last executing test programs: 4m47.744712906s ago: executing program 4 (id=487): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000280)=""/189, 0xbd) 4m47.494871732s ago: executing program 4 (id=488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) preadv(0xffffffffffffffff, &(0x7f00000026c0), 0x0, 0xffffffff, 0x34) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000003c0)=@gettaction={0x34, 0x32, 0x301, 0x70bd2d, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x34}}, 0x0) dup(r4) 4m46.417213425s ago: executing program 4 (id=491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) preadv(0xffffffffffffffff, &(0x7f00000026c0), 0x0, 0xffffffff, 0x34) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) 4m41.472147151s ago: executing program 4 (id=501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) preadv(0xffffffffffffffff, &(0x7f00000026c0), 0x0, 0xffffffff, 0x34) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000003c0)=@gettaction={0x34, 0x32, 0x301, 0x70bd2d, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x34}}, 0x0) dup(r4) 4m40.40539466s ago: executing program 4 (id=503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x208) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm_intel/parameters/vmentry_l1d_flush\x00', 0x2, 0x0) read$snapshot(r3, &(0x7f0000000140)=""/58, 0x3a) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000000)=r1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8002}]}) 4m40.207610717s ago: executing program 4 (id=505): socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) fanotify_init(0x40, 0x40000) syz_create_resource$binfmt(0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) 4m26.3620343s ago: executing program 3 (id=535): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x9e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffff7, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfdfffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x0, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0xfffffffc, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4840}, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m25.116706733s ago: executing program 3 (id=536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) preadv(0xffffffffffffffff, &(0x7f00000026c0), 0x0, 0xffffffff, 0x34) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) 4m25.051257866s ago: executing program 32 (id=505): socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) fanotify_init(0x40, 0x40000) syz_create_resource$binfmt(0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4) 4m24.083867656s ago: executing program 3 (id=539): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r0 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) readv(r0, &(0x7f0000001980)=[{&(0x7f0000001940)=""/13, 0xd}, {0x0, 0xffb6}], 0x2) socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = gettid() tkill(r1, 0x21) 4m21.87324769s ago: executing program 3 (id=542): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) write(r3, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 4m20.833577535s ago: executing program 3 (id=544): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x208) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm_intel/parameters/vmentry_l1d_flush\x00', 0x2, 0x0) read$snapshot(r3, &(0x7f0000000140)=""/58, 0x3a) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000000)=r1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8002}]}) 4m19.360419551s ago: executing program 3 (id=547): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100, 0xa0ca, 0x80000004, 0x4f, 0x0, 0x9, 0xe, 0xd, 0x31e}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500030000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) openat$adsp1(0xffffffffffffff9c, 0x0, 0x220201, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) fcntl$getownex(r5, 0x40f, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r10, r5, &(0x7f0000002080)=0x64, 0x23b) fchdir(0xffffffffffffffff) 4m4.073148684s ago: executing program 33 (id=547): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100, 0xa0ca, 0x80000004, 0x4f, 0x0, 0x9, 0xe, 0xd, 0x31e}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500030000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) openat$adsp1(0xffffffffffffff9c, 0x0, 0x220201, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) fcntl$getownex(r5, 0x40f, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r10, r5, &(0x7f0000002080)=0x64, 0x23b) fchdir(0xffffffffffffffff) 6.270324114s ago: executing program 2 (id=1305): socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read(r0, &(0x7f0000000240)=""/240, 0xf0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) r2 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r2, 0x0) socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000480)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r3, &(0x7f0000000040)=[{&(0x7f0000001340)=""/4113, 0x1017}], 0x4f) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a32"], 0x94}}, 0x0) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x4000) syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000002c0)}) 4.675609355s ago: executing program 6 (id=1312): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x80, 0x80) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0xa, {0x0, 0xf, 0x7, 0x402}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x1, 0x2, 0x1, 0x0, @adapter={0x2, 0x62e98893, 0x2, 0xfffffbff, 0x5}}]}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc01c5868, &(0x7f0000000240)={r1, &(0x7f0000000100)=')[\\[{:@^]}\x00', 0x40801, &(0x7f0000000140)={@_ha_fsid={[0x80000001, 0x2]}, {0xc, 0x8, 0xe, 0x7}}, 0x3ff, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x800}) sendmsg$nl_route(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2100208}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x11) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x40, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4.273627769s ago: executing program 6 (id=1317): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 4.190695314s ago: executing program 6 (id=1321): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x80032, 0xffffffffffffffff, 0xeba4c000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x4ff1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000680)={0x2, {{0xa, 0x4620, 0x407, @mcast2, 0x7f}}, 0x0, 0x2, [{{0xa, 0x4e23, 0x2088, @private1, 0x3}}, {{0xa, 0x4e23, 0xfe, @private1, 0xfffffff4}}]}, 0x190) syz_emit_ethernet(0x3e, &(0x7f0000000980)={@random="9d3e485beb27", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ff00", 0x8, 0x3a, 0x0, @private1, @mcast2, {[], @mlv2_report={0x8f, 0x0, 0x0, 0xb9}}}}}}, 0x0) 3.949040998s ago: executing program 1 (id=1323): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80180002802d"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 3.768120781s ago: executing program 1 (id=1324): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefcc, 0x7f7, 0x3, "35960300000006a7446d67a000", 0x7, 0x200005}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 3.134292387s ago: executing program 2 (id=1325): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2d, &(0x7f0000000000)=0xb1e0, 0x4) 2.949243241s ago: executing program 2 (id=1326): setsockopt(0xffffffffffffffff, 0x9, 0xffffffff, &(0x7f0000001180)='s', 0x1) pipe2$9p(&(0x7f0000000280), 0x80800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x97) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, 0x0, 0xfffffffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60020000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.947973681s ago: executing program 1 (id=1327): r0 = syz_open_dev$video(&(0x7f00000000c0), 0x80, 0x80) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0xa, {0x0, 0xf, 0x7, 0x402}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x1, 0x2, 0x1, 0x0, @adapter={0x2, 0x62e98893, 0x2, 0xfffffbff, 0x5}}]}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc01c5868, &(0x7f0000000240)={r1, &(0x7f0000000100)=')[\\[{:@^]}\x00', 0x40801, &(0x7f0000000140)={@_ha_fsid={[0x80000001, 0x2]}, {0xc, 0x8, 0xe, 0x7}}, 0x3ff, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x800}) sendmsg$nl_route(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2100208}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="dc0000006800d6d62abd7000fedbdf250a0003001200000034000c80080003000c00000008000200020000000800020000000080080003000300000006000100ff7f000008000300070000003c000c8006000100000100000600010003000000080002000400000006000100040000000600010003000000080003008000a60c5d5c4e83812d4a12000008000200f7ffffff4c000c800800020006000000080003000000000008000200ff01003fc70001000400000008000200010000000600010007000000080003000800000006000100ad090000060001000100000006000300010000003976a9865110ac98c6a4fe04a79751debe65061fe180f7051ce2e423a649e4b69aa0f799d8f9db60d6ac1aaebc296d41f835cc88c2ba6996a15fb8dce63161c2b14e8c27ee2cccc2d9ac19c462c6454ee1bdb0a846c40469370457fd372dbbc17ab6bccfa4f7a0088a16846d3c193c6358a7ffe73782c59557c758f3d1a6d9161f1dd8801500d0a423dcf59723671d2d62007e250920a4aa"], 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x11) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x40, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.89929412s ago: executing program 6 (id=1328): io_uring_setup(0x1d90, &(0x7f0000000480)={0x0, 0xe9cc, 0x40, 0xfffffffd, 0x376}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x8c845) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000100)=ANY=[@ANYBLOB="1b1b", @ANYRES16=r0]) bpf$BPF_GET_PROG_INFO(0x4, 0x0, 0x0) 2.691748308s ago: executing program 1 (id=1329): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0xb, 0x880c0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000002c0)=[{0x2, 0xca01, 0x0, 0x0}, {0xd, 0x2000, 0x0, 0x0}], 0x2}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000480)={0xc, &(0x7f0000000300)={0x40, 0x21, 0xfc, {0xfc, 0xb, "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"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}}, &(0x7f00000006c0)={0x1c, &(0x7f00000004c0)={0x0, 0x17, 0x4e, "a5914afe8383bde524f2a58ea7b6b28da6f00d7500c1bc6e643ad8031cd91deed3c5157bf32370bbe472bd51604f4a38e9d3df0cf3bd1f18bdcc33f3a7d903e6d3adb0842b771585db1b6f1a0eb2"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000005c0)={0x20, 0x0, 0x38, {0x36, "e43a32fd5d54faf0c4fdd6f53130521ae06b84ff78b4cd62cdbfffa70abcfd441bf4adea8fd269036a2a42643586a324eb14c2a37879"}}, &(0x7f0000000640)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000680)={0x20, 0x0, 0x1, 0x8}}) 2.003824334s ago: executing program 1 (id=1335): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x9, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x80000004}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0}, 0x94) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0xffffbffd, 0x200, 0x0, 'queue1\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f0000000480)=""/244, 0xf4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, 0x0, 0x40) 1.836499374s ago: executing program 5 (id=1336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xdc}, 0x40004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x4044011}, 0x4040010) close(r0) 1.724030745s ago: executing program 5 (id=1337): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2800001d}) 1.580734961s ago: executing program 5 (id=1338): pipe(&(0x7f0000000000)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000380)="e9", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 1.391942695s ago: executing program 5 (id=1339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005800800080000c1"], 0x4a) 1.318855919s ago: executing program 5 (id=1340): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000140)={&(0x7f0000003b40)=[{0x4, 0x200, 0x2000, &(0x7f0000000680)="1f"}], 0x1}) 783.935487ms ago: executing program 2 (id=1343): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) capset(0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x30, r0, 0xadfb9000) close(0x4) 752.844883ms ago: executing program 0 (id=1344): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000640)=""/70, 0x46}, {&(0x7f00000006c0)=""/179, 0xb3}], 0x6}}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 707.852011ms ago: executing program 5 (id=1345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) preadv(0xffffffffffffffff, &(0x7f00000026c0), 0x0, 0xffffffff, 0x34) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) 628.203866ms ago: executing program 6 (id=1346): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0xfffffffb) syz_emit_ethernet(0x4a, &(0x7f00000008c0)={@local, @random="c82063dca13f", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @private1, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) 617.757807ms ago: executing program 2 (id=1347): r0 = socket(0x1e, 0x4, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc01c586a, &(0x7f0000000380)={r0, &(0x7f0000000280)='\xaa\xaa\xaa\xaa\xaa', 0x28b02, 0x0, 0x400, 0x0, 0x0}) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) socket$pppoe(0x18, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_clone3(&(0x7f0000000480)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r2, 0x4a, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, &(0x7f0000000140)="bf", 0xfd62, 0x0, 0x0, 0x2}]) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) 579.392224ms ago: executing program 0 (id=1348): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000001280)={@random='\tE\x00', @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x4d, 0x11, 0x0, @private1, @mcast2, {[], {0x4e24, 0xe22, 0x4d, 0x0, @gue={{0x1, 0x1, 0x1, 0x2, 0x100, @void}, "c84b2828d07313ac60542096b822479c9ccfa78854d2ff900f026c5a10904c7a4a7e519553dc47dede57bab14566f448c0a8d09037adc8464a4ee790d3becad839"}}}}}}}, 0x0) 458.396746ms ago: executing program 0 (id=1349): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x10, 0x84, 0x7, @local}], 0x10, 0x4855}, 0x24000052) 457.021097ms ago: executing program 6 (id=1350): prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x961a02, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaa1aaaaaaaa0180a4000001081c07764b200604005500000e7f000501b500b6d94937a6fa2abfb6d79643029410a0be13d0124d94f1a8c151f347eea8ceffd3b71b83802c232892da2d278c5f71f30e30b8f0d3812b7b053508ed7198cb00000000000000000019469f0b6a7e1673fe7bbcf131176de45ef04e5b99ccb2f81bc6dff40fdfbf8e96b90342b5e2d8ba5d2670f298bc6a86646c2e189ea77a5ab50b4982db302dcfc6c1af27fa8131e67b97f46b3862a2f6738a1784cd4ddafce1f5362b5f3a40c3ed6270c16b81e126219d4cad"], &(0x7f0000000040)={0x0, 0x2, [0x5c6, 0xf2b, 0x530, 0xae1]}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) fcntl$dupfd(r2, 0x0, r2) 283.910488ms ago: executing program 0 (id=1351): socket$nl_audit(0x10, 0x3, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x80, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) read$dsp(r1, &(0x7f0000000280)=""/189, 0xbd) 228.746608ms ago: executing program 0 (id=1352): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x13, 0xffffffffffffffff, 0x80000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) 167.49005ms ago: executing program 1 (id=1353): setsockopt(0xffffffffffffffff, 0x9, 0xffffffff, &(0x7f0000001180)='s', 0x1) pipe2$9p(&(0x7f0000000280), 0x80800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x97) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, 0x0, 0xfffffffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60020000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 103.861841ms ago: executing program 0 (id=1354): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x300}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) 0s ago: executing program 2 (id=1355): r0 = openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4, 0x0, &(0x7f00000007c0)=[@exit_looper], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): [ 67.561626][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.588467][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.625791][ T4197] device hsr_slave_0 entered promiscuous mode [ 67.633165][ T4197] device hsr_slave_1 entered promiscuous mode [ 67.640376][ T4199] Bluetooth: hci3: command 0x0409 tx timeout [ 67.646572][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 67.647355][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 67.659394][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.661954][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 67.673268][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 67.673554][ T4197] Cannot create hsr debugfs directory [ 67.779339][ T4193] device hsr_slave_0 entered promiscuous mode [ 67.786207][ T4193] device hsr_slave_1 entered promiscuous mode [ 67.792798][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.801096][ T4193] Cannot create hsr debugfs directory [ 68.012296][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.028975][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.044029][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.057342][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.111725][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.122086][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.146571][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.156063][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.183590][ T4201] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.199992][ T4201] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.211517][ T4201] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.240912][ T4201] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.295727][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.345402][ T4197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.372488][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.381669][ T4197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.391358][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.401953][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.426145][ T4197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.437119][ T4197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.465793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.476020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.485647][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.492990][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.503106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.513616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.522497][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.529665][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.538680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.560224][ T4193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.574177][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.586545][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.598316][ T4193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.611277][ T4193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.620845][ T4193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.638635][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.659721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.680129][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.703555][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.711856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.721648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.731179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.739884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.748179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.756996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.765159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.773821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.782727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.791863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.801229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.809931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.818456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.829511][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.838803][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.847952][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.855136][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.867385][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.894088][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.905101][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.914033][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.925084][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.932319][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.940386][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.949481][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.958375][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.965530][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.973555][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.982628][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.992454][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.001345][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.008616][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.017268][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.026571][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.062269][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.082046][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.091586][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.109499][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.122042][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.131296][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.141243][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.177149][ T4201] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.198424][ T4201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.217538][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.231485][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.241034][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.255050][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.265109][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.273637][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.282883][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.291621][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.325625][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.341807][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.358109][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.371170][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.381809][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.391200][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.400952][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.410507][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.420046][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.429283][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.443427][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.458293][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.488957][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.512559][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.526891][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.537112][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.608195][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.643401][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.652449][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.659607][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.674236][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.683587][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.699047][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.706319][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.720005][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 69.726656][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 69.732861][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 69.738841][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.747996][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 69.754739][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.756002][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 69.775725][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.786361][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.798060][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.808657][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.841059][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.857888][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.865721][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.873362][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.885328][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.894038][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.902915][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.911553][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.930495][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.945459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.953517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.964179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.971985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.993278][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.012753][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.025986][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.041831][ T4187] device veth0_vlan entered promiscuous mode [ 70.049778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.060518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.069521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.080405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.089286][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.096413][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.105241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.113881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.123528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.132074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.141504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.149607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.157764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.168600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.187305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.196684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.209009][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.216176][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.249240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.260077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.270645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.299479][ T4187] device veth1_vlan entered promiscuous mode [ 70.326717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.339353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.349391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.358989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.370456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.382344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.397947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.410032][ T4186] device veth0_vlan entered promiscuous mode [ 70.429829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.439563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.447615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.477682][ T4186] device veth1_vlan entered promiscuous mode [ 70.490351][ T4201] device veth0_vlan entered promiscuous mode [ 70.500577][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.511994][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.522097][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.532437][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.541294][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.562031][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.573540][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.601220][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.610178][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.618290][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.627077][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.635871][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.646318][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.654922][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.680986][ T4201] device veth1_vlan entered promiscuous mode [ 70.695186][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.705068][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.713659][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.722142][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.730794][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.740601][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.752981][ T4187] device veth0_macvtap entered promiscuous mode [ 70.768720][ T4186] device veth0_macvtap entered promiscuous mode [ 70.779328][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.794508][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.817216][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.835423][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.852493][ T4187] device veth1_macvtap entered promiscuous mode [ 70.863758][ T4186] device veth1_macvtap entered promiscuous mode [ 70.903365][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.913194][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.938985][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.954226][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.973259][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.001553][ T4201] device veth0_macvtap entered promiscuous mode [ 71.021939][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.035391][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.049707][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.058424][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.067376][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.079230][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.092852][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.105560][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.116156][ T4201] device veth1_macvtap entered promiscuous mode [ 71.128280][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.139681][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.149850][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.159927][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.168751][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.180679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.190107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.206172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.220107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.230825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.253297][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.264989][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.277040][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.311435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.322386][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.328375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.332439][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.353750][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.363504][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.375466][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.384233][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.396274][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.408307][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.420148][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.431500][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.442882][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.483168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.493140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.509208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.519442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.527654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.536998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.550189][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.561804][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.571933][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.583037][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.595054][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.628580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.647068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.663694][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.687478][ T4201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.697151][ T4201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.706552][ T4201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.717759][ T4201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.779404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.791395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.797673][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 71.805954][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 71.815757][ T4197] device veth0_vlan entered promiscuous mode [ 71.824485][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 71.833337][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 71.840990][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 71.862182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.877917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.892849][ T4197] device veth1_vlan entered promiscuous mode [ 71.908881][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.922967][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.932297][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.939148][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.947378][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.988523][ T3117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.012346][ T3117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.057337][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.080413][ T1266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.097107][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.103980][ T1266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.125787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.133955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.143263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.161338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.170860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.179861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.190008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.200797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.217179][ T4197] device veth0_macvtap entered promiscuous mode [ 72.244303][ T4193] device veth0_vlan entered promiscuous mode [ 72.270397][ T4193] device veth1_vlan entered promiscuous mode [ 72.305824][ T3117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.313772][ T3117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.353695][ T4197] device veth1_macvtap entered promiscuous mode [ 72.372387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.481934][ T4270] ======================================================= [ 72.481934][ T4270] WARNING: The mand mount option has been deprecated and [ 72.481934][ T4270] and is ignored by this kernel. Remove the mand [ 72.481934][ T4270] option from the mount to silence this warning. [ 72.481934][ T4270] ======================================================= [ 72.600139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.611917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.744315][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 72.754295][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 72.764302][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 72.774314][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 72.784297][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 72.814298][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 72.824301][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 72.834311][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 72.844297][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 72.854303][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 73.683149][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.512253][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.534910][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.575184][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 74.581371][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 74.588757][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 74.595954][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 74.602046][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 74.609297][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.624963][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.637777][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.657937][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.676596][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.697395][ T4193] device veth0_macvtap entered promiscuous mode [ 74.702890][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.725314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.738099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.747480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.760170][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.777048][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.791788][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.808810][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.820315][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.838539][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.853672][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.874143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.891581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.933492][ T4197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.952618][ T4197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.969629][ T4197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.990734][ T4197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.003757][ T4193] device veth1_macvtap entered promiscuous mode [ 75.021841][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.042761][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.093319][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.109624][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.134888][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.145056][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.157286][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.167323][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.179717][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.189705][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.200421][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.213056][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.241799][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.261843][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.295062][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.313666][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.330226][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.342548][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.358355][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.370654][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.386635][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.401287][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.419189][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.493731][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.508055][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.537702][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.556220][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.574466][ T4290] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.585677][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.599696][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.630147][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.671502][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.766342][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.796392][ T3089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.819257][ T3089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.865652][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.004696][ T4229] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.047971][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.080611][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.160230][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.216418][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.239527][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.333630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.374263][ C0] sched: RT throttling activated [ 77.498536][ T4229] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 77.598082][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.849425][ T4229] usb 4-1: config 0 descriptor?? [ 78.291623][ T4263] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.461010][ T4229] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 78.469344][ T4229] [drm] Initialized udl on minor 2 [ 78.680481][ T4229] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 78.700748][ T4229] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 78.802259][ T4229] usb 4-1: USB disconnect, device number 2 [ 78.832340][ T4199] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 78.885669][ T4263] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 79.240459][ T4263] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 79.754807][ T4199] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 79.758010][ T4263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 79.767406][ T4199] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 79.845528][ T4263] usb 2-1: Product: syz [ 79.849771][ T4263] usb 2-1: Manufacturer: syz [ 79.875215][ T4333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 79.944713][ T4263] usb 2-1: can't set config #1, error -71 [ 79.977627][ T4263] usb 2-1: USB disconnect, device number 2 [ 80.156080][ T4343] ip_tables: iptables: counters copy to user failed while replacing table [ 80.264892][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.854730][ T4361] FAULT_INJECTION: forcing a failure. [ 80.854730][ T4361] name failslab, interval 1, probability 0, space 0, times 1 [ 80.868390][ T4361] CPU: 1 PID: 4361 Comm: syz.3.28 Not tainted syzkaller #0 [ 80.875640][ T4361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 80.885851][ T4361] Call Trace: [ 80.889164][ T4361] [ 80.892151][ T4361] dump_stack_lvl+0x188/0x250 [ 80.896865][ T4361] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 80.902528][ T4361] ? show_regs_print_info+0x20/0x20 [ 80.907754][ T4361] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 80.913436][ T4361] should_fail+0x383/0x4b0 [ 80.917979][ T4361] should_failslab+0x5/0x20 [ 80.922508][ T4361] slab_pre_alloc_hook+0x51/0xc0 [ 80.927477][ T4361] __kmalloc_node+0x6d/0x3a0 [ 80.932095][ T4361] ? memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 80.938110][ T4361] memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 80.943954][ T4361] slab_post_alloc_hook+0xba/0x380 [ 80.949100][ T4361] __kmalloc_node+0x1ae/0x3a0 [ 80.953838][ T4361] ? kvmalloc_node+0x84/0x130 [ 80.958729][ T4361] kvmalloc_node+0x84/0x130 [ 80.963338][ T4361] seq_read_iter+0x1de/0xc50 [ 80.968003][ T4361] seq_read+0x3dc/0x4f0 [ 80.972240][ T4361] ? seq_open+0x130/0x130 [ 80.976645][ T4361] ? fsnotify_perm+0x19d/0x560 [ 80.981451][ T4361] ? kasan_check_range+0x84/0x290 [ 80.986519][ T4361] ? seq_open+0x130/0x130 [ 80.990882][ T4361] proc_reg_read+0x1dd/0x2c0 [ 80.995596][ T4361] ? proc_reg_get_unmapped_area+0x3a0/0x3a0 [ 81.001521][ T4361] vfs_read+0x2ff/0xd50 [ 81.005711][ T4361] ? __lock_acquire+0x7b50/0x7b50 [ 81.010771][ T4361] ? kernel_read+0x1e0/0x1e0 [ 81.015395][ T4361] ? preempt_schedule_irq+0xe6/0x160 [ 81.020740][ T4361] ? mutex_lock_nested+0x17/0x20 [ 81.025712][ T4361] ? __fdget_pos+0x2bf/0x370 [ 81.030394][ T4361] ? ksys_read+0x70/0x260 [ 81.034768][ T4361] ksys_read+0x153/0x260 [ 81.039062][ T4361] ? vfs_write+0xd70/0xd70 [ 81.043520][ T4361] do_syscall_64+0x4c/0xa0 [ 81.047982][ T4361] ? clear_bhb_loop+0x30/0x80 [ 81.052688][ T4361] ? clear_bhb_loop+0x30/0x80 [ 81.057399][ T4361] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.063551][ T4361] RIP: 0033:0x7f840bf9d159 [ 81.068000][ T4361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.087644][ T4361] RSP: 002b:00007f840a1b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 81.096406][ T4361] RAX: ffffffffffffffda RBX: 00007f840c225180 RCX: 00007f840bf9d159 [ 81.104515][ T4361] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000007 [ 81.112656][ T4361] RBP: 00007f840c03406b R08: 0000000000000000 R09: 0000000000000000 [ 81.120674][ T4361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.128712][ T4361] R13: 00007f840c225218 R14: 00007f840c225180 R15: 00007ffd359a0f48 [ 81.136763][ T4361] [ 81.139889][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.835119][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 81.881470][ T7] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 81.987611][ T7] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.245930][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 82.291384][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 82.355090][ T7] usb 3-1: Product: syz [ 82.739526][ T7] usb 3-1: Manufacturer: syz [ 82.744205][ T7] usb 3-1: SerialNumber: syz [ 82.767005][ T4361] ODEBUG: Out of memory. ODEBUG disabled [ 83.807172][ T7] usb 3-1: can't set config #1, error -71 [ 83.905377][ T7] usb 3-1: USB disconnect, device number 2 [ 84.501611][ T4380] netlink: 116 bytes leftover after parsing attributes in process `syz.4.35'. [ 84.601037][ T4384] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.817793][ T4400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.42'. [ 84.872977][ T4400] Zero length message leads to an empty skb [ 87.061310][ T1109] cfg80211: failed to load regulatory.db [ 87.134319][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.974323][ T21] usb 3-1: device not accepting address 3, error -71 [ 89.033042][ T4447] device netdevsim0 entered promiscuous mode [ 89.056503][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 89.079348][ T4447] netlink: 44 bytes leftover after parsing attributes in process `syz.4.54'. [ 89.103019][ T4447] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 90.698770][ T4464] syz.4.61 uses obsolete (PF_INET,SOCK_PACKET) [ 94.491525][ T4515] using random self ethernet address [ 94.498494][ T4515] using random host ethernet address [ 97.886845][ T4550] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.702652][ T4404] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.974491][ T4404] usb 5-1: Using ep0 maxpacket: 16 [ 99.134469][ T4404] usb 5-1: unable to get BOS descriptor or descriptor too short [ 99.394695][ T4404] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 100.121433][ T4404] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 100.141775][ T4404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.171518][ T4404] usb 5-1: Product: syz [ 100.177514][ T4404] usb 