last executing test programs: 7.505356449s ago: executing program 3 (id=147): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={'veth0_to_bridge\x00', {0x2, 0x4e24, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 6.577514845s ago: executing program 3 (id=151): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x8, @loopback, 0x80000001}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="3a10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x4040084) 6.493116046s ago: executing program 0 (id=153): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x20, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x2000e}}, 0x20}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x8d) syz_io_uring_setup(0x68e9, 0x0, &(0x7f0000000480), &(0x7f0000000340)) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000100)=ANY=[], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r10 = add_key$keyring(0x0, &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, r9) r11 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, r10) keyctl$KEYCTL_MOVE(0x1e, r9, r9, r11, 0x1) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x70, r12, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbe}, @TIPC_NLA_PROP_WIN={0xfffffffffffffcd9, 0x3, 0x3}]}]}]}, 0x70}}, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, 0x0) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, 0x0) 6.352979548s ago: executing program 4 (id=154): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x417, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000080), 0x3a7) syz_io_uring_setup(0x5b4b, &(0x7f0000000000)={0x0, 0x3387, 0x2, 0x1, 0x160}, &(0x7f0000000080), &(0x7f00000001c0)) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000180)='~', 0x1}], 0x1) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x1d4c, 0x0, 0x0) 5.301724005s ago: executing program 4 (id=155): creat(&(0x7f0000000180)='./file0\x00', 0x140) mount$overlay(0x0, &(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0), 0x1000000, &(0x7f0000001c40)={[{@nfs_export_off}]}) 5.243889534s ago: executing program 0 (id=156): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x20}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000640)={0xa, 0x4e26, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0xb}, 0x1c) write$binfmt_script(r1, &(0x7f0000000a00)={'#! ', './file0'}, 0xb) 4.899527304s ago: executing program 0 (id=158): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x2e]}}, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 4.772666578s ago: executing program 0 (id=160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x8002, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0xfd}}, 0x1c) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.466351073s ago: executing program 4 (id=162): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="03848e14ed9ebe73140d95a82cc0821b77bdf7b87406e95e8c0d01294a095b551eb82fde33c995eb9f44406ac88876cb2a3290fc988e9ad91c38fd4347adc7b82cf6ee0701fa9b6fe6b06db870bf71162f50d9dd2e684156223f099c16fe7a445b53c10649b22a7c3ee47e1964f20a8ebfbf727b94cf4898e65edcb7f8da528cf24ebca74eed11edcfab3f5fe5d2e870f90c7e0b03cbf6d43bd19f"], &(0x7f0000000240)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000200)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000002c0)="728cada2"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40111}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_LOCAL={0x8, 0x4, @multicast1}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x100}]]}}}]}, 0x48}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f0000000080)={0x80000001, 0x5, 0x13508422, 0x3ff}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=r10, @ANYBLOB='\v\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="e8bdc968689c74b3d1c6a05140570eaf82a33a7f8fec67cae75bed3cdea2fd93d903b367b9cd5bfacd63c25ec334e8c83375ec8eb56aa15c8cd30104f55705189611d69f901bb7e8f52c93be5e61f523c3c955e0bc2dc16fc8dc789d70e54a14e2dccdeb32", @ANYRES64=0x0], 0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r11}, 0x10) socket$unix(0x1, 0x5, 0x0) 3.767893646s ago: executing program 0 (id=164): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000994bd740f60d5600b5a0000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x0, 0x7, 0x6, "aa2d11a363fd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000280)={0x20, 0x1, 0x43, "e5e212ab9200c77c097ab5189a501d7c869a3265d42e8bde4f39186c8999301cd1e771e7e6f617f2f96bd309d4577e73473d08cd730f420e4a004106a0dc3732d1bf95"}, 0x0, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000006c0)={0x20, 0x0, 0x2}, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x1, 0x5}}) 3.518336855s ago: executing program 2 (id=165): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_wait(r1, &(0x7f0000000400)=[{}], 0x1, 0x7fffffff) 3.289011066s ago: executing program 4 (id=166): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x417, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) syz_io_uring_setup(0x5b4b, &(0x7f0000000000)={0x0, 0x3387, 0x2, 0x1, 0x160}, &(0x7f0000000080), &(0x7f00000001c0)) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000180)='~', 0x1}], 0x1) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x1d4c, 0x0, 0x0) 3.032844509s ago: executing program 2 (id=168): socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmsg(r1, 0x0, 0x2141) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) 2.90670801s ago: executing program 4 (id=169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000480)=@ethtool_drvinfo={0x3, "4c1d8dda5b31d05917723bff3990c5dfad97c1b00385c32fbbd79e68cb0c45a5", "c20f032819968edaaff173563b921b68dbe44aebcef7484bcf4244dad5d23eca", "9b65e45f60d83638fa17c8735173215aafd7e9cf290546acf6275c555203f4f8", "6a5dd2f56b86028a19b613fc1ab3155fce019c849dee2de2eb048f16b2ea42de", "1199f0adc855956669643469f720b94282f26a5962d8bdd1dbfc1a825d4b3740", "a23aa66ebd33fbc312bdfc08", 0x0, 0x0, 0x0, 0xaae}}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) gettid() 1.853319919s ago: executing program 1 (id=171): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1.834672365s ago: executing program 2 (id=172): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x6, 0xff, 0x1, 0xef, 0x7fffffff, 0x4}) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.711547787s ago: executing program 1 (id=173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 1.303758637s ago: executing program 1 (id=174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.279800197s ago: executing program 2 (id=175): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1.034073043s ago: executing program 1 (id=176): process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0) 895.835979ms ago: executing program 2 (id=177): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/69, 0x3b}, 