740][ T4335] input: syz1 as /devices/virtual/input/input5 [ 80.524636][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.720787][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.737351][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.783741][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.984640][ T4353] IPv6: Can't replace route, no match found [ 82.621332][ T4354] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 82.698812][ T4356] ======================================================= [ 82.698812][ T4356] WARNING: The mand mount option has been deprecated and [ 82.698812][ T4356] and is ignored by this kernel. Remove the mand [ 82.698812][ T4356] option from the mount to silence this warning. [ 82.698812][ T4356] ======================================================= [ 82.830341][ T4358] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.936437][ T4384] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 84.944075][ T4384] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 84.953405][ T4384] comedi comedi3: 8255: I/O port conflict (0x16,4) [ 84.961163][ T4384] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 84.970637][ T4384] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 84.981667][ T4384] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 84.988752][ T4384] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 84.995934][ T4384] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 85.008246][ T4384] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 85.017393][ T4384] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 85.024027][ T4384] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 85.031426][ T4384] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 85.038400][ T4384] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 85.046535][ T4384] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 85.053162][ T4384] comedi comedi3: 8255: I/O port conflict (0x80009,4) [ 85.061398][ T4384] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 85.070397][ T4384] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 85.081435][ T4384] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 85.091399][ T4384] comedi comedi3: 8255: I/O port conflict (0x40000004,4) [ 85.099779][ T4384] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 85.108390][ T4384] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 85.117625][ T4384] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 85.128498][ T4384] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 85.137804][ T4384] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 85.145633][ T4384] comedi comedi3: 8255: I/O port conflict (0x995d000,4) [ 85.582888][ T4388] vcan0: tx address claim with dlc 0 [ 86.707568][ T1107] cfg80211: failed to load regulatory.db [ 87.391523][ T4433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 89.016744][ T4459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 89.636827][ T4467] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.718473][ T4467] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 90.682394][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.827067][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 92.554286][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.604144][ T13] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 92.700792][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 92.741770][ T13] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 92.939790][ T13] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 93.052285][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.052338][ T13] usb 4-1: Product: syz [ 93.052355][ T13] usb 4-1: Manufacturer: syz [ 93.052371][ T13] usb 4-1: SerialNumber: syz [ 93.734050][ T13] usb 4-1: config 0 descriptor?? [ 93.830787][ T13] usb 4-1: can't set config #0, error -71 [ 93.835521][ T13] usb 4-1: USB disconnect, device number 2 [ 93.904558][ T4534] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 94.464847][ T4548] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 95.392141][ T150] block nbd1: Attempted send on invalid socket [ 95.399476][ T150] blk_update_request: I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.988495][ T4586] capability: warning: `syz.3.68' uses deprecated v2 capabilities in a way that may be insecure [ 99.131719][ T4587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.67'. [ 99.855068][ T4596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.71'. [ 99.884502][ T4596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.71'. [ 99.936345][ T4596] netlink: 'syz.3.71': attribute type 2 has an invalid length. [ 100.165619][ T4600] tipc: Started in network mode [ 100.196280][ T4600] tipc: Node identity ba859acf9c1b, cluster identity 4711 [ 100.224341][ T4600] tipc: Enabled bearer , priority 0 [ 100.560344][ T4612] Zero length message leads to an empty skb [ 100.629667][ T4598] tipc: Resetting bearer [ 101.359243][ T4238] tipc: Node number set to 647928527 [ 101.612048][ T4598] tipc: Disabling bearer [ 102.566171][ T4633] netlink: 116 bytes leftover after parsing attributes in process `syz.0.79'. [ 103.833903][ T4652] input: syz0 as /devices/virtual/input/input6 [ 105.863203][ T4673] IPVS: fo: FWM 3 0x00000003 - no destination available [ 105.896490][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 108.260435][ T150] block nbd4: Attempted send on invalid socket [ 108.266992][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 108.280013][ T4705] SQUASHFS error: Failed to read block 0x0: -5 [ 108.287430][ T4705] unable to read squashfs_super_block [ 108.694981][ T4711] netlink: 'syz.4.103': attribute type 10 has an invalid length. [ 108.977164][ T4711] team0: Device veth1_vlan failed to register rx_handler [ 111.395378][ T4743] netlink: 'syz.1.115': attribute type 15 has an invalid length. [ 114.349719][ T4770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.123'. [ 114.535959][ T4770] device vlan2 entered promiscuous mode [ 114.544146][ T4770] device ip6gretap0 entered promiscuous mode [ 115.914203][ T4190] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.404628][ T4190] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.500412][ T4190] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.657903][ T4190] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.662536][ T150] block nbd4: Attempted send on invalid socket [ 116.677476][ T150] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.703756][ T4811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.136'. [ 116.983368][ T4813] netlink: 'syz.1.135': attribute type 33 has an invalid length. [ 116.991310][ T4813] netlink: 51 bytes leftover after parsing attributes in process `syz.1.135'. [ 117.299716][ T4190] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.998782][ T4190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.246723][ T4190] usb 3-1: config 0 descriptor?? [ 118.413631][ T4825] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.750079][ T4190] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 119.596189][ T4190] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 119.638872][ T4841] binder: 4838:4841 ioctl c0306201 2000000002c0 returned -14 [ 119.698426][ T4190] usb 3-1: USB disconnect, device number 2 [ 121.913923][ T4864] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 122.011165][ T4850] fido_id[4850]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 123.736594][ T4897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.162'. [ 124.892255][ T4903] tipc: Enabling of bearer rejected, failed to enable media [ 125.522899][ T4914] crypto_alloc_aead failed rc=-2 [ 127.762467][ T4949] netlink: 'syz.4.175': attribute type 3 has an invalid length. [ 129.113995][ T4961] ksmbd: Unknown IPC event: 6, ignore. [ 129.684108][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 129.954337][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 130.109358][ T13] usb 5-1: config 0 has an invalid interface number: 203 but max is 0 [ 130.127853][ T13] usb 5-1: config 0 has no interface number 0 [ 130.227426][ T4973] netlink: 116 bytes leftover after parsing attributes in process `syz.2.182'. [ 130.354436][ T13] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a5e, bcdDevice=33.6d [ 130.394067][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.402112][ T13] usb 5-1: Product: syz [ 130.434048][ T13] usb 5-1: Manufacturer: syz [ 130.448915][ T13] usb 5-1: SerialNumber: syz [ 130.481791][ T13] usb 5-1: config 0 descriptor?? [ 130.788221][ T13] usb 5-1: USB disconnect, device number 2 [ 132.214161][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 132.535522][ T4300] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 132.616095][ T13] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 132.639586][ T13] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 132.673034][ T13] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.706209][ T13] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 