last executing test programs: 16m38.613976274s ago: executing program 2 (id=1114): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) (fail_nth: 1) 16m38.535952525s ago: executing program 2 (id=1115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket(0x1d, 0x2, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000003c0)={'geneve0\x00'}) 16m38.435527794s ago: executing program 2 (id=1116): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000008c0)=[0x45c, 0x9], 0x0, 0x0, 0x2, 0x1, r1}}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4084) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) setsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) prlimit64(r8, 0x5, &(0x7f0000000140), &(0x7f00000001c0)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x60, 0x2, 0x6, 0x603, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x34, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x78, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @loopback={0xff01000000000000}}, @IFA_FLAGS={0x8, 0x8, 0x643}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004051}, 0x4) 16m38.42730655s ago: executing program 2 (id=1117): r0 = fsopen(&(0x7f0000000040)='nsfs\x00', 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x5, 0x0) listen(r1, 0x6) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300030500000000070000000000000300060000a00000020010020a010102000000000000000099d2128c481d70e3105c42f8d14c08ad25efb986453aacbcf1fcaaca6e71fc419a085e28d22b60e3779a6833daab038335afc86d881dcf57722aee31baae8a84d2e6fd1bcdaa4e0b4624fbc4422d4e56b85ba0ddde1db57a9b1c73355d2d83fdae1f0f38c63605c1d8edaa119c719656daefc63df270f488cde32ecdd9358ad73eeea76396b687819faf00"/194], 0x28}, 0x1, 0x7}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x1) fchdir(r4) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6500) setresuid(0xee01, r5, r5) setresuid(r5, 0x0, 0x0) fchown(r3, r5, 0xee01) 16m38.385490537s ago: executing program 2 (id=1118): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b00010000000109040000"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x11c, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x12, 0xffffffffffffffff, 0x0) 16m38.243677865s ago: executing program 2 (id=1119): prlimit64(0x0, 0xe, 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000fc0)={0x8, 0xdb1f, 0xf, 0x5, 0x6, "c02db8159fdcae50281e45d2767f7c7199e33d"}) (async) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000fc0)={0x8, 0xdb1f, 0xf, 0x5, 0x6, "c02db8159fdcae50281e45d2767f7c7199e33d"}) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="54e0de673ea2d5efde3a6483e8b3f6186d563eaaf24fc89c293d862c72aee7ecdd4a18d01ec987837f406dee9f365f2220c7fce07c8bdf6622f09669a5d9c9fcba4d741b43a548a999ecb73de51936bc40b7423de4ece6630cf977e9edaf3da5e05ef325a602ab907fd4cc69a4eaea42778f75d062ee0b2ed92064f6942bc79868e4f3bd319e0d", 0x87}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000020000003acfce2774bf", @ANYRES32, @ANYBLOB="0000000000000000b703000002"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000020000003acfce2774bf", @ANYRES32, @ANYBLOB="0000000000000000b703000002"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c0002800600"], 0x24}}, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r4, 0x40086e81, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) r6 = getpid() close(r0) sendmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xee01, 0xee00}}}], 0x20}, 0x8840) 16m34.87796063s ago: executing program 32 (id=946): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x56}]}, 0x24}}, 0x4000800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0xa, 0x18, &(0x7f0000001540)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3, r2}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r6 = semget$private(0x0, 0x6, 0x0) semop(r6, &(0x7f00000000c0)=[{0x4}], 0x1) semctl$SETVAL(r6, 0x4, 0x10, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, 0x0) setsockopt$sock_int(r1, 0x1, 0xd, &(0x7f0000000080)=0xffffffffffffff40, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae", @ANYRES32=r0], 0x18}, 0x1, 0x0, 0x0, 0x24050059}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000016c0)={@cgroup=r7, r7, 0x21, 0x0, 0x0, @void, @value=r7}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)) 16m32.377813785s ago: executing program 33 (id=950): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x401, @ipv4={'\x00', '\xff\xff', @local}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x3) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) recvmsg(r1, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xdc, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd, 0xa00000000000000}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x4}, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000008c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@ccm_128={{0x304}, "6384a301df2fc6d7", "c101b389c28956e4082706696c7fe98c", "d6b52bd7", "573565af45198ffc"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@ccm_128={{0x304}, "49a1c291f19eee45", "5c6495997b26a2da703d7be911a2a22f", "0016f4ff", "bd70a6fc9a47c208"}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0x1}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r2}, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') syz_fuse_handle_req(r5, &(0x7f0000000f80)="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", 0x2000, &(0x7f0000003dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r5, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x2200, 0x6, 0x53c5, 0x3}, 0x9, 0x0, 0x7, 0xef83, 0x5, 0x14, 0x1b, 0x7, 0x6, 0xdf, {0x4, 0x4, 0xdf, 0x2, 0x38, 0x1300000}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x24048041}, 0x4000800) 16m28.889398227s ago: executing program 34 (id=996): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000000)) (fail_nth: 1) 16m26.382616985s ago: executing program 35 (id=1035): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e90200", 0x87}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c", 0xc2}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000600)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 16m22.876303605s ago: executing program 36 (id=1119): prlimit64(0x0, 0xe, 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000fc0)={0x8, 0xdb1f, 0xf, 0x5, 0x6, "c02db8159fdcae50281e45d2767f7c7199e33d"}) (async) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000fc0)={0x8, 0xdb1f, 0xf, 0x5, 0x6, "c02db8159fdcae50281e45d2767f7c7199e33d"}) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="54e0de673ea2d5efde3a6483e8b3f6186d563eaaf24fc89c293d862c72aee7ecdd4a18d01ec987837f406dee9f365f2220c7fce07c8bdf6622f09669a5d9c9fcba4d741b43a548a999ecb73de51936bc40b7423de4ece6630cf977e9edaf3da5e05ef325a602ab907fd4cc69a4eaea42778f75d062ee0b2ed92064f6942bc79868e4f3bd319e0d", 0x87}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000020000003acfce2774bf", @ANYRES32, @ANYBLOB="0000000000000000b703000002"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000020000003acfce2774bf", @ANYRES32, @ANYBLOB="0000000000000000b703000002"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c0002800600"], 0x24}}, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r4, 0x40086e81, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) r6 = getpid() close(r0) sendmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xee01, 0xee00}}}], 0x20}, 0x8840) 4m43.07729903s ago: executing program 9 (id=4724): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 4m42.83996723s ago: executing program 9 (id=4725): socket(0x25, 0xa, 0x11) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$kcm(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x4, 0xf8}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee84400008f080000000019b0fb0bba", 0x41}, {&(0x7f0000000e80)="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", 0x227}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeb0e271dc700b581440284", 0xf}], 0x4}, 0x48001) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r2, 0x309, 0x0, 0x0, {0x1d}}, 0x14}}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406d042dc200000010000109022d0001ef0b0009210000000122007e530581030000000000090502030002010209"], 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000240)={0x2, 0x0, 0x90001, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000440)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioprio_set$uid(0x3, 0x0, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r7, &(0x7f0000000200)=[{&(0x7f0000000680)=""/211, 0xd3}], 0x1) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r4, @ANYBLOB="bf09593313a80d8c0e435fecfb399124ba60df42a7cfe1fa1aef5cedcc455b02700f2116ce5f11b934aca972e9fe908759a242ff31629b403c015ff1a0c95c50e40c2d8c3b2ccc429546b876afc65d5f759cf5872c81d864749bbce0571d77d2adb234005a57724d38e89bdabd84fc8b0ea97aa71cbed67a643868bc16f0419367363df2c425bca43314a5518759f21d6d966f9d105d8dd695b971fee7d408dd3444dd9114e240190fbfae4cd43a9372a6825b5059"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8000000000016) 4m39.208570812s ago: executing program 9 (id=4734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 4m38.099614523s ago: executing program 9 (id=4737): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007500)=ANY=[@ANYBLOB="300000003e0007012bbd700000000000017c00000400fc800e0001806d14314965"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) io_pgetevents(0x0, 0x8, 0x40, &(0x7f0000002800)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3440fb, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001500010025bd7000fedbdf250a789100", @ANYRES32=0x0, @ANYBLOB="1400020000000000000000000000ffff000000000b0001"], 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x20004840) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000240)=0x4, 0x4) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) io_getevents(0x0, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000200)={r4, r5+60000000}) 4m37.515087358s ago: executing program 9 (id=4742): socket$vsock_stream(0x28, 0x1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x779e1000) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2, 0x100, 0x0, @loopback={0xff00000000000000}}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x3, @remote, 0x5}}, 0x24) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c93010000c0005002ae6"], 0x15) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@private}}, &(0x7f0000000700)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000009c0)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xe8) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x20, &(0x7f0000000c00)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESDEC=r6, @ANYBLOB=',group_i', @ANYRESDEC=r7, @ANYBLOB=',allow_other,allow_other,blksize=0x0000000000001800,default_permissions,blksize=0x0000000000001400,audit,dont_appraise,smackfsfloor=autofs\x00,euid<', @ANYRESDEC=r8, @ANYBLOB=',\x00']) setpgid(r5, r5) fchdir(r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b70500000800000085000000ab00000095"], 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r10) 4m37.275218144s ago: executing program 9 (id=4744): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000180)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1200"], 0x18}, 0x440e0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000000)=r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000140009052cbd70000000000002180000", @ANYRES32=r5, @ANYBLOB="f0feff71f89b5fc7e20a1795b9abffff0810040000000000000000"], 0x28}}, 0x4000) 4m3.783425655s ago: executing program 6 (id=4876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 4m3.63204313s ago: executing program 6 (id=4877): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/172, 0xac) 4m2.996616052s ago: executing program 8 (id=4879): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c9"], 0x16) 4m0.836051553s ago: executing program 8 (id=4884): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x31, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200084c1}, 0x40004) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x700, 0x20, 0xfff, 0x6, {{0x8, 0x4, 0x3, 0x6, 0x20, 0x67, 0x0, 0x0, 0x29, 0x0, @broadcast, @multicast1, {[@rr={0x7, 0xb, 0xb0, [@loopback, @local]}, @noop]}}}}}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 4m0.302511198s ago: executing program 6 (id=4888): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800800, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) 4m0.000702078s ago: executing program 6 (id=4891): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x2000fb) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) 3m59.585984648s ago: executing program 8 (id=4895): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 3m59.257604371s ago: executing program 6 (id=4896): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "0000dc0ea1a5c7b93ecde8ffffff00fb00"}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x2, 0x1000000, 0x1ff, 0x4, "e315dbadbaf2f7b7cdb242e3ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x1e04) read$FUSE(r2, &(0x7f0000001480)={0x2020}, 0x2020) 3m58.910424015s ago: executing program 7 (id=4897): sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x40000}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m58.363563515s ago: executing program 7 (id=4898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x6, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x7, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x6, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x140, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x5, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x6, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x30, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}]}, 0x30}}, 0x0) 3m58.219052138s ago: executing program 6 (id=4899): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xc695d31f854950dd}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17311}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00003c0ff000000000ff8400000066e4532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x45) 3m57.164528425s ago: executing program 5 (id=4901): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000c00)='cramfs\x00', 0x4418, 0x0) 3m57.163061151s ago: executing program 5 (id=4902): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x5, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, 0x1402, 0x1, 0x70bd2a, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 3m57.037352334s ago: executing program 5 (id=4903): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) write$evdev(r1, &(0x7f0000000580)=[{{0x77359400}, 0x0, 0x1, 0x5}], 0x18) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 3m56.953480001s ago: executing program 7 (id=4904): mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) 3m56.849865889s ago: executing program 7 (id=4905): syz_emit_ethernet(0x0, 0x0, 0x0) 3m56.827018181s ago: executing program 8 (id=4906): openat$ptmx(0xffffffffffffff9c, 0x0, 0x382, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 3m56.715892121s ago: executing program 5 (id=4907): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x0, 0xb005}, 0x4) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028", 0x20}], 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'macvtap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f020047540f68a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 3m56.707880854s ago: executing program 7 (id=4908): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x3) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) close(r3) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) recvmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10060) 3m56.551236615s ago: executing program 8 (id=4909): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0x14}], 0x1}, 0x4002) 3m56.467522473s ago: executing program 5 (id=4910): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xfffffffffffffffc, 0x5, 0x1, 0x1}) 3m56.35211714s ago: executing program 8 (id=4911): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) read(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000800001f000006060400180000008cdb25", 0x39}], 0x1) 3m56.350921739s ago: executing program 7 (id=4912): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r2, @ANYBLOB="28001280090001007665746800"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 3m56.310675907s ago: executing program 5 (id=4913): unshare(0x6a040000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [0x48, 0xec3, 0xfdffffffffffb5b2, 0x4, 0xc, 0x8000000000000000]}, &(0x7f0000000200)=0x78) 3m42.892815651s ago: executing program 37 (id=4899): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xc695d31f854950dd}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17311}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00003c0ff000000000ff8400000066e4532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x45) 3m40.821502985s ago: executing program 38 (id=4912): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r2, @ANYBLOB="28001280090001007665746800"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 3m40.777460803s ago: executing program 39 (id=4913): unshare(0x6a040000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [0x48, 0xec3, 0xfdffffffffffb5b2, 0x4, 0xc, 0x8000000000000000]}, &(0x7f0000000200)=0x78) 3m40.637585609s ago: executing program 40 (id=4911): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) read(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000800001f000006060400180000008cdb25", 0x39}], 0x1) 6.499269194s ago: executing program 0 (id=5394): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x102}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000100)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000040)={0x0, r5}) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) 5.452252675s ago: executing program 0 (id=5408): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)='x', 0x1}], 0x1}}], 0x1, 0x40c40c0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400050124bd70007b"], 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x2005c840) 5.046737478s ago: executing program 4 (id=5413): r0 = socket(0x840000000002, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="974501000000000001008cc5595c4a9b8f52ac8e5c7fe70a3326491f", 0x1c}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x81}}}}], 0x20}, 0x400c804) 5.046160976s ago: executing program 0 (id=5414): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) 4.772887957s ago: executing program 4 (id=5416): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002f20702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200020095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.667757857s ago: executing program 0 (id=5417): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x4100, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.356124323s ago: executing program 4 (id=5419): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902", 0x86}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee83", 0x80}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.157162099s ago: executing program 0 (id=5424): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xca04, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x80, "", [{{0x9, 0x4, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x27, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x3, 0x81}}}}}]}}]}}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB=' 16'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.998779531s ago: executing program 1 (id=5427): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="974501000000000001008cc5595c4a9b8f52ac8e5c7fe70a3326491f", 0x1c}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x81}}}}], 0x20}, 0x400c804) 2.734259929s ago: executing program 4 (id=5429): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x102}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000100)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000040)={0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) 2.175188692s ago: executing program 1 (id=5435): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0xfff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}}, 0x8000002) 1.509300877s ago: executing program 1 (id=5438): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902", 0x86}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee83", 0x80}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.322274492s ago: executing program 4 (id=5439): r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0xfffffffc, 0x0, 0x6}]}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r4, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x700}, 0x48) 1.302417808s ago: executing program 0 (id=5440): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.069097513s ago: executing program 3 (id=5442): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002f20702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200020095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 978.270612ms ago: executing program 4 (id=5443): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x1708}], 0x1, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000002200)="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", 0xfc0) 859.847898ms ago: executing program 3 (id=5444): r0 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000940)={0x5, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x20000000000000b, 0xfffffffffffffffc, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) 859.361679ms ago: executing program 1 (id=5445): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8840, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0xe, 0x8, 0x2, "ff00f70000e5020052c4f21c7f000000002000"}) r2 = syz_open_pts(r1, 0x141601) write(r2, &(0x7f0000000000), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 706.612339ms ago: executing program 3 (id=5446): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r1 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000000)) 681.54955ms ago: executing program 1 (id=5447): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xa53}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0xfff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x64}}, 0x8000002) 504.019744ms ago: executing program 3 (id=5448): semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f0000000180)=""/185) 419.888788ms ago: executing program 1 (id=5449): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x102}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000100)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000040)={0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) 365.911584ms ago: executing program 3 (id=5450): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x2, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xfffffffb, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x6, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x7, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x2, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x1ff, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x3, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x8, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x0, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0xc, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x2, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x400, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb6, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x0, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008400"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38) 0s ago: executing program 3 (id=5451): socket(0x2b, 0x80801, 0x1) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x4e22, 0x4, @mcast2}, 0x0, {[0x3, 0x0, 0x6a, 0x1, 0x89f, 0xb, 0x1]}}, 0x5c) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001b80)=""/71) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) sendto$inet6(r4, &(0x7f0000000100)='3', 0x1, 0x8000, 0x0, 0x0) kernel console output (not intermixed with test programs): parsing attributes in process `syz.7.4739'. [ 986.771310][T19696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.771332][T19696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.875285][T20367] tc_dump_action: action bad kind [ 987.280790][T20379] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4744'. [ 988.332650][T20398] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4749'. [ 988.667389][T20402] netlink: 'syz.8.4599': attribute type 1 has an invalid length. [ 988.667412][T20402] netlink: 'syz.8.4599': attribute type 3 has an invalid length. [ 988.752538][T20408] FAULT_INJECTION: forcing a failure. [ 988.752538][T20408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.752576][T20408] CPU: 1 UID: 0 PID: 20408 Comm: syz.5.4751 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 988.752603][T20408] Tainted: [L]=SOFTLOCKUP [ 988.752610][T20408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 988.752622][T20408] Call Trace: [ 988.752630][T20408] [ 988.752639][T20408] dump_stack_lvl+0xe8/0x150 [ 988.752669][T20408] should_fail_ex+0x46b/0x600 [ 988.752701][T20408] _copy_from_user+0x2d/0xb0 [ 988.752725][T20408] __sys_bpf+0x229/0x950 [ 988.752751][T20408] ? __pfx___sys_bpf+0x10/0x10 [ 988.752771][T20408] ? rt_mutex_slowunlock+0x1cb/0x300 [ 988.752817][T20408] ? ksys_write+0x248/0x270 [ 988.752841][T20408] ? __pfx_ksys_write+0x10/0x10 [ 988.752866][T20408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.752888][T20408] __x64_sys_bpf+0x7c/0x90 [ 988.752920][T20408] do_syscall_64+0x15f/0xf80 [ 988.752941][T20408] ? clear_bhb_loop+0x40/0x90 [ 988.752965][T20408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.752985][T20408] RIP: 0033:0x7f8c4e64cdd9 [ 988.753004][T20408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.753020][T20408] RSP: 002b:00007f8c4c8a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 988.753041][T20408] RAX: ffffffffffffffda RBX: 00007f8c4e8c5fa0 RCX: 00007f8c4e64cdd9 [ 988.753056][T20408] RDX: 0000000000000028 RSI: 00002000000003c0 RDI: 0000000000000012 [ 988.753069][T20408] RBP: 00007f8c4c8a6090 R08: 0000000000000000 R09: 0000000000000000 [ 988.753081][T20408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.753094][T20408] R13: 00007f8c4e8c6038 R14: 00007f8c4e8c5fa0 R15: 00007ffedfab3c68 [ 988.753124][T20408] [ 989.034540][T20409] tc_dump_action: action bad kind [ 989.236984][ T4915] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 989.266584][ T4915] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 