5-1: Manufacturer: syz [ 100.182245][ T4404] usb 5-1: SerialNumber: syz [ 100.255752][ T4575] ip_tables: iptables: counters copy to user failed while replacing table [ 100.630903][ T4404] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 100.813843][ T4404] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 101.144532][ T4263] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 101.454366][ T4404] usb 5-1: 2:1 : can't get Cluster Descriptor [ 102.159470][ T4237] usb 5-1: USB disconnect, device number 2 [ 103.274996][ T4263] usb 3-1: unable to get BOS descriptor or descriptor too short [ 104.121717][ T1109] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.632342][ T4263] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.686102][ T4263] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 104.714340][ T7] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 104.886470][ T4263] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 105.516025][ T4621] ip_tables: iptables: counters copy to user failed while replacing table [ 105.552643][ T4263] usb 3-1: string descriptor 0 read error: -71 [ 105.579859][ T4263] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 105.613707][ T4263] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 105.896495][ T4263] usb 3-1: can't set config #1, error -71 [ 105.916175][ T4263] usb 3-1: USB disconnect, device number 5 [ 106.017395][ T4639] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.799615][ T4404] Bluetooth: hci0: command 0x0406 tx timeout [ 108.969798][ T4665] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 109.009316][ T4665] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 111.257467][ T4688] ip_tables: iptables: counters copy to user failed while replacing table [ 115.274564][ T4188] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.608621][ T4731] ip_tables: iptables: counters copy to user failed while replacing table [ 116.529377][ T4188] usb 5-1: config index 0 descriptor too short (expected 74, got 72) [ 116.547980][ T4188] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.579119][ T4188] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 116.915625][ T4188] usb 5-1: string descriptor 0 read error: -71 [ 116.942229][ T4188] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 1.00 [ 116.952511][ T4188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.716235][ T4188] usb 5-1: can't set config #1, error -71 [ 117.938711][ T4188] usb 5-1: USB disconnect, device number 3 [ 120.560285][ T4792] FAULT_INJECTION: forcing a failure. [ 120.560285][ T4792] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 120.573872][ T4792] CPU: 1 PID: 4792 Comm: syz.1.154 Not tainted syzkaller #0 [ 120.581204][ T4792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 120.591300][ T4792] Call Trace: [ 120.594635][ T4792] [ 120.597614][ T4792] dump_stack_lvl+0x188/0x250 [ 120.602357][ T4792] ? show_regs_print_info+0x20/0x20 [ 120.607594][ T4792] ? load_image+0x410/0x410 [ 120.612415][ T4792] ? verify_lock_unused+0x140/0x140 [ 120.617671][ T4792] should_fail+0x383/0x4b0 [ 120.622138][ T4792] prepare_alloc_pages+0x1e3/0x5b0 [ 120.627299][ T4792] __alloc_pages+0x11b/0x480 [ 120.631929][ T4792] ? preempt_schedule+0xbc/0xd0 [ 120.636873][ T4792] ? zone_statistics+0x170/0x170 [ 120.641849][ T4792] ? preempt_schedule_common+0xa5/0xd0 [ 120.647396][ T4792] ? schedule_preempt_disabled+0x20/0x20 [ 120.653090][ T4792] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 120.659215][ T4792] ? __lock_acquire+0x7b50/0x7b50 [ 120.664282][ T4792] ? alloc_pages+0x452/0x560 [ 120.668938][ T4792] new_slab+0xc0/0x4b0 [ 120.673046][ T4792] ___slab_alloc+0x807/0xdd0 [ 120.677668][ T4792] ? kvmalloc_node+0x84/0x130 [ 120.682390][ T4792] __kmalloc_node+0x142/0x3a0 [ 120.687096][ T4792] ? kvmalloc_node+0x84/0x130 [ 120.691806][ T4792] kvmalloc_node+0x84/0x130 [ 120.696442][ T4792] seq_read_iter+0x1de/0xc50 [ 120.701071][ T4792] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 120.706780][ T4792] seq_read+0x3dc/0x4f0 [ 120.710991][ T4792] ? seq_open+0x130/0x130 [ 120.715365][ T4792] ? __mutex_trylock_common+0x15c/0x260 [ 120.720955][ T4792] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 120.726974][ T4792] ? end_current_label_crit_section+0x14b/0x170 [ 120.733262][ T4792] ? seq_open+0x130/0x130 [ 120.737633][ T4792] proc_reg_read+0x1dd/0x2c0 [ 120.742433][ T4792] ? proc_reg_get_unmapped_area+0x3a0/0x3a0 [ 120.748531][ T4792] vfs_read+0x2ff/0xd50 [ 120.752722][ T4792] ? __lock_acquire+0x7b50/0x7b50 [ 120.757873][ T4792] ? kernel_read+0x1e0/0x1e0 [ 120.762509][ T4792] ? mutex_lock_nested+0x17/0x20 [ 120.767482][ T4792] ? __fdget_pos+0x2bf/0x370 [ 120.772105][ T4792] ? ksys_read+0x70/0x260 [ 120.776488][ T4792] ksys_read+0x153/0x260 [ 120.780804][ T4792] ? vfs_write+0xd70/0xd70 [ 120.785292][ T4792] ? lockdep_hardirqs_on+0x94/0x140 [ 120.790557][ T4792] do_syscall_64+0x4c/0xa0 [ 120.795011][ T4792] ? clear_bhb_loop+0x30/0x80 [ 120.799834][ T4792] ? clear_bhb_loop+0x30/0x80 [ 120.804546][ T4792] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.810488][ T4792] RIP: 0033:0x7f539a7a9159 [ 120.814933][ T4792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.834854][ T4792] RSP: 002b:00007f53989bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.843507][ T4792] RAX: ffffffffffffffda RBX: 00007f539aa31180 RCX: 00007f539a7a9159 [ 120.851512][ T4792] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000007 [ 120.859512][ T4792] RBP: 00007f539a84006b R08: 0000000000000000 R09: 0000000000000000 [ 120.867518][ T4792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.875514][ T4792] R13: 00007f539aa31218 R14: 00007f539aa31180 R15: 00007ffdda1e83c8 [ 120.883535][ T4792] [ 124.953548][ T4833] netlink: 48 bytes leftover after parsing attributes in process `syz.2.168'. [ 125.306409][ T4840] FAULT_INJECTION: forcing a failure. [ 125.306409][ T4840] name failslab, interval 1, probability 0, space 0, times 0 [ 125.319488][ T4840] CPU: 1 PID: 4840 Comm: syz.0.169 Not tainted syzkaller #0 [ 125.326835][ T4840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 125.336921][ T4840] Call Trace: [ 125.340228][ T4840] [ 125.343185][ T4840] dump_stack_lvl+0x188/0x250 [ 125.347898][ T4840] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 125.353569][ T4840] ? show_regs_print_info+0x20/0x20 [ 125.358802][ T4840] ? load_image+0x410/0x410 [ 125.363358][ T4840] should_fail+0x383/0x4b0 [ 125.367813][ T4840] should_failslab+0x5/0x20 [ 125.372445][ T4840] slab_pre_alloc_hook+0x51/0xc0 [ 125.377426][ T4840] kmem_cache_alloc_trace+0x47/0x290 [ 125.382747][ T4840] ? netstat_seq_show+0xec/0xc30 [ 125.387750][ T4840] netstat_seq_show+0xec/0xc30 [ 125.392604][ T4840] seq_read_iter+0x460/0xc50 [ 125.397262][ T4840] seq_read+0x3dc/0x4f0 [ 125.401489][ T4840] ? seq_open+0x130/0x130 [ 125.405885][ T4840] ? __mutex_trylock_common+0x15c/0x260 [ 125.411518][ T4840] ? end_current_label_crit_section+0x14b/0x170 [ 125.417910][ T4840] ? seq_open+0x130/0x130 [ 125.422297][ T4840] proc_reg_read+0x1dd/0x2c0 [ 125.426970][ T4840] ? proc_reg_get_unmapped_area+0x3a0/0x3a0 [ 125.433022][ T4840] vfs_read+0x2ff/0xd50 [ 125.437224][ T4840] ? __lock_acquire+0x7b50/0x7b50 [ 125.442338][ T4840] ? kernel_read+0x1e0/0x1e0 [ 125.447000][ T4840] ? mutex_lock_nested+0x17/0x20 [ 125.451993][ T4840] ? __fdget_pos+0x2bf/0x370 [ 125.456619][ T4840] ? ksys_read+0x70/0x260 [ 125.460999][ T4840] ksys_read+0x153/0x260 [ 125.465281][ T4840] ? vfs_write+0xd70/0xd70 [ 125.469780][ T4840] ? lockdep_hardirqs_on+0x94/0x140 [ 125.475034][ T4840] do_syscall_64+0x4c/0xa0 [ 125.479498][ T4840] ? clear_bhb_loop+0x30/0x80 [ 125.484216][ T4840] ? clear_bhb_loop+0x30/0x80 [ 125.488941][ T4840] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.495082][ T4840] RIP: 0033:0x7ffaea2c8159 [ 125.499647][ T4840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.519560][ T4840] RSP: 002b:00007ffae84de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 125.528021][ T4840] RAX: ffffffffffffffda RBX: 00007ffaea550180 RCX: 00007ffaea2c8159 [ 125.536045][ T4840] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000007 [ 125.544047][ T4840] RBP: 00007ffaea35f06b R08: 0000000000000000 R09: 0000000000000000 [ 125.552053][ T4840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.560759][ T4840] R13: 00007ffaea550218 R14: 00007ffaea550180 R15: 00007ffc5ce8b728 [ 125.568790][ T4840] [ 126.316232][ T4844] Set syz1 is full, maxelem 2 reached [ 127.656361][ T4866] netlink: 16 bytes leftover after parsing attributes in process `syz.0.178'. [ 129.866106][ T4892] FAULT_INJECTION: forcing a failure. [ 129.866106][ T4892] name failslab, interval 1, probability 0, space 0, times 0 [ 129.878874][ T4892] CPU: 1 PID: 4892 Comm: syz.0.186 Not tainted syzkaller #0 [ 129.886200][ T4892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.896289][ T4892] Call Trace: [ 129.899596][ T4892] [ 129.902556][ T4892] dump_stack_lvl+0x188/0x250 [ 129.907273][ T4892] ? show_regs_print_info+0x20/0x20 [ 129.912531][ T4892] ? load_image+0x410/0x410 [ 129.917094][ T4892] ? __might_sleep+0xf0/0xf0 [ 129.921717][ T4892] ? __lock_acquire+0x7b50/0x7b50 [ 129.926804][ T4892] should_fail+0x383/0x4b0 [ 129.931268][ T4892] should_failslab+0x5/0x20 [ 129.935807][ T4892] slab_pre_alloc_hook+0x51/0xc0 [ 129.940788][ T4892] kmem_cache_alloc_trace+0x47/0x290 [ 129.946127][ T4892] ? netstat_seq_show+0xec/0xc30 [ 129.951104][ T4892] netstat_seq_show+0xec/0xc30 [ 129.955904][ T4892] seq_read_iter+0x460/0xc50 [ 129.960542][ T4892] seq_read+0x3dc/0x4f0 [ 129.964740][ T4892] ? seq_open+0x130/0x130 [ 129.969135][ T4892] ? end_current_label_crit_section+0x14b/0x170 [ 129.975418][ T4892] ? seq_open+0x130/0x130 [ 129.979974][ T4892] proc_reg_read+0x1dd/0x2c0 [ 129.984601][ T4892] ? proc_reg_get_unmapped_area+0x3a0/0x3a0 [ 129.990535][ T4892] vfs_read+0x2ff/0xd50 [ 129.994727][ T4892] ? __lock_acquire+0x7b50/0x7b50 [ 129.999787][ T4892] ? kernel_read+0x1e0/0x1e0 [ 130.004410][ T4892] ? preempt_schedule_irq+0xe6/0x160 [ 130.009751][ T4892] ? mutex_lock_nested+0x17/0x20 [ 130.014725][ T4892] ? __fdget_pos+0x2bf/0x370 [ 130.019347][ T4892] ? ksys_read+0x70/0x260 [ 130.023715][ T4892] ksys_read+0x153/0x260 [ 130.027989][ T4892] ? vfs_write+0xd70/0xd70 [ 130.032450][ T4892] do_syscall_64+0x4c/0xa0 [ 130.036901][ T4892] ? clear_bhb_loop+0x30/0x80 [ 130.041611][ T4892] ? clear_bhb_loop+0x30/0x80 [ 130.046323][ T4892] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.052252][ T4892] RIP: 0033:0x7ffaea2c8159 [ 130.056699][ T4892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.076345][ T4892] RSP: 002b:00007ffae84de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.084829][ T4892] RAX: ffffffffffffffda RBX: 00007ffaea550180 RCX: 00007ffaea2c8159 [ 130.092839][ T4892] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000007 [ 130.100845][ T4892] RBP: 00007ffaea35f06b R08: 0000000000000000 R09: 0000000000000000 [ 130.108848][ T4892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.116942][ T4892] R13: 00007ffaea550218 R14: 00007ffaea550180 R15: 00007ffc5ce8b728 [ 130.124970][ T4892] [ 131.459537][ T4900] ip_tables: iptables: counters copy to user failed while replacing table [ 132.776752][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.792580][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.230656][ T4934] FAULT_INJECTION: forcing a failure. [ 134.230656][ T4934] name failslab, interval 1, probability 0, space 0, times 0 [ 134.243438][ T4934] CPU: 1 PID: 4934 Comm: syz.3.197 Not tainted syzkaller #0 [ 134.250773][ T4934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 134.260871][ T4934] Call Trace: [ 134.264188][ T4934] [ 134.267147][ T4934] dump_stack_lvl+0x188/0x250 [ 134.271891][ T4934] ? show_regs_print_info+0x20/0x20 [ 134.277233][ T4934] ? load_image+0x410/0x410 [ 134.281783][ T4934] ? __might_sleep+0xf0/0xf0 [ 134.287246][ T4934] ? __lock_acquire+0x7b50/0x7b50 [ 134.292328][ T4934] should_fail+0x383/0x4b0 [ 134.296795][ T4934] should_failslab+0x5/0x20 [ 134.301338][ T4934] slab_pre_alloc_hook+0x51/0xc0 [ 134.306320][ T4934] __kmalloc_node+0x6d/0x3a0 [ 134.310945][ T4934] ? memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 134.316958][ T4934] ? schedule_preempt_disabled+0x20/0x20 [ 134.322632][ T4934] memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 134.328476][ T4934] slab_post_alloc_hook+0xba/0x380 [ 134.333716][ T4934] __kmalloc_node+0x1ae/0x3a0 [ 134.338586][ T4934] ? kvmalloc_node+0x84/0x130 [ 134.343313][ T4934] kvmalloc_node+0x84/0x130 [ 134.347854][ T4934] seq_read_iter+0x1de/0xc50 [ 134.352518][ T4934] seq_read+0x3dc/0x4f0 [ 134.356724][ T4934] ? seq_open+0x130/0x130 [ 134.361084][ T4934] ? __mutex_trylock_common+0x15c/0x260 [ 134.366670][ T4934] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 134.372598][ T4934] ? end_current_label_crit_section+0x14b/0x170 [ 134.378880][ T4934] ? seq_open+0x130/0x130 [ 134.383245][ T4934] proc_reg_read+0x1dd/0x2c0 [ 134.387870][ T4934] ? proc_reg_get_unmapped_area+0x3a0/0x3a0 [ 134.393796][ T4934] vfs_read+0x2ff/0xd50 [ 134.397999][ T4934] ? __lock_acquire+0x7b50/0x7b50 [ 134.403269][ T4934] ? kernel_read+0x1e0/0x1e0 [ 134.407946][ T4934] ? mutex_lock_nested+0x17/0x20 [ 134.412931][ T4934] ? __fdget_pos+0x2bf/0x370 [ 134.417562][ T4934] ? ksys_read+0x70/0x260 [ 134.421940][ T4934] ksys_read+0x153/0x260 [ 134.426449][ T4934] ? vfs_write+0xd70/0xd70 [ 134.430901][ T4934] ? lockdep_hardirqs_on+0x94/0x140 [ 134.436307][ T4934] do_syscall_64+0x4c/0xa0 [ 134.440788][ T4934] ? clear_bhb_loop+0x30/0x80 [ 134.445495][ T4934] ? clear_bhb_loop+0x30/0x80 [ 134.450300][ T4934] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.456236][ T4934] RIP: 0033:0x7f840bf9d159 [ 134.460691][ T4934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.480334][ T4934] RSP: 002b:00007f840a1b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 134.488888][ T4934] RAX: ffffffffffffffda RBX: 00007f840c225180 RCX: 00007f840bf9d159 [ 134.496890][ T4934] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000007 [ 134.504899][ T4934] RBP: 00007f840c03406b R08: 0000000000000000 R09: 0000000000000000 [ 134.512897][ T4934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.520998][ T4934] R13: 00007f840c225218 R14: 00007f840c225180 R15: 00007ffd359a0f48 [ 134.529028][ T4934] [ 135.123691][ T4914] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 136.600347][ T4958] ip_tables: iptables: counters copy to user failed while replacing table [ 137.509945][ T4969] FAULT_INJECTION: forcing a failure. [ 137.509945][ T4969] name failslab, interval 1, probability 0, space 0, times 0 [ 137.522654][ T4969] CPU: 1 PID: 4969 Comm: syz.0.209 Not tainted syzkaller #0 [ 137.529979][ T4969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 137.540203][ T4969] Call Trace: [ 137.543519][ T4969] [ 137.546484][ T4969] dump_stack_lvl+0x188/0x250 [ 137.551203][ T4969] ? show_regs_print_info+0x20/0x20 [ 137.556458][ T4969] ? load_image+0x410/0x410 [ 137.561000][ T4969] ? __might_sleep+0xf0/0xf0 [ 137.565719][ T4969] ? __lock_acquire+0x7b50/0x7b50 [ 137.570789][ T4969] should_fail+0x383/0x4b0 [ 137.575357][ T4969] should_failslab+0x5/0x20 [ 137.579920][ T4969] slab_pre_alloc_hook+0x51/0xc0 [ 137.584910][ T4969] __kmalloc_node+0x6d/0x3a0 [ 137.589550][ T4969] ? memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 137.595700][ T4969] memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 137.601553][ T4969] slab_post_alloc_hook+0xba/0x380 [ 137.606820][ T4969] __kmalloc_node+0x1ae/0x3a0 [ 137.611533][ T4969] ? kvmalloc_node+0x84/0x130 [ 137.616253][ T4969] kvmalloc_node+0x84/0x130 [ 137.620896][ T4969] seq_read_iter+0x1de/0xc50 [ 137.625531][ T4969] seq_read+0x3dc/0x4f0 [ 137.629750][ T4969] ? seq_open+0x130/0x130 [ 137.634116][ T4969] ? __mutex_trylock_common+0x15c/0x260 [ 137.639709][ T4969] ? end_current_label_crit_section+0x14b/0x170 [ 137.645990][ T4969] ? seq_open+0x130/0x130 [ 137.650357][ T4969] proc_reg_read+0x1dd/0x2c0 [ 137.654982][ T4969] ? proc_reg_get_unmapped_area+0x3a0/0x3a0 [ 137.660913][ T4969] vfs_read+0x2ff/0xd50 [ 137.665123][ T4969] ? __lock_acquire+0x7b50/0x7b50 [ 137.670186][ T4969] ? kernel_read+0x1e0/0x1e0 [ 137.674824][ T4969] ? mutex_lock_nested+0x17/0x20 [ 137.679797][ T4969] ? __fdget_pos+0x2bf/0x370 [ 137.684414][ T4969] ? ksys_read+0x70/0x260 [ 137.688777][ T4969] ksys_read+0x153/0x260 [ 137.693098][ T4969] ? vfs_write+0xd70/0xd70 [ 137.697552][ T4969] ? lockdep_hardirqs_on+0x94/0x140 [ 137.702796][ T4969] do_syscall_64+0x4c/0xa0 [ 137.707241][ T4969] ? clear_bhb_loop+0x30/0x80 [ 137.711949][ T4969] ? clear_bhb_loop+0x30/0x80 [ 137.716680][ T4969] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.722624][ T4969] RIP: 0033:0x7ffaea2c8159 [ 137.727076][ T4969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.746718][ T4969] RSP: 002b:00007ffae84de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 137.755176][ T4969] RAX: ffffffffffffffda RBX: 00007ffaea550180 RCX: 00007ffaea2c8159 [ 137.763186][ T4969] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000007 [ 137.771190][ T4969] RBP: 00007ffaea35f06b R08: 0000000000000000 R09: 0000000000000000 [ 137.779713][ T4969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.787727][ T4969] R13: 00007ffaea550218 R14: 00007ffaea550180 R15: 00007ffc5ce8b728 [ 137.795781][ T4969] [ 139.329882][ T4982] FAULT_INJECTION: forcing a failure. [ 139.329882][ T4982] name failslab, interval 1, probability 0, space 0, times 0 [ 139.343148][ T4982] CPU: 1 PID: 4982 Comm: syz.4.213 Not tainted syzkaller #0 [ 139.350498][ T4982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 139.360588][ T4982] Call Trace: [ 139.363919][ T4982] [ 139.366903][ T4982] dump_stack_lvl+0x188/0x250 [ 139.371689][ T4982] ? show_regs_print_info+0x20/0x20 [ 139.376921][ T4982] ? load_image+0x410/0x410 [ 139.381466][ T4982] ? __might_sleep+0xf0/0xf0 [ 139.386082][ T4982] ? __lock_acquire+0x7b50/0x7b50 [ 139.391145][ T4982] should_fail+0x383/0x4b0 [ 139.395603][ T4982] should_failslab+0x5/0x20 [ 139.400145][ T4982] slab_pre_alloc_hook+0x51/0xc0 [ 139.405113][ T4982] kmem_cache_alloc_trace+0x47/0x290 [ 139.410435][ T4982] ? netstat_seq_show+0xec/0xc30 [ 139.415502][ T4982] netstat_seq_show+0xec/0xc30 [ 139.420310][ T4982] seq_read_iter+0x460/0xc50 [ 139.424962][ T4982] seq_read+0x3dc/0x4f0 [ 139.429160][ T4982] ? seq_open+0x130/0x130 [ 139.433537][ T4982] ? seq_open+0x130/0x130 [ 139.437898][ T4982] proc_reg_read+0x1dd/0x2c0 [ 139.442529][ T4982] ? proc_reg_get_unmapped_area+0x3a0/0x3a0 [ 139.448474][ T4982] vfs_read+0x2ff/0xd50 [ 139.452673][ T4982] ? kernel_read+0x1e0/0x1e0 [ 139.457320][ T4982] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 139.463344][ T4982] ? __fdget_pos+0x1d5/0x370 [ 139.468000][ T4982] ? mutex_lock_nested+0x17/0x20 [ 139.472964][ T4982] ? __fdget_pos+0x2bf/0x370 [ 139.477578][ T4982] ? ksys_read+0x70/0x260 [ 139.481943][ T4982] ksys_read+0x153/0x260 [ 139.486213][ T4982] ? vfs_write+0xd70/0xd70 [ 139.490659][ T4982] ? lockdep_hardirqs_on+0x94/0x140 [ 139.495895][ T4982] do_syscall_64+0x4c/0xa0 [ 139.500350][ T4982] ? clear_bhb_loop+0x30/0x80 [ 139.505056][ T4982] ? clear_bhb_loop+0x30/0x80 [ 139.509787][ T4982] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.515800][ T4982] RIP: 0033:0x7f0ec2e1e159 [ 139.520253][ T4982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.540448][ T4982] RSP: 002b:00007f0ec1034028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 139.548922][ T4982] RAX: ffffffffffffffda RBX: 00007f0ec30a6180 RCX: 00007f0ec2e1e159 [ 139.556964][ T4982] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000007 [ 139.564979][ T4982] RBP: 00007f0ec2eb506b R08: 0000000000000000 R09: 0000000000000000 [ 139.573005][ T4982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.581115][ T4982] R13: 00007f0ec30a6218 R14: 00007f0ec30a6180 R15: 00007fffa548db78 [ 139.589179][ T4982] [ 142.887680][ T5013] ip_tables: iptables: counters copy to user failed while replacing table [ 143.544617][ T5022] FAULT_INJECTION: forcing a failure. [ 143.544617][ T5022] name failslab, interval 1, probability 0, space 0, times 0 [ 143.557550][ T5022] CPU: 1 PID: 5022 Comm: syz.1.222 Not tainted syzkaller #0 [ 143.564886][ T5022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.575087][ T5022] Call Trace: [ 143.578407][ T5022] [ 143.581369][ T5022] dump_stack_lvl+0x188/0x250 [ 143.586104][ T5022] ? show_regs_print_info+0x20/0x20 [ 143.591356][ T5022] ? load_image+0x410/0x410 [ 143.595905][ T5022] ? __might_sleep+0xf0/0xf0 [ 143.600523][ T5022] ? __lock_acquire+0x7b50/0x7b50 [ 143.605578][ T5022] ? seq_printf+0x1df/0x280 [ 143.610130][ T5022] should_fail+0x383/0x4b0 [ 143.614592][ T5022] should_failslab+0x5/0x20 [ 143.619131][ T5022] slab_pre_alloc_hook+0x51/0xc0 [ 143.624105][ T5022] kmem_cache_alloc_trace+0x47/0x290 [ 143.629436][ T5022] ? netstat_seq_show+0xec/0xc30 [ 143.634416][ T5022] netstat_seq_show+0xec/0xc30 [ 143.639312][ T5022] seq_read_iter+0x460/0xc50 [ 143.643966][ T5022] seq_read+0x3dc/0x4f0 [ 143.648196][ T5022] ? seq_open+0x130/0x130 [ 143.652556][ T5022] ? __mutex_trylock_common+0x15c/0x260 [ 143.658157][ T5022] ? end_current_label_crit_section+0x14b/0x170 [ 143.664438][ T5022] ? seq_open+0x130/0x130 [ 143.668808][ T5022] proc_reg_read+0x1dd/0x2c0 [ 143.673435][ T5022] ? proc_reg_get_unmapped_area+0x3a0/0x3a0 [ 143.679363][ T5022] vfs_read+0x2ff/0xd50 [ 143.683553][ T5022] ? __lock_acquire+0x7b50/0x7b50 [ 143.688619][ T5022] ? kernel_read+0x1e0/0x1e0 [ 143.693268][ T5022] ? mutex_lock_nested+0x17/0x20 [ 143.698237][ T5022] ? __fdget_pos+0x2bf/0x370 [ 143.702858][ T5022] ? ksys_read+0x70/0x260 [ 143.707221][ T5022] ksys_read+0x153/0x260 [ 143.711500][ T5022] ? vfs_write+0xd70/0xd70 [ 143.715949][ T5022] ? lockdep_hardirqs_on+0x94/0x140 [ 143.721185][ T5022] do_syscall_64+0x4c/0xa0 [ 143.725627][ T5022] ? clear_bhb_loop+0x30/0x80 [ 143.730332][ T5022] ? clear_bhb_loop+0x30/0x80 [ 143.735046][ T5022] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.740978][ T5022] RIP: 0033:0x7f539a7a9159 [ 143.745425][ T5022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.765144][ T5022] RSP: 002b:00007f53989bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.773589][ T5022] RAX: ffffffffffffffda RBX: 00007f539aa31180 RCX: 00007f539a7a9159 [ 143.782501][ T5022] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000007 [ 143.792085][ T5022] RBP: 00007f539a84006b R08: 0000000000000000 R09: 0000000000000000 [ 143.800394][ T5022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.808415][ T5022] R13: 00007f539aa31218 R14: 00007f539aa31180 R15: 00007ffdda1e83c8 [ 143.816445][ T5022] [ 145.594654][ T4229] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 145.855332][ T5049] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 146.495234][ T4229] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 146.826364][ T4228] FS-Cache: Duplicate cookie detected [ 146.832270][ T4228] FS-Cache: O-cookie c=00000007 [p=00000006 fl=222 nc=0 na=1] [ 146.840211][ T4228] FS-Cache: O-cookie d=ffffffff8c747d60{AFS.cell} n=ffff888025b99800 [ 146.848363][ T4228] FS-Cache: O-key=[4] '73797a30' [ 146.853375][ T4228] FS-Cache: N-cookie c=00000008 [p=00000006 fl=2 nc=0 na=1] [ 146.860746][ T4228] FS-Cache: N-cookie d=ffffffff8c747d60{AFS.cell} n=ffff88805e1c1000 [ 146.868874][ T4228] FS-Cache: N-key=[4] '73797a30' [ 146.926844][ T4229] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 146.936018][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.944140][ T4229] usb 2-1: Product: syz [ 147.385158][ T4229] usb 2-1: Manufacturer: syz [ 147.409360][ T4229] usb 2-1: SerialNumber: syz [ 148.174390][ T4229] usb 2-1: Cannot retrieve CPort count: -71 [ 148.180453][ T4229] usb 2-1: Cannot retrieve CPort count: -71 [ 148.404323][ T4229] es2_ap_driver: probe of 2-1:1.0 failed with error -71 [ 148.449448][ T4229] usb 2-1: USB disconnect, device number 3 [ 150.080839][ T5089] FAULT_INJECTION: forcing a failure. [ 150.080839][ T5089] name failslab, interval 1, probability 0, space 0, times 0 [ 150.094128][ T5089] CPU: 1 PID: 5089 Comm: syz.1.242 Not tainted syzkaller #0 [ 150.101468][ T5089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 150.112644][ T5089] Call Trace: [ 150.116111][ T5089] [ 150.119095][ T5089] dump_stack_lvl+0x188/0x250 [ 150.123825][ T5089] ? show_regs_print_info+0x20/0x20 [ 150.129068][ T5089] ? load_image+0x410/0x410 [ 150.133613][ T5089] ? __might_sleep+0xf0/0xf0 [ 150.138249][ T5089] ? __lock_acquire+0x7b50/0x7b50 [ 150.143348][ T5089] should_fail+0x383/0x4b0 [ 150.147829][ T5089] should_failslab+0x5/0x20 [ 150.152487][ T5089] slab_pre_alloc_hook+0x51/0xc0 [ 150.157482][ T5089] __kmalloc_node+0x6d/0x3a0 [ 150.162171][ T5089] ? memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 150.168414][ T5089] memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 150.174267][ T5089] slab_post_alloc_hook+0xba/0x380 [ 150.179427][ T5089] __kmalloc_node+0x1ae/0x3a0 [ 150.184232][ T5089] ? kvmalloc_node+0x84/0x130 [ 150.188950][ T5089] kvmalloc_node+0x84/0x130 [ 150.193492][ T5089] seq_read_iter+0x1de/0xc50 [ 150.198143][ T5089] seq_read+0x3dc/0x4f0 [ 150.202356][ T5089] ? seq_open+0x130/0x130 [ 150.206873][ T5089] ? __mutex_trylock_common+0x15c/0x260 [ 150.212496][ T5089] ? end_current_label_crit_section+0x14b/0x170 [ 150.218808][ T5089] ? seq_open+0x130/0x130 [ 150.223189][ T5089] proc_reg_read+0x1dd/0x2c0 [ 150.227831][ T5089] ? proc_reg_get_unmapped_area+0x3a0/0x3a0 [ 150.233775][ T5089] vfs_read+0x2ff/0xd50 [ 150.237981][ T5089] ? __lock_acquire+0x7b50/0x7b50 [ 150.243233][ T5089] ? kernel_read+0x1e0/0x1e0 [ 150.247882][ T5089] ? mutex_lock_nested+0x17/0x20 [ 150.252864][ T5089] ? __fdget_pos+0x2bf/0x370 [ 150.257497][ T5089] ? ksys_read+0x70/0x260 [ 150.261865][ T5089] ksys_read+0x153/0x260 [ 150.266154][ T5089] ? vfs_write+0xd70/0xd70 [ 150.270613][ T5089] ? lockdep_hardirqs_on+0x94/0x140 [ 150.275893][ T5089] do_syscall_64+0x4c/0xa0 [ 150.280356][ T5089] ? clear_bhb_loop+0x30/0x80 [ 150.285074][ T5089] ? clear_bhb_loop+0x30/0x80 [ 150.289790][ T5089] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.295723][ T5089] RIP: 0033:0x7f539a7a9159 [ 150.300172][ T5089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.319814][ T5089] RSP: 002b:00007f53989bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.328270][ T5089] RAX: ffffffffffffffda RBX: 00007f539aa31180 RCX: 00007f539a7a9159 [ 150.336285][ T5089] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000007 [ 150.344290][ T5089] RBP: 00007f539a84006b R08: 0000000000000000 R09: 0000000000000000 [ 150.352297][ T5089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.360311][ T5089] R13: 00007f539aa31218 R14: 00007f539aa31180 R15: 00007ffdda1e83c8 [ 150.368356][ T5089] [ 151.543668][ T5096] FAULT_INJECTION: forcing a failure. [ 151.543668][ T5096] name failslab, interval 1, probability 0, space 0, times 0 [ 151.556672][ T5096] CPU: 1 PID: 5096 Comm: syz.0.243 Not tainted syzkaller #0 [ 151.564103][ T5096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 151.574205][ T5096] Call Trace: [ 151.577529][ T5096] [ 151.580599][ T5096] dump_stack_lvl+0x188/0x250 [ 151.585616][ T5096] ? show_regs_print_info+0x20/0x20 [ 151.590866][ T5096] ? load_image+0x410/0x410 [ 151.595414][ T5096] ? __might_sleep+0xf0/0xf0 [ 151.600076][ T5096] ? __lock_acquire+0x7b50/0x7b50 [ 151.605237][ T5096] should_fail+0x383/0x4b0 [ 151.609710][ T5096] should_failslab+0x5/0x20 [ 151.614423][ T5096] slab_pre_alloc_hook+0x51/0xc0 [ 151.619409][ T5096] __kmalloc_node+0x6d/0x3a0 [ 151.624192][ T5096] ? memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 151.630302][ T5096] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 151.635505][ T5096] memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 151.641371][ T5096] slab_post_alloc_hook+0xba/0x380 [ 151.646540][ T5096] __kmalloc_node+0x1ae/0x3a0 [ 151.651251][ T5096] ? kvmalloc_node+0x84/0x130 [ 151.656001][ T5096] kvmalloc_node+0x84/0x130 [ 151.660630][ T5096] seq_read_iter+0x1de/0xc50 [ 151.665370][ T5096] seq_read+0x3dc/0x4f0 [ 151.669586][ T5096] ? seq_open+0x130/0x130 [ 151.674038][ T5096] ? __mutex_trylock_common+0x15c/0x260 [ 151.679677][ T5096] ? end_current_label_crit_section+0x14b/0x170 [ 151.685965][ T5096] ? seq_open+0x130/0x130 [ 151.690341][ T5096] proc_reg_read+0x1dd/0x2c0 [ 151.695060][ T5096] ? proc_reg_get_unmapped_area+0x3a0/0x3a0 [ 151.700994][ T5096] vfs_read+0x2ff/0xd50 [ 151.705198][ T5096] ? __lock_acquire+0x7b50/0x7b50 [ 151.710271][ T5096] ? kernel_read+0x1e0/0x1e0 [ 151.714923][ T5096] ? mutex_lock_nested+0x17/0x20 [ 151.719904][ T5096] ? __fdget_pos+0x2bf/0x370 [ 151.724695][ T5096] ? ksys_read+0x70/0x260 [ 151.729074][ T5096] ksys_read+0x153/0x260 [ 151.733415][ T5096] ? vfs_write+0xd70/0xd70 [ 151.737970][ T5096] ? lockdep_hardirqs_on+0x94/0x140 [ 151.743331][ T5096] do_syscall_64+0x4c/0xa0 [ 151.747812][ T5096] ? clear_bhb_loop+0x30/0x80 [ 151.752683][ T5096] ? clear_bhb_loop+0x30/0x80 [ 151.757529][ T5096] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.763482][ T5096] RIP: 0033:0x7ffaea2c8159 [ 151.767941][ T5096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.787598][ T5096] RSP: 002b:00007ffae84de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 151.796059][ T5096] RAX: ffffffffffffffda RBX: 00007ffaea550180 RCX: 00007ffaea2c8159 [ 151.804075][ T5096] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000007 [ 151.812087][ T5096] RBP: 00007ffaea35f06b R08: 0000000000000000 R09: 0000000000000000 [ 151.820104][ T5096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.828427][ T5096] R13: 00007ffaea550218 R14: 00007ffaea550180 R15: 00007ffc5ce8b728 [ 151.836568][ T5096] [ 161.387742][ T5184] FAULT_INJECTION: forcing a failure. [ 161.387742][ T5184] name failslab, interval 1, probability 0, space 0, times 0 [ 161.400580][ T5184] CPU: 1 PID: 5184 Comm: syz.1.267 Not tainted syzkaller #0 [ 161.408064][ T5184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 161.418171][ T5184] Call Trace: [ 161.421490][ T5184] [ 161.424470][ T5184] dump_stack_lvl+0x188/0x250 [ 161.429187][ T5184] ? show_regs_print_info+0x20/0x20 [ 161.434423][ T5184] ? load_image+0x410/0x410 [ 161.438968][ T5184] ? __might_sleep+0xf0/0xf0 [ 161.443592][ T5184] ? __lock_acquire+0x7b50/0x7b50 [ 161.448745][ T5184] should_fail+0x383/0x4b0 [ 161.453209][ T5184] should_failslab+0x5/0x20 [ 161.457761][ T5184] slab_pre_alloc_hook+0x51/0xc0 [ 161.462938][ T5184] kmem_cache_alloc_trace+0x47/0x290 [ 161.468392][ T5184] ? netstat_seq_show+0xec/0xc30 [ 161.473481][ T5184] netstat_seq_show+0xec/0xc30 [ 161.478294][ T5184] seq_read_iter+0x460/0xc50 [ 161.482941][ T5184] seq_read+0x3dc/0x4f0 [ 161.487145][ T5184] ? seq_open+0x130/0x130 [ 161.491597][ T5184] ? __mutex_trylock_common+0x15c/0x260 [ 161.497201][ T5184] ? end_current_label_crit_section+0x14b/0x170 [ 161.503487][ T5184] ? seq_open+0x130/0x130 [ 161.507855][ T5184] proc_reg_read+0x1dd/0x2c0 [ 161.512489][ T5184] ? proc_reg_get_unmapped_area+0x3a0/0x3a0 [ 161.518589][ T5184] vfs_read+0x2ff/0xd50 [ 161.522868][ T5184] ? __lock_acquire+0x7b50/0x7b50 [ 161.527936][ T5184] ? kernel_read+0x1e0/0x1e0 [ 161.532681][ T5184] ? mutex_lock_nested+0x17/0x20 [ 161.537654][ T5184] ? __fdget_pos+0x2bf/0x370 [ 161.542277][ T5184] ? ksys_read+0x70/0x260 [ 161.546638][ T5184] ksys_read+0x153/0x260 [ 161.550913][ T5184] ? vfs_write+0xd70/0xd70 [ 161.555372][ T5184] ? lockdep_hardirqs_on+0x94/0x140 [ 161.560610][ T5184] do_syscall_64+0x4c/0xa0 [ 161.565350][ T5184] ? clear_bhb_loop+0x30/0x80 [ 161.570155][ T5184] ? clear_bhb_loop+0x30/0x80 [ 161.574863][ T5184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.580800][ T5184] RIP: 0033:0x7f539a7a9159 [ 161.585259][ T5184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.604986][ T5184] RSP: 002b:00007f53989bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 161.613530][ T5184] RAX: ffffffffffffffda RBX: 00007f539aa31180 RCX: 00007f539a7a9159 [ 161.621718][ T5184] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000007 [ 161.629913][ T5184] RBP: 00007f539a84006b R08: 0000000000000000 R09: 0000000000000000 [ 161.637919][ T5184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.646018][ T5184] R13: 00007f539aa31218 R14: 00007f539aa31180 R15: 00007ffdda1e83c8 [ 161.654068][ T5184] [ 167.251178][ T5239] ip_tables: iptables: counters copy to user failed while replacing table [ 169.784327][ T5263] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 175.049948][ T5298] ip_tables: iptables: counters copy to user failed while replacing table [ 176.446402][ T5323] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 179.027579][ T4311] FS-Cache: Duplicate cookie detected [ 179.033313][ T4311] FS-Cache: O-cookie c=00000007 [p=00000006 fl=222 nc=0 na=1] [ 179.041119][ T4311] FS-Cache: O-cookie d=ffffffff8c747d60{AFS.cell} n=ffff888025b99800 [ 179.049391][ T4311] FS-Cache: O-key=[4] '73797a30' [ 179.054761][ T4311] FS-Cache: N-cookie c=00000009 [p=00000006 fl=2 nc=0 na=1] [ 179.063179][ T4311] FS-Cache: N-cookie d=ffffffff8c747d60{AFS.cell} n=ffff888078de5000 [ 179.072002][ T4311] FS-Cache: N-key=[4] '73797a30' [ 179.091821][ T5345] kAFS: No cell specified [ 182.512075][ T5376] ip_tables: iptables: counters copy to user failed while replacing table [ 186.284872][ T5406] kAFS: No cell specified [ 186.392822][ T5407] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 189.995494][ T5432] ip_tables: iptables: counters copy to user failed while replacing table [ 191.164456][ T4228] Bluetooth: hci2: command 0x0406 tx timeout [ 191.175068][ T4228] Bluetooth: hci3: command 0x0406 tx timeout [ 191.211685][ T4228] Bluetooth: hci1: command 0x0406 tx timeout [ 191.250350][ T4228] Bluetooth: hci4: command 0x0406 tx timeout [ 194.206702][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.213084][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.214056][ T5491] ip_tables: iptables: counters copy to user failed while replacing table [ 202.473312][ T5527] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 205.511454][ T5544] ip_tables: iptables: counters copy to user failed while replacing table [ 219.323357][ T5655] ip_tables: iptables: counters copy to user failed while replacing table [ 221.583640][ T23] FS-Cache: Duplicate cookie detected [ 221.589190][ T23] FS-Cache: O-cookie c=00000007 [p=00000006 fl=222 nc=0 na=1] [ 221.596784][ T23] FS-Cache: O-cookie d=ffffffff8c747d60{AFS.cell} n=ffff888025b99800 [ 221.604939][ T23] FS-Cache: O-key=[4] '73797a30' [ 221.609984][ T23] FS-Cache: N-cookie c=0000000a [p=00000006 fl=2 nc=0 na=1] [ 221.617363][ T23] FS-Cache: N-cookie d=ffffffff8c747d60{AFS.cell} n=ffff888076c1c800 [ 221.625518][ T23] FS-Cache: N-key=[4] '73797a30' [ 225.838807][ T5720] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 229.247792][ T5742] ip_tables: iptables: counters copy to user failed while replacing table [ 231.128827][ T5760] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 232.838098][ T5787] ip_tables: iptables: counters copy to user failed while replacing table [ 236.055476][ T5828] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 237.776953][ T5846] ip_tables: iptables: counters copy to user failed while replacing table [ 241.971441][ T5884] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 243.581344][ T5897] ip_tables: iptables: counters copy to user failed while replacing table [ 246.663450][ T5931] ip_tables: iptables: counters copy to user failed while replacing table [ 248.542277][ T5944] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 252.198478][ T5973] ip_tables: iptables: counters copy to user failed while replacing table [ 253.526453][ T5991] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 255.637427][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.643755][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.732828][ T6017] ip_tables: iptables: counters copy to user failed while replacing table [ 258.456453][ T6038] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 260.270342][ T6046] ip_tables: iptables: counters copy to user failed while replacing table [ 262.726720][ T6065] ip_tables: iptables: counters copy to user failed while replacing table [ 266.526097][ T6098] ip_tables: iptables: counters copy to user failed while replacing table [ 267.924891][ T6105] ip_tables: iptables: counters copy to user failed while replacing table [ 272.155020][ T6144] ip_tables: iptables: counters copy to user failed while replacing table [ 273.298372][ T6151] ip_tables: iptables: counters copy to user failed while replacing table [ 276.595218][ T6169] MPTCP: addr_signal error, rm_addr=1 [ 279.124573][ T6192] ip_tables: iptables: counters copy to user failed while replacing table [ 279.910367][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.484972][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.634232][ T4199] Bluetooth: hci3: command 0x0409 tx timeout [ 283.109898][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.233340][ T6194] chnl_net:caif_netlink_parms(): no params data found [ 284.206279][ T4199] Bluetooth: hci3: command 0x041b tx timeout [ 284.400400][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.541446][ T6194] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.590314][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.645619][ T6194] device bridge_slave_0 entered promiscuous mode [ 284.735622][ T6194] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.743484][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.824824][ T6194] device bridge_slave_1 entered promiscuous mode [ 284.911885][ T6194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.923863][ T6194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.042015][ T6194] team0: Port device team_slave_0 added [ 285.123428][ T6194] team0: Port device team_slave_1 added [ 285.365335][ T6194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.687211][ T6194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.131929][ T6194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.244419][ T6194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.251438][ T6194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.278756][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 286.417215][ T6194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.609575][ T6194] device hsr_slave_0 entered promiscuous mode [ 286.684824][ T6194] device hsr_slave_1 entered promiscuous mode [ 286.785543][ T6194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.806620][ T6194] Cannot create hsr debugfs directory [ 287.933403][ T6194] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 288.005243][ T6194] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 288.035308][ T6194] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 288.082489][ T6194] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 288.354281][ T4228] Bluetooth: hci3: command 0x0419 tx timeout [ 288.392689][ T6194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.440575][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.465264][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.518141][ T6194] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.575255][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.605753][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.653159][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.660340][ T4307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.732042][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 289.115369][ T5772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.144642][ T5772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.280769][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.287933][ T5772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.665476][ T5772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 290.007250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 290.053192][ T5772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.070113][ T5772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.161123][ T5772] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 290.213197][ T6194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.333108][ T6194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.587435][ T5772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.385173][ T5772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.685202][ T5772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 292.693828][ T5772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.723641][ T5772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.743613][ T5772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.785235][ T5772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 293.101383][ T9] device hsr_slave_0 left promiscuous mode [ 293.195250][ T9] device hsr_slave_1 left promiscuous mode [ 293.303933][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.468480][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.784107][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.815404][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.865376][ T9] device bridge_slave_1 left promiscuous mode [ 293.873225][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.241399][ T9] device bridge_slave_0 left promiscuous mode [ 294.293279][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.556436][ T9] device veth1_macvtap left promiscuous mode [ 294.563356][ T9] device veth0_macvtap left promiscuous mode [ 294.617632][ T9] device veth1_vlan left promiscuous mode [ 294.623661][ T9] device veth0_vlan left promiscuous mode [ 296.815160][ T9] team0 (unregistering): Port device team_slave_1 removed [ 296.881929][ T9] team0 (unregistering): Port device team_slave_0 removed [ 296.972657][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.063927][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.324624][ T9] bond0 (unregistering): Released all slaves [ 300.145681][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.153372][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 300.208725][ T6194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.569731][ T6393] chnl_net:caif_netlink_parms(): no params data found [ 301.649108][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 301.675116][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 301.804426][ T4187] syz-executor (4187) used greatest stack depth: 20976 bytes left [ 301.846334][ T6194] device veth0_vlan entered promiscuous mode [ 301.864265][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 301.873739][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 301.970056][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.016228][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.176535][ T6194] device veth1_vlan entered promiscuous mode [ 302.952744][ T6194] device veth0_macvtap entered promiscuous mode [ 302.996960][ T23] Bluetooth: hci5: command 0x0409 tx timeout [ 303.060502][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 303.072382][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.084426][ T6435] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 303.138192][ T6194] device veth1_macvtap entered promiscuous mode [ 303.147107][ T6393] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.154837][ T6393] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.163067][ T6393] device bridge_slave_0 entered promiscuous mode [ 303.235351][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 303.266152][ T6393] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.273972][ T6393] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.307445][ T6393] device bridge_slave_1 entered promiscuous mode [ 303.351818][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.394263][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.424203][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.455492][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.494412][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.534252][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.559154][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.596999][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.637178][ T6194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.702316][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 303.732921][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 303.778554][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.824197][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.834081][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.947462][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.374219][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.455189][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.525701][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.635790][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.821461][ T6194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.840103][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 304.884824][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 304.926496][ T6194] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.954275][ T6194] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.963063][ T6194] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.034241][ T6194] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.074397][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 305.083797][ T6393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.116567][ T6393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.276500][ T6393] team0: Port device team_slave_0 added [ 305.326270][ T6393] team0: Port device team_slave_1 added [ 306.221035][ T1266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.231965][ T6393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.244222][ T1266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.284453][ T6393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.360887][ T6393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.510527][ T6393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.537294][ T6393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.655367][ T6393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.703279][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 306.797502][ T1266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.818229][ T1266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.861159][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 306.971563][ T6393] device hsr_slave_0 entered promiscuous mode [ 307.006197][ T6393] device hsr_slave_1 entered promiscuous mode [ 307.038802][ T6393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.068918][ T6393] Cannot create hsr debugfs directory [ 307.154400][ T23] Bluetooth: hci5: command 0x040f tx timeout [ 308.460317][ T6393] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 308.489464][ T6393] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 308.523202][ T6393] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 308.577451][ T6393] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 308.832636][ T6393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.902840][ T6393] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.938450][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.947291][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 309.026520][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 309.057293][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 309.074738][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.081888][ T4308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.126001][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 309.149474][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 309.175154][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.182300][ T4308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.234370][ T4678] Bluetooth: hci5: command 0x0419 tx timeout [ 309.241060][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 