last executing test programs: 2m0.101916398s ago: executing program 2 (id=163): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='7', 0x1, 0x4}]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x294}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048010) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000300)) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r8, 0x10, '\x00', "38b1b923825f136cc24bbf1a2d2fd4c316040072920c11506ce160cbb6080b000099c088378c3d3b65123b8ab23b7eb2dbc3c71952e15169f3875da4a1d0b96c7a99fe40df166b61c506e9b11fb7e0d5aaaed898898eeedc118a13232c378413ae6bd2be597edbc85a870200000000000000535603a0f94a1f8153c5e8807c3b12195f16de7107fce1888626eb2c3fd222b41f483328f449011c34204c73bc85336373e761afba65ea3a968fcef984683f43ce00a32c1a1770e9322e316baddd036e688caa3ea9746046afe689efdc3c55007faa0000000000000000000100000000000000000000000000f30100"}}, 0x110) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r9, 0x10f, 0x84, 0x0, &(0x7f0000000280)) 1m59.042233094s ago: executing program 4 (id=170): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, 0x0, 0x20000011) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x80, 0x0}, 0xe07e872420dfefca) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="8200000000000000720000"]) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000080)={0x400, 0x1, 0x3, 0x0, 0x9}) r4 = socket(0x2a, 0x4, 0x514) pipe2$watch_queue(0x0, 0x80) r5 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240), 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x15) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0xed) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r7, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x8}], 0x1, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x2e0, 0x940c, 0x3002, 0x0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xffffffff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x2, 0x2, 0x0, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 1m58.640217048s ago: executing program 4 (id=171): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000001008002800babc00005c0016805800018054000c8014"], 0x98}}, 0x40000) 1m58.217500742s ago: executing program 4 (id=172): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000001080), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)="270502001a0014000600002fb96dbcf706e10500070088a801008100", 0x1c}, {&(0x7f00000005c0)="0900000100000000e634", 0xa}], 0x2}, 0x4011) 1m57.882692405s ago: executing program 4 (id=173): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1000005, 0x20000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000003c0)={0x2, 0x20, 0x1}) 1m57.697653358s ago: executing program 4 (id=174): r0 = syz_usb_connect$hid(0x2, 0x92, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2db4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) socket(0x2, 0x3, 0x4) (async) r1 = socket(0x2, 0x3, 0x4) getsockopt(r1, 0xff, 0x100000000000001, 0x0, 0x0) (async) getsockopt(r1, 0xff, 0x100000000000001, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220b000000a0a342000007bf"], 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) accept4(r3, 0x0, 0x0, 0x0) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/65, 0x41}], 0x1}, 0x2002) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c050500020301000000de0000000000000000060800034080000004"], 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) (async) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c050500020301000000de0000000000000000060800034080000004"], 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000044c0), 0x141802) ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000004500)) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) 1m57.633408273s ago: executing program 2 (id=175): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000040)={{@host}, @any, 0x0, 0x1, 0x9, 0xfffffffffffffffd, 0x80004, 0x0, 0xfffffffe}) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000380)={{}, 0x8, 0x800000000000000, 0x804976, 0xe4b1}) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000180)) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb71d) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) rt_sigqueueinfo(r5, 0xb, &(0x7f0000000100)={0x17, 0x1, 0x347a}) pidfd_send_signal(r1, 0x40, &(0x7f0000000280)={0xc, 0xd26a, 0x7}, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000000)={'sit0\x00'}) syz_io_uring_setup(0x204adb, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x400, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) 1m56.201551648s ago: executing program 0 (id=181): bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000100005040000005f596da40000880900", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280060011004e2300000400120008"], 0x48}}, 0x0) 1m56.139309022s ago: executing program 2 (id=182): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, 0x0, 0x20000011) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x80, 0x0}, 0xe07e872420dfefca) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="8200000000000000720000"]) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000080)={0x400, 0x1, 0x3, 0x0, 0x9}) r4 = socket(0x2a, 0x4, 0x514) pipe2$watch_queue(0x0, 0x80) r5 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240), 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x15) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0xed) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r7, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x8}], 0x1, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x2e0, 0x940c, 0x3002, 0x0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xffffffff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x2, 0x2, 0x0, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 1m56.008395536s ago: executing program 0 (id=183): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)="270502001a0014000600002fb96dbcf706e10500070088a801008100", 0x1c}, {&(0x7f00000005c0)="0900000100000000e634", 0xa}], 0x2}, 0x4011) 1m55.779211249s ago: executing program 2 (id=185): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='7', 0x1, 0x4}]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x294}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048010) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000300)) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r8, 0x10, '\x00', "38b1b923825f136cc24bbf1a2d2fd4c316040072920c11506ce160cbb6080b000099c088378c3d3b65123b8ab23b7eb2dbc3c71952e15169f3875da4a1d0b96c7a99fe40df166b61c506e9b11fb7e0d5aaaed898898eeedc118a13232c378413ae6bd2be597edbc85a870200000000000000535603a0f94a1f8153c5e8807c3b12195f16de7107fce1888626eb2c3fd222b41f483328f449011c34204c73bc85336373e761afba65ea3a968fcef984683f43ce00a32c1a1770e9322e316baddd036e688caa3ea9746046afe689efdc3c55007faa0000000000000000000100000000000000000000000000f30100"}}, 0x110) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r9, 0x10f, 0x84, 0x0, &(0x7f0000000280)) 1m55.692778404s ago: executing program 0 (id=187): io_uring_setup(0x7c8c, &(0x7f00000000c0)={0x0, 0xa3e5, 0x8, 0x3, 0x1fd}) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r1 = getpgid(0xffffffffffffffff) write$cgroup_pid(r0, &(0x7f0000000140)=r1, 0x12) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000000)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000092680000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0}) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r8, &(0x7f0000000000)=""/73, 0x49) write$char_usb(r8, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x0, 0x0) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m55.020594969s ago: executing program 3 (id=190): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)="d5", 0x101d0}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0) 1m54.82559261s ago: executing program 3 (id=191): r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1m54.68102644s ago: executing program 3 (id=192): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000040)={{@host}, @any, 0x0, 0x1, 0x9, 0xfffffffffffffffd, 0x80004, 0x0, 0xfffffffe}) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000380)={{}, 0x8, 0x800000000000000, 0x804976, 0xe4b1}) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000180)) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb71d) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) rt_sigqueueinfo(r5, 0xb, &(0x7f0000000100)={0x17, 0x1, 0x347a}) pidfd_send_signal(r1, 0x40, &(0x7f0000000280)={0xc, 0xd26a, 0x7}, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000000)={'sit0\x00'}) syz_io_uring_setup(0x204adb, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x400, 0x0, r1}, &(0x7f0000000080), &(0x7f00000001c0)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m54.269235926s ago: executing program 1 (id=193): bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000100005040000005f596da40000880900", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280060011004e230000040012000800"], 0x48}}, 0x0) 1m54.221447274s ago: executing program 4 (id=194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000000906010200000000000000000200fffe0400078005000100070000000900020073797a3100000000f71225922ce72de24e0b492a56b9bb256535c59e5cf705016b41d7dac6e804a94a257884b035f49d9bc28b51ee66bc4a4bcd89090309be1463ec3916f8cea841d83d1f105f9b13dc27b225c70a5104397a2607118d29e147a14dec5e4e361c9e0eb133f55def173d287551c1da05714da7f6f8385521b98ff5dd3646e22c60be882cbb514bf3d53aa5"], 0x2c}}, 0x4000080) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000000180)) r3 = dup3(0xffffffffffffffff, r1, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="400c0200000010d8fd7a3ce4f342a1a21794c3eabc4050fb612dcd87b3c46f5567db8a1b2b11a4c9420c2279ad54adc34e39da4bfb7b1292ff07010de0773f3bc01f57e80f6e95c9000000000001000000000000000000006b3c000000007951a7aa56d1570cfc11a890ce08004a55f85fbff5bed95d6443731867"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(0x0, 0xe340, 0x32) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xcb) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x200442, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) 1m54.004860285s ago: executing program 1 (id=195): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, 0x0, 0x20000011) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x80, 0x0}, 0xe07e872420dfefca) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="8200000000000000720000"]) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000080)={0x400, 0x1, 0x3, 0x0, 0x9}) r4 = socket(0x2a, 0x4, 0x514) pipe2$watch_queue(0x0, 0x80) r5 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240), 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x15) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0xed) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r7, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x8}], 0x1, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x2e0, 0x940c, 0x3002, 0x0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xffffffff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x2, 