989.333219][ T4915] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 989.342313][ T4915] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 989.347270][ T4915] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 989.770540][T20421] binder: 20420:20421 ioctl ae41 2 returned -22 [ 989.783335][T20421] tipc: Enabling of bearer rejected, failed to enable media [ 989.786109][T20421] binder_alloc: binder_alloc_mmap_handler: 20420 200000001000-200000003000 already mapped failed -16 [ 991.618080][ T4915] Bluetooth: hci3: command tx timeout [ 992.424815][T20456] tc_dump_action: action bad kind [ 993.628070][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.628128][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.708083][ T4915] Bluetooth: hci3: command tx timeout [ 995.095248][T19696] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 995.095272][T19696] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.785325][ T4915] Bluetooth: hci3: command tx timeout [ 996.275610][T19696] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 996.275634][T19696] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.424372][T20480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4774'. [ 1000.491796][T20500] FAULT_INJECTION: forcing a failure. [ 1000.491796][T20500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1000.491859][T20500] CPU: 1 UID: 0 PID: 20500 Comm: syz.6.4777 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1000.491880][T20500] Tainted: [L]=SOFTLOCKUP [ 1000.491886][T20500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1000.491895][T20500] Call Trace: [ 1000.491901][T20500] [ 1000.491908][T20500] dump_stack_lvl+0xe8/0x150 [ 1000.491953][T20500] should_fail_ex+0x46b/0x600 [ 1000.491979][T20500] _copy_from_user+0x2d/0xb0 [ 1000.491996][T20500] ___sys_recvmsg+0x175/0x590 [ 1000.492018][T20500] ? __pfx____sys_recvmsg+0x10/0x10 [ 1000.492038][T20500] ? __fget_files+0x2a/0x420 [ 1000.492071][T20500] ? __fget_files+0x3a6/0x420 [ 1000.492097][T20500] do_recvmmsg+0x33a/0x800 [ 1000.492120][T20500] ? __pfx_do_recvmmsg+0x10/0x10 [ 1000.492146][T20500] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1000.492176][T20500] __x64_sys_recvmmsg+0x198/0x250 [ 1000.492196][T20500] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1000.492212][T20500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.492232][T20500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.492247][T20500] do_syscall_64+0x15f/0xf80 [ 1000.492262][T20500] ? clear_bhb_loop+0x40/0x90 [ 1000.492280][T20500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.492293][T20500] RIP: 0033:0x7fcefbb1cdd9 [ 1000.492307][T20500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.492320][T20500] RSP: 002b:00007fcef9d34028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1000.492337][T20500] RAX: ffffffffffffffda RBX: 00007fcefbd96180 RCX: 00007fcefbb1cdd9 [ 1000.492347][T20500] RDX: 000000000291962b RSI: 0000200000000040 RDI: 0000000000000005 [ 1000.492357][T20500] RBP: 00007fcef9d34090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.492366][T20500] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001 [ 1000.492375][T20500] R13: 00007fcefbd96218 R14: 00007fcefbd96180 R15: 00007fff32186258 [ 1000.492398][T20500] [ 1000.544694][ T4915] Bluetooth: hci3: command tx timeout [ 1001.310150][T19696] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1001.310184][T19696] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.514532][T20513] tc_dump_action: action bad kind [ 1001.668398][T20527] ubi16: attaching mtd0 [ 1002.622452][T20527] ubi16: scanning is finished [ 1002.622510][T20527] ubi16: empty MTD device detected [ 1002.952869][T19696] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1002.952891][T19696] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.110157][ T5893] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1003.282384][ T5893] usb 7-1: config 7 has an invalid interface number: 209 but max is 2 [ 1003.282414][ T5893] usb 7-1: config 7 has an invalid interface number: 231 but max is 2 [ 1003.282435][ T5893] usb 7-1: config 7 has an invalid interface number: 5 but max is 2 [ 1003.282455][ T5893] usb 7-1: config 7 has no interface number 0 [ 1003.282471][ T5893] usb 7-1: config 7 has no interface number 1 [ 1003.282487][ T5893] usb 7-1: config 7 has no interface number 2 [ 1003.282555][ T5893] usb 7-1: config 7 interface 209 altsetting 91 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1003.282581][ T5893] usb 7-1: config 7 interface 209 altsetting 91 has an invalid descriptor for endpoint zero, skipping [ 1003.282617][ T5893] usb 7-1: config 7 interface 231 altsetting 47 has an invalid descriptor for endpoint zero, skipping [ 1003.282651][ T5893] usb 7-1: config 7 interface 231 altsetting 47 has a duplicate endpoint with address 0xF, skipping [ 1003.282674][ T5893] usb 7-1: config 7 interface 231 altsetting 47 has a duplicate endpoint with address 0xF, skipping [ 1003.282696][ T5893] usb 7-1: config 7 interface 231 altsetting 47 has an invalid descriptor for endpoint zero, skipping [ 1003.282737][ T5893] usb 7-1: config 7 interface 5 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 1003.282760][ T5893] usb 7-1: config 7 interface 5 altsetting 8 has an endpoint descriptor with address 0x9C, changing to 0x8C [ 1003.282785][ T5893] usb 7-1: config 7 interface 5 altsetting 8 endpoint 0x8C has an invalid bInterval 145, changing to 7 [ 1003.282811][ T5893] usb 7-1: config 7 interface 5 altsetting 8 endpoint 0x8C has invalid maxpacket 42581, setting to 1024 [ 1003.282838][ T5893] usb 7-1: config 7 interface 5 altsetting 8 endpoint 0x3 has invalid maxpacket 616, setting to 64 [ 1003.282863][ T5893] usb 7-1: config 7 interface 5 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 1003.282884][ T5893] usb 7-1: config 7 interface 5 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 1003.282904][ T5893] usb 7-1: config 7 interface 5 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 1003.282923][ T5893] usb 7-1: config 7 interface 209 has no altsetting 0 [ 1003.282935][ T5893] usb 7-1: config 7 interface 231 has no altsetting 0 [ 1003.282948][ T5893] usb 7-1: config 7 interface 5 has no altsetting 0 [ 1003.285257][ T5893] usb 7-1: New USB device found, idVendor=0424, idProduct=274e, bcdDevice=d3.88 [ 1003.285284][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.285300][ T5893] usb 7-1: Product: syz [ 1003.285313][ T5893] usb 7-1: Manufacturer: 餄âµè‘—ï¬î§°ë•¨á‘¹í€®ê–œâ¸é„á–™ê‡Žì‰‡î®–ïª’î¹ [ 1003.285327][ T5893] usb 7-1: SerialNumber: syz [ 1003.326450][T20414] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.331360][T20414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.342143][T20414] bridge_slave_0: entered allmulticast mode [ 1003.369615][T20414] bridge_slave_0: entered promiscuous mode [ 1003.391195][T20414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.391318][T20414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.394213][T20414] bridge_slave_1: entered allmulticast mode [ 1003.401111][T20414] bridge_slave_1: entered promiscuous mode [ 1003.658597][T20414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.697474][T20414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1003.868431][ T5893] cdc_acm 7-1:7.231: Zero length descriptor references [ 1003.868477][ T5893] cdc_acm 7-1:7.231: probe with driver cdc_acm failed with error -22 [ 1004.060166][T20414] team0: Port device team_slave_0 added [ 1004.074372][T20414] team0: Port device team_slave_1 added [ 1004.210535][ T5893] cdc_acm 7-1:7.5: skipping garbage [ 1004.273879][ T5893] usb 7-1: USB disconnect, device number 36 [ 1005.059550][T20414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.059569][T20414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.059590][T20414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.145385][T20414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1005.145404][T20414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.145607][T20414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.670830][T20527] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1005.670850][T20527] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1005.670860][T20527] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1005.670869][T20527] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 1005.670878][T20527] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1005.670887][T20527] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1005.670897][T20527] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3368752932 [ 1005.670909][T20527] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1005.673592][T20547] ubi16: background thread "ubi_bgt16d" started, PID 20547 [ 1006.033259][T20550] FAULT_INJECTION: forcing a failure. [ 1006.033259][T20550] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.033292][T20550] CPU: 0 UID: 0 PID: 20550 Comm: syz.6.4791 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1006.033313][T20550] Tainted: [L]=SOFTLOCKUP [ 1006.033319][T20550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1006.033328][T20550] Call Trace: [ 1006.033334][T20550] [ 1006.033340][T20550] dump_stack_lvl+0xe8/0x150 [ 1006.033369][T20550] should_fail_ex+0x46b/0x600 [ 1006.033397][T20550] should_failslab+0xa8/0x100 [ 1006.033416][T20550] __kmalloc_cache_noprof+0x84/0x690 [ 1006.033434][T20550] ? snd_pcm_oss_change_params_locked+0x175/0x3e00 [ 1006.033454][T20550] snd_pcm_oss_change_params_locked+0x175/0x3e00 [ 1006.033470][T20550] ? __lock_acquire+0x6b5/0x2cf0 [ 1006.033496][T20550] ? __lock_acquire+0x6b5/0x2cf0 [ 1006.033516][T20550] ? _parse_integer_limit+0x1ae/0x1f0 [ 1006.033541][T20550] ? do_raw_spin_lock+0x12b/0x2f0 [ 1006.033556][T20550] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1006.033581][T20550] ? lockdep_hardirqs_on+0x7a/0x110 [ 1006.033596][T20550] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1006.033612][T20550] ? snd_pcm_oss_write+0x20d/0xbe0 [ 1006.033638][T20550] snd_pcm_oss_write+0x282/0xbe0 [ 1006.033668][T20550] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1006.033690][T20550] vfs_write+0x2a3/0xba0 [ 1006.033713][T20550] ? __pfx_vfs_write+0x10/0x10 [ 1006.033730][T20550] ? __fget_files+0x2a/0x420 [ 1006.033754][T20550] ? __fget_files+0x2a/0x420 [ 1006.033773][T20550] ? __fget_files+0x3a6/0x420 [ 1006.033792][T20550] ? __fget_files+0x2a/0x420 [ 1006.033818][T20550] ksys_write+0x156/0x270 [ 1006.033836][T20550] ? __pfx_ksys_write+0x10/0x10 [ 1006.033860][T20550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.033878][T20550] do_syscall_64+0x15f/0xf80 [ 1006.033893][T20550] ? trace_irq_disable+0x3b/0x140 [ 1006.033912][T20550] ? clear_bhb_loop+0x40/0x90 [ 1006.033931][T20550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.033947][T20550] RIP: 0033:0x7fcefbb1cdd9 [ 1006.033964][T20550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.033976][T20550] RSP: 002b:00007fcef9d55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1006.033993][T20550] RAX: ffffffffffffffda RBX: 00007fcefbd96090 RCX: 00007fcefbb1cdd9 [ 1006.034003][T20550] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 1006.034012][T20550] RBP: 00007fcef9d55090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.034020][T20550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1006.034029][T20550] R13: 00007fcefbd96128 R14: 00007fcefbd96090 R15: 00007fff32186258 [ 1006.034051][T20550] [ 1007.048514][T20414] hsr_slave_0: entered promiscuous mode [ 1007.051734][T20414] hsr_slave_1: entered promiscuous mode [ 1007.052388][T20414] debugfs: 'hsr0' already exists in 'hsr' [ 1007.052408][T20414] Cannot create hsr debugfs directory [ 1007.882138][T20561] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4795'. [ 1008.314530][T20565] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4797'. [ 1008.557950][ T5712] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1008.710583][ T5712] usb 7-1: config 7 has an invalid interface number: 209 but max is 2 [ 1008.710613][ T5712] usb 7-1: config 7 has an invalid interface number: 231 but max is 2 [ 1008.710635][ T5712] usb 7-1: config 7 has an invalid interface number: 5 but max is 2 [ 1008.710655][ T5712] usb 7-1: config 7 has no interface number 0 [ 1008.710670][ T5712] usb 7-1: config 7 has no interface number 1 [ 1008.710685][ T5712] usb 7-1: config 7 has no interface number 2 [ 1008.710756][ T5712] usb 7-1: config 7 interface 209 altsetting 91 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1008.710784][ T5712] usb 7-1: config 7 interface 209 altsetting 91 has an invalid descriptor for endpoint zero, skipping [ 1008.710841][ T5712] usb 7-1: config 7 interface 231 altsetting 47 has an invalid descriptor for endpoint zero, skipping [ 1008.710863][ T5712] usb 7-1: config 7 interface 231 altsetting 47 has a duplicate endpoint with address 0xF, skipping [ 1008.710885][ T5712] usb 7-1: config 7 interface 231 altsetting 47 has a duplicate endpoint with address 0xF, skipping [ 1008.710907][ T5712] usb 7-1: config 7 interface 231 altsetting 47 has an invalid descriptor for endpoint zero, skipping [ 1008.710967][ T5712] usb 7-1: config 7 interface 5 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 1008.710992][ T5712] usb 7-1: config 7 interface 5 altsetting 8 has an endpoint descriptor with address 0x9C, changing to 0x8C [ 1008.711016][ T5712] usb 7-1: config 7 interface 5 altsetting 8 endpoint 0x8C has an invalid bInterval 145, changing to 7 [ 1008.711041][ T5712] usb 7-1: config 7 interface 5 altsetting 8 endpoint 0x8C has invalid maxpacket 42581, setting to 1024 [ 1008.711068][ T5712] usb 7-1: config 7 interface 5 altsetting 8 endpoint 0x3 has invalid maxpacket 616, setting to 64 [ 1008.711095][ T5712] usb 7-1: config 7 interface 5 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 1008.711119][ T5712] usb 7-1: config 7 interface 5 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 1008.711141][ T5712] usb 7-1: config 7 interface 5 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 1008.711167][ T5712] usb 7-1: config 7 interface 209 has no altsetting 0 [ 1008.711185][ T5712] usb 7-1: config 7 interface 231 has no altsetting 0 [ 1008.711203][ T5712] usb 7-1: config 7 interface 5 has no altsetting 0 [ 1008.753874][ T5712] usb 7-1: New USB device found, idVendor=0424, idProduct=274e, bcdDevice=d3.88 [ 1008.753931][ T5712] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.754036][ T5712] usb 7-1: Product: syz [ 1008.754052][ T5712] usb 7-1: Manufacturer: 餄âµè‘—ï¬î§°ë•¨á‘¹í€®ê–œâ¸é„á–™ê‡Žì‰‡î®–ïª’î¹ [ 1008.754073][ T5712] usb 7-1: SerialNumber: syz [ 1009.296275][T19696] bridge_slave_1: left allmulticast mode [ 1009.296315][T19696] bridge_slave_1: left promiscuous mode [ 1009.296590][T19696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.324815][ T5712] cdc_acm 7-1:7.231: Zero length descriptor references [ 1009.324862][ T5712] cdc_acm 7-1:7.231: probe with driver cdc_acm failed with error -22 [ 1009.379499][ T5712] cdc_acm 7-1:7.5: skipping garbage [ 1009.413579][T19696] bridge_slave_0: left allmulticast mode [ 1009.413612][T19696] bridge_slave_0: left promiscuous mode [ 1009.413825][T19696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.453129][ T5712] usb 7-1: USB disconnect, device number 37 [ 1010.955421][ T4915] Bluetooth: hci2: command 0x0405 tx timeout [ 1011.189977][T19696] gretap0 (unregistering): left promiscuous mode [ 1011.250369][T20611] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1011.408144][T19696] bond0 (unregistering): left promiscuous mode [ 1011.408168][T19696] bond_slave_0: left promiscuous mode [ 1011.408415][T19696] bond_slave_1: left promiscuous mode [ 1011.579026][T19696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1011.669614][T19696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1011.692074][T19696] bond0 (unregistering): Released all slaves [ 1011.711314][T19696] bond1 (unregistering): Released all slaves [ 1012.145688][T19696] m1Ie5èÿ: left promiscuous mode [ 1012.586959][T19696] tipc: Disabling bearer [ 1012.587146][T19696] tipc: Left network mode [ 1014.848906][ T5981] kernel read not supported for file /vcs (pid: 5981 comm: kworker/0:7) [ 1015.840246][ T5260] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1016.771263][T20752] 9pnet_virtio: no channels available for device syz [ 1017.000448][T20758] VFS: Mount too revealing [ 1017.751801][T19696] hsr_slave_0: left promiscuous mode [ 1017.823312][T19696] hsr_slave_1: left promiscuous mode [ 1017.824373][T19696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1017.824397][T19696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.974263][T20772] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1018.022179][T19696] veth1_macvtap: left promiscuous mode [ 1018.022263][T19696] veth0_macvtap: left promiscuous mode [ 1018.022446][T19696] veth1_vlan: left promiscuous mode [ 1018.022585][T19696] veth0_vlan: left promiscuous mode [ 1018.163931][T20779] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4868'. [ 1018.236828][T20782] overlay: filesystem on ./file0 is read-only [ 1018.278011][T20784] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4868'. [ 1018.278036][T20784] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4868'. [ 1019.935838][T20798] input: syz0 as /devices/virtual/input/input49 [ 1020.072165][T19696] team0 (unregistering): Port device team_slave_1 removed [ 1020.274585][T19696] team0 (unregistering): Port device team_slave_0 removed [ 1021.045659][T20779] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1021.057980][T16573] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1021.159133][T20784] veth3: entered allmulticast mode [ 1021.207917][T16573] usb 7-1: Using ep0 maxpacket: 32 [ 1021.210137][T16573] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1021.212693][T16573] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1021.212716][T16573] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1021.212726][T16573] usb 7-1: Product: syz [ 1021.212734][T16573] usb 7-1: Manufacturer: syz [ 1021.212742][T16573] usb 7-1: SerialNumber: syz [ 1021.216708][T16573] usb 7-1: config 0 descriptor?? [ 1021.220233][T20806] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1021.280630][T16573] hub 7-1:0.0: bad descriptor, ignoring hub [ 1021.280675][T16573] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1023.023672][T20822] netlink: 'syz.7.4882': attribute type 3 has an invalid length. [ 1024.079707][T16573] usb 7-1: USB disconnect, device number 38 [ 1024.244104][T20841] overlayfs: missing 'lowerdir' [ 1024.421463][ T5607] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 1026.027015][T19696] IPVS: stop unused estimator thread 0... [ 1026.612806][T20879] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4898'. [ 1026.835863][T20414] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1027.042232][T20414] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1027.298656][T20414] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1027.372398][T20414] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1027.440502][T20890] syzkaller0: entered promiscuous mode [ 1027.440533][T20890] syzkaller0: entered allmulticast mode [ 1028.081083][T20921] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4912'. [ 1028.081107][T20921] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4912'. [ 1028.560134][T20926] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4911'. [ 1041.707740][ T4915] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1041.802970][ T4915] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1041.817341][ T4915] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1041.827603][ T4915] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1041.861888][ T4915] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1043.942021][ T4915] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1044.041234][ T4915] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1044.067670][ T4915] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1044.097437][ T4915] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1044.098059][T16760] Bluetooth: hci5: command tx timeout [ 1044.103311][ T4915] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1044.465529][T16760] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1044.539826][T16760] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1044.543574][T16760] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1044.545115][T16760] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1044.547567][T16760] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1044.909793][ T5607] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1044.931853][ T5607] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1045.005229][ T5607] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1045.095774][ T5607] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1045.096497][ T5607] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1046.218249][T20944] Bluetooth: hci5: command tx timeout [ 1046.541629][T20944] Bluetooth: hci6: command tx timeout [ 1046.849322][T20944] Bluetooth: hci7: command tx timeout [ 1047.298046][T20944] Bluetooth: hci8: command tx timeout [ 1048.297964][T20944] Bluetooth: hci5: command tx timeout [ 1048.612375][T20944] Bluetooth: hci6: command tx timeout [ 1048.920405][T20944] Bluetooth: hci7: command tx timeout [ 1049.408946][ T5607] Bluetooth: hci8: command tx timeout [ 1049.425165][T16760] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1049.473546][T16760] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1049.475855][T16760] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1049.477105][T16760] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1049.481028][T16760] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1050.313329][T20414] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1050.340274][T20944] Bluetooth: hci5: command tx timeout [ 1050.345154][T20414] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1050.458465][T20921] veth3: entered allmulticast mode [ 1050.580721][T20926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1050.738707][T20944] Bluetooth: hci6: command tx timeout [ 1050.977902][T20944] Bluetooth: hci7: command tx timeout [ 1051.462363][T20944] Bluetooth: hci8: command tx timeout [ 1051.739498][T20944] Bluetooth: hci9: command tx timeout [ 1052.818005][T16760] Bluetooth: hci6: command tx timeout [ 1053.058310][T16760] Bluetooth: hci7: command tx timeout [ 1053.537919][T16760] Bluetooth: hci8: command tx timeout [ 1053.656872][ T1916] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.787979][T16760] Bluetooth: hci9: command tx timeout [ 1054.067660][ T1916] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.486739][ T1916] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.922119][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.922180][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.240516][ T1916] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.857971][T16760] Bluetooth: hci9: command tx timeout [ 1057.078369][ T1916] bridge_slave_1: left allmulticast mode [ 1057.078405][ T1916] bridge_slave_1: left promiscuous mode [ 1057.078683][ T1916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.139696][ T1916] bridge_slave_0: left allmulticast mode [ 1057.139733][ T1916] bridge_slave_0: left promiscuous mode [ 1057.139973][ T1916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.937979][T16760] Bluetooth: hci9: command tx timeout [ 1058.068723][ T1916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1058.148710][ T1916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1058.170542][ T1916] bond0 (unregistering): Released all slaves [ 1058.521569][T20943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.521703][T20943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.521869][T20943] bridge_slave_0: entered allmulticast mode [ 1058.523316][T20943] bridge_slave_0: entered promiscuous mode [ 1058.682869][T20943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.682952][T20943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.683104][T20943] bridge_slave_1: entered allmulticast mode [ 1058.684553][T20943] bridge_slave_1: entered promiscuous mode [ 1059.017216][T20939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.017306][T20939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.017459][T20939] bridge_slave_0: entered allmulticast mode [ 1059.041048][T20939] bridge_slave_0: entered promiscuous mode [ 1059.099458][T20930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.099570][T20930] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.099880][T20930] bridge_slave_0: entered allmulticast mode [ 1059.162855][T20930] bridge_slave_0: entered promiscuous mode [ 1059.184393][T20938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.184519][T20938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.184819][T20938] bridge_slave_0: entered allmulticast mode [ 1059.187717][T20938] bridge_slave_0: entered promiscuous mode [ 1059.239418][T20939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.239532][T20939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.239752][T20939] bridge_slave_1: entered allmulticast mode [ 1059.241444][T20939] bridge_slave_1: entered promiscuous mode [ 1059.257634][T20930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.257746][T20930] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.258482][T20930] bridge_slave_1: entered allmulticast mode [ 1059.262002][T20930] bridge_slave_1: entered promiscuous mode [ 1059.264668][T20938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.264801][T20938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.265017][T20938] bridge_slave_1: entered allmulticast mode [ 1059.275794][T20938] bridge_slave_1: entered promiscuous mode [ 1059.294079][T20943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.323109][T20952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.323221][T20952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.323414][T20952] bridge_slave_0: entered allmulticast mode [ 1059.326104][T20952] bridge_slave_0: entered promiscuous mode [ 1059.388926][T20943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.407421][T20952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.407499][T20952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.407677][T20952] bridge_slave_1: entered allmulticast mode [ 1059.412806][T20952] bridge_slave_1: entered