309.282500][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 309.309665][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 309.334642][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.600'. [ 309.384634][ T6518] 8021q: VLANs not supported on ip6gre0 [ 309.454005][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 309.478626][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 309.508064][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 309.548444][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 309.600610][ T6393] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 309.637625][ T6393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.706712][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 309.791373][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 310.079760][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 310.364381][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 310.534102][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.582669][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 310.718919][ T6544] process 'syz.0.605' launched '/dev/fd/6' with NULL argv: empty string added [ 311.105915][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.183692][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 311.228362][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 311.265239][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.404893][ T6393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.599570][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.819094][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.054904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 313.075507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.121114][ T6393] device veth0_vlan entered promiscuous mode [ 313.146221][ T3117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 313.172220][ T3117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 313.224702][ T3117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 313.241284][ T3117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 313.300925][ T6393] device veth1_vlan entered promiscuous mode [ 313.418607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 313.447334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 313.478784][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 313.510170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 313.572678][ T6393] device veth0_macvtap entered promiscuous mode [ 313.594426][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 313.604656][ T6393] device veth1_macvtap entered promiscuous mode [ 313.718782][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.785213][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.856196][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.887069][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.977020][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.038494][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.099595][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.134329][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.154270][ T21] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 314.174182][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.184725][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.202856][ T21] usb 1-1: config 0 descriptor?? [ 314.215397][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.256436][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.298862][ T6393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.347864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 314.363838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 314.401734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 314.443467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 314.485258][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.525970][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.577408][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.616856][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.634342][ T21] usbhid 1-1:0.0: can't add hid device: -71 [ 314.640619][ T21] usbhid: probe of 1-1:0.0 failed with error -71 [ 314.667693][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.685766][ T21] usb 1-1: USB disconnect, device number 3 [ 314.718278][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.755492][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.804261][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.844256][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.894194][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.925950][ T6393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.954843][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 314.994042][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 315.016927][ T6393] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.047100][ T6393] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.084315][ T6393] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.093123][ T6393] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.127602][ T21] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 315.419016][ T6618] netlink: 36 bytes leftover after parsing attributes in process `syz.5.614'. [ 315.441124][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.486227][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.494514][ T21] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 315.526244][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 315.531155][ T21] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 315.589351][ T21] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.590768][ T9] device hsr_slave_0 left promiscuous mode [ 315.635555][ T9] device hsr_slave_1 left promiscuous mode [ 315.655280][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 315.655315][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.685529][ T21] usb 1-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 315.694946][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.716126][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.744996][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.756358][ T21] usb 1-1: config 0 descriptor?? [ 315.767984][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.805004][ T9] device bridge_slave_1 left promiscuous mode [ 315.824515][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.865847][ T9] device bridge_slave_0 left promiscuous mode [ 315.891978][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.928693][ T9] device veth1_macvtap left promiscuous mode [ 315.945914][ T9] device veth0_macvtap left promiscuous mode [ 315.952067][ T9] device veth1_vlan left promiscuous mode [ 315.988239][ T9] device veth0_vlan left promiscuous mode [ 316.316909][ T21] logitech-djreceiver 0003:046D:C539.0001: hidraw0: USB HID v0.00 Keyboard [HID 046d:c539] on usb-dummy_hcd.0-1/input0 [ 316.789579][ T21] usb 1-1: USB disconnect, device number 4 [ 316.928213][ T9] team0 (unregistering): Port device team_slave_1 removed [ 316.971389][ T9] team0 (unregistering): Port device team_slave_0 removed [ 317.015664][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.058199][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.078731][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.085939][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.189392][ T9] bond0 (unregistering): Released all slaves [ 317.269831][ T4626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.304337][ T4626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.363675][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 318.406087][ T6652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.619'. [ 318.479042][ T6652] netlink: 64 bytes leftover after parsing attributes in process `syz.2.619'. [ 318.590654][ T6656] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 320.477328][ T6690] netlink: 56 bytes leftover after parsing attributes in process `syz.5.627'. [ 321.468921][ T6708] ip_tables: iptables: counters copy to user failed while replacing table [ 327.890398][ T6781] ip_tables: iptables: counters copy to user failed while replacing table [ 329.647793][ T6809] netlink: 64 bytes leftover after parsing attributes in process `syz.6.652'. [ 332.840004][ T6849] ip_tables: iptables: counters copy to user failed while replacing table [ 337.175597][ T6888] netlink: 40 bytes leftover after parsing attributes in process `syz.1.669'. [ 339.995587][ T6944] ip_tables: iptables: counters copy to user failed while replacing table [ 340.219475][ T6946] FAULT_INJECTION: forcing a failure. [ 340.219475][ T6946] name fail_futex, interval 1, probability 0, space 0, times 1 [ 340.232498][ T6946] CPU: 1 PID: 6946 Comm: syz.0.682 Not tainted syzkaller #0 [ 340.239853][ T6946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 340.249951][ T6946] Call Trace: [ 340.253267][ T6946] [ 340.256241][ T6946] dump_stack_lvl+0x188/0x250 [ 340.260958][ T6946] ? show_regs_print_info+0x20/0x20 [ 340.266192][ T6946] ? load_image+0x410/0x410 [ 340.270741][ T6946] should_fail+0x383/0x4b0 [ 340.275194][ T6946] get_futex_key+0x1a1/0x12d0 [ 340.279944][ T6946] ? futex_wait_restart+0x250/0x250 [ 340.285190][ T6946] ? finish_lock_switch+0x12d/0x290 [ 340.290443][ T6946] futex_wake+0x101/0x540 [ 340.294808][ T6946] ? __schedule+0x11cb/0x4350 [ 340.299539][ T6946] ? futex_wait+0x680/0x680 [ 340.304079][ T6946] ? finish_lock_switch+0x12d/0x290 [ 340.309323][ T6946] ? lockdep_hardirqs_on+0x94/0x140 [ 340.314554][ T6946] do_futex+0xd83/0x12b0 [ 340.318846][ T6946] ? release_firmware_map_entry+0x190/0x190 [ 340.324768][ T6946] ? __schedule+0x11cb/0x4350 [ 340.329660][ T6946] ? preempt_schedule_irq+0xe6/0x160 [ 340.334992][ T6946] ? futex_exit_release+0x1c0/0x1c0 [ 340.340239][ T6946] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 340.346260][ T6946] ? lock_chain_count+0x20/0x20 [ 340.351167][ T6946] __se_sys_futex+0x389/0x420 [ 340.355905][ T6946] ? lockdep_hardirqs_on+0x94/0x140 [ 340.361146][ T6946] ? __x64_sys_futex+0xf0/0xf0 [ 340.365959][ T6946] ? __x64_sys_futex+0x1d/0xf0 [ 340.370770][ T6946] do_syscall_64+0x4c/0xa0 [ 340.375225][ T6946] ? clear_bhb_loop+0x30/0x80 [ 340.379940][ T6946] ? clear_bhb_loop+0x30/0x80 [ 340.384695][ T6946] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 340.390627][ T6946] RIP: 0033:0x7ffaea2c8159 [ 340.395173][ T6946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.414828][ T6946] RSP: 002b:00007ffae84de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 340.423292][ T6946] RAX: ffffffffffffffda RBX: 00007ffaea550188 RCX: 00007ffaea2c8159 [ 340.431295][ T6946] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffaea55018c [ 340.439324][ T6946] RBP: 00007ffaea550180 R08: 0009eba7ed2a2e86 R09: 0000000000000000 [ 340.447326][ T6946] R10: 0000000000000229 R11: 0000000000000246 R12: 0000000000000000 [ 340.455414][ T6946] R13: 00007ffaea550218 R14: 00007ffc5ce8b640 R15: 00007ffc5ce8b728 [ 340.463440][ T6946] [ 344.767520][ T6998] kAFS: No cell specified [ 344.814380][ T4199] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 344.898987][ T7004] ip_tables: iptables: counters copy to user failed while replacing table [ 345.184510][ T4199] usb 7-1: Using ep0 maxpacket: 8 [ 345.514726][ T4199] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 345.581084][ T4199] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 345.967174][ T4199] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 346.108267][ T4199] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 346.224284][ T4199] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.264287][ T4199] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 346.304280][ T4199] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.754337][ T4199] usb 7-1: usb_control_msg returned -71 [ 346.760067][ T4199] usbtmc 7-1:16.0: can't read capabilities [ 347.927490][ T4199] usb 7-1: USB disconnect, device number 2 [ 348.401036][ T7053] kAFS: No cell specified [ 352.680816][ T7101] kAFS: No cell specified [ 353.109693][ T7116] ip_tables: iptables: counters copy to user failed while replacing table [ 356.535055][ T7151] kAFS: No cell specified [ 357.129601][ T7165] netlink: 64 bytes leftover after parsing attributes in process `syz.2.737'. [ 362.533996][ T7256] ip_tables: iptables: counters copy to user failed while replacing table [ 369.773589][ T7331] kAFS: No cell specified [ 373.996958][ T7399] kAFS: bad VL server IP address [ 374.009493][ T7399] kAFS: No cell specified [ 374.509273][ T7421] ip_tables: iptables: counters copy to user failed while replacing table [ 378.518832][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.537828][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 406.194294][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 407.829784][ T7822] kAFS: No cell specified [ 413.668064][ T7870] kAFS: No cell specified [ 419.383441][ T7931] FAULT_INJECTION: forcing a failure. [ 419.383441][ T7931] name fail_futex, interval 1, probability 0, space 0, times 0 [ 419.483693][ T7931] CPU: 0 PID: 7931 Comm: syz.0.916 Not tainted syzkaller #0 [ 419.491049][ T7931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 419.501267][ T7931] Call Trace: [ 419.504612][ T7931] [ 419.507602][ T7931] dump_stack_lvl+0x188/0x250 [ 419.512323][ T7931] ? show_regs_print_info+0x20/0x20 [ 419.517559][ T7931] ? load_image+0x410/0x410 [ 419.522104][ T7931] ? __virt_addr_valid+0x3c6/0x470 [ 419.527366][ T7931] ? __phys_addr_symbol+0x2b/0x70 [ 419.532444][ T7931] should_fail+0x383/0x4b0 [ 419.536910][ T7931] get_futex_key+0x1a1/0x12d0 [ 419.541642][ T7931] ? futex_wait_restart+0x250/0x250 [ 419.546877][ T7931] ? __lock_acquire+0x13dc/0x7b50 [ 419.551956][ T7931] futex_wake+0x101/0x540 [ 419.556468][ T7931] ? seq_open+0x130/0x130 [ 419.561009][ T7931] ? futex_wait+0x680/0x680 [ 419.565559][ T7931] ? verify_lock_unused+0x140/0x140 [ 419.570806][ T7931] ? verify_lock_unused+0x140/0x140 [ 419.576077][ T7931] do_futex+0xd83/0x12b0 [ 419.580360][ T7931] ? vfs_read+0xa56/0xd50 [ 419.584723][ T7931] ? __lock_acquire+0x7b50/0x7b50 [ 419.589812][ T7931] ? futex_exit_release+0x1c0/0x1c0 [ 419.595069][ T7931] ? __context_tracking_exit+0x4c/0x80 [ 419.600671][ T7931] __se_sys_futex+0x389/0x420 [ 419.605499][ T7931] ? __x64_sys_futex+0xf0/0xf0 [ 419.610308][ T7931] ? __x64_sys_futex+0x1d/0xf0 [ 419.615158][ T7931] do_syscall_64+0x4c/0xa0 [ 419.619657][ T7931] ? clear_bhb_loop+0x30/0x80 [ 419.624380][ T7931] ? clear_bhb_loop+0x30/0x80 [ 419.629098][ T7931] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 419.635056][ T7931] RIP: 0033:0x7ffaea2c8159 [ 419.639503][ T7931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.659147][ T7931] RSP: 002b:00007ffae84ff0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 419.667638][ T7931] RAX: ffffffffffffffda RBX: 00007ffaea550098 RCX: 00007ffaea2c8159 [ 419.675644][ T7931] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffaea55009c [ 419.683647][ T7931] RBP: 00007ffaea550090 R08: 00137515a68b5d0e R09: 0000000000000000 [ 419.691652][ T7931] R10: 0000000000000229 R11: 0000000000000246 R12: 0000000000000000 [ 419.699652][ T7931] R13: 00007ffaea550128 R14: 00007ffc5ce8b640 R15: 00007ffc5ce8b728 [ 419.707810][ T7931] [ 426.674198][ T23] Bluetooth: hci5: command 0x0406 tx timeout [ 427.533618][ T8030] ip_tables: iptables: counters copy to user failed while replacing table [ 427.817076][ T8038] ip_tables: iptables: counters copy to user failed while replacing table [ 434.796730][ T8091] ip_tables: iptables: counters copy to user failed while replacing table [ 440.297419][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.357628][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.148586][ T8200] kAFS: No cell specified [ 443.746845][ T8220] ip_tables: iptables: counters copy to user failed while replacing table [ 450.371418][ T8296] ip_tables: iptables: counters copy to user failed while replacing table [ 452.968702][ T8300] ip_tables: iptables: counters copy to user failed while replacing table [ 466.340509][ T8432] ip_tables: iptables: counters copy to user failed while replacing table [ 473.320120][ T8498] ip_tables: iptables: counters copy to user failed while replacing table [ 473.712481][ T8500] ip_tables: iptables: counters copy to user failed while replacing table [ 478.184743][ T8543] ip_tables: iptables: counters copy to user failed while replacing table [ 482.744755][ T8593] ip_tables: iptables: counters copy to user failed while replacing table [ 483.077366][ T8598] ip_tables: iptables: counters copy to user failed while replacing table [ 487.724280][ T8637] ip_tables: iptables: counters copy to user failed while replacing table [ 489.164412][ T8649] ip_tables: iptables: counters copy to user failed while replacing table [ 492.750332][ T8671] ip_tables: iptables: counters copy to user failed while replacing table [ 496.053272][ T8715] ip_tables: iptables: counters copy to user failed while replacing table [ 497.633387][ T8754] ip_tables: iptables: counters copy to user failed while replacing table [ 498.730549][ T8768] ip_tables: iptables: counters copy to user failed while replacing table [ 500.969874][ T8800] ip_tables: iptables: counters copy to user failed while replacing table [ 501.396996][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.403376][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.729677][ T8811] ip_tables: iptables: counters copy to user failed while replacing table [ 502.951835][ T8824] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 505.502290][ T8852] ip_tables: iptables: counters copy to user failed while replacing table [ 509.233909][ T8902] ip_tables: iptables: counters copy to user failed while replacing table [ 511.946920][ T8934] ip_tables: iptables: counters copy to user failed while replacing table [ 514.022867][ T8967] ip_tables: iptables: counters copy to user failed while replacing table [ 514.325534][ T8975] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 515.748681][ T8992] ip_tables: iptables: counters copy to user failed while replacing table [ 518.357748][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1199'. [ 519.152562][ T9034] ip_tables: iptables: counters copy to user failed while replacing table [ 519.651508][ T9040] ip_tables: iptables: counters copy to user failed while replacing table [ 521.296098][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1217'. [ 521.567788][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1218'. [ 522.206897][ T9089] ip_tables: iptables: counters copy to user failed while replacing table [ 524.977875][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1241'. [ 525.298866][ T9147] ip_tables: iptables: counters copy to user failed while replacing table [ 526.178223][ T9168] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1253'. [ 528.081287][ T9197] ip_tables: iptables: counters copy to user failed while replacing table [ 529.012612][ T9218] tipc: Started in network mode [ 529.054364][ T9218] tipc: Node identity ff1083, cluster identity 4711 [ 529.061049][ T9218] tipc: Node number set to 16715907 [ 529.104315][ T9218] tipc: Cannot configure node identity twice [ 530.216162][ T9230] binder: 9229:9230 ioctl c0306201 0 returned -14 [ 530.328041][ T9233] binder: 9229:9233 ioctl c0306201 0 returned -14 [ 531.370332][ T9250] ip_tables: iptables: counters copy to user failed while replacing table [ 531.494495][ T8031] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 531.906683][ T8031] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 531.952982][ T8031] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 532.082658][ T8031] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 532.093378][ T8031] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 533.084242][ T8031] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 533.130838][ T8031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 533.169633][ T8031] usb 7-1: SerialNumber: syz [ 534.151093][ T26] audit: type=1326 audit(1790989649.974:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.2.1289" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d7c97159 code=0x7ffc0000 [ 534.239625][ T26] audit: type=1326 audit(1790989649.994:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.2.1289" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d7c97159 code=0x7ffc0000 [ 534.334177][ T26] audit: type=1326 audit(1790989650.004:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.2.1289" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa4d7c97159 code=0x7ffc0000 [ 534.424209][ T26] audit: type=1326 audit(1790989650.004:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.2.1289" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d7c97159 code=0x7ffc0000 [ 534.523954][ T26] audit: type=1326 audit(1790989650.004:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.2.1289" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d7c97159 code=0x7ffc0000 [ 534.599468][ T26] audit: type=1326 audit(1790989650.004:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.2.1289" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa4d7c97159 code=0x7ffc0000 [ 534.627760][ T9245] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1277'. [ 534.696960][ T26] audit: type=1326 audit(1790989650.004:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.2.1289" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d7c97159 code=0x7ffc0000 [ 534.780716][ T26] audit: type=1326 audit(1790989650.004:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9286 comm="syz.2.1289" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4d7c97159 code=0x7ffc0000 [ 534.909191][ T8031] cdc_acm: probe of 7-1:1.0 failed with error -12 [ 534.946999][ T8031] usb 7-1: USB disconnect, device number 3 [ 536.479534][ T9318] dlm: dev_write: no op 0 74000000000000 [ 538.896359][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1310'. [ 538.977442][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1310'. [ 539.272189][ T26] audit: type=1326 audit(1790989655.094:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9354 comm="syz.5.1313" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce8180159 code=0x7ffc0000 [ 539.354551][ T26] audit: type=1326 audit(1790989655.144:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9354 comm="syz.5.1313" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcce8180159 code=0x7ffc0000 [ 539.463124][ T26] audit: type=1326 audit(1790989655.144:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9354 comm="syz.5.1313" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce8180159 code=0x7ffc0000 [ 539.572063][ T26] audit: type=1326 audit(1790989655.154:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9354 comm="syz.5.1313" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcce8180159 code=0x7ffc0000 [ 539.674132][ T26] audit: type=1326 audit(1790989655.154:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9354 comm="syz.5.1313" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce8180159 code=0x7ffc0000 [ 539.757015][ T26] audit: type=1326 audit(1790989655.154:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9354 comm="syz.5.1313" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fcce8180159 code=0x7ffc0000 [ 539.864131][ T26] audit: type=1326 audit(1790989655.154:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9354 comm="syz.5.1313" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce8180159 code=0x7ffc0000 [ 539.961576][ T26] audit: type=1326 audit(1790989655.154:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9354 comm="syz.5.1313" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fcce8180159 code=0x7ffc0000 [ 540.044149][ T26] audit: type=1326 audit(1790989655.164:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9354 comm="syz.5.1313" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce8180159 code=0x7ffc0000 [ 540.130963][ T26] audit: type=1326 audit(1790989655.724:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.6.1321" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe032465159 code=0x7ffc0000 [ 540.850184][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1318'. [ 540.913352][ T9386] netlink: 'syz.0.1318': attribute type 1 has an invalid length. [ 540.967854][ T9386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 541.284182][ T4228] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 541.554144][ T4228] usb 7-1: Using ep0 maxpacket: 32 [ 541.674316][ T4228] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 541.694163][ T4228] usb 7-1: config 0 has no interface number 0 [ 541.875181][ T4228] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 541.899856][ T4228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.920149][ T4228] usb 7-1: Product: syz [ 541.934152][ T4228] usb 7-1: Manufacturer: syz [ 541.938829][ T4228] usb 7-1: SerialNumber: syz [ 541.974879][ T4228] usb 7-1: config 0 descriptor?? [ 542.016790][ T4228] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 542.243963][ T4228] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 542.289135][ T4228] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 542.403957][ T9424] syz.5.1338 (9424) used greatest stack depth: 20960 bytes left [ 542.667010][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 542.679844][ T4228] usb 7-1: USB disconnect, device number 4 [ 542.711111][ T4228] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 542.780324][ T4228] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 542.818460][ T4228] quatech2 7-1:0.51: device disconnected [ 543.347074][ T9444] ip_tables: iptables: counters copy to user failed while replacing table [ 543.808428][ T9466] ------------[ cut here ]------------ [ 543.824142][ T9466] WARNING: CPU: 1 PID: 9466 at include/linux/fs.h:538 hugetlb_split+0x237/0x2a0 [ 543.862617][ T9466] Modules linked in: [ 543.881369][ T9466] CPU: 1 PID: 9466 Comm: syz.0.1354 Not tainted syzkaller #0 [ 543.917848][ T9466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 543.931597][ T9466] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 543.937813][ T9466] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 a5 92 bf ff 0f 0b e9 62 fe ff ff e8 99 92 bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 84 52 8b 8d 80 e1 07 80 c1 03 38 c1 [ 543.958067][ T9466] RSP: 0018:ffffc9000339f8f0 EFLAGS: 00010287 [ 543.964829][ T9466] RAX: ffffffff81b98207 RBX: 0000200000400000 RCX: 0000000000080000 [ 543.973110][ T9466] RDX: ffffc900055e9000 RSI: 000000000000044c RDI: 000000000000044d [ 543.981885][ T9466] RBP: 0000000000000000 R08: ffff888061c446bf R09: 1ffff1100c3888d7 [ 543.990514][ T9466] R10: dffffc0000000000 R11: ffffed100c3888d8 R12: ffff8880675740a0 [ 544.002124][ T9466] R13: dffffc0000000000 R14: ffff888067574000 R15: ffff888075cae6c0 [ 544.054280][ T9466] FS: 00007ffae85206c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 544.090810][ T9466] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 544.097585][ T9466] CR2: 0000200000039030 CR3: 0000000068119000 CR4: 00000000003506e0 [ 544.105701][ T9466] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 544.113739][ T9466] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 544.123362][ T9466] Call Trace: [ 544.127039][ T9466] [ 544.130377][ T9466] __vma_adjust+0x2da/0x1e30 [ 544.136335][ T9466] __split_vma+0x346/0x410 [ 544.140885][ T9466] userfaultfd_ioctl+0x2f93/0x41b0 [ 544.146269][ T9466] ? userfaultfd_poll+0x1c0/0x1c0 [ 544.151396][ T9466] ? kfree+0xef/0x2a0 [ 544.167534][ T9466] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 544.173484][ T9466] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 544.182773][ T9466] ? bpf_lsm_file_ioctl+0x5/0x10 [ 544.193677][ T9466] ? security_file_ioctl+0x7c/0xa0 [ 544.205372][ T9466] ? userfaultfd_poll+0x1c0/0x1c0 [ 544.215033][ T9466] __se_sys_ioctl+0xfa/0x170 [ 544.227379][ T9466] do_syscall_64+0x4c/0xa0 [ 544.236881][ T9466] ? clear_bhb_loop+0x30/0x80 [ 544.248423][ T9466] ? clear_bhb_loop+0x30/0x80 [ 544.258771][ T9466] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 544.271549][ T9466] RIP: 0033:0x7ffaea2c8159 [ 544.281733][ T9466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.325007][ T9466] RSP: 002b:00007ffae8520028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.360157][ T9466] RAX: ffffffffffffffda RBX: 00007ffaea54ffa0 RCX: 00007ffaea2c8159 [ 544.385288][ T9466] RDX: 0000200000000040 RSI: 00000000c020aa00 RDI: 0000000000000003 [ 544.411037][ T9466] RBP: 00007ffaea35f06b R08: 0000000000000000 R09: 0000000000000000 [ 544.436079][ T9466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.448286][ T9466] R13: 00007ffaea550038 R14: 00007ffaea54ffa0 R15: 00007ffc5ce8b728 [ 544.472609][ T9466] [ 544.481897][ T9466] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 544.489235][ T9466] CPU: 1 PID: 9466 Comm: syz.0.1354 Not tainted syzkaller #0 [ 544.496783][ T9466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 544.506879][ T9466] Call Trace: [ 544.510195][ T9466] [ 544.513168][ T9466] dump_stack_lvl+0x188/0x250 [ 544.517925][ T9466] ? show_regs_print_info+0x20/0x20 [ 544.523166][ T9466] ? load_image+0x410/0x410 [ 544.527726][ T9466] panic+0x2f8/0x850 [ 544.531764][ T9466] ? bpf_jit_dump+0xd0/0xd0 [ 544.536328][ T9466] ? hugetlb_split+0x237/0x2a0 [ 544.541173][ T9466] __warn+0x248/0x2b0 [ 544.545206][ T9466] ? hugetlb_split+0x237/0x2a0 [ 544.550009][ T9466] report_bug+0x1b9/0x2e0 [ 544.554513][ T9466] handle_bug+0x3a/0x70 [ 544.558777][ T9466] exc_invalid_op+0x16/0x40 [ 544.563346][ T9466] asm_exc_invalid_op+0x16/0x20 [ 544.568230][ T9466] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 544.573647][ T9466] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 a5 92 bf ff 0f 0b e9 62 fe ff ff e8 99 92 bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 84 52 8b 8d 80 e1 07 80 c1 03 38 c1 [ 544.593297][ T9466] RSP: 0018:ffffc9000339f8f0 EFLAGS: 00010287 [ 544.599416][ T9466] RAX: ffffffff81b98207 RBX: 0000200000400000 RCX: 0000000000080000 [ 544.607433][ T9466] RDX: ffffc900055e9000 RSI: 000000000000044c RDI: 000000000000044d [ 544.615455][ T9466] RBP: 0000000000000000 R08: ffff888061c446bf R09: 1ffff1100c3888d7 [ 544.623473][ T9466] R10: dffffc0000000000 R11: ffffed100c3888d8 R12: ffff8880675740a0 [ 544.631485][ T9466] R13: dffffc0000000000 R14: ffff888067574000 R15: ffff888075cae6c0 [ 544.639503][ T9466] ? hugetlb_split+0x237/0x2a0 [ 544.644324][ T9466] __vma_adjust+0x2da/0x1e30 [ 544.649031][ T9466] __split_vma+0x346/0x410 [ 544.653497][ T9466] userfaultfd_ioctl+0x2f93/0x41b0 [ 544.658668][ T9466] ? userfaultfd_poll+0x1c0/0x1c0 [ 544.663750][ T9466] ? kfree+0xef/0x2a0 [ 544.667781][ T9466] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 544.673549][ T9466] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 544.679097][ T9466] ? bpf_lsm_file_ioctl+0x5/0x10 [ 544.684087][ T9466] ? security_file_ioctl+0x7c/0xa0 [ 544.689237][ T9466] ? userfaultfd_poll+0x1c0/0x1c0 [ 544.694320][ T9466] __se_sys_ioctl+0xfa/0x170 [ 544.698948][ T9466] do_syscall_64+0x4c/0xa0 [ 544.703401][ T9466] ? clear_bhb_loop+0x30/0x80 [ 544.708114][ T9466] ? clear_bhb_loop+0x30/0x80 [ 544.712831][ T9466] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 544.718763][ T9466] RIP: 0033:0x7ffaea2c8159 [ 544.723230][ T9466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.742877][ T9466] RSP: 002b:00007ffae8520028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.751336][ T9466] RAX: ffffffffffffffda RBX: 00007ffaea54ffa0 RCX: 00007ffaea2c8159 [ 544.759373][ T9466] RDX: 0000200000000040 RSI: 00000000c020aa00 RDI: 0000000000000003 [ 544.767422][ T9466] RBP: 00007ffaea35f06b R08: 0000000000000000 R09: 0000000000000000 [ 544.775438][ T9466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.783443][ T9466] R13: 00007ffaea550038 R14: 00007ffaea54ffa0 R15: 00007ffc5ce8b728 [ 544.791462][ T9466] [ 544.794791][ T9466] Kernel Offset: disabled [ 544.799566][ T9466] Rebooting in 86400 seconds..