0x2, 0x0, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 1m53.813656565s ago: executing program 2 (id=196): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000d00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1m53.59758045s ago: executing program 0 (id=197): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000001000010029bd700000000000000000", @ANYBLOB="0d730400"], 0x68}}, 0x0) 1m53.533999432s ago: executing program 1 (id=198): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)="270502001a0014000600002fb96dbcf706e10500070088a801008100", 0x1c}, {&(0x7f00000005c0)="0900000100000000e634", 0xa}], 0x2}, 0x4011) 1m53.464600909s ago: executing program 3 (id=199): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001000)) 1m53.328136482s ago: executing program 1 (id=200): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file5\x00', 0x2101040, 0x0, 0x0, 0x0, &(0x7f0000000c40)="ab15c47c80b9d809f8d79d75bacd243759b586a72e0277c4976c2ee648af96b745e105decc4af708a8616e5220cae0887eee92c7b4044f1645741d80cc2cc1b018079301c2c497f61d00"/87) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') 1m53.287680248s ago: executing program 3 (id=201): r0 = socket$kcm(0x11, 0x200000000000003, 0x300) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0) 1m53.23749611s ago: executing program 0 (id=202): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001a0001002abd7000fbdbdf251c202409fc02fe030023000008000100f0000000"], 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x8005) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x84) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000cc0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr=0x4}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'}) 1m53.230338498s ago: executing program 2 (id=203): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open(&(0x7f0000000140)='./bus\x00', 0x60142, 0x95) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x3df0, 0x1000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001980)=ANY=[@ANYBLOB="3800000018000100000000ffffffff000000000000000009000000000600150004000000140016801000087ed351a3795b4bbbe8e9faadc9713b3ddaffa34f0966202ea9f99576becadf2237ef0e9a9514d126904494b5477f40f07d54bcc87e693d1d7f5f3cb49c624b4467310348a7c3c65662aae3bda482de2b105bb8a70783798c940f05ee89fa4cce15b83c3801fdc5afd7785319d4486be79e49584f5ea877bfd6c564f21f0a80e83338d7fb6f17425625c20b2843e222e4f2f8a30a4eb589c4475051698dbf9b9ddab85d93f7ddf9e9c6ba45df85a2af02a5c8e33bab1e", @ANYRES64=r5, @ANYRESOCT=r5, @ANYBLOB="917fa14b01e33f0768aa886ea9524d56245ca6bb7e61819b4e2e6ae5ac820c23d9470b32556fd00f714ee3cb0ac2e32329ec4d456ebab0591a0613e2c37548e8afed69948e57094f5cd15c5b85c256f8622676879be81bdb11ba4e3b6a7af280d36178a53417a87462e3cfcc41d1d73acf16d07ddd09a9213d9b5a9169869840b5eaf69866583d69611e954262ca96ef0125615f80e0c34b4c3a689a08ee0909ce5d1de7266954ff674ef839249073536fa709cd52178db88396cbb7b039bd610fde063ad39e63c72dc26a12c6e389ffaea3046fcbb229a8716234406ca537ee49412dc124b42993cd", @ANYRESOCT=r1, @ANYRES8, @ANYRESHEX=r4], 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r6, 0x0, 0x4ffe6, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000140)={0x4000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000040)={0x4000000}) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x8) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1000005, 0x20000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r10, 0xc10c5541, &(0x7f00000003c0)={0x2, 0x20, 0x1}) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000001600)={0x8, 0x0, [{0x8000000, 0x6f, &(0x7f0000000140)=""/111}, {0x8080000, 0x91, &(0x7f00000001c0)=""/145}, {0x0, 0x7d, &(0x7f0000000280)=""/125}, {0xeeee0000, 0xd9, &(0x7f0000000300)=""/217}, {0xf000, 0x1000, &(0x7f0000000400)=""/4096}, {0xeeef0000, 0xc4, &(0x7f0000001400)=""/196}, {0xdddd0000, 0x85, &(0x7f0000001500)=""/133}, {0xeeef0000, 0x14, &(0x7f00000015c0)=""/20}]}) r11 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r11) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0xfffffffd, @mcast2, 0x9}, 0x1c) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x105aa) prctl$PR_SET_MM(0x35, 0x6, &(0x7f0000764000/0x3000)=nil) 1m53.073504393s ago: executing program 0 (id=204): openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) openat$nullb(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000300000008ac054e024000010203010902"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000012000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 1m53.071053892s ago: executing program 1 (id=205): bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000100005040000005f596da40000880900", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280060011004e230000040012000800"], 0x48}}, 0x0) 1m53.058690592s ago: executing program 3 (id=206): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='7', 0x1, 0x4}]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x294}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048010) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000300)) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r8, 0x10, '\x00', "38b1b923825f136cc24bbf1a2d2fd4c316040072920c11506ce160cbb6080b000099c088378c3d3b65123b8ab23b7eb2dbc3c71952e15169f3875da4a1d0b96c7a99fe40df166b61c506e9b11fb7e0d5aaaed898898eeedc118a13232c378413ae6bd2be597edbc85a870200000000000000535603a0f94a1f8153c5e8807c3b12195f16de7107fce1888626eb2c3fd222b41f483328f449011c34204c73bc85336373e761afba65ea3a968fcef984683f43ce00a32c1a1770e9322e316baddd036e688caa3ea9746046afe689efdc3c55007faa0000000000000000000100000000000000000000000000f30100"}}, 0x110) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r9, 0x10f, 0x84, 0x0, &(0x7f0000000280)) 1m52.718719731s ago: executing program 1 (id=207): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000002008002800babc00005c0016805800018054000c8014"], 0x98}}, 0x40000) 0s ago: executing program 32 (id=204): openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) openat$nullb(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000300000008ac054e024000010203010902"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000012000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.98' (ED25519) to the list of known hosts. [ 67.573985][ T5822] cgroup: Unknown subsys name 'net' [ 67.701147][ T5822] cgroup: Unknown subsys name 'cpuset' [ 67.709723][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.090512][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.384329][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.397367][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.562000][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.571280][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.579780][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.598179][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.617630][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.618431][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.638665][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.657705][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.665817][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.673512][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.677053][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.687788][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.696367][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.696540][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.704978][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.712836][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.719452][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.735353][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.738956][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.743867][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.758195][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.765786][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.775327][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.789942][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.808259][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.427557][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 72.484224][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 72.516286][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 72.714700][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 72.775894][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 72.811840][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.819575][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.826820][ T5856] bridge_slave_0: entered allmulticast mode [ 72.835235][ T5856] bridge_slave_0: entered promiscuous mode [ 72.850433][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.858074][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.865254][ T5854] bridge_slave_0: entered allmulticast mode [ 72.875886][ T5854] bridge_slave_0: entered promiscuous mode [ 72.921990][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.931492][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.938805][ T5856] bridge_slave_1: entered allmulticast mode [ 72.946608][ T5856] bridge_slave_1: entered promiscuous mode [ 72.976500][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.983804][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.991107][ T5854] bridge_slave_1: entered allmulticast mode [ 72.998498][ T5854] bridge_slave_1: entered promiscuous mode [ 73.005041][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.012574][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.019844][ T5850] bridge_slave_0: entered allmulticast mode [ 73.026813][ T5850] bridge_slave_0: entered promiscuous mode [ 73.035416][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.042860][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.050330][ T5850] bridge_slave_1: entered allmulticast mode [ 73.057431][ T5850] bridge_slave_1: entered promiscuous mode [ 73.096570][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.156004][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.170028][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.181657][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.258809][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.272140][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.305797][ T5856] team0: Port device team_slave_0 added [ 73.346149][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.354357][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.362287][ T5852] bridge_slave_0: entered allmulticast mode [ 73.370120][ T5852] bridge_slave_0: entered promiscuous mode [ 73.378986][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.386088][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.393587][ T5852] bridge_slave_1: entered allmulticast mode [ 73.401420][ T5852] bridge_slave_1: entered promiscuous mode [ 