promiscuous mode [ 1059.761448][T20939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.864345][T20930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.881557][T20938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.907534][T20939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.929998][T20930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.932785][T20938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.934383][T20943] team0: Port device team_slave_0 added [ 1059.973906][T20952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.012421][T20943] team0: Port device team_slave_1 added [ 1060.032332][T20952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.168146][ T1916] hsr_slave_0: left promiscuous mode [ 1060.188241][ T1916] hsr_slave_1: left promiscuous mode [ 1060.189355][ T1916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.189381][ T1916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.239190][ T1916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1060.239215][ T1916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.309520][ T1916] veth1_macvtap: left promiscuous mode [ 1060.309595][ T1916] veth0_macvtap: left promiscuous mode [ 1060.309737][ T1916] veth1_vlan: left promiscuous mode [ 1060.309831][ T1916] veth0_vlan: left promiscuous mode [ 1061.160171][ T1916] team0 (unregistering): Port device team_slave_1 removed [ 1061.218677][ T1916] team0 (unregistering): Port device team_slave_0 removed [ 1061.462654][T20939] team0: Port device team_slave_0 added [ 1061.509512][T20930] team0: Port device team_slave_0 added [ 1061.623609][T20938] team0: Port device team_slave_0 added [ 1061.650602][T20939] team0: Port device team_slave_1 added [ 1061.669030][T20930] team0: Port device team_slave_1 added [ 1061.675160][T20938] team0: Port device team_slave_1 added [ 1061.676081][T20943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.676091][T20943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.676105][T20943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.697222][T20952] team0: Port device team_slave_0 added [ 1061.761771][T20943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.761788][T20943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.761812][T20943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.785602][T20952] team0: Port device team_slave_1 added [ 1061.850609][T20939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.850621][T20939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.850635][T20939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.925684][T20930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.925702][T20930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.925728][T20930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.927058][T20938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.927071][T20938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.927096][T20938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1062.027262][T20939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.027274][T20939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.027290][T20939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.163275][T20930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.163294][T20930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.163315][T20930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.191166][T20938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.191183][T20938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.191210][T20938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.241688][T20952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1062.241707][T20952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.241734][T20952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1062.313559][T20952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.313582][T20952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.313627][T20952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.486049][T20943] hsr_slave_0: entered promiscuous mode [ 1062.486904][T20943] hsr_slave_1: entered promiscuous mode [ 1063.014230][T20938] hsr_slave_0: entered promiscuous mode [ 1063.015129][T20938] hsr_slave_1: entered promiscuous mode [ 1063.015780][T20938] debugfs: 'hsr0' already exists in 'hsr' [ 1063.015796][T20938] Cannot create hsr debugfs directory [ 1063.077162][T20939] hsr_slave_0: entered promiscuous mode [ 1063.084853][T20939] hsr_slave_1: entered promiscuous mode [ 1063.085450][T20939] debugfs: 'hsr0' already exists in 'hsr' [ 1063.085466][T20939] Cannot create hsr debugfs directory [ 1063.187294][ T5260] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1063.256393][T20930] hsr_slave_0: entered promiscuous mode [ 1063.257550][T20930] hsr_slave_1: entered promiscuous mode [ 1063.270987][T20930] debugfs: 'hsr0' already exists in 'hsr' [ 1063.271007][T20930] Cannot create hsr debugfs directory [ 1063.367337][T20952] hsr_slave_0: entered promiscuous mode [ 1063.369195][T20952] hsr_slave_1: entered promiscuous mode [ 1063.370181][T20952] debugfs: 'hsr0' already exists in 'hsr' [ 1063.370208][T20952] Cannot create hsr debugfs directory [ 1064.419107][ T1916] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.318822][ T5260] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1065.563900][ T1916] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.085729][ T1916] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.594266][ T1916] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.896271][ T5260] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1068.727735][ T1916] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.825210][ T5260] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1069.410056][ T1916] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.135621][ T1916] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.736355][ T1916] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.036602][ T1916] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.658828][ T1916] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.138305][ T1916] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.104889][ T1916] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.442861][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1080.150927][ T1916] bridge_slave_1: left allmulticast mode [ 1080.150956][ T1916] bridge_slave_1: left promiscuous mode [ 1080.162788][ T1916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.209875][ T1916] bridge_slave_0: left allmulticast mode [ 1080.209915][ T1916] bridge_slave_0: left promiscuous mode [ 1080.210174][ T1916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.548307][ T1916] bridge_slave_1: left allmulticast mode [ 1080.548332][ T1916] bridge_slave_1: left promiscuous mode [ 1080.548513][ T1916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.609144][ T1916] bridge_slave_0: left allmulticast mode [ 1080.609170][ T1916] bridge_slave_0: left promiscuous mode [ 1080.609324][ T1916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.768149][ T1916] bridge_slave_1: left allmulticast mode [ 1080.768173][ T1916] bridge_slave_1: left promiscuous mode [ 1080.768338][ T1916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.829036][ T1916] bridge_slave_0: left allmulticast mode [ 1080.829062][ T1916] bridge_slave_0: left promiscuous mode [ 1080.829229][ T1916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.128750][ T1916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1082.209973][ T1916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1082.230055][ T1916] bond0 (unregistering): Released all slaves [ 1082.768616][ T1916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1082.849032][ T1916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1082.870381][ T1916] bond0 (unregistering): Released all slaves [ 1083.448561][ T1916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1083.529744][ T1916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.550167][ T1916] bond0 (unregistering): Released all slaves [ 1083.702094][ T1916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1083.779411][ T1916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.840775][ T1916] bond0 (unregistering): Released all slaves [ 1084.198918][ T1916] m1Ie5èÿ: left promiscuous mode [ 1086.554148][T20943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1086.591975][T20943] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1086.607964][T20943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1086.722479][T20943] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1086.836170][T20943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1086.872407][T20943] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1087.275455][T20943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1087.315656][T20943] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1088.588059][T20938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1088.673324][T20938] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1088.694156][T20938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1088.738938][T20938] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1089.024773][T20938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1089.045435][T20938] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1089.199497][T20938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1089.242108][T20938] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1089.548011][ T1916] hsr_slave_0: left promiscuous mode [ 1089.591073][ T1916] hsr_slave_1: left promiscuous mode [ 1089.592134][ T1916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.592160][ T1916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1089.639406][ T1916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1089.639435][ T1916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.848394][ T1916] hsr_slave_0: left promiscuous mode [ 1089.888060][ T1916] hsr_slave_1: left promiscuous mode [ 1089.889320][ T1916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.889347][ T1916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1089.951714][ T1916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1089.951741][ T1916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.159379][ T1916] hsr_slave_0: left promiscuous mode [ 1090.198865][ T1916] hsr_slave_1: left promiscuous mode [ 1090.199966][ T1916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.199992][ T1916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.260188][ T1916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.260224][ T1916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.478124][ T1916] hsr_slave_0: left promiscuous mode [ 1090.522463][ T1916] hsr_slave_1: left promiscuous mode [ 1090.523391][ T1916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.569555][ T1916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.684212][ T1916] veth1_macvtap: left promiscuous mode [ 1090.684276][ T1916] veth0_macvtap: left promiscuous mode [ 1090.684446][ T1916] veth1_vlan: left promiscuous mode [ 1090.684542][ T1916] veth0_vlan: left promiscuous mode [ 1090.809146][ T1916] veth1_macvtap: left promiscuous mode [ 1090.809247][ T1916] veth0_macvtap: left promiscuous mode [ 1090.809504][ T1916] veth1_vlan: left promiscuous mode [ 1090.809673][ T1916] veth0_vlan: left promiscuous mode [ 1090.928298][ T1916] veth1_macvtap: left promiscuous mode [ 1090.928359][ T1916] veth0_macvtap: left promiscuous mode [ 1090.928500][ T1916] veth1_vlan: left promiscuous mode [ 1090.928596][ T1916] veth0_vlan: left promiscuous mode [ 1091.961420][ T1916] team0 (unregistering): Port device team_slave_1 removed [ 1092.019704][ T1916] team0 (unregistering): Port device team_slave_0 removed [ 1092.769370][ T1916] team0 (unregistering): Port device team_slave_1 removed [ 1092.808546][ T1916] team0 (unregistering): Port device team_slave_0 removed [ 1093.460350][ T1916] team0 (unregistering): Port device team_slave_1 removed [ 1093.488524][ T1916] team0 (unregistering): Port device team_slave_0 removed [ 1093.941980][ T1916] team0 (unregistering): Port device team_slave_1 removed [ 1093.989562][ T1916] team0 (unregistering): Port device team_slave_0 removed [ 1094.318056][T20939] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1094.379242][T20939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1094.381743][T20939] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1094.430956][T20939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1094.437499][T20939] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1094.526875][T20939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1094.543399][T20943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1094.615376][T20939] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1094.675285][T20939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1095.078318][T20943] 8021q: adding VLAN 0 to HW filter on device team0 [ 1095.185487][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.185600][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1095.262534][ T2174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.262642][ T2174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1095.439850][T20930] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1095.552651][T20930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1095.612905][T20930] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1095.709912][T20930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1095.725937][T20930] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1095.948515][T20930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1095.980057][T20930] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1096.046055][T20930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1096.654382][T20938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.018788][T20952] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1097.062261][T20952] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1097.097480][T20952] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1097.131023][T20952] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1097.242779][T20952] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1097.368730][T20952] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1097.451001][T20952] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1097.553801][T20952] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1097.665451][T20938] 8021q: adding VLAN 0 to HW filter on device team0 [ 1097.742170][T13995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.742304][T13995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1097.817076][T20939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.827526][ T2350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.833611][ T2350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.160742][T20939] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.281970][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.282172][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.525803][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.526047][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.669204][T20930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.956440][T20943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.965525][T20930] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.163730][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.163932][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1099.343806][T20952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1099.352289][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.352411][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.688945][T20952] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.856591][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.856818][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1099.973614][T13995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.973746][T13995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1100.096823][T20943] veth0_vlan: entered promiscuous mode [ 1100.400139][T20943] veth1_vlan: entered promiscuous mode [ 1100.468779][T20938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1100.791553][T20943] veth0_macvtap: entered promiscuous mode [ 1100.862367][T20943] veth1_macvtap: entered promiscuous mode [ 1101.015254][T20938] veth0_vlan: entered promiscuous mode [ 1101.047545][T20938] veth1_vlan: entered promiscuous mode [ 1101.095191][T20943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1101.238741][T20943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.359405][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.360735][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.364909][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.365207][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.817016][T20938] veth0_macvtap: entered promiscuous mode [ 1101.972686][T20939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1102.062052][T20938] veth1_macvtap: entered promiscuous mode [ 1102.926577][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.926599][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.084901][T20938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1103.135094][T20938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1103.345073][T19696] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.347648][T19696] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.420192][T20944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1103.490408][T20944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1103.495282][T20944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1103.519833][T20944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1103.538834][T20944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1103.544318][T19696] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.650141][ T2350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.650161][ T2350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.719920][ T2174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.766591][T20952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.708627][T16760] Bluetooth: hci0: command tx timeout [ 1105.883495][T19817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1105.903707][T19817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1105.923107][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1106.033661][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1106.034730][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1106.035365][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1106.097659][T19817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1106.107874][T19817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1106.108994][T19817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1106.109768][T19817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1106.296413][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1106.499380][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1106.549395][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1106.550913][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1106.665338][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1107.779449][T16760] Bluetooth: hci0: command tx timeout [ 1108.382087][T16760] Bluetooth: hci2: command tx timeout [ 1108.983420][T16760] Bluetooth: hci1: command tx timeout [ 1108.983445][ T5607] Bluetooth: hci3: command tx timeout [ 1109.253293][ T5607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1109.297081][ T5607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1109.327539][ T5607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1109.354624][ T5607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1109.367301][ T5607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1109.858384][T16760] Bluetooth: hci0: command tx timeout [ 1109.957652][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1110.429615][T16760] Bluetooth: hci2: command tx timeout [ 1111.058110][T16760] Bluetooth: hci3: command tx timeout [ 1111.058144][T16760] Bluetooth: hci1: command tx timeout [ 1111.619187][T16760] Bluetooth: hci4: command tx timeout [ 1111.937862][T16760] Bluetooth: hci0: command tx timeout [ 1112.498916][T16760] Bluetooth: hci2: command tx timeout [ 1113.138480][ T5607] Bluetooth: hci3: command tx timeout [ 1113.138827][ T5607] Bluetooth: hci1: command tx timeout [ 1113.698019][T16760] Bluetooth: hci4: command tx timeout [ 1113.778926][ T13] bridge_slave_1: left allmulticast mode [ 1113.778961][ T13] bridge_slave_1: left promiscuous mode [ 1113.779231][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.839891][ T13] bridge_slave_0: left allmulticast mode [ 1113.839914][ T13] bridge_slave_0: left promiscuous mode [ 1113.840102][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.577961][T16760] Bluetooth: hci2: command tx timeout [ 1114.579264][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1114.648515][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1114.670655][ T13] bond0 (unregistering): Released all slaves [ 1114.780165][T21590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.780257][T21590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.780500][T21590] bridge_slave_0: entered allmulticast mode [ 1114.786528][T21590] bridge_slave_0: entered promiscuous mode [ 1114.803812][ T5260] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1114.981947][T21590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.982066][T21590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.982275][T21590] bridge_slave_1: entered allmulticast mode [ 1114.984911][T21590] bridge_slave_1: entered promiscuous mode [ 1115.229464][T16760] Bluetooth: hci1: command tx timeout [ 1115.229507][T16760] Bluetooth: hci3: command tx timeout [ 1115.559515][ T13] hsr_slave_0: left promiscuous mode [ 1115.598037][ T13] hsr_slave_1: left promiscuous mode [ 1115.600010][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1115.628684][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1115.777952][ T5607] Bluetooth: hci4: command tx timeout [ 1116.138531][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1116.190035][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1116.361029][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.361071][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.366238][T21590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1116.404269][T21617] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.404409][T21617] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.404578][T21617] bridge_slave_0: entered allmulticast mode [ 1116.406038][T21617] bridge_slave_0: entered promiscuous mode [ 1116.443934][ T5260] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1116.483856][T21590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1116.566890][T21617] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.566957][T21617] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.567110][T21617] bridge_slave_1: entered allmulticast mode [ 1116.569245][T21617] bridge_slave_1: entered promiscuous mode [ 1116.861338][T21619] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.861542][T21619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.861780][T21619] bridge_slave_0: entered allmulticast mode [ 1116.864551][T21619] bridge_slave_0: entered promiscuous mode [ 1116.976541][T21590] team0: Port device team_slave_0 added [ 1116.981113][T21615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.981237][T21615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.981511][T21615] bridge_slave_0: entered allmulticast mode [ 1116.985397][T21615] bridge_slave_0: entered promiscuous mode [ 1117.018687][T21619] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.018766][T21619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.018953][T21619] bridge_slave_1: entered allmulticast mode [ 1117.020463][T21619] bridge_slave_1: entered promiscuous mode [ 1117.041138][T21617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.044136][T21590] team0: Port device team_slave_1 added [ 1117.044554][T21615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.044664][T21615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.044857][T21615] bridge_slave_1: entered allmulticast mode [ 1117.047651][T21615] bridge_slave_1: entered promiscuous mode [ 1117.216025][T21617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1117.381935][T21590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1117.381951][T21590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1117.381973][T21590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1117.525148][T21615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.605260][T21619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.660433][T21590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1117.660445][T21590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1117.660461][T21590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.664199][T21615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1117.886450][ T5607] Bluetooth: hci4: command tx timeout [ 1118.061295][T21617] team0: Port device team_slave_0 added [ 1118.064637][T21619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.068455][T21656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.068581][T21656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.068813][T21656] bridge_slave_0: entered allmulticast mode [ 1118.106786][T21656] bridge_slave_0: entered promiscuous mode [ 1118.153320][T21617] team0: Port device team_slave_1 added [ 1118.262552][T21656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.262670][T21656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.262931][T21656] bridge_slave_1: entered allmulticast mode [ 1118.264664][T21656] bridge_slave_1: entered promiscuous mode [ 1118.380929][T21615] team0: Port device team_slave_0 added [ 1118.386561][T21619] team0: Port device team_slave_0 added [ 1118.444794][T21617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.444813][T21617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1118.444840][T21617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.451457][T21615] team0: Port device team_slave_1 added [ 1118.454409][T21619] team0: Port device team_slave_1 added [ 