132.723813][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.845245][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.887366][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.777270][ T13] usb 2-1: invalid MIDI out EP 0 [ 133.914854][ T4300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 134.804362][ T5017] sched: RT throttling activated [ 134.908712][ T4300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.928760][ T4300] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 134.941058][ T4300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.971193][ T4300] usb 3-1: config 0 descriptor?? [ 134.982393][ T13] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 135.035332][ T4300] hub 3-1:0.0: USB hub found [ 135.087404][ T5041] netlink: 116 bytes leftover after parsing attributes in process `syz.3.194'. [ 135.136514][ T4351] udevd[4351]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.194692][ T4300] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 136.275504][ T4190] usb 2-1: USB disconnect, device number 2 [ 136.594228][ T4300] usbhid 3-1:0.0: can't add hid device: -71 [ 136.610690][ T4300] usbhid: probe of 3-1:0.0 failed with error -71 [ 136.799624][ T4300] usb 3-1: USB disconnect, device number 3 [ 136.939577][ T5066] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.242281][ T5081] netlink: 24 bytes leftover after parsing attributes in process `syz.3.204'. [ 138.694147][ T4312] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 139.444339][ T4312] usb 4-1: Using ep0 maxpacket: 32 [ 139.564220][ T4312] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 139.663006][ T4312] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 139.975615][ T4312] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 140.013373][ T4312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.056737][ T4312] usb 4-1: Product: syz [ 140.060962][ T4312] usb 4-1: Manufacturer: syz [ 140.076088][ T4312] usb 4-1: SerialNumber: syz [ 140.112122][ T4312] usb 4-1: config 0 descriptor?? [ 140.574060][ T4254] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 140.640872][ T13] usb 4-1: USB disconnect, device number 3 [ 140.716611][ T5108] netlink: 116 bytes leftover after parsing attributes in process `syz.4.213'. [ 140.850051][ T4254] usb 2-1: Using ep0 maxpacket: 32 [ 140.994253][ T4254] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 141.009732][ T4254] usb 2-1: config 0 has no interface number 0 [ 141.204404][ T4254] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 141.217821][ T4254] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.230189][ T4254] usb 2-1: Product: syz [ 141.237416][ T4254] usb 2-1: Manufacturer: syz [ 141.242199][ T4254] usb 2-1: SerialNumber: syz [ 141.271303][ T4254] usb 2-1: config 0 descriptor?? [ 141.329450][ T4254] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 141.606038][ T4254] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 141.631255][ T4254] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 142.231831][ T4174] usb 2-1: USB disconnect, device number 3 [ 142.254040][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 142.348073][ T4174] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 142.394450][ T5132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.219'. [ 142.453873][ T4174] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 142.523814][ T5138] device syzkaller0 entered promiscuous mode [ 142.530916][ T4174] quatech2 2-1:0.51: device disconnected [ 143.554960][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 144.304573][ T13] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 144.320250][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.336086][ T13] usb 5-1: config 0 descriptor?? [ 144.905238][ T13] cp210x 5-1:0.0: cp210x converter detected [ 145.384177][ T13] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 145.456202][ T5195] device syzkaller0 entered promiscuous mode [ 145.462706][ T13] usb 5-1: cp210x converter now attached to ttyUSB0 [ 145.917549][ T4174] usb 5-1: USB disconnect, device number 3 [ 146.053912][ T4174] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 146.391831][ T4174] cp210x 5-1:0.0: device disconnected [ 149.152478][ T5233] process 'syz.2.248' launched './file1' with NULL argv: empty string added [ 149.849765][ T5244] device syzkaller0 entered promiscuous mode [ 151.374440][ T5266] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 151.381169][ T5266] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 