73.418169][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.425276][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.435369][ T5851] bridge_slave_0: entered allmulticast mode [ 73.442809][ T5851] bridge_slave_0: entered promiscuous mode [ 73.453818][ T5856] team0: Port device team_slave_1 added [ 73.461934][ T5854] team0: Port device team_slave_0 added [ 73.471063][ T5854] team0: Port device team_slave_1 added [ 73.501462][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.508728][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.515847][ T5851] bridge_slave_1: entered allmulticast mode [ 73.523968][ T5851] bridge_slave_1: entered promiscuous mode [ 73.555777][ T5850] team0: Port device team_slave_0 added [ 73.614673][ T5850] team0: Port device team_slave_1 added [ 73.625336][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.639222][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.661827][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.668849][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.694838][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.707908][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.714944][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.742170][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.778493][ T51] Bluetooth: hci1: command tx timeout [ 73.778699][ T5839] Bluetooth: hci0: command tx timeout [ 73.799824][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.810757][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.820155][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.847585][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.858538][ T5839] Bluetooth: hci4: command tx timeout [ 73.865584][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.872724][ T5839] Bluetooth: hci3: command tx timeout [ 73.873026][ T5839] Bluetooth: hci2: command tx timeout [ 73.878516][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.910202][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.941924][ T5852] team0: Port device team_slave_0 added [ 73.950205][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.997169][ T5851] team0: Port device team_slave_0 added [ 74.005663][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.012866][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.039005][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.051685][ T5852] team0: Port device team_slave_1 added [ 74.088274][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.095233][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.121292][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.134783][ T5851] team0: Port device team_slave_1 added [ 74.141613][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.148922][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.175240][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.212101][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.219307][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.245872][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.310854][ T5854] hsr_slave_0: entered promiscuous mode [ 74.317231][ T5854] hsr_slave_1: entered promiscuous mode [ 74.345034][ T5856] hsr_slave_0: entered promiscuous mode [ 74.352048][ T5856] hsr_slave_1: entered promiscuous mode [ 74.358825][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.366515][ T5856] Cannot create hsr debugfs directory [ 74.397191][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.405733][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.433023][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.480405][ T5850] hsr_slave_0: entered promiscuous mode [ 74.486963][ T5850] hsr_slave_1: entered promiscuous mode [ 74.494229][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.501896][ T5850] Cannot create hsr debugfs directory [ 74.528567][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.535540][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.563164][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.605831][ T5852] hsr_slave_0: entered promiscuous mode [ 74.612683][ T5852] hsr_slave_1: entered promiscuous mode [ 74.619239][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.626798][ T5852] Cannot create hsr debugfs directory [ 74.725323][ T5851] hsr_slave_0: entered promiscuous mode [ 74.731790][ T5851] hsr_slave_1: entered promiscuous mode [ 74.741016][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.749338][ T5851] Cannot create hsr debugfs directory [ 75.232623][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.245462][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.271281][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.290879][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.343684][ T5856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.355411][ T5856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.382089][ T5856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.393157][ T5856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.462652][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.492956][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.504529][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.529420][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.634988][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.646998][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.666312][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.686570][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.726842][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.791465][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.811416][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.822069][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.854766][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.863731][ T5839] Bluetooth: hci0: command tx timeout [ 75.868806][ T51] Bluetooth: hci1: command tx timeout [ 75.880746][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.899728][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.931352][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.938954][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.948195][ T51] Bluetooth: hci2: command tx timeout [ 75.948224][ T5839] Bluetooth: hci4: command tx timeout [ 75.953591][ T51] Bluetooth: hci3: command tx timeout [ 75.973087][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.984755][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.022013][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.029127][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.071145][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.078427][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.103078][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.128162][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.135422][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.165476][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.172821][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.213575][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.220867][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.267021][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.382368][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.402799][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.440899][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.483729][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.509382][ T3585] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.516514][ T3585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.541785][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.564290][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.571473][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.584473][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.605813][ T5854] veth0_vlan: entered promiscuous mode [ 76.632488][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.639690][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.659779][ T5854] veth1_vlan: entered promiscuous mode [ 76.689024][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.701885][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.709061][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.832349][ T5854] veth0_macvtap: entered promiscuous mode [ 76.863154][ T5854] veth1_macvtap: entered promiscuous mode [ 76.881768][ T5856] veth0_vlan: entered promiscuous mode [ 76.914816][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.929051][ T5856] veth1_vlan: entered promiscuous mode [ 76.955371][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.974051][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.994040][ T5852] veth0_vlan: entered promiscuous mode [ 77.003023][ T5854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.013111][ T5854] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.021959][ T5854] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.030928][ T5854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.064768][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.081085][ T5852] veth1_vlan: entered promiscuous mode [ 77.200763][ T5856] veth0_macvtap: entered promiscuous mode [ 77.229573][ T5856] veth1_macvtap: entered promiscuous mode [ 77.250393][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.270440][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.306381][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.334671][ T5851] veth0_vlan: entered promiscuous mode [ 77.345368][ T5852] veth0_macvtap: entered promiscuous mode [ 77.361409][ T5850] veth0_vlan: entered promiscuous mode [ 77.375211][ T2955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.384414][ T5852] veth1_macvtap: entered promiscuous mode [ 77.393629][ T2955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.408169][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.422029][ T5851] veth1_vlan: entered promiscuous mode [ 77.439712][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.451541][ T5856] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.462673][ T5856] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.473917][ T5856] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.482769][ T5856] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.511735][ T5850] veth1_vlan: entered promiscuous mode [ 77.512597][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.524853][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.569076][ T5852] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.583343][ T5852] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.593041][ T5852] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.625744][ T5852] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.720804][ T5851] veth0_macvtap: entered promiscuous mode [ 77.884912][ T5851] veth1_macvtap: entered promiscuous mode [ 77.898138][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.942815][ T51] Bluetooth: hci0: command tx timeout [ 77.949356][ T5841] Bluetooth: hci1: command tx timeout [ 77.957578][ T5850] veth0_macvtap: entered promiscuous mode [ 77.964645][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.018887][ T5841] Bluetooth: hci4: command tx timeout [ 78.022423][ T5839] Bluetooth: hci2: command tx timeout [ 78.024411][ T51] Bluetooth: hci3: command tx timeout [ 78.046375][ T5850] veth1_macvtap: entered promiscuous mode [ 78.058531][ T5891] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.190365][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.232053][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.295919][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.320050][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.351836][ T5851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.364844][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.370623][ T5851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.412801][ T5851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.416976][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.427350][ T5851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.437652][ T5891] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.455620][ T5891] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.497007][ T2955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.520472][ T2955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.529591][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.546472][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.596940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.652059][ T5891] usb 2-1: config 0 descriptor?? [ 78.663079][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.749666][ T5900] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.771695][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.782308][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.792080][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.806473][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.833073][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.841258][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.053515][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.063128][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.197151][ T5907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 79.205467][ T2997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.237464][ T2997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.252059][ T5891] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 79.309406][ T2955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.321208][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.349921][ T5891] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 79.364353][ T2955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.383338][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.589696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.660152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.910281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.919083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.927801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 79.984684][ T5923] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 80.018064][ T51] Bluetooth: hci0: command tx timeout [ 80.018104][ T5839] Bluetooth: hci1: command tx timeout [ 80.097957][ T5839] Bluetooth: hci2: command tx timeout [ 80.098579][ T51] Bluetooth: hci3: command tx timeout [ 80.103837][ T5839] Bluetooth: hci4: command tx timeout [ 80.133353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.143318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.247456][ T5835] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 80.292079][ T5928] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 80.308359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.320070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.375207][ T5928] bond0: (slave lo): Error: Device can not be enslaved while up [ 80.474488][ T5835] usb 4-1: config 0 has no interfaces? [ 80.493632][ T5835] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 80.508697][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.525903][ T5835] usb 4-1: Product: syz [ 80.537344][ T5835] usb 4-1: Manufacturer: syz [ 80.555500][ T5835] usb 4-1: SerialNumber: syz [ 80.583262][ T5835] usb 4-1: config 0 descriptor?? [ 80.678200][ T5891] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.685866][ T978] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 80.839702][ T5924] program syz.3.7 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.879764][ T5891] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 80.899560][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.904713][ T5891] usb 1-1: config 0 descriptor?? [ 80.922000][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 80.929663][ T5891] cp210x 1-1:0.0: cp210x converter detected [ 80.997817][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.158823][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 81.179076][ T9] usb 5-1: config 2 has an invalid interface number: 50 but max is 0 [ 81.192063][ T9] usb 5-1: config 2 has no interface number 0 [ 81.204441][ T9] usb 5-1: config 2 interface 50 altsetting 16 endpoint 0xF has invalid wMaxPacketSize 0 [ 81.214790][ T30] audit: type=1800 audit(1749089476.339:2): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.13" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 81.216239][ T9] usb 5-1: config 2 interface 50 has no altsetting 0 [ 81.252523][ T917] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 81.254158][ T9] usb 5-1: New USB device found, idVendor=12d1, idProduct=1b93, bcdDevice=94.15 [ 81.286042][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.295532][ T9] usb 5-1: Product: syz [ 81.303343][ T9] usb 5-1: Manufacturer: syz [ 81.308618][ T9] usb 5-1: SerialNumber: syz [ 81.316556][ T5891] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 81.350224][ T5891] usb 1-1: cp210x converter now attached to ttyUSB0 [ 81.471340][ T5941] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.502520][ T5892] usb 2-1: USB disconnect, device number 2 [ 81.525244][ T5941] batadv0: entered promiscuous mode [ 81.549723][ T5941] vlan2: entered promiscuous mode [ 81.604019][ T9] option 5-1:2.50: GSM modem (1-port) converter detected [ 81.833884][ T9] usb 5-1: USB disconnect, device number 2 [ 81.850600][ T917] usb 3-1: unable to get BOS descriptor or descriptor too short [ 81.860636][ T9] option 5-1:2.50: device disconnected [ 81.895804][ T917] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 81.921929][ T917] usb 3-1: can't read configurations, error -71 [ 82.955036][ T917] usb 4-1: USB disconnect, device number 2 [ 82.992058][ T30] audit: type=1326 audit(1749089478.119:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419898e929 code=0x7ffc0000 [ 83.014025][ C0] vkms_vblank_simulate: vblank timer overrun [ 83.090930][ T30] audit: type=1326 audit(1749089478.129:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419898e929 code=0x7ffc0000 [ 83.184401][ T5969] netlink: 'syz.2.17': attribute type 20 has an invalid length. [ 83.237864][ T30] audit: type=1326 audit(1749089478.129:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f419898e929 code=0x7ffc0000 [ 83.265445][ T5892] usb 1-1: USB disconnect, device number 2 [ 83.285000][ T5892] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 83.304419][ T30] audit: type=1326 audit(1749089478.179:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419898e929 code=0x7ffc0000 [ 83.307878][ T5971] mmap: syz.1.19 (5971) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.348133][ T5892] cp210x 1-1:0.0: device disconnected [ 83.527396][ T30] audit: type=1326 audit(1749089478.209:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419898e929 code=0x7ffc0000 [ 83.558081][ T30] audit: type=1326 audit(1749089478.259:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f419898e929 code=0x7ffc0000 [ 83.709876][ T30] audit: type=1326 audit(1749089478.289:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419898e929 code=0x7ffc0000 [ 83.731797][ C0] vkms_vblank_simulate: vblank timer overrun [ 83.740261][ T30] audit: type=1326 audit(1749089478.289:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419898e929 code=0x7ffc0000 [ 83.762386][ T30] audit: type=1326 audit(1749089478.299:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.1.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f419898e929 code=0x7ffc0000 [ 83.784236][ C0] vkms_vblank_simulate: vblank timer overrun [ 84.113647][ T5992] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 84.437131][ T5997] loop6: detected capacity change from 0 to 7 [ 84.497071][ T5997] Dev loop6: unable to read RDB block 7 [ 84.551416][ T5997] loop6: AHDI p1 p2 p3 p4 [ 84.555921][ T5997] loop6: partition table partially beyond EOD, truncated [ 84.564102][ T5997] loop6: p1 start 926365495 is beyond EOD, truncated [ 84.570980][ T5997] loop6: p2 size 47 extends beyond EOD, truncated [ 84.604202][ T5997] loop6: p3 start 1886353253 is beyond EOD, truncated [ 84.929487][ T6009] netlink: 72 bytes leftover after parsing attributes in process `syz.3.31'. [ 84.985534][ T5887] udevd[5887]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 85.136376][ T6018] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.191750][ T5892] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.398434][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 85.428897][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 85.452962][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 85.469470][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 85.479953][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 85.489268][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 85.499206][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 85.508504][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 85.518135][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 85.677696][ T5892] usb 5-1: device descriptor read/64, error -71 [ 85.847702][ T978] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.975606][ T5892] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.033388][ T978] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 86.053096][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.114880][ T978] usb 1-1: config 0 descriptor?? [ 86.177663][ T5888] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 86.183337][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 86.195326][ T5892] usb 5-1: unable to get BOS descriptor or descriptor too short [ 86.209057][ T5892] usb 5-1: config 3 has an invalid interface number: 182 but max is 0 [ 86.232022][ T5892] usb 5-1: config 3 has no interface number 0 [ 86.251701][ T5892] usb 5-1: config 3 interface 182 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 86.284729][ T5892] usb 5-1: config 3 interface 182 altsetting 8 endpoint 0xA has an invalid bInterval 129, changing to 11 [ 86.316583][ T5892] usb 5-1: config 3 interface 182 altsetting 8 endpoint 0x3 has an invalid bInterval 92, changing to 10 [ 86.379725][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 86.393040][ T5892] usb 5-1: config 3 interface 182 has no altsetting 0 [ 86.394965][ T5888] usb 3-1: config 2 has too many interfaces: 36, using maximum allowed: 32 [ 86.417420][ T5888] usb 3-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 86.444831][ T5888] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 86.486904][ T5888] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 36 [ 86.499384][ T5892] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=90.57 [ 86.517067][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.525361][ T5892] usb 5-1: Product: syz [ 86.541253][ T5892] usb 5-1: Manufacturer: syz [ 86.544027][ T5888] usb 3-1: New USB device found, idVendor=eb1a, idProduct=a313, bcdDevice=42.9a [ 86.566226][ T5892] usb 5-1: SerialNumber: syz [ 86.617677][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.625831][ T5888] usb 3-1: Product: syz [ 86.636373][ T5888] usb 3-1: Manufacturer: syz [ 86.646924][ T5888] usb 3-1: SerialNumber: syz [ 86.745414][ T24] cfg80211: failed to load regulatory.db [ 86.776918][ T6047] loop6: detected capacity change from 0 to 7 [ 86.816894][ T5898] Dev loop6: unable to read RDB block 7 [ 86.829713][ T5898] loop6: AHDI p1 p2 p3 p4 [ 86.835675][ T5898] loop6: partition table partially beyond EOD, truncated [ 86.855767][ T5898] loop6: p1 start 926365495 is beyond EOD, truncated [ 86.896384][ T5898] loop6: p2 size 47 extends beyond EOD, truncated [ 86.912192][ T6044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.959140][ T6044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.960812][ T978] usb 1-1: Cannot set autoneg [ 86.982776][ T5898] loop6: p3 start 1886353253 is beyond EOD, truncated [ 87.004402][ T978] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 87.034222][ T5888] usb 3-1: USB disconnect, device number 4 [ 87.094543][ T6047] Dev loop6: unable to read RDB block 7 [ 87.109656][ T978] usb 1-1: USB disconnect, device number 3 [ 87.120654][ T6047] loop6: AHDI p1 p2 p3 p4 [ 87.141341][ T6047] loop6: partition table partially beyond EOD, truncated [ 87.161284][ T6047] loop6: p1 start 926365495 is beyond EOD, truncated [ 87.178837][ T6047] loop6: p2 size 47 extends beyond EOD, truncated [ 87.189729][ T6047] loop6: p3 start 1886353253 is beyond EOD, truncated [ 87.292770][ T6050] udevd[6050]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 87.351515][ T6050] udevd[6050]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 88.050993][ T6075] netlink: 'syz.2.60': attribute type 17 has an invalid length. [ 88.163730][ T6075] dummy0: entered promiscuous mode [ 88.189749][ T6075] macsec1: entered promiscuous mode [ 88.197003][ T6075] macsec1: entered allmulticast mode [ 88.203145][ T6075] dummy0: entered allmulticast mode [ 88.503978][ T5892] usbtest 5-1:3.182: couldn't get endpoints, -71 [ 88.577589][ T5892] usbtest 5-1:3.182: probe with driver usbtest failed with error -71 [ 88.623184][ T5892] usb 5-1: USB disconnect, device number 4 [ 88.870110][ T6087] netlink: 'syz.2.62': attribute type 1 has an invalid length. [ 89.357373][ T5892] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 89.567809][ T6099] support for the xor transformation has been removed. [ 89.587552][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 89.606709][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 89.698177][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 89.797932][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 89.886417][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 89.897544][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 90.007385][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 90.059287][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 90.074304][ T5892] usb 3-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 1.a4 [ 90.084237][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.092905][ T5892] usb 3-1: Product: syz [ 90.097483][ T5892] usb 3-1: Manufacturer: syz [ 90.102605][ T5892] usb 3-1: SerialNumber: syz [ 90.113306][ T5892] usb 3-1: config 0 descriptor?? [ 90.153389][ T6109] loop6: detected capacity change from 0 to 7 [ 90.164622][ T6109] Dev loop6: unable to read RDB block 7 [ 90.172067][ T6109] loop6: AHDI p1 p2 p3 p4 [ 90.181968][ T6109] loop6: partition table partially beyond EOD, truncated [ 90.191232][ T6109] loop6: p1 start 926365495 is beyond EOD, truncated [ 90.202822][ T6109] loop6: p2 size 47 extends beyond EOD, truncated [ 90.221137][ T6109] loop6: p3 start 1886353253 is beyond EOD, truncated [ 90.384428][ T5892] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 90.612535][ T5892] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 90.669280][ T5892] usb 3-1: USB disconnect, device number 5 [ 90.677475][ T5891] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.768331][ T6015] udevd[6015]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 90.839910][ T6122] udevd[6122]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.857607][ T5888] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.868246][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 90.889515][ T5891] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 90.889819][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.947126][ T5891] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.983869][ T5891] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.004770][ T5891] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.018332][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 91.030930][ T5891] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.059728][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.094516][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.112243][ T5891] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.123229][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 91.142093][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 91.142548][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.165536][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.173706][ T5888] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 91.188634][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.225483][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.240363][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.257232][ T5888] usb 4-1: config 0 descriptor?? [ 91.283981][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.312624][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 91.326523][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.438010][ T5891] usb 1-1: usb_control_msg returned -32 [ 91.445511][ T6115] Zero length message leads to an empty skb [ 91.456177][ T5891] usbtmc 1-1:16.0: can't read capabilities [ 91.476511][ T6119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.493256][ T6119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.506438][ T6119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.516045][ T6119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.580328][ T5908] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 91.614059][ T24] usb 2-1: usb_control_msg returned -71 [ 91.620253][ T24] usbtmc 2-1:16.0: can't read capabilities [ 91.627725][ T917] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 91.661633][ T24] usb 2-1: USB disconnect, device number 3 [ 91.718133][ T6138] process 'syz.1.68' launched './file0' with NULL argv: empty string added [ 91.733332][ T6119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.745598][ T6119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.749183][ T5908] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 91.763347][ T6138] capability: warning: `syz.1.68' uses deprecated v2 capabilities in a way that may be insecure [ 91.765283][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.797627][ T917] usb 3-1: Using ep0 maxpacket: 32 [ 91.804016][ T5908] usb 5-1: config 0 descriptor?? [ 91.817942][ T6142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.822788][ T917] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 91.827249][ T6142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.839529][ T917] usb 3-1: config 0 has no interface number 0 [ 91.847765][ T6138] program syz.1.68 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.849671][ T917] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 91.874979][ T917] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 91.893225][ T5908] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 91.902509][ T5888] usbhid 4-1:0.0: can't add hid device: -71 [ 91.940398][ T5888] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 91.992496][ T5888] usb 4-1: USB disconnect, device number 3 [ 92.007162][ T917] usb 3-1: config 0 interface 126 has no altsetting 0 [ 92.026902][ T917] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 92.072671][ T917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.116474][ T917] usb 3-1: Product: syz [ 92.128045][ T917] usb 3-1: Manufacturer: syz [ 92.134019][ T917] usb 3-1: SerialNumber: syz [ 92.148774][ T917] usb 3-1: config 0 descriptor?? [ 92.154935][ T6133] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 92.167124][ T6133] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 92.196808][ T6151] __nla_validate_parse: 1 callbacks suppressed [ 92.196827][ T6151] netlink: 72 bytes leftover after parsing attributes in process `syz.3.71'. [ 92.505669][ T6127] capability: warning: `syz.4.66' uses 32-bit capabilities (legacy support in use) [ 92.606315][ T917] ir_usb 3-1:0.126: IR Dongle converter detected [ 92.652785][ T917] usb 3-1: IRDA class descriptor not found, device not bound [ 92.735464][ T917] usb 3-1: USB disconnect, device number 6 [ 92.812376][ T6160] No memory to map [ 93.253588][ T6166] loop6: detected capacity change from 0 to 7 [ 93.266216][ T6166] Dev loop6: unable to read RDB block 7 [ 93.267520][ T917] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 93.300112][ T6166] loop6: AHDI p1 p2 p3 p4 [ 93.305674][ T6166] loop6: partition table partially beyond EOD, truncated [ 93.316383][ T6166] loop6: p1 start 926365495 is beyond EOD, truncated [ 93.323977][ T6166] loop6: p2 size 47 extends beyond EOD, truncated [ 93.338917][ T6166] loop6: p3 start 1886353253 is beyond EOD, truncated [ 93.422919][ T6015] udevd[6015]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 93.441264][ T917] usb 3-1: Using ep0 maxpacket: 16 [ 93.455963][ T917] usb 3-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 93.471710][ T917] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 93.497420][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 49, changing to 9 [ 93.524894][ T917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59136, setting to 1024 [ 93.526866][ T9] usb 1-1: USB disconnect, device number 4 [ 93.545212][ T6171] netlink: 64 bytes leftover after parsing attributes