0x4}, {{&(0x7f0000000e40)=@rc={0x1f, @none}, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/181}, {&(0x7f0000000700)=""/157}, {&(0x7f00000008c0)=""/203}, {&(0x7f00000010c0)=""/167}, {&(0x7f0000000bc0)=""/165}, {&(0x7f0000000c80)=""/249}, {&(0x7f0000000d80)=""/182}, {&(0x7f0000000600)=""/33}], 0x0, &(0x7f0000001000)=""/176}, 0x8}], 0x35, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 895.266728ms ago: executing program 3 (id=178): chdir(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 813.620433ms ago: executing program 1 (id=179): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x417, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) syz_io_uring_setup(0x5b4b, &(0x7f0000000000)={0x0, 0x3387, 0x2, 0x1, 0x160}, &(0x7f0000000080), &(0x7f00000001c0)) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000180)='~', 0x1}], 0x1) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x1d4c, 0x0, 0x0) 694.419079ms ago: executing program 2 (id=180): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x8}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88b59edace0000033e8283f2305e02000002ff02000000000000000000000000000104004e20"], 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 631.997963ms ago: executing program 3 (id=181): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x1}]}, {0x0, [0x2e]}}, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 498.361971ms ago: executing program 1 (id=182): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), 0x0}, 0x20) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x16, 0x0, 0xa9, 0x0, 0xf1, 0x1}) 211.201782ms ago: executing program 3 (id=183): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10) r2 = dup(r1) sendto$packet(r2, 0x0, 0x2, 0x0, 0x0, 0x0) 107.796561ms ago: executing program 4 (id=184): bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x2}, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x2}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000700"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_open_dev$usbfs(0x0, 0x77, 0x101641) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 26.222223ms ago: executing program 0 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40000c4) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="0802"], 0x208) write$FUSE_BMAP(r2, &(0x7f0000000500)={0x18}, 0x18) write$FUSE_POLL(r2, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x8, 0x3) 0s ago: executing program 3 (id=186): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f00000012c0)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x9, "100c2ac2"}, @local=@item_012={0x1, 0x2, 0x9, "aa"}]}}, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.3' (ED25519) to the list of known hosts. [ 76.594186][ T5820] cgroup: Unknown subsys name 'net' [ 76.729460][ T5820] cgroup: Unknown subsys name 'cpuset' [ 76.738230][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.294350][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.951987][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.960401][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.968548][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.977969][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.986114][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.990930][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.994196][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.010485][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.016236][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.032509][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.037742][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.041292][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.055207][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.058923][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.063256][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.069557][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.077181][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.085218][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.090657][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.097907][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.104454][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.111799][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.130232][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.138726][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.150041][ T5850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.150175][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.164617][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.173839][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.186459][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.204290][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.558646][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 83.663533][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 83.710551][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 83.798563][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 83.811956][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.819439][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.827377][ T5831] bridge_slave_0: entered allmulticast mode [ 83.834381][ T5831] bridge_slave_0: entered promiscuous mode [ 83.868253][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.875730][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.882893][ T5831] bridge_slave_1: entered allmulticast mode [ 83.890124][ T5831] bridge_slave_1: entered promiscuous mode [ 83.897496][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 83.998633][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.012505][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.020275][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.027637][ T5830] bridge_slave_0: entered allmulticast mode [ 84.034597][ T5830] bridge_slave_0: entered promiscuous mode [ 84.042320][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.049588][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.057043][ T5830] bridge_slave_1: entered allmulticast mode [ 84.063836][ T5830] bridge_slave_1: entered promiscuous mode [ 84.070930][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.078143][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.085564][ T5837] bridge_slave_0: entered allmulticast mode [ 84.092401][ T5837] bridge_slave_0: entered promiscuous mode [ 84.115739][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.163147][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.171551][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.182038][ T5837] bridge_slave_1: entered allmulticast mode [ 84.189518][ T5837] bridge_slave_1: entered promiscuous mode [ 84.213077][ T5831] team0: Port device team_slave_0 added [ 84.230227][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.242050][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.266401][ T5831] team0: Port device team_slave_1 added [ 84.281565][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.289313][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.296577][ T5833] bridge_slave_0: entered allmulticast mode [ 84.303549][ T5833] bridge_slave_0: entered promiscuous mode [ 84.329826][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.378128][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.385636][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.392832][ T5833] bridge_slave_1: entered allmulticast mode [ 84.400769][ T5833] bridge_slave_1: entered promiscuous mode [ 84.420488][ T5830] team0: Port device team_slave_0 added [ 84.429092][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.440707][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.449041][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.456731][ T5845] bridge_slave_0: entered allmulticast mode [ 84.463474][ T5845] bridge_slave_0: entered promiscuous mode [ 84.471913][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.479150][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.486576][ T5845] bridge_slave_1: entered allmulticast mode [ 84.493499][ T5845] bridge_slave_1: entered promiscuous mode [ 84.501105][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.508462][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.534713][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.568210][ T5830] team0: Port device team_slave_1 added [ 84.577439][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.620704][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.627898][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.654658][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.674968][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.695684][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.710198][ T5837] team0: Port device team_slave_0 added [ 84.756497][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.779305][ T5837] team0: Port device team_slave_1 added [ 84.806886][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.813875][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.840421][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.854427][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.862135][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.888464][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.902655][ T5833] team0: Port device team_slave_0 added [ 84.912394][ T5833] team0: Port device team_slave_1 added [ 84.954494][ T5831] hsr_slave_0: entered promiscuous mode [ 84.961176][ T5831] hsr_slave_1: entered promiscuous mode [ 84.986985][ T5845] team0: Port device team_slave_0 added [ 84.993323][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.000625][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.026891][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.040229][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.047416][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.073497][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.088284][ T5845] team0: Port device team_slave_1 added [ 85.094898][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.101926][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.128073][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.144130][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.151349][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.177642][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.206191][ T5850] Bluetooth: hci3: command tx timeout [ 85.212397][ T5850] Bluetooth: hci1: command tx timeout [ 85.215884][ T54] Bluetooth: hci0: command tx timeout [ 85.218583][ T5846] Bluetooth: hci2: command tx timeout [ 85.264751][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.271885][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.298608][ T5846] Bluetooth: hci4: command tx timeout [ 85.303568][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.340357][ T5830] hsr_slave_0: entered promiscuous mode [ 85.347756][ T5830] hsr_slave_1: entered promiscuous mode [ 85.354524][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.362531][ T5830] Cannot create hsr debugfs directory [ 85.368804][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.376259][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.402270][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.453839][ T5833] hsr_slave_0: entered promiscuous mode [ 85.460773][ T5833] hsr_slave_1: entered promiscuous mode [ 85.468163][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.475976][ T5833] Cannot create hsr debugfs directory [ 85.490327][ T5837] hsr_slave_0: entered promiscuous mode [ 85.497177][ T5837] hsr_slave_1: entered promiscuous mode [ 85.503472][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.511201][ T5837] Cannot create hsr debugfs directory [ 85.590929][ T5845] hsr_slave_0: entered promiscuous mode [ 85.597536][ T5845] hsr_slave_1: entered promiscuous mode [ 85.603595][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.611368][ T5845] Cannot create hsr debugfs directory [ 85.928747][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.943816][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.963835][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.984678][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.006842][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.032238][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.041900][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.066270][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.097840][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.126832][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.147609][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.157659][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.204275][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.213908][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.228697][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.258774][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.348371][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.378289][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.389166][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.410597][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.417766][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.436860][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.494285][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.530757][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.552197][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.564278][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.571613][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.586758][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