151.396815][ T5266] comedi comedi3: 8255: I/O port conflict (0x16,4) [ 151.411068][ T5266] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 151.422384][ T5266] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 151.438347][ T5266] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 151.450132][ T5266] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 151.458021][ T5266] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 151.483402][ T5266] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 151.490349][ T5266] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 151.499272][ T5266] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 151.513656][ T5266] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 151.525964][ T5266] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 151.532475][ T5266] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 151.541325][ T5266] comedi comedi3: 8255: I/O port conflict (0x80009,4) [ 151.551193][ T5266] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 151.559351][ T5266] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 151.569652][ T5266] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 151.755916][ T5266] comedi comedi3: 8255: I/O port conflict (0x40000004,4) [ 151.946186][ T5266] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 151.953472][ T5266] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 151.963548][ T5266] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 151.983736][ T5266] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 152.550908][ T5266] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 152.557719][ T5266] comedi comedi3: 8255: I/O port conflict (0x995d000,4) [ 153.039171][ T5287] device syzkaller0 entered promiscuous mode [ 156.794024][ T4301] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 157.024044][ T4245] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 157.085104][ T5332] device syzkaller0 entered promiscuous mode [ 157.224303][ T4301] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 157.273997][ T4301] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 157.319963][ T4301] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 157.364047][ T4301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.428512][ T4301] usb 2-1: invalid MIDI out EP 0 [ 157.559500][ T4245] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 157.568759][ T4301] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 157.599243][ T4350] udevd[4350]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.621881][ T4245] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.764203][ T4245] usb 1-1: Product: syz [ 157.768466][ T4245] usb 1-1: Manufacturer: syz [ 157.773093][ T4245] usb 1-1: SerialNumber: syz [ 158.567599][ T4245] usb 1-1: config 0 descriptor?? [ 158.814333][ T4245] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 160.182499][ T4301] usb 2-1: USB disconnect, device number 4 [ 160.647490][ T5329] udc-core: couldn't find an available UDC or it's busy [ 160.734134][ T5329] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 160.782755][ T5366] netlink: 'syz.1.290': attribute type 3 has an invalid length. [ 161.315945][ T4245] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 161.367712][ T4245] usb 1-1: USB disconnect, device number 2 [ 162.873011][ T1107] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 162.903132][ T5389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 163.124092][ T1107] usb 3-1: Using ep0 maxpacket: 32 [ 163.394533][ T1107] usb 3-1: config 0 has an invalid interface number: 209 but max is 0 [ 163.421663][ T1107] usb 3-1: config 0 has no interface number 0 [ 163.692561][ T1107] usb 3-1: config 0 interface 209 has no altsetting 0 [ 164.709680][ T1107] usb 3-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 164.719012][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.728063][ T1107] usb 3-1: Product: syz [ 164.732265][ T1107] usb 3-1: Manufacturer: syz [ 164.749554][ T1107] usb 3-1: config 0 descriptor?? [ 164.808509][ T1107] usb 3-1: can't set config #0, error -71 [ 164.892801][ T1107] usb 3-1: USB disconnect, device number 4 [ 165.415822][ T5420] netlink: 'syz.4.303': attribute type 3 has an invalid length. [ 166.670959][ T5432] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 166.680518][ T5432] overlayfs: missing 'lowerdir' [ 173.313376][ T5467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.317'. [ 174.075600][ T5481] netlink: 20 bytes leftover after parsing attributes in