in process `syz.1.75'. [ 93.574070][ T917] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 93.579204][ T6173] netlink: 'syz.3.76': attribute type 30 has an invalid length. [ 93.585686][ T917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.663814][ T917] usb 3-1: Product: syz [ 93.688229][ T917] usb 3-1: Manufacturer: syz [ 93.710677][ T917] usb 3-1: SerialNumber: syz [ 93.756815][ T917] usb 3-1: config 0 descriptor?? [ 93.787797][ T6164] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 93.972109][ T5908] usb 5-1: USB disconnect, device number 5 [ 94.015118][ T917] appledisplay 3-1:0.0: Error while getting initial brightness: -71 [ 94.056327][ T917] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -71 [ 94.088916][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 94.093613][ T917] usb 3-1: USB disconnect, device number 7 [ 94.268877][ T9] usb 1-1: device descriptor read/64, error -71 [ 94.509391][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 94.678076][ T9] usb 1-1: device descriptor read/64, error -71 [ 94.794080][ T6197] netlink: 72 bytes leftover after parsing attributes in process `syz.2.84'. [ 94.837778][ T9] usb usb1-port1: attempt power cycle [ 94.987815][ T5888] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 95.218463][ T6195] batadv0: entered promiscuous mode [ 95.223874][ T6195] vlan2: entered promiscuous mode [ 95.241031][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 95.342615][ T9] usb 1-1: device descriptor read/8, error -71 [ 95.484555][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short [ 95.524951][ T5888] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 95.553135][ T5888] usb 5-1: can't read configurations, error -71 [ 95.663601][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 95.748336][ T9] usb 1-1: device descriptor read/8, error -71 [ 95.868133][ T9] usb usb1-port1: unable to enumerate USB device [ 95.966022][ T6207] loop6: detected capacity change from 0 to 7 [ 95.991991][ T6015] Dev loop6: unable to read RDB block 7 [ 96.016110][ T6015] loop6: AHDI p1 p2 p3 p4 [ 96.028934][ T6015] loop6: partition table partially beyond EOD, truncated [ 96.037004][ T6015] loop6: p1 start 926365495 is beyond EOD, truncated [ 96.059374][ T6015] loop6: p2 size 47 extends beyond EOD, truncated [ 96.106467][ T6015] loop6: p3 start 1886353253 is beyond EOD, truncated [ 96.181827][ T6207] Dev loop6: unable to read RDB block 7 [ 96.239046][ T6207] loop6: AHDI p1 p2 p3 p4 [ 96.353616][ T6207] loop6: partition table partially beyond EOD, truncated [ 96.407636][ T6207] loop6: p1 start 926365495 is beyond EOD, truncated [ 96.466024][ T6207] loop6: p2 size 47 extends beyond EOD, truncated [ 96.501803][ T6213] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 96.511022][ T9] IPVS: starting estimator thread 0... [ 96.548881][ T6207] loop6: p3 start 1886353253 is beyond EOD, truncated [ 96.597685][ T5891] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.627541][ T6217] IPVS: using max 30 ests per chain, 72000 per kthread [ 96.699288][ T5908] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 96.710580][ T6015] udevd[6015]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 96.777400][ T5888] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 96.793430][ T6015] udevd[6015]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 96.797508][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 96.895531][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.918983][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 96.948833][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.960901][ T5888] usb 5-1: not running at top speed; connect to a high speed hub [ 96.975557][ T5888] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.982823][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 97.008378][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 97.020667][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 97.021966][ T5888] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 97.043514][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 97.054675][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.060672][ T5891] usb 2-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 97.088221][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.091827][ T5908] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.096827][ T5891] usb 2-1: Product: syz [ 97.105507][ T5888] usb 5-1: config 1 has no interface number 1 [ 97.105560][ T5888] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 97.105597][ T5888] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 97.125875][ T5888] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.164107][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.179097][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.188757][ T5908] usb 3-1: config 0 descriptor?? [ 97.234034][ T5888] usb 5-1: Product: syz [ 97.244132][ T5888] usb 5-1: Manufacturer: syz [ 97.264014][ T5888] usb 5-1: SerialNumber: syz [ 97.296171][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 97.296186][ T30] audit: type=1326 audit(1749089492.419:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6224 comm="syz.0.92" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef8b58e929 code=0x7ffe0000 [ 97.338188][ T5891] usb 2-1: Manufacturer: syz [ 97.343163][ T5891] usb 2-1: SerialNumber: syz [ 97.393237][ T5891] usb 2-1: config 0 descriptor?? [ 97.433314][ T5891] cypress_m8 2-1:0.0: HID->COM RS232 Adapter converter detected [ 97.485039][ T5891] cyphidcom ttyUSB0: required endpoint is missing [ 97.510437][ T5888] usb 5-1: 2:1 : invalid UAC_AS_GENERAL desc [ 97.628870][ T5908] plantronics 0003:047F:FFFF.0002: collection stack underflow [ 97.682602][ T5888] usb 5-1: USB disconnect, device number 8 [ 97.707718][ T5908] plantronics 0003:047F:FFFF.0002: item 0 1 0 12 parsing failed [ 97.742970][ T5908] plantronics 0003:047F:FFFF.0002: parse failed [ 97.787831][ T5908] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 97.816937][ T6208] x_tables: ip_tables: udp match: only valid for protocol 17 [ 97.836997][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.896831][ T5908] usb 3-1: USB disconnect, device number 8 [ 98.169593][ T30] audit: type=1326 audit(1749089493.299:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6231 comm="syz.2.94" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa65e38e929 code=0x0 [ 98.211726][ T5891] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 98.396319][ T6238] netlink: 72 bytes leftover after parsing attributes in process `syz.2.96'. [ 98.407536][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 98.424092][ T5891] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 98.441055][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.986946][ T9] usb 2-1: USB disconnect, device number 4 [ 99.005333][ T9] cypress_m8 2-1:0.0: device disconnected [ 99.125387][ T5891] usb 4-1: config 0 descriptor?? [ 99.498471][ T5908] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 99.551384][ T6249] loop6: detected capacity change from 0 to 7 [ 99.562705][ T6015] Dev loop6: unable to read RDB block 7 [ 99.595053][ T5891] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 99.602092][ T6015] loop6: AHDI p1 p2 p3 p4 [ 99.613551][ T6015] loop6: partition table partially beyond EOD, truncated [ 99.626695][ T6015] loop6: p1 start 926365495 is beyond EOD, truncated [ 99.633955][ T5891] asix 4-1:0.0: probe with driver asix failed with error -71 [ 99.648170][ T5891] usb 4-1: USB disconnect, device number 4 [ 99.669684][ T5908] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.686908][ T6015] loop6: p2 size 47 extends beyond EOD, truncated [ 99.705306][ T5908] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.719555][ T978] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 99.721763][ T6015] loop6: p3 start 1886353253 is beyond EOD, [ 99.727690][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.742335][ T6015] truncated [ 99.753621][ T6249] Dev loop6: unable to read RDB block 7 [ 99.760049][ T6249] loop6: AHDI p1 p2 p3 p4 [ 99.764711][ T6249] loop6: partition table partially beyond EOD, truncated [ 99.772508][ T6249] loop6: p1 start 926365495 is beyond EOD, truncated [ 99.779893][ T5908] usb 3-1: Product: syz [ 99.784103][ T5908] usb 3-1: Manufacturer: syz [ 99.789500][ T5908] usb 3-1: SerialNumber: syz [ 99.795055][ T6249] loop6: p2 size 47 extends beyond EOD, truncated [ 99.850188][ T6249] loop6: p3 start 1886353253 is beyond EOD, truncated [ 100.073736][ T5908] cdc_ether 3-1:1.0: skipping garbage [ 100.096688][ T6247] batadv0: entered promiscuous mode [ 100.105437][ T5908] usb 3-1: bad CDC descriptors [ 100.121065][ T6015] udevd[6015]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 100.132243][ T6247] vlan2: entered promiscuous mode [ 100.220721][ T6015] udevd[6015]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 100.275230][ T6240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.297503][ T5891] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 100.319099][ T6240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.382381][ T978] usb 2-1: unable to get BOS descriptor or descriptor too short [ 100.403823][ T978] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 100.422057][ T978] usb 2-1: can't read configurations, error -71 [ 100.430545][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 100.530503][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 100.602375][ T5891] usb 4-1: config 0 has no interfaces? [ 100.633438][ T5888] usb 3-1: USB disconnect, device number 9 [ 100.661897][ T5891] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 100.673015][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.681447][ T5891] usb 4-1: Product: syz [ 100.686791][ T5891] usb 4-1: Manufacturer: syz [ 100.718454][ T5891] usb 4-1: SerialNumber: syz [ 100.739804][ T5891] usb 4-1: config 0 descriptor?? [ 100.966058][ T6255] dns_resolver: Unsupported content type (8) [ 101.447046][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 101.897593][ T5908] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 102.067384][ T5908] usb 1-1: device descriptor read/64, error -71 [ 102.388952][ T5908] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 102.695820][ T6322] netlink: 72 bytes leftover after parsing attributes in process `syz.1.109'. [ 102.747066][ T5908] usb 1-1: device descriptor read/64, error -71 [ 102.869635][ T5908] usb usb1-port1: attempt power cycle [ 103.257404][ T5908] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 103.296412][ T6330] loop6: detected capacity change from 0 to 7 [ 103.356245][ T5908] usb 1-1: device descriptor read/8, error -71 [ 103.363008][ T6330] Dev loop6: unable to read RDB block 7 [ 103.399870][ T917] usb 4-1: USB disconnect, device number 5 [ 103.417440][ T6330] loop6: AHDI p1 p2 p3 p4 [ 103.421954][ T6330] loop6: partition table partially beyond EOD, truncated [ 103.501866][ T6330] loop6: p1 start 926365495 