.608219][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.615883][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.624986][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.632115][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.660679][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.667850][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.679224][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.686408][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.718838][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.725993][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.805271][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.861390][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.927781][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.934935][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.969829][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.977045][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.043055][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.129409][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.169394][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.224944][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.232117][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.242584][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.249765][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.285628][ T5846] Bluetooth: hci0: command tx timeout [ 87.286937][ T54] Bluetooth: hci2: command tx timeout [ 87.291103][ T5846] Bluetooth: hci1: command tx timeout [ 87.297195][ T54] Bluetooth: hci3: command tx timeout [ 87.329235][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.339796][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.367152][ T54] Bluetooth: hci4: command tx timeout [ 87.490421][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.513831][ T5831] veth0_vlan: entered promiscuous mode [ 87.593070][ T5831] veth1_vlan: entered promiscuous mode [ 87.603301][ T5845] veth0_vlan: entered promiscuous mode [ 87.649164][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.667500][ T5845] veth1_vlan: entered promiscuous mode [ 87.683179][ T5831] veth0_macvtap: entered promiscuous mode [ 87.746023][ T5831] veth1_macvtap: entered promiscuous mode [ 87.780620][ T5830] veth0_vlan: entered promiscuous mode [ 87.813580][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.887699][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.908983][ T5845] veth0_macvtap: entered promiscuous mode [ 87.951133][ T5845] veth1_macvtap: entered promiscuous mode [ 87.981831][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.002077][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.027494][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.038475][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.049015][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.057826][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.066653][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.080826][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.093330][ T5830] veth1_vlan: entered promiscuous mode [ 88.146814][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.171762][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.184777][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.251309][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.261864][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.271425][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.280795][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.308644][ T5830] veth0_macvtap: entered promiscuous mode [ 88.346382][ T5830] veth1_macvtap: entered promiscuous mode [ 88.400393][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.425151][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.435032][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.462239][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.473323][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.509187][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.521135][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.531190][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.541821][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.554274][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.579091][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.588262][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.589929][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.605608][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.614347][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.623803][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.663658][ T5837] veth0_vlan: entered promiscuous mode [ 88.717423][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.722364][ T5837] veth1_vlan: entered promiscuous mode [ 88.739176][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.773314][ T5833] veth0_vlan: entered promiscuous mode [ 88.781651][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.794822][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.831447][ T5833] veth1_vlan: entered promiscuous mode [ 88.870148][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.921700][ T5837] veth0_macvtap: entered promiscuous mode [ 88.943788][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.964560][ T5837] veth1_macvtap: entered promiscuous mode [ 88.977094][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.986580][ T5833] veth0_macvtap: entered promiscuous mode [ 88.998405][ T5833] veth1_macvtap: entered promiscuous mode [ 89.043422][ T5916] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.060678][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.060737][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.100022][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.101699][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.111543][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.129097][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.139595][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.153711][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.165999][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.176746][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.188899][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.201537][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.219339][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.229919][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.240851][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.250831][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.261593][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.272237][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.283247][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.298083][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.334804][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.348349][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.358964][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.371788][ T54] Bluetooth: hci3: command tx timeout [ 89.376035][ T5846] Bluetooth: hci1: command tx timeout [ 89.382675][ T5850] Bluetooth: hci0: command tx timeout [ 89.388441][ T5847] Bluetooth: hci2: command tx timeout [ 89.411065][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.421313][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.433536][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.447551][ T5850] Bluetooth: hci4: command tx timeout [ 89.464475][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.473443][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.484832][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.494771][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.505963][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.515983][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.527816][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.538552][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.549198][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.560328][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.592957][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.602124][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.611069][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.619880][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.645426][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.657311][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.685440][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.694227][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.104235][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.157857][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.316292][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.324526][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.411638][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.436623][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.502835][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.540338][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.446207][ T5850] Bluetooth: hci3: command tx timeout [ 91.451819][ T5846] Bluetooth: hci0: command tx timeout [ 91.457474][ T5850] Bluetooth: hci1: command tx timeout [ 91.463536][ T5846] Bluetooth: hci2: command tx timeout [ 91.528757][ T54] Bluetooth: hci4: command tx timeout [ 92.637421][ T974] cfg80211: failed to load regulatory.db [ 94.172237][ T6023] process 'syz.1.16' launched './file1' with NULL argv: empty string added [ 95.363563][ T6033] netlink: 'syz.0.19': attribute type 12 has an invalid length. [ 95.706827][ T6044] evm: overlay not supported [ 96.036036][ T5886] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.230236][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 96.290175][ T5886] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.367554][ T5886] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.409385][ T5886] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 96.430281][ T5886] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 96.485027][ T5886] usb 3-1: Product: syz [ 96.517002][ T5886] usb 3-1: Manufacturer: syz [ 96.557296][ T5886] hub 3-1:4.0: USB hub found [ 96.756471][ T5886] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 97.065680][ T5852] usb 3-1: USB disconnect, device number 2 [ 97.213668][ T6089] netlink: 'syz.0.26': attribute type 4 has an invalid length. [ 97.266790][ T6092] netlink: 'syz.0.26': attribute type 4 has an invalid length. [ 97.564671][ T6094] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 98.929075][ T6108] syz.0.29[6108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.929197][ T6108] syz.0.29[6108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.940551][ T6108] syz.0.29[6108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.490417][ T29] audit: type=1326 audit(1736153630.216:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6109 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86dd85d29 code=0x7ffc0000 [ 99.645515][ T29] audit: type=1326 audit(1736153630.216:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6109 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86dd85d29 code=0x7ffc0000 [ 99.762716][ T29] audit: type=1326 audit(1736153630.226:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6109 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd86dd85d29 code=0x7ffc0000 [ 99.998662][ T5852] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.083289][ T29] audit: type=1326 audit(1736153630.226:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6109 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86dd85d29 code=0x7ffc0000 [ 100.122911][ T29] audit: type=1326 audit(1736153630.226:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6109 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86dd85d29 code=0x7ffc0000 [ 100.265841][ T29] audit: type=1326 audit(1736153630.256:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6109 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd86dd85d29 code=0x7ffc0000 [ 100.406382][ T29] audit: type=1326 audit(1736153630.256:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6109 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86dd85d29 code=0x7ffc0000 [ 100.540245][ T29] audit: type=1326 audit(1736153630.256:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6109 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86dd85d29 code=0x7ffc0000 [ 100.658029][ T29] audit: type=1326 audit(1736153630.256:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6109 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd86dd85d29 code=0x7ffc0000 [ 100.785288][ T29] audit: type=1326 audit(1736153630.256:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6109 comm="syz.1.