process `syz.2.319'. [ 178.050174][ T5516] netlink: 116 bytes leftover after parsing attributes in process `syz.1.332'. [ 180.565720][ T5535] netlink: 'syz.1.337': attribute type 3 has an invalid length. [ 181.741878][ T5546] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 182.401654][ T5557] netlink: 116 bytes leftover after parsing attributes in process `syz.3.344'. [ 183.808475][ T5572] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 183.914049][ T5578] ksmbd: Unknown IPC event: 6, ignore. [ 184.704173][ T4312] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 184.835386][ T5584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.351'. [ 184.954095][ T4312] usb 4-1: Using ep0 maxpacket: 16 [ 185.074274][ T4312] usb 4-1: config 0 has an invalid interface number: 203 but max is 0 [ 185.113650][ T4312] usb 4-1: config 0 has no interface number 0 [ 185.236371][ T5589] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 186.195098][ T4312] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a5e, bcdDevice=33.6d [ 186.358668][ T4312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.384047][ T4312] usb 4-1: Product: syz [ 186.944921][ T4312] usb 4-1: Manufacturer: syz [ 186.950277][ T4312] usb 4-1: SerialNumber: syz [ 186.957823][ T4312] usb 4-1: config 0 descriptor?? [ 187.044110][ T4312] usb 4-1: can't set config #0, error -71 [ 187.152640][ T4312] usb 4-1: USB disconnect, device number 4 [ 187.406336][ T5607] netlink: 116 bytes leftover after parsing attributes in process `syz.3.358'. [ 188.704158][ T1107] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 189.935304][ T1107] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.987829][ T1107] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.032795][ T5642] ksmbd: Unknown IPC event: 6, ignore. [ 190.104607][ T1107] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 190.134002][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 190.142734][ T1107] usb 1-1: SerialNumber: syz [ 190.298058][ T1107] usb 1-1: 0:2 : does not exist [ 190.535139][ T4301] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 190.833217][ T4301] usb 2-1: Using ep0 maxpacket: 16 [ 191.094093][ T1107] usb 1-1: USB disconnect, device number 3 [ 191.355406][ T4254] Bluetooth: hci4: command 0x0406 tx timeout [ 191.477806][ T4254] Bluetooth: hci2: command 0x0406 tx timeout [ 191.483912][ T4254] Bluetooth: hci1: command 0x0406 tx timeout [ 191.514300][ T4301] usb 2-1: config 0 has an invalid interface number: 203 but max is 0 [ 191.526502][ T4301] usb 2-1: config 0 has no interface number 0 [ 191.774281][ T4301] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a5e, bcdDevice=33.6d [ 191.786759][ T4301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.061537][ T4301] usb 2-1: Product: syz [ 192.061558][ T4301] usb 2-1: Manufacturer: syz [ 192.061573][ T4301] usb 2-1: SerialNumber: syz [ 192.063384][ T4301] usb 2-1: config 0 descriptor?? [ 192.197146][ T5656] netlink: 116 bytes leftover after parsing attributes in process `syz.4.375'. [ 193.620717][ T5675] binder: 5674:5675 ioctl 4018620d 0 returned -22 [ 193.668348][ T4265] usb 2-1: USB disconnect, device number 5 [ 193.728558][ T5679] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 194.228500][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.236107][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.901012][ T5726] ksmbd: Unknown IPC event: 6, ignore. [ 198.514047][ T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 198.804120][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 198.955069][ T13] usb 2-1: config 0 has an invalid interface number: 203 but max is 0 [ 198.972066][ T13] usb 2-1: config 0 has no interface number 0 [ 199.154186][ T13] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a5e, bcdDevice=33.6d [ 199.169648][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.188501][ T13] usb 2-1: Product: syz [ 199.199119][ T13] usb 2-1: Manufacturer: syz [ 199.208725][ T13] usb 2-1: SerialNumber: syz [ 199.225603][ T13] usb 2-1: config 0 descriptor?? [ 199.381813][ T5734] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 199.575602][ T13] usb 2-1: USB disconnect, device number 6 [ 201.059176][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 202.774895][ T4301] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 203.204403][ T4301] usb 3-1: Using ep0 maxpacket: 32 [ 204.304345][ T4301] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 204.532944][ T5783] ufs: You didn't specify the type