is beyond EOD, truncated [ 103.528110][ T6330] loop6: p2 size 47 extends beyond EOD, truncated [ 103.574260][ T6330] loop6: p3 start 1886353253 is beyond EOD, truncated [ 103.904642][ T6015] udevd[6015]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 104.158181][ T917] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 104.354967][ T6348] batadv0: entered promiscuous mode [ 104.462684][ T6355] can: request_module (can-proto-0) failed. [ 104.510508][ T6348] vlan2: entered promiscuous mode [ 104.558124][ T5908] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 104.597130][ T5908] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 104.630741][ T5908] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 104.678266][ T5908] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.724213][ T917] usb 4-1: unable to get BOS descriptor or descriptor too short [ 104.733164][ T5908] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 104.785816][ T917] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 104.801160][ T5908] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 104.813468][ T917] usb 4-1: can't read configurations, error -71 [ 104.836526][ T5908] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 104.844763][ T5908] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 104.859196][ T6364] netlink: 72 bytes leftover after parsing attributes in process `syz.1.123'. [ 104.879759][ T5908] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.899769][ T5908] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 104.931084][ T5908] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 104.968946][ T5908] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 104.976751][ T5908] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 105.036563][ T5908] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.072483][ T5908] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 105.107175][ T5908] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 105.160588][ T5908] usb 1-1: string descriptor 0 read error: -22 [ 105.170390][ T5908] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 105.203377][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.249500][ T5908] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 105.478999][ T6372] fuse: Bad value for 'group_id' [ 105.484352][ T6372] fuse: Bad value for 'group_id' [ 106.025740][ T6382] loop6: detected capacity change from 0 to 7 [ 106.059024][ T30] audit: type=1326 audit(1749089501.199:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65e38e929 code=0x7ffc0000 [ 106.081945][ T6382] Dev loop6: unable to read RDB block 7 [ 106.094259][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'. [ 106.104412][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'. [ 106.113958][ T6382] loop6: AHDI p1 p2 p3 p4 [ 106.126887][ T6382] loop6: partition table partially beyond EOD, truncated [ 106.127365][ T30] audit: type=1326 audit(1749089501.199:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65e38e929 code=0x7ffc0000 [ 106.140384][ T6382] loop6: p1 start 926365495 is beyond EOD, truncated [ 106.173659][ T6382] loop6: p2 size 47 extends beyond EOD, truncated [ 106.177682][ T917] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 106.215750][ T6382] loop6: p3 start 1886353253 is beyond EOD, truncated [ 106.217474][ T30] audit: type=1326 audit(1749089501.199:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa65e38e929 code=0x7ffc0000 [ 106.270674][ T30] audit: type=1326 audit(1749089501.199:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65e38e929 code=0x7ffc0000 [ 106.317397][ T30] audit: type=1326 audit(1749089501.199:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65e38e929 code=0x7ffc0000 [ 106.369821][ T6015] udevd[6015]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 106.370705][ T917] usb 4-1: Invalid ep0 maxpacket: 16 [ 106.398369][ T30] audit: type=1326 audit(1749089501.229:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fa65e38e929 code=0x7ffc0000 [ 106.515439][ T30] audit: type=1326 audit(1749089501.229:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65e38e929 code=0x7ffc0000 [ 106.547143][ T30] audit: type=1326 audit(1749089501.229:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65e38e929 code=0x7ffc0000 [ 106.570755][ T917] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 106.616421][ T30] audit: type=1326 audit(1749089501.229:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa65e38e929 code=0x7ffc0000 [ 106.736398][ T30] audit: type=1326 audit(1749089501.229:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65e38e929 code=0x7ffc0000 [ 106.764587][ T917] usb 4-1: Invalid ep0 maxpacket: 16 [ 106.782747][ T917] usb usb4-port1: attempt power cycle [ 106.893166][ T5908] usb 1-1: USB disconnect, device number 12 [ 107.047568][ T5888] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 107.138289][ T917] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 107.233624][ T917] usb 4-1: Invalid ep0 maxpacket: 16 [ 107.256708][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 107.287898][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.304077][ T5888] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 107.313245][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.358353][ T5888] usb 3-1: config 0 descriptor?? [ 107.377613][ T917] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 107.466406][ T917] usb 4-1: Invalid ep0 maxpacket: 16 [ 107.519947][ T917] usb usb4-port1: unable to enumerate USB device [ 107.579088][ T6401] @: renamed from vlan0 (while UP) [ 107.824651][ T6394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.854616][ T6394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.238372][ T5888] usb 3-1: string descriptor 0 read error: -22 [ 108.515549][ T5888] uclogic 0003:256C:006D.0003: interface is invalid, ignoring [ 108.557041][ T5888] usb 3-1: USB disconnect, device number 10 [ 108.963536][ T6409] netlink: 72 bytes leftover after parsing attributes in process `syz.0.136'. [ 109.327391][ T5908] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 109.414281][ T6389] syz.4.131 (6389): drop_caches: 1 [ 109.472403][ T6390] syz.4.131 (6390): drop_caches: 1 [ 109.504453][ T6411] vlan2: entered promiscuous mode [ 109.836256][ T5908] usb 4-1: unable to get BOS descriptor or descriptor too short [ 109.844206][ T6422] netem: incorrect ge model size [ 109.845666][ T5908] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 109.871747][ T6422] netem: change failed [ 109.892322][ T5908] usb 4-1: can't read configurations, error -71 [ 109.900244][ T6426] loop6: detected capacity change from 0 to 7 [ 109.908454][ T6426] Dev loop6: unable to read RDB block 7 [ 109.945356][ T6426] loop6: AHDI p1 p2 p3 p4 [ 109.956328][ T6426] loop6: partition table partially beyond EOD, truncated [ 109.966720][ T6426] loop6: p1 start 926365495 is beyond EOD, truncated [ 109.984983][ T6426] loop6: p2 size 47 extends beyond EOD, truncated [ 110.009755][ T6426] loop6: p3 start 1886353253 is beyond EOD, truncated [ 110.128744][ T6015] udevd[6015]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 110.187552][ T6434] netlink: 44 bytes leftover after parsing attributes in process `syz.2.143'. [ 110.290070][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 110.309880][ T6439] fuse: Bad value for 'group_id' [ 110.325123][ T6439] fuse: Bad value for 'group_id' [ 110.344795][ T978] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 110.487628][ T978] usb 5-1: device descriptor read/64, error -71 [ 110.603377][ T6451] netlink: 72 bytes leftover after parsing attributes in process `syz.0.148'. [ 110.759277][ T978] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 110.937620][ T978] usb 5-1: device descriptor read/64, error -71 [ 111.092286][ T978] usb usb5-port1: attempt power cycle [ 111.105369][ T6458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.151'. [ 111.477583][ T978] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 111.599406][ T978] usb 5-1: device descriptor read/8, error -71 [ 111.837887][ T5892] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 111.873532][ T6469] loop6: detected capacity change from 0 to 7 [ 111.897117][ T978] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 111.897497][ T6469] Dev loop6: unable to read RDB block 7 [ 111.927459][ T6469] loop6: AHDI p1 p2 p3 p4 [ 111.942378][ T6469] loop6: partition table partially beyond EOD, truncated [ 111.958541][ T978] usb 5-1: device descriptor read/8, error -71 [ 111.967959][ T6469] loop6: p1 start 926365495 is beyond EOD, truncated [ 111.986361][ T6469] loop6: p2 size 47 extends beyond EOD, truncated [ 112.027426][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 112.038156][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.049580][ T6469] loop6: p3 start 1886353253 is beyond EOD, truncated [ 112.068426][ T978] usb usb5-port1: unable to enumerate USB device [ 112.089813][ T5892] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.116599][ T6473] ip6gre1: entered allmulticast mode [ 112.135008][ T5892] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.155122][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.207417][ T5892] usb 3-1: Product: syz [ 112.211884][ T5892] usb 3-1: Manufacturer: syz [ 112.224323][ T5888] IPVS: starting estimator thread 0... [ 112.233590][ T6015] udevd[6015]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 112.251104][ T5892] usb 3-1: SerialNumber: syz [ 112.330378][ T6478] IPVS: using max 29 ests per chain, 69600 per kthread [ 112.444233][ T6487] netlink: 72 bytes leftover after parsing attributes in process `syz.1.161'. [ 112.575164][ T978] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 112.737513][ T5888] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 112.756174][ T6481] vlan2: entered promiscuous mode [ 112.877459][ T978] usb 4-1: unable to get BOS descriptor or descriptor too short [ 112.895344][ T978] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 112.929601][ T978] usb 4-1: can't read configurations, error -71 [ 113.015354][ T5888] usb 1-1: config 0 has no interfaces? [ 113.026275][ T5888] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 113.040930][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.050873][ T5888] usb 1-1: Product: syz [ 113.055181][ T5888] usb 1-1: Manufacturer: syz [ 113.061002][ T5892] usb 3-1: 0:2 : does not exist [ 113.064359][ T5888] usb 1-1: SerialNumber: syz [ 113.161665][ T5892] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 113.190794][ T5888] usb 1-1: config 0 descriptor?? [ 113.257521][ T5892] usb 3-1: USB disconnect, device number 11 [ 113.367160][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.654223][ T6489] pimreg: entered allmulticast mode [ 113.666999][ T6489] pimreg: left allmulticast mode [ 114.187824][ T978] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 114.359385][ T978] usb 4-1: unable to get BOS descriptor or descriptor too short [ 114.403808][ T5892] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 114.414842][ T978] usb 4-1: not running at top speed; connect to a high speed hub [ 114.459580][ T978] usb 4-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 114.497063][ T978] usb 4-1: config 253 interface 0 altsetting 57 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 114.536336][ T978] usb 4-1: config 253 interface 0 has no altsetting 0 [ 114.573468][ T5892] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 114.614195][ T5892] usb 2-1: config 0 has no interface number 0 [ 114.650184][ T978] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.663923][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.672587][ T5892] usb 2-1: config 0 interface 253 has no altsetting 0 [ 114.701664][ T5892] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 114.717404][ T978] usb 4-1: Product: syz [ 114.780041][ T978] usb 4-1: Manufacturer: syz [ 114.791594][ T978] usb 4-1: SerialNumber: syz [ 114.796638][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.872666][ T5892] usb 2-1: config 0 descriptor?? [ 114.953314][ T5892] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 115.133012][ T978] cdc_ether 4-1:253.0: skipping garbage [ 115.170660][ T978] cdc_ether 4-1:253.0: skipping garbage [ 115.260612][ T978] usb 4-1: bad CDC descriptors [ 115.322192][ T978] usb 4-1: USB disconnect, device number 15 [ 115.614876][ T5888] usb 1-1: USB disconnect, device number 13 [ 115.891937][ T5908] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 116.464880][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.568134][ T5892] gspca_stv06xx: HDCS-1020 sensor detected [ 116.625414][ T5908] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 116.670687][ T6537] block device autoloading is deprecated and will be removed. [ 116.761619][ T5908] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 116.774785][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.859285][ T5908] usb 5-1: config 0 descriptor?? [ 116.919890][ T5892] STV06xx 2-1:0.253: probe with driver STV06xx failed with error -71 [ 116.941427][ T5892] usb 2-1: USB disconnect, device number 7 [ 117.092390][ T5908] konepure 0003:1E7D:2DB4.0004: unbalanced collection at end of report description [ 117.134865][ T5908] konepure 0003:1E7D:2DB4.0004: parse failed [ 117.167043][ T5908] konepure 0003:1E7D:2DB4.0004: probe with driver konepure failed with error -22 [ 117.346696][ T6545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.356555][ T6545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.408869][ T6544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.418791][ T6544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.746925][ T6562] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 117.977466][ T5908] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 118.137384][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 118.191697][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.252951][ T5908] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 118.300235][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.337469][ T5908] usb 1-1: config 0 descriptor?? [ 118.574359][ T5908] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 118.866389][ T5888] usb 5-1: USB disconnect, device number 13 [ 119.098887][ T5893] usb 1-1: USB disconnect, device number 14 [ 119.402045][ T917] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 119.632806][ T917] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 119.635378][ T6588] loop6: detected capacity change from 0 to 7 [ 119.670375][ T6588] Dev loop6: unable to read RDB block 7 [ 119.676020][ T6588] loop6: AHDI p1 p2 p3 p4 [ 119.691743][ T917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.717360][ T6588] loop6: partition table partially beyond EOD, truncated [ 119.757542][ T6588] loop6: p1 start 926365495 is beyond EOD, truncated [ 119.767776][ T917] usb 5-1: config 0 descriptor?? [ 119.795047][ T6588] loop6: p2 size 47 extends beyond EOD, truncated [ 119.825191][ T917] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 119.845268][ T6588] loop6: p3 start 1886353253 is beyond EOD, truncated [ 119.880502][ T6592] netlink: 72 bytes leftover after parsing attributes in process `syz.0.197'. [ 120.009429][ T6015] udevd[6015]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 120.499935][ T6612] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 120.567656][ T5908] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 121.232604][ T917] gspca_stv06xx: HDCS-1020 sensor detected [ 132.989693][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.997972][ C0] sched: DL replenish lagged too much [ 133.013186][ C0] hrtimer: interrupt took 5911670 ns [ 133.201971][ T5908] usb 1-1: device descriptor read/all, error -110 [ 134.350430][ T917] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -32 [ 134.452046][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.416079][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.432861][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.527683][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 199.299204][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 201.022374][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 201.351161][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 207.022169][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 257.659622][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 269.330258][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 287.707307][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 287.714309][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6612/1:b..l [ 287.722729][ C1] rcu: (detected by 1, t=10502 jiffies, g=15169, q=357 ncpus=2) [ 287.730567][ C1] task:syz.3.206 state:R running task stack:24872 pid:6612 tgid:6604 ppid:5856 task_flags:0x400140 flags:0x00004006 [ 287.745057][ C1] Call Trace: [ 287.748359][ C1] [ 287.751395][ C1] __schedule+0x16f5/0x4d00 [ 287.755940][ C1] ? _prb_read_valid+0xa07/0xa90 [ 287.760897][ C1] ? __pfx___schedule+0x10/0x10 [ 287.765768][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 287.771071][ C1] ? __pfx___schedule+0x10/0x10 [ 287.775946][ C1] ? __pfx___console_unlock+0x10/0x10 [ 287.781340][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 287.786639][ C1] preempt_schedule_irq+0xb5/0x150 [ 287.792026][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 287.797795][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 287.803616][ C1] irqentry_exit+0x6f/0x90 [ 287.808136][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 287.814127][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 287.819440][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 1b 0a fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 287.839080][ C1] RSP: 0018:ffffc9001bd8ecb8 EFLAGS: 00000206 [ 287.845254][ C1] RAX: 97cb14639ec6ec00 RBX: 0000000000000000 RCX: 97cb14639ec6ec00 [ 287.853684][ C1] RDX: 0000000000000000 RSI: ffffffff8db66a62 RDI: ffffffff8be27240 [ 287.861862][ C1] RBP: ffffffff81729e15 R08: 0000000000000000 R09: ffffffff81729e15 [ 287.869856][ C1] R10: ffffc9001bd8ee78 R11: ffffffff81acf710 R12: 0000000000000002 [ 287.878019][ C1] R13: ffffffff8e13f060 R14: 0000000000000000 R15: 0000000000000246 [ 287.886193][ C1] ? unwind_next_frame+0xa5/0x2390 [ 287.891339][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 287.897518][ C1] ? unwind_next_frame+0xa5/0x2390 [ 287.902663][ C1] ? unwind_next_frame+0xa5/0x2390 [ 287.907897][ C1] ? nf_tables_newrule+0x25e1/0x2890 [ 287.913220][ C1] ? unwind_next_frame+0xa5/0x2390 [ 287.918441][ C1] unwind_next_frame+0xc2/0x2390 [ 287.923402][ C1] ? unwind_next_frame+0xa5/0x2390 [ 287.928588][ C1] ? unwind_next_frame+0xa5/0x2390 [ 287.933752][ C1] ? kfree+0x18e/0x440 [ 287.937846][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 287.944021][ C1] arch_stack_walk+0x11c/0x150 [ 287.949219][ C1] ? nf_tables_newrule+0x25e1/0x2890 [ 287.955102][ C1] stack_trace_save+0x9c/0xe0 [ 287.959809][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 287.965316][ C1] ? __lock_acquire+0xab9/0xd20 [ 287.971291][ C1] kasan_save_track+0x3e/0x80 [ 287.976201][ C1] ? kasan_save_track+0x3e/0x80 [ 287.981461][ C1] ? kasan_save_free_info+0x46/0x50 [ 287.986870][ C1] ? __kasan_slab_free+0x62/0x70 [ 287.991841][ C1] ? kfree+0x18e/0x440 [ 287.996370][ C1] ? nf_tables_newrule+0x25e1/0x2890 [ 288.001823][ C1] kasan_save_free_info+0x46/0x50 [ 288.007047][ C1] __kasan_slab_free+0x62/0x70 [ 288.011830][ C1] ? nf_tables_newrule+0x25e1/0x2890 [ 288.020294][ C1] kfree+0x18e/0x440 [ 288.024222][ C1] ? __pfx_nft_match_release_ops+0x10/0x10 [ 288.030917][ C1] nf_tables_newrule+0x25e1/0x2890 [ 288.036298][ C1] ? __pfx_nf_tables_newrule+0x10/0x10 [ 288.042663][ C1] ? nfnl_pernet+0x23/0x240 [ 288.047203][ C1] ? __nla_parse+0x40/0x60 [ 288.051645][ C1] nfnetlink_rcv+0x112f/0x2520 [ 288.056465][ C1] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 288.061624][ C1] ? ref_tracker_free+0x63a/0x7d0 [ 288.066691][ C1] ? __netlink_deliver_tap+0x807/0x850 [ 288.072190][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.077566][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.082882][ C1] netlink_unicast+0x75b/0x8d0 [ 288.088077][ C1] netlink_sendmsg+0x805/0xb30 [ 288.092863][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.098142][ C1] ? aa_sock_msg_perm+0x94/0x160 [ 288.103154][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 288.108442][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.114097][ C1] __sock_sendmsg+0x219/0x270 [ 288.118801][ C1] ____sys_sendmsg+0x505/0x830 [ 288.123745][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.129022][ C1] ? import_iovec+0x74/0xa0 [ 288.133518][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 288.138175][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.143371][ C1] ? __fget_files+0x2a/0x420 [ 288.147981][ C1] ? __fget_files+0x3a0/0x420 [ 288.152752][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 288.157783][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 288.164082][ C1] ? rcu_is_watching+0x15/0xb0 [ 288.168839][ C1] ? do_syscall_64+0xbe/0x3b0 [ 288.173569][ C1] do_syscall_64+0xfa/0x3b0 [ 288.178058][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.183541][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.190010][ C1] ? clear_bhb_loop+0x60/0xb0 [ 288.195166][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.201097][ C1] RIP: 0033:0x7f55cc98e929 [ 288.205554][ C1] RSP: 002b:00007f55cd7bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.217279][ C1] RAX: ffffffffffffffda RBX: 00007f55ccbb6240 RCX: 00007f55cc98e929 [ 288.225325][ C1] RDX: 0000000004048010 RSI: 0000200000000080 RDI: 0000000000000007 [ 288.233398][ C1] RBP: 00007f55cca10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 288.241989][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.249973][ C1] R13: 0000000000000000 R14: 00007f55ccbb6240 R15: 00007f55cccdfa28 [ 288.258530][ C1]