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86dd85d29 code=0x7ffc0000 [ 101.285618][ T5840] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 101.465488][ T5840] usb 3-1: config 1 interface 0 has no altsetting 0 [ 101.475929][ T5840] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 101.502262][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.558370][ T5840] usb 3-1: Product: syz [ 101.574925][ T5840] usb 3-1: Manufacturer: syz [ 101.585093][ T5840] usb 3-1: SerialNumber: syz [ 101.666359][ T6144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.47'. [ 101.876363][ T6148] veth1_macvtap: left promiscuous mode [ 102.250252][ T5840] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 102.582107][ C0] usblp0: nonzero write bulk status received: -71 [ 102.621752][ T5886] usb 3-1: USB disconnect, device number 3 [ 102.639654][ T5886] usblp0: removed [ 102.694577][ T6170] syz.1.57[6170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.694683][ T6170] syz.1.57[6170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.708789][ T6170] syz.1.57[6170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.286469][ T6163] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.327393][ T6163] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 103.342678][ T6163] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 103.383660][ T6163] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 103.392025][ T6163] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 103.407866][ T6163] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 103.421418][ T6163] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 103.431620][ T6163] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.475920][ T6163] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.500064][ T6163] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 103.510623][ T6163] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 103.979150][ T6163] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 104.175782][ T6163] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 104.202303][ T6163] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 104.239747][ T6163] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 104.555438][ T5885] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.651872][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.728392][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.772181][ T5885] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 104.830063][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.869299][ T5885] usb 2-1: config 0 descriptor?? [ 105.592222][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.598715][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.605238][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.625179][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 107.605222][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.345187][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.351292][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.357430][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.808843][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 109.685197][ T6213] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 110.055200][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.053278][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.059504][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.065649][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.071718][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 111.419882][ T5885] usbhid 2-1:0.0: can't add hid device: -71 [ 111.426193][ T5885] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 111.457331][ T6216] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 111.502506][ T5885] usb 2-1: USB disconnect, device number 2 [ 111.985560][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.036911][ T6238] syz.3.82[6238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.037018][ T6238] syz.3.82[6238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.048850][ T6238] syz.3.82[6238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.173969][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 112.233238][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.244817][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.255656][ T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 112.265464][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.280596][ T25] usb 3-1: config 0 descriptor?? [ 113.078359][ T25] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 113.212291][ T25] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 113.373120][ T25] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 113.387588][ T25] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 113.405456][ T25] konepure 0003:1E7D:2DB4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.2-1/input0 [ 113.439726][ T25] usb 3-1: USB disconnect, device number 4 [ 113.480849][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 113.480870][ T29] audit: type=1326 audit(1736153644.216:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6258 comm="syz.4.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b60185d29 code=0x7ffc0000 [ 113.580219][ T29] audit: type=1326 audit(1736153644.256:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6258 comm="syz.4.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b60185d29 code=0x7ffc0000 [ 113.683450][ T29] audit: type=1326 audit(1736153644.256:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6258 comm="syz.4.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f8b60185d29 code=0x7ffc0000 [ 113.758888][ T29] audit: type=1326 audit(1736153644.256:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6258 comm="syz.4.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b60185d29 code=0x7ffc0000 [ 113.780480][ T29] audit: type=1326 audit(1736153644.256:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6258 comm="syz.4.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b60185d29 code=0x7ffc0000 [ 114.284120][ T54] Bluetooth: hci5: command 0x1003 tx timeout [ 114.291345][ T5846] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 115.609857][ T29] audit: type=1326 audit(1736153646.186:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6282 comm="syz.0.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f995af85d29 code=0x7ffc0000 [ 115.836515][ T5195] udevd[5195]: worker [6198] terminated by signal 33 (Unknown signal 33) [ 115.885205][ T29] audit: type=1326 audit(1736153646.436:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6282 comm="syz.0.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f995af85d29 code=0x7ffc0000 [ 115.910463][ T5195] udevd[5195]: worker [6198] failed while handling '/devices/virtual/block/loop1' [ 115.942080][ T29] audit: type=1326 audit(1736153646.506:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6282 comm="syz.0.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f995af85d29 code=0x7ffc0000 [ 115.970162][ T29] audit: type=1326 audit(1736153646.506:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6282 comm="syz.0.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f995af85d29 code=0x7ffc0000 [ 115.994543][ T29] audit: type=1326 audit(1736153646.526:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6282 comm="syz.0.