of your ufs filesystem [ 204.532944][ T5783] [ 204.532944][ T5783] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 204.532944][ T5783] [ 204.532944][ T5783] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 204.564349][ T5783] ufs: ufstype=old is supported read-only [ 204.575426][ T5783] blk_update_request: I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.156188][ T5783] bond0: (slave bond_slave_1): Releasing backup interface [ 205.524317][ T4301] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 205.599221][ T4301] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 205.654111][ T4312] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 205.752787][ T4301] usb 3-1: Product: syz [ 205.924571][ T4301] usb 3-1: config 0 descriptor?? [ 206.034342][ T4301] usb 3-1: can't set config #0, error -71 [ 206.044598][ T4312] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 206.114373][ T4312] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.194759][ T4301] usb 3-1: USB disconnect, device number 5 [ 206.285040][ T5792] syz.2.414 uses obsolete (PF_INET,SOCK_PACKET) [ 206.366653][ T26] audit: type=1326 audit(1760848221.710:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541cf24fc9 code=0x7ffc0000 [ 206.404252][ T4312] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 206.432446][ T4312] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 206.470658][ T4312] usb 5-1: Product: syz [ 206.484032][ T4312] usb 5-1: Manufacturer: syz [ 206.489876][ T26] audit: type=1326 audit(1760848221.710:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f541cf24fc9 code=0x7ffc0000 [ 206.504129][ T4312] usb 5-1: SerialNumber: syz [ 206.578814][ T4312] usb 5-1: config 0 descriptor?? [ 206.594804][ T26] audit: type=1326 audit(1760848221.710:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541cf24fc9 code=0x7ffc0000 [ 206.617869][ T4312] usb 5-1: selecting invalid altsetting 0 [ 206.714130][ T26] audit: type=1326 audit(1760848221.710:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f541cf24fc9 code=0x7ffc0000 [ 206.764684][ T5798] netlink: 92 bytes leftover after parsing attributes in process `syz.3.417'. [ 206.841017][ T26] audit: type=1326 audit(1760848221.710:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541cf24fc9 code=0x7ffc0000 [ 206.889456][ T4265] usb 5-1: USB disconnect, device number 4 [ 206.961439][ T26] audit: type=1326 audit(1760848221.790:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5793 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541cf24fc9 code=0x7ffc0000 [ 207.248967][ T26] audit: type=1326 audit(1760848221.930:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541cf24fc9 code=0x7ffc0000 [ 207.846178][ T26] audit: type=1326 audit(1760848221.970:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f541cf24fc9 code=0x7ffc0000 [ 207.870054][ T26] audit: type=1326 audit(1760848221.970:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541cf24fc9 code=0x7ffc0000 [ 207.893376][ T26] audit: type=1326 audit(1760848221.970:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541cf24fc9 code=0x7ffc0000 [ 211.973052][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 211.973067][ T26] audit: type=1326 audit(1760848227.310:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5858 comm="syz.1.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541cf24fc9 code=0x7ffc0000 [ 212.101105][ T5549] ================================================================== [ 212.109606][ T5549] BUG: KASAN: use-after-free in __mutex_lock_common+0xc85/0x2390 [ 212.117357][ T5549] Read of size 8 at addr ffff88807ea28060 by task khidpd_15c25886/5549 [ 212.125613][ T5549] [ 212.127986][ T5549] CPU: 1 PID: 5549 Comm: khidpd_15c25886 Not tainted syzkaller #0 [ 212.135823][ T5549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 212.145911][ T5549] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 212.149215][ T5549] [ 212.152163][ T5549] dump_stack_lvl+0x168/0x230 [ 212.156906][ T5549] ? show_regs_print_info+0x20/0x20 [ 212.162146][ T5549] ? load_image+0x3b0/0x3b0 [ 212.166683][ T5549] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 212.172084][ T5549] ? release_firmware_map_entry+0x190/0x190 [ 212.178007][ T5549] print_address_description+0x60/0x2d0 [ 212.183577][ T5549] ? __mutex_lock_common+0xc85/0x2390 [ 212.188965][ T5549] kasan_report+0xdf/0x130 [ 212.193391][ T5549] ? __mutex_lock_common+0xc85/0x2390 [ 212.198778][ T5549] __mutex_lock_common+0xc85/0x2390 [ 212.204017][ T5549] ? l2cap_unregister_user+0x66/0x1a0 [ 212.209400][ T5549] ? mutex_lock_io_nested+0x60/0x60 [ 212.214612][ T5549] ? timer_delete_sync+0x1cf/0x260 [ 212.219732][ T5549] ? try_to_del_timer_sync+0x1b0/0x1b0 [ 212.225205][ T5549] ? _raw_spin_unlock+0x40/0x40 [ 212.230064][ T5549] mutex_lock_nested+0x17/0x20 [ 212.234839][ T5549] l2cap_unregister_user+0x66/0x1a0 [ 212.240052][ T5549] hidp_session_thread+0x3c4/0x400 [ 212.245184][ T5549] ? hidp_session_get+0x80/0x80 [ 212.250045][ T5549] ? hidp_session_thread+0x400/0x400 [ 212.255337][ T5549] ? _raw_spin_unlock+0x40/0x40 [ 212.260196][ T5549] ? hidp_session_thread+0x400/0x400 [ 212.265486][ T5549] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 212.271387][ T5549] ? __kthread_parkme+0x157/0x1b0 [ 212.276420][ T5549] kthread+0x436/0x520 [ 212.280495][ T5549] ? hidp_session_get+0x80/0x80 [ 212.285354][ T5549] ? kthread_blkcg+0xd0/0xd0 [ 212.289994][ T5549] ret_from_fork+0x1f/0x30 [ 212.294428][ T5549] [ 212.297465][ T5549] [ 212.299796][ T5549] Allocated by task 4185: [ 212.304121][ T5549] __kasan_kmalloc+0xb5/0xf0 [ 212.308716][ T5549] hci_alloc_dev_priv+0x23/0x1d20 [ 212.313746][ T5549] vhci_create_device+0x122/0x5c0 [ 212.318774][ T5549] vhci_write+0x391/0x450 [ 212.323114][ T5549] vfs_write+0x712/0xd00 [ 212.327360][ T5549] ksys_write+0x14d/0x250 [ 212.331692][ T5549] do_syscall_64+0x4c/0xa0 [ 212.336108][ T5549] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 212.342008][ T5549] [ 212.344339][ T5549] Freed by task 5695: [ 212.348316][ T5549] kasan_set_track+0x4b/0x70 [ 212.352910][ T5549] kasan_set_free_info+0x1f/0x40 [ 212.357852][ T5549] ____kasan_slab_free+0xd5/0x110 [ 212.362886][ T5549] slab_free_freelist_hook+0xea/0x170 [ 212.368265][ T5549] kfree+0xef/0x2a0 [ 212.372078][ T5549] hci_release_dev+0x1378/0x14e0 [ 212.377034][ T5549] bt_host_release+0x7e/0x90 [ 212.381626][ T5549] device_release+0x92/0x1c0 [ 212.386218][ T5549] kobject_put+0x21d/0x460 [ 212.390635][ T5549] vhci_release+0x7b/0xc0 [ 212.394976][ T5549] __fput+0x234/0x930 [ 212.398964][ T5549] task_work_run+0x125/0x1a0 [ 212.403554][ T5549] do_exit+0x61e/0x20a0 [ 212.407710][ T5549] do_group_exit+0x12e/0x300 [ 212.412339][ T5549] get_signal+0x6ca/0x12c0 [ 212.416756][ T5549] arch_do_signal_or_restart+0xc1/0x1300 [ 212.422408][ T5549] exit_to_user_mode_loop+0x9e/0x130 [ 212.427711][ T5549] exit_to_user_mode_prepare+0xee/0x180 [ 212.433273][ T5549] syscall_exit_to_user_mode+0x16/0x40 [ 212.438751][ T5549] do_syscall_64+0x58/0xa0 [ 212.443177][ T5549] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 212.449085][ T5549] [ 212.451411][ T5549] Last potentially related work creation: [ 212.457129][ T5549] kasan_save_stack+0x35/0x60 [ 212.461816][ T5549] kasan_record_aux_stack+0xb8/0x100 [ 212.467116][ T5549] insert_work+0x54/0x3d0 [ 212.471463][ T5549] __queue_work+0x9c5/0xd50 [ 212.475978][ T5549] queue_work_on+0x11d/0x1d0 [ 212.480581][ T5549] l2cap_chan_send+0x39f/0x2590 [ 212.485569][ T5549] l2cap_sock_sendmsg+0x1aa/0x2b0 [ 212.490604][ T5549] kernel_sendmsg+0x1f8/0x2e0 [ 212.495285][ T5549] hidp_process_transmit+0x16a/0x330 [ 212.500574][ T5549] hidp_session_run+0x1359/0x1450 [ 212.505603][ T5549] hidp_session_thread+0x289/0x400 [ 212.510743][ T5549] kthread+0x436/0x520 [ 212.514818][ T5549] ret_from_fork+0x1f/0x30 [ 212.519239][ T5549] [ 212.521562][ T5549] Second to last potentially related work creation: [ 212.528141][ T5549] kasan_save_stack+0x35/0x60 [ 212.532822][ T5549] kasan_record_aux_stack+0xb8/0x100 [ 212.538127][ T5549] insert_work+0x54/0x3d0 [ 212.542460][ T5549] __queue_work+0x9c5/0xd50 [ 212.546963][ T5549] queue_work_on+0x11d/0x1d0 [ 212.551550][ T5549] process_one_work+0x863/0x1000 [ 212.556484][ T5549] worker_thread+0xaa8/0x12a0 [ 212.561175][ T5549] kthread+0x436/0x520 [ 212.565253][ T5549] ret_from_fork+0x1f/0x30 [ 212.569670][ T5549] [ 212.571994][ T5549] The buggy address belongs to the object at ffff88807ea28000 [ 212.571994][ T5549] which belongs to the cache kmalloc-8k of size 8192 [ 212.586052][ T5549] The buggy address is located 96 bytes inside of [ 212.586052][ T5549] 8192-byte region [ffff88807ea28000, ffff88807ea2a000) [ 212.599355][ T5549] The buggy address belongs to the page: [ 212.604995][ T5549] page:ffffea0001fa8a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ea28 [ 212.615148][ T5549] head:ffffea0001fa8a00 order:3 compound_mapcount:0 compound_pincount:0 [ 212.623475][ T5549] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 212.631465][ T5549] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016842280 [ 212.640050][ T5549] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 212.648628][ T5549] page dumped because: kasan: bad access detected [ 212.655048][ T5549] page_owner tracks the page as allocated [ 212.660761][ T5549] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4185, ts 68198310762, free_ts 67954307629 [ 212.679884][ T5549] get_page_from_freelist+0x1b77/0x1c60 [ 212.685469][ T5549] __alloc_pages+0x1e1/0x470 [ 212.690066][ T5549] new_slab+0xc0/0x4b0 [ 212.694144][ T5549] ___slab_alloc+0x81e/0xdf0 [ 212.698739][ T5549] __kmalloc+0x1cd/0x330 [ 212.703025][ T5549] hci_alloc_dev_priv+0x23/0x1d20 [ 212.708052][ T5549] vhci_create_device+0x122/0x5c0 [ 212.713078][ T5549] vhci_write+0x391/0x450 [ 212.717407][ T5549] vfs_write+0x712/0xd00 [ 212.721651][ T5549] ksys_write+0x14d/0x250 [ 212.726000][ T5549] do_syscall_64+0x4c/0xa0 [ 212.730416][ T5549] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 212.736311][ T5549] page last free stack trace: [ 212.740986][ T5549] free_unref_page_prepare+0x637/0x6c0 [ 212.746465][ T5549] free_unref_page+0x94/0x280 [ 212.751154][ T5549] skb_release_data+0x3fa/0x850 [ 212.756018][ T5549] __kfree_skb+0x4c/0x60 [ 212.760272][ T5549] tcp_recvmsg_locked+0x14d5/0x2760 [ 212.765485][ T5549] tcp_recvmsg+0x350/0x710 [ 212.769906][ T5549] inet_recvmsg+0x136/0x1e0 [ 212.774436][ T5549] sock_read_iter+0x2a2/0x340 [ 212.779119][ T5549] vfs_read+0x725/0xcf0 [ 212.783274][ T5549] ksys_read+0x14d/0x250 [ 212.787519][ T5549] do_syscall_64+0x4c/0xa0 [ 212.791946][ T5549] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 212.797839][ T5549] [ 212.800164][ T5549] Memory state around the buggy address: [ 212.805788][ T5549] ffff88807ea27f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 212.813846][ T5549] ffff88807ea27f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 212.821907][ T5549] >ffff88807ea28000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 212.829981][ T5549] ^ [ 212.837176][ T5549] ffff88807ea28080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 212.845236][ T5549] ffff88807ea28100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 212.853294][ T5549] ================================================================== [ 212.861349][ T5549] Disabling lock debugging due to kernel taint [ 212.868627][ T5549] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 212.875857][ T5549] CPU: 1 PID: 5549 Comm: khidpd_15c25886 Tainted: G B syzkaller #0 [ 212.885070][ T5549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 212.895139][ T5549] Call Trace: [ 212.898428][ T5549] [ 212.901370][ T5549] dump_stack_lvl+0x168/0x230 [ 212.906070][ T5549] ? show_regs_print_info+0x20/0x20 [ 212.911828][ T5549] ? load_image+0x3b0/0x3b0 [ 212.916355][ T5549] panic+0x2c9/0x7f0 [ 212.920279][ T5549] ? bpf_jit_dump+0xd0/0xd0 [ 212.924796][ T5549] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 212.930713][ T5549] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 212.936633][ T5549] ? _raw_spin_unlock+0x40/0x40 [ 212.941496][ T5549] ? __mutex_lock_common+0xc85/0x2390 [ 212.946884][ T5549] check_panic_on_warn+0x80/0xa0 [ 212.951836][ T5549] ? __mutex_lock_common+0xc85/0x2390 [ 212.957250][ T5549] end_report+0x6d/0xf0 [ 212.961425][ T5549] kasan_report+0x102/0x130 [ 212.966195][ T5549] ? __mutex_lock_common+0xc85/0x2390 [ 212.971591][ T5549] __mutex_lock_common+0xc85/0x2390 [ 212.976820][ T5549] ? l2cap_unregister_user+0x66/0x1a0 [ 212.982216][ T5549] ? mutex_lock_io_nested+0x60/0x60 [ 212.987444][ T5549] ? timer_delete_sync+0x1cf/0x260 [ 212.992575][ T5549] ? try_to_del_timer_sync+0x1b0/0x1b0 [ 212.998055][ T5549] ? _raw_spin_unlock+0x40/0x40 [ 213.002935][ T5549] mutex_lock_nested+0x17/0x20 [ 213.007726][ T5549] l2cap_unregister_user+0x66/0x1a0 [ 213.013009][ T5549] hidp_session_thread+0x3c4/0x400 [ 213.018314][ T5549] ? hidp_session_get+0x80/0x80 [ 213.023188][ T5549] ? hidp_session_thread+0x400/0x400 [ 213.028497][ T5549] ? _raw_spin_unlock+0x40/0x40 [ 213.033369][ T5549] ? hidp_session_thread+0x400/0x400 [ 213.038695][ T5549] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 213.044609][ T5549] ? __kthread_parkme+0x157/0x1b0 [ 213.049659][ T5549] kthread+0x436/0x520 [ 213.053746][ T5549] ? hidp_session_get+0x80/0x80 [ 213.058611][ T5549] ? kthread_blkcg+0xd0/0xd0 [ 213.063218][ T5549] ret_from_fork+0x1f/0x30 [ 213.067678][ T5549] [ 213.070931][ T5549] Kernel Offset: disabled [ 213.075264][ T5549] Rebooting in 86400 seconds..