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f995af7cce7 code=0x7ffc0000 [ 116.068257][ T6293] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.294918][ T6299] capability: warning: `syz.1.99' uses deprecated v2 capabilities in a way that may be insecure [ 120.110677][ T6327] input: syz0 as /devices/virtual/input/input5 [ 121.103096][ T6325] syz.3.104[6325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.103204][ T6325] syz.3.104[6325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.114764][ T6325] syz.3.104[6325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.265216][ T5852] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.394373][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.108'. [ 121.435197][ T5852] usb 1-1: Using ep0 maxpacket: 32 [ 121.448741][ T5852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 121.470343][ T5852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 121.514858][ T5852] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 121.551121][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.614469][ T5852] usb 1-1: config 0 descriptor?? [ 121.664579][ T6331] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 121.719246][ T5852] hub 1-1:0.0: USB hub found [ 121.919353][ T5852] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 122.379851][ T5852] usbhid 1-1:0.0: can't add hid device: -71 [ 122.386236][ T5852] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 122.437541][ T5852] usb 1-1: USB disconnect, device number 2 [ 125.570158][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 125.570179][ T29] audit: type=1326 audit(1736153656.306:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bfb85d29 code=0x7ffc0000 [ 125.629690][ T29] audit: type=1326 audit(1736153656.316:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bfb85d29 code=0x7ffc0000 [ 125.659074][ T29] audit: type=1326 audit(1736153656.346:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67bfb85d29 code=0x7ffc0000 [ 125.750933][ T29] audit: type=1326 audit(1736153656.346:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bfb85d29 code=0x7ffc0000 [ 126.322771][ T29] audit: type=1326 audit(1736153656.346:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bfb85d29 code=0x7ffc0000 [ 126.533739][ T29] audit: type=1326 audit(1736153656.346:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6393 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f67bfb85d29 code=0x7ffc0000 [ 126.595836][ T29] audit: type=1326 audit(1736153656.346:39): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=6393 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bfb85d29 code=0x7ffc0000 [ 126.621094][ T29] audit: type=1326 audit(1736153656.356:40): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=6393 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bfb85d29 code=0x7ffc0000 [ 126.625234][ T6400] syz.4.127 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 130.722965][ T6455] IPv6: sit1: Disabled Multicast RS [ 130.739636][ T6455] sit1: entered allmulticast mode [ 130.752632][ T6455] netlink: 76 bytes leftover after parsing attributes in process `syz.4.144'. [ 131.751974][ T6475] xt_hashlimit: size too large, truncated to 1048576 [ 132.201816][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'. [ 132.217149][ T6486] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.516252][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 133.482462][ T6492] overlayfs: missing 'lowerdir' [ 133.510578][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.526394][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.505192][ T5886] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 136.754638][ T5886] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 136.763976][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.775245][ T5886] usb 1-1: config 0 descriptor?? [ 137.366654][ T6550] syz.3.178[6550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.366776][ T6550] syz.3.178[6550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.395111][ T6550] syz.3.178[6550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.402974][ T5886] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 137.438411][ T5886] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 137.638356][ T6561] syz.2.180[6561] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.638470][ T6561] syz.2.180[6561] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.661198][ T5886] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 137.675385][ T6561] syz.2.180[6561] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.687600][ T5886] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 138.006819][ T5886] asix 1-1:0.0 eth1: register 'asix' at usb-dummy_hcd.0-1, ASIX AX88178 USB 2.0 Ethernet, aa:2d:11:a3:63:fd [ 138.055445][ T5886] usb 1-1: USB disconnect, device number 3 [ 138.068756][ T5886] asix 1-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.0-1, ASIX AX88178 USB 2.0 Ethernet [ 138.176156][ T5886] ------------[ cut here ]------------ [ 138.181753][ T5886] ODEBUG: free active (active state 0) object: ffff8880585d5260 object type: work_struct hint: usbnet_deferred_kevent+0x0/0xc20 [ 138.238290][ T5886] WARNING: CPU: 0 PID: 5886 at lib/debugobjects.c:615 debug_print_object+0x17a/0x1f0 [ 138.248000][ T5886] Modules linked in: [ 138.252002][ T5886] CPU: 0 UID: 0 PID: 5886 Comm: kworker/0:5 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 138.262896][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 138.273425][ T5886] Workqueue: usb_hub_wq hub_event [ 138.278951][ T5886] RIP: 0010:debug_print_object+0x17a/0x1f0 [ 138.284828][ T5886] Code: e8 5b 8c 42 fd 4c 8b 0b 48 c7 c7 00 e7 5e 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 8b 52 9f fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 b8 c4 57 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 [ 138.304660][ T5886] RSP: 0018:ffffc9000425f258 EFLAGS: 00010282 [ 138.310920][ T5886] RAX: 0bea8209b0ee3100 RBX: ffffffff8c09c680 RCX: 0000000000100000 [ 138.319037][ T5886] RDX: ffffc900197af000 RSI: 000000000000ef99 RDI: 000000000000ef9a [ 138.327111][ T5886] RBP: ffffffff8c5ee880 R08: ffffffff816019a2 R09: fffffbfff1cfa210 [ 138.335286][ T5886] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 0000000000000000 [ 138.343321][ T5886] R13: ffffffff8c5ee798 R14: dffffc0000000000 R15: ffff8880585d5260 [ 138.351480][ T5886] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 138.360742][ T5886] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.367445][ T5886] CR2: 00007f5d120a56c0 CR3: 0000000034f1e000 CR4: 00000000003526f0 [ 138.375898][ T5886] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 138.384425][ T5886] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 138.392569][ T5886] Call Trace: [ 138.395936][ T5886] [ 138.398909][ T5886] ? __warn+0x165/0x4d0 [ 138.403130][ T5886] ? debug_print_object+0x17a/0x1f0 [ 138.408831][ T5886] ? report_bug+0x2b3/0x500 [ 138.413409][ T5886] ? debug_print_object+0x17a/0x1f0 [ 138.418751][ T5886] ? handle_bug+0x60/0x90 [ 138.423128][ T5886] ? exc_invalid_op+0x1a/0x50 [ 138.427902][ T5886] ? asm_exc_invalid_op+0x1a/0x20 [ 138.433009][ T5886] ? __warn_printk+0x292/0x360 [ 138.437939][ T5886] ? debug_print_object+0x17a/0x1f0 [ 138.443203][ T5886] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 138.449212][ T5886] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 138.455201][ T5886] debug_check_no_obj_freed+0x45b/0x580 [ 138.460902][ T5886] ? preempt_schedule_thunk+0x1a/0x30 [ 138.466434][ T5886] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 138.472567][ T5886] ? device_release+0x99/0x1c0 [ 138.477768][ T5886] kfree+0x115/0x430 [ 138.481746][ T5886] ? __pfx_netdev_release+0x10/0x10 [ 138.487526][ T5886] device_release+0x99/0x1c0 [ 138.492180][ T5886] kobject_put+0x22f/0x480 [ 138.496759][ T5886] usb_unbind_interface+0x25b/0x940 [ 138.502031][ T5886] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 138.507903][ T5886] ? __pfx_usb_unbind_interface+0x10/0x10 [ 138.513697][ T5886] device_release_driver_internal+0x503/0x7c0 [ 138.519875][ T5886] bus_remove_device+0x34f/0x420 [ 138.524881][ T5886] device_del+0x57a/0x9b0 [ 138.529369][ T5886] ? __pfx_device_del+0x10/0x10 [ 138.534265][ T5886] ? __pfx___mutex_lock+0x10/0x10 [ 138.539395][ T5886] ? _raw_spin_lock_irq+0xdf/0x120 [ 138.544572][ T5886] usb_disable_device+0x3bf/0x850 [ 138.549734][ T5886] usb_disconnect+0x340/0x950 [ 138.554494][ T5886] hub_event+0x1ebc/0x5150 [ 138.559108][ T5886] ? debug_object_deactivate+0x2d5/0x390 [ 138.564821][ T5886] ? do_raw_spin_unlock+0x13c/0x8b0 [ 138.570710][ T5886] ? __pfx_hub_event+0x10/0x10 [ 138.575677][ T5886] ? __pfx_lock_acquire+0x10/0x10 [ 138.581113][ T5886] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 138.587692][ T5886] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.594097][ T5886] ? process_scheduled_works+0x976/0x1840 [ 138.599983][ T5886] process_scheduled_works+0xa66/0x1840 [ 138.605677][ T5886] ? __pfx_process_scheduled_works+0x10/0x10 [ 138.611737][ T5886] ? assign_work+0x364/0x3d0 [ 138.616516][ T5886] worker_thread+0x870/0xd30 [ 138.621171][ T5886] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 138.627200][ T5886] ? __kthread_parkme+0x169/0x1d0 [ 138.632289][ T5886] ? __pfx_worker_thread+0x10/0x10 [ 138.637531][ T5886] kthread+0x2f0/0x390 [ 138.641678][ T5886] ? __pfx_worker_thread+0x10/0x10 [ 138.646957][ T5886] ? __pfx_kthread+0x10/0x10 [ 138.651610][ T5886] ret_from_fork+0x4b/0x80 [ 138.656153][ T5886] ? __pfx_kthread+0x10/0x10 [ 138.660802][ T5886] ret_from_fork_asm+0x1a/0x30 [ 138.665709][ T5886] [ 138.668798][ T5886] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 138.676125][ T5886] CPU: 0 UID: 0 PID: 5886 Comm: kworker/0:5 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 138.686948][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 138.697057][ T5886] Workqueue: usb_hub_wq hub_event [ 138.702154][ T5886] Call Trace: [ 138.705471][ T5886] [ 138.708436][ T5886] dump_stack_lvl+0x241/0x360 [ 138.713169][ T5886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.718435][ T5886] ? __pfx__printk+0x10/0x10 [ 138.723092][ T5886] ? vscnprintf+0x5d/0x90 [ 138.727479][ T5886] panic+0x349/0x880 [ 138.731428][ T5886] ? __warn+0x174/0x4d0 [ 138.735630][ T5886] ? __pfx_panic+0x10/0x10 [ 138.740118][ T5886] ? ret_from_fork_asm+0x1a/0x30 [ 138.745121][ T5886] __warn+0x344/0x4d0 [ 138.749151][ T5886] ? debug_print_object+0x17a/0x1f0 [ 138.754406][ T5886] report_bug+0x2b3/0x500 [ 138.758789][ T5886] ? debug_print_object+0x17a/0x1f0 [ 138.764051][ T5886] handle_bug+0x60/0x90 [ 138.768255][ T5886] exc_invalid_op+0x1a/0x50 [ 138.772800][ T5886] asm_exc_invalid_op+0x1a/0x20 [ 138.777704][ T5886] RIP: 0010:debug_print_object+0x17a/0x1f0 [ 138.783546][ T5886] Code: e8 5b 8c 42 fd 4c 8b 0b 48 c7 c7 00 e7 5e 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 8b 52 9f fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 b8 c4 57 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 [ 138.803265][ T5886] RSP: 0018:ffffc9000425f258 EFLAGS: 00010282 [ 138.809362][ T5886] RAX: 0bea8209b0ee3100 RBX: ffffffff8c09c680 RCX: 0000000000100000 [ 138.817366][ T5886] RDX: ffffc900197af000 RSI: 000000000000ef99 RDI: 000000000000ef9a [ 138.825358][ T5886] RBP: ffffffff8c5ee880 R08: ffffffff816019a2 R09: fffffbfff1cfa210 [ 138.833373][ T5886] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 0000000000000000 [ 138.841382][ T5886] R13: ffffffff8c5ee798 R14: dffffc0000000000 R15: ffff8880585d5260 [ 138.849377][ T5886] ? __warn_printk+0x292/0x360 [ 138.854172][ T5886] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 138.860176][ T5886] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 138.866108][ T5886] debug_check_no_obj_freed+0x45b/0x580 [ 138.871687][ T5886] ? preempt_schedule_thunk+0x1a/0x30 [ 138.877087][ T5886] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 138.883278][ T5886] ? device_release+0x99/0x1c0 [ 138.888067][ T5886] kfree+0x115/0x430 [ 138.891999][ T5886] ? __pfx_netdev_release+0x10/0x10 [ 138.897251][ T5886] device_release+0x99/0x1c0 [ 138.901867][ T5886] kobject_put+0x22f/0x480 [ 138.906317][ T5886] usb_unbind_interface+0x25b/0x940 [ 138.911545][ T5886] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 138.917280][ T5886] ? __pfx_usb_unbind_interface+0x10/0x10 [ 138.923015][ T5886] device_release_driver_internal+0x503/0x7c0 [ 138.929199][ T5886] bus_remove_device+0x34f/0x420 [ 138.934251][ T5886] device_del+0x57a/0x9b0 [ 138.938600][ T5886] ? __pfx_device_del+0x10/0x10 [ 138.943467][ T5886] ? __pfx___mutex_lock+0x10/0x10 [ 138.948511][ T5886] ? _raw_spin_lock_irq+0xdf/0x120 [ 138.953674][ T5886] usb_disable_device+0x3bf/0x850 [ 138.958745][ T5886] usb_disconnect+0x340/0x950 [ 138.963464][ T5886] hub_event+0x1ebc/0x5150 [ 138.967926][ T5886] ? debug_object_deactivate+0x2d5/0x390 [ 138.973597][ T5886] ? do_raw_spin_unlock+0x13c/0x8b0 [ 138.978845][ T5886] ? __pfx_hub_event+0x10/0x10 [ 138.983642][ T5886] ? __pfx_lock_acquire+0x10/0x10 [ 138.988687][ T5886] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 138.994691][ T5886] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 139.001060][ T5886] ? process_scheduled_works+0x976/0x1840 [ 139.006810][ T5886] process_scheduled_works+0xa66/0x1840 [ 139.012848][ T5886] ? __pfx_process_scheduled_works+0x10/0x10 [ 139.018865][ T5886] ? assign_work+0x364/0x3d0 [ 139.023488][ T5886] worker_thread+0x870/0xd30 [ 139.028129][ T5886] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 139.034045][ T5886] ? __kthread_parkme+0x169/0x1d0 [ 139.039085][ T5886] ? __pfx_worker_thread+0x10/0x10 [ 139.044209][ T5886] kthread+0x2f0/0x390 [ 139.048310][ T5886] ? __pfx_worker_thread+0x10/0x10 [ 139.053434][ T5886] ? __pfx_kthread+0x10/0x10 [ 139.058062][ T5886] ret_from_fork+0x4b/0x80 [ 139.062512][ T5886] ? __pfx_kthread+0x10/0x10 [ 139.067135][ T5886] ret_from_fork_asm+0x1a/0x30 [ 139.071946][ T5886] [ 139.075288][ T5886] Kernel Offset: disabled [ 139.079675][ T5886] Rebooting in 86400 seconds..