1118.465331][T21656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1118.552567][T21617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.552587][T21617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1118.552614][T21617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1118.596111][T21656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.613754][T21590] hsr_slave_0: entered promiscuous mode [ 1118.616693][T21590] hsr_slave_1: entered promiscuous mode [ 1118.618716][T21590] debugfs: 'hsr0' already exists in 'hsr' [ 1118.618745][T21590] Cannot create hsr debugfs directory [ 1119.020042][T21615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.020054][T21615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.020069][T21615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1119.111197][T21619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.111209][T21619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.111224][T21619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1119.113607][T21615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.113623][T21615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.113645][T21615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.123129][T21656] team0: Port device team_slave_0 added [ 1119.176895][T21619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.176912][T21619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.176939][T21619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.214966][T21656] team0: Port device team_slave_1 added [ 1119.335347][T21617] hsr_slave_0: entered promiscuous mode [ 1119.336851][T21617] hsr_slave_1: entered promiscuous mode [ 1119.339492][T21617] debugfs: 'hsr0' already exists in 'hsr' [ 1119.339520][T21617] Cannot create hsr debugfs directory [ 1119.476820][T21656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.476839][T21656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.476863][T21656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1119.578532][T21656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.578552][T21656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.578582][T21656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.652077][T21615] hsr_slave_0: entered promiscuous mode [ 1119.653451][T21615] hsr_slave_1: entered promiscuous mode [ 1119.654317][T21615] debugfs: 'hsr0' already exists in 'hsr' [ 1119.654342][T21615] Cannot create hsr debugfs directory [ 1120.407034][T21619] hsr_slave_0: entered promiscuous mode [ 1120.409077][T21619] hsr_slave_1: entered promiscuous mode [ 1120.410071][T21619] debugfs: 'hsr0' already exists in 'hsr' [ 1120.410096][T21619] Cannot create hsr debugfs directory [ 1121.228354][T21656] hsr_slave_0: entered promiscuous mode [ 1121.248413][T21656] hsr_slave_1: entered promiscuous mode [ 1121.249464][T21656] debugfs: 'hsr0' already exists in 'hsr' [ 1121.249487][T21656] Cannot create hsr debugfs directory [ 1125.560217][T21617] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.102251][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.585451][T21617] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.002156][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.335776][T21617] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.592485][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.841980][T21617] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.102502][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.725769][ T5260] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1131.108249][ T13] bridge_slave_1: left allmulticast mode [ 1131.108291][ T13] bridge_slave_1: left promiscuous mode [ 1131.108565][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.178848][ T13] bridge_slave_0: left allmulticast mode [ 1131.178875][ T13] bridge_slave_0: left promiscuous mode [ 1131.179064][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.538355][ T13] bridge_slave_1: left allmulticast mode [ 1131.538390][ T13] bridge_slave_1: left promiscuous mode [ 1131.538591][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.598984][ T13] bridge_slave_0: left allmulticast mode [ 1131.599009][ T13] bridge_slave_0: left promiscuous mode [ 1131.599175][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.948300][ T13] bridge_slave_1: left allmulticast mode [ 1131.948325][ T13] bridge_slave_1: left promiscuous mode [ 1131.948488][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.009028][ T13] bridge_slave_0: left allmulticast mode [ 1132.009057][ T13] bridge_slave_0: left promiscuous mode [ 1132.009266][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.228098][ T13] bridge_slave_1: left allmulticast mode [ 1132.228124][ T13] bridge_slave_1: left promiscuous mode [ 1132.228309][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.288985][ T13] bridge_slave_0: left allmulticast mode [ 1132.289010][ T13] bridge_slave_0: left promiscuous mode [ 1132.289184][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.488951][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1133.549322][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1133.591153][ T13] bond0 (unregistering): Released all slaves [ 1134.149506][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1134.229108][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1134.270894][ T13] bond0 (unregistering): Released all slaves [ 1134.790968][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1134.848638][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1134.871034][ T13] bond0 (unregistering): Released all slaves [ 1135.400133][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1135.478638][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1135.500102][ T13] bond0 (unregistering): Released all slaves [ 1138.113559][ T13] hsr_slave_0: left promiscuous mode [ 1138.148137][ T13] hsr_slave_1: left promiscuous mode [ 1138.149254][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.198814][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.378152][ T13] hsr_slave_0: left promiscuous mode [ 1138.418255][ T13] hsr_slave_1: left promiscuous mode [ 1138.419511][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1138.419548][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.489166][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1138.489195][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.649451][ T13] hsr_slave_0: left promiscuous mode [ 1138.668901][ T13] hsr_slave_1: left promiscuous mode [ 1138.669877][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1138.669899][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.709120][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1138.709150][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.848007][ T13] hsr_slave_0: left promiscuous mode [ 1138.868692][ T13] hsr_slave_1: left promiscuous mode [ 1138.870357][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.919060][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1139.128577][ T13] veth1_macvtap: left promiscuous mode [ 1139.128697][ T13] veth0_macvtap: left promiscuous mode [ 1139.128962][ T13] veth1_vlan: left promiscuous mode [ 1139.129369][ T13] veth0_vlan: left promiscuous mode [ 1139.248244][ T13] veth1_macvtap: left promiscuous mode [ 1139.248355][ T13] veth0_macvtap: left promiscuous mode [ 1139.252247][ T13] veth1_vlan: left promiscuous mode [ 1139.252378][ T13] veth0_vlan: left promiscuous mode [ 1140.038531][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1140.088579][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1140.700154][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1140.758762][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1141.419874][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1141.478530][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1141.973407][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1142.008970][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1142.194207][ T5260] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1143.285275][ T5260] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1143.995595][ T5260] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1144.809966][T21590] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1144.904111][T21590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1144.934498][T21590] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1145.153341][T21590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1145.220289][T21590] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1145.288114][T21590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1145.289284][T21590] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1145.424492][T21590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1146.045051][T21617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1146.131319][T21617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1146.193815][T21617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1146.299546][T21617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1146.311892][T21617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1146.361421][T21617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1146.374455][T21617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1146.523354][T21617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1147.058504][T21590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.253437][T21615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1147.342064][T21615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1147.399376][T21615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1147.453140][T21615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1147.569552][T21615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1147.689412][T21615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1147.691479][T21590] 8021q: adding VLAN 0 to HW filter on device team0 [ 1147.870583][T21615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1147.911312][T21615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1148.129772][ T2174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.129941][ T2174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1148.244995][ T1834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.245126][ T1834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.632746][T21617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1148.832549][T21619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1148.872256][T21619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1148.893097][T21619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1148.951462][T21619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1148.970458][T21619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1149.011762][T21619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1149.021790][T21617] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.077928][T21619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1149.112282][T21619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1149.315654][ T2350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.315763][ T2350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.528371][ T1834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.528514][ T1834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.814888][T21656] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1149.862678][T21656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1149.875388][T21656] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1149.959186][T21656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1150.027258][T21656] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1150.081368][T21656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1150.089175][T21656] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1150.124411][T21656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1150.185589][T21615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1150.451697][T21615] 8021q: adding VLAN 0 to HW filter on device team0 [ 1150.513796][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.514006][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1150.569902][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.569992][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1150.804242][T21619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1150.941256][T21619] 8021q: adding VLAN 0 to HW filter on device team0 [ 1150.990840][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.991003][ T5876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1151.060288][T13995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.060418][T13995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1151.105762][T21656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1151.121082][T21590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1151.529873][T21656] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.663938][T19696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.665656][T19696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1151.803056][T19696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.803264][T19696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1151.915527][T21617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1152.075968][T21590] veth0_vlan: entered promiscuous mode [ 1152.161611][T21590] veth1_vlan: entered promiscuous mode [ 1152.351362][T21617] veth0_vlan: entered promiscuous mode [ 1152.371451][T21615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1152.406629][T21590] veth0_macvtap: entered promiscuous mode [ 1152.444500][T21617] veth1_vlan: entered promiscuous mode [ 1152.467572][T21590] veth1_macvtap: entered promiscuous mode [ 1152.624179][T21590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1152.666835][T21590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1152.743978][T21617] veth0_macvtap: entered promiscuous mode [ 1152.770577][T19696] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.773105][T19696] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.774259][ T1916] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.774476][ T1916] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.826066][T21617] veth1_macvtap: entered promiscuous mode [ 1153.618941][T21617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1153.740197][T21617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1153.751556][T21619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1154.148025][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.148113][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.148128][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1154.158316][T19696] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.219232][T19696] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.227047][T19696] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.413031][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1154.812277][T13995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1154.812298][T13995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1154.947051][T21656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1155.437468][T21619] veth0_vlan: entered promiscuous mode [ 1155.513359][T21615] veth0_vlan: entered promiscuous mode [ 1155.514219][ T5876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.514250][ T5876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.579150][T21619] veth1_vlan: entered promiscuous mode [ 1155.650437][T21615] veth1_vlan: entered promiscuous mode [ 1155.801923][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.801944][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.923926][T21619] veth0_macvtap: entered promiscuous mode [ 1155.974883][T21619] veth1_macvtap: entered promiscuous mode [ 1156.033194][T21615] veth0_macvtap: entered promiscuous mode [ 1156.133032][T21615] veth1_macvtap: entered promiscuous mode [ 1156.136484][T21619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1156.171047][T21619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1156.194602][ T2174] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.196818][ T2174] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.217408][ T2174] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.224479][T21615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1156.242939][ T2174] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.284214][T21615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1156.533958][ T2174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.567233][ T2174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.567579][T21656] veth0_vlan: entered promiscuous mode [ 1156.615034][ T2174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.765014][ T2174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.302700][T21656] veth1_vlan: entered promiscuous mode [ 1158.919638][ T5606] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1159.089197][ T5606] usb 1-1: Using ep0 maxpacket: 16 [ 1159.108571][ T5606] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.108628][ T5606] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1159.108685][ T5606] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1159.108709][ T5606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.177444][ T5606] usb 1-1: config 0 descriptor?? [ 1159.187510][ T5606] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1159.421626][ T1916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.421647][ T1916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.503845][ T5712] usb 1-1: USB disconnect, device number 12 [ 1159.642879][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1160.266150][T19696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.266173][T19696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.407926][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1160.600610][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1160.604465][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.604537][ T10] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1160.604565][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1160.604597][ T10] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1160.604619][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.706183][ T10] usb 1-1: config 0 descriptor?? [ 1160.956961][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.956983][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1161.031340][T21656] veth0_macvtap: entered promiscuous mode [ 1161.289579][ T10] corsair-psu 0003:1B1C:1C09.000A: unknown main item tag 0x0 [ 1161.289617][ T10] corsair-psu 0003:1B1C:1C09.000A: unknown main item tag 0x0 [ 1161.289644][ T10] corsair-psu 0003:1B1C:1C09.000A: unknown main item tag 0x0 [ 1161.289669][ T10] corsair-psu 0003:1B1C:1C09.000A: unknown main item tag 0x0 [ 1161.289695][ T10] corsair-psu 0003:1B1C:1C09.000A: unknown main item tag 0x0 [ 1161.359828][T21656] veth1_macvtap: entered promiscuous mode [ 1161.401531][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1161.401553][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1161.527883][ T10] corsair-psu 0003:1B1C:1C09.000A: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 1161.712498][ T10] corsair-psu 0003:1B1C:1C09.000A: unable to initialize device (-38) [ 1161.852798][T21656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1162.054514][T21656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1162.505674][ T1834] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.506225][ T1834] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.507442][ T1834] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.555489][ T1834] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.468232][T22422] loop5: detected capacity change from 0 to 7 [ 1163.771390][T22422] Dev loop5: unable to read RDB block 7 [ 1163.771446][T22422] loop5: unable to read partition table [ 1163.771639][T22422] loop5: partition table beyond EOD, truncated [ 1163.798478][T22422] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1164.638310][ T10] corsair-psu 0003:1B1C:1C09.000A: probe with driver corsair-psu failed with error -38 [ 1165.173214][ T10] usb 1-1: USB disconnect, device number 13 [ 1165.631762][T22392] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1165.703471][ T2350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.703491][ T2350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.826607][T22392] usb 2-1: Using ep0 maxpacket: 16 [ 1165.835394][T22392] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.835449][T22392] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1165.835492][T22392] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1165.835516][T22392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.886099][T22392] usb 2-1: config 0 descriptor?? [ 1165.898777][T22392] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1166.654689][T22456] netlink: 'syz.4.4940': attribute type 10 has an invalid length. [ 1166.654739][T22456] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4940'. [ 1166.670339][T22456] team0: entered promiscuous mode [ 1166.670377][T22456] team_slave_0: entered promiscuous mode [ 1166.673870][T22456] team_slave_1: entered promiscuous mode [ 1166.677112][T22456] team0: entered allmulticast mode [ 1166.677129][T22456] team_slave_0: entered allmulticast mode [ 1166.677273][T22456] team_slave_1: entered allmulticast mode [ 1166.701643][T22456] bridge0: port 3(team0) entered blocking state [ 1166.701883][T22456] bridge0: port 3(team0) entered disabled state [ 1166.862639][T22456] bridge0: port 3(team0) entered blocking state [ 1166.869048][T22456] bridge0: port 3(team0) entered forwarding state [ 1167.112924][T16573] usb 2-1: USB disconnect, device number 26 [ 1170.557856][ T5712] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1170.788019][ T5712] usb 1-1: Using ep0 maxpacket: 16 [ 1170.805201][ T5712] usb 1-1: config 0 has no interfaces? [ 1170.874386][ T5712] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1170.874420][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.874441][ T5712] usb 1-1: Product: syz [ 1170.874457][ T5712] usb 1-1: Manufacturer: syz [ 1170.874472][ T5712] usb 1-1: SerialNumber: syz [ 1170.994387][ T5712] usb 1-1: config 0 descriptor?? [ 1171.558799][T22392] usb 1-1: USB disconnect, device number 14 [ 1173.379390][T16760] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1173.404426][T16760] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1173.443897][T16760] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1173.492156][T16760] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1173.517382][T16760] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1175.097989][ T5893] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1176.073413][ T5607] Bluetooth: hci5: command tx timeout [ 1176.743110][ T36] audit: type=1326 audit(1778020976.003:6301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22517 comm="syz.0.4952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176433cdd9 code=0x7ffc0000 [ 1176.743162][ T36] audit: type=1326 audit(1778020976.003:6302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22517 comm="syz.0.4952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176433cdd9 code=0x7ffc0000 [ 1176.743201][ T36] audit: type=1326 audit(1778020976.003:6303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22517 comm="syz.0.4952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176433cdd9 code=0x7ffc0000 [ 1176.743240][ T36] audit: type=1326 audit(1778020976.003:6304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22517 comm="syz.0.4952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176433cdd9 code=0x7ffc0000 [ 1176.743278][ T36] audit: type=1326 audit(1778020976.033:6305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22517 comm="syz.0.4952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176433cdd9 code=0x7ffc0000 [ 1176.743318][ T36] audit: type=1326 audit(1778020976.043:6306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22517 comm="syz.0.4952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f176433cdd9 code=0x7ffc0000 [ 1176.743356][ T36] audit: type=1326 audit(1778020976.043:6307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22517 comm="syz.0.4952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176433cdd9 code=0x7ffc0000 [ 1176.743393][ T36] audit: type=1326 audit(1778020976.043:6308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22517 comm="syz.0.4952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176433cdd9 code=0x7ffc0000 [ 1176.743430][ T36] audit: type=1326 audit(1778020976.043:6309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22517 comm="syz.0.4952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176433cdd9 code=0x7ffc0000 [ 1176.743474][ T36] audit: type=1326 audit(1778020976.043:6310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22517 comm="syz.0.4952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f176433cdd9 code=0x7ffc0000 [ 1176.775842][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1177.817414][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.817484][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.598081][ T5607] Bluetooth: hci5: command tx timeout [ 1179.962941][ T5606] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1180.118116][ T5606] usb 2-1: Using ep0 maxpacket: 16 [ 1180.119779][ T5606] usb 2-1: config 0 has no interfaces? [ 1180.121673][ T5606] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1180.121700][ T5606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.121719][ T5606] usb 2-1: Product: syz [ 1180.121733][ T5606] usb 2-1: Manufacturer: syz [ 1180.121746][ T5606] usb 2-1: SerialNumber: syz [ 1180.125152][ T5606] usb 2-1: config 0 descriptor?? [ 1180.382546][ T5606] usb 2-1: USB disconnect, device number 27 [ 1181.619445][ T5607] Bluetooth: hci5: command tx timeout [ 1183.090399][ T64] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.167439][ T5607] Bluetooth: hci5: command tx timeout [ 1184.526731][ T5260] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1185.898009][ T43] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1186.447896][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 1186.453028][ T43] usb 1-1: config 0 has no interfaces? [ 1186.495899][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1186.495935][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.495956][ T43] usb 1-1: Product: syz [ 1186.495970][ T43] usb 1-1: Manufacturer: syz [ 1186.495985][ T43] usb 1-1: SerialNumber: syz [ 1186.568918][ T43] usb 1-1: config 0 descriptor?? [ 1186.888125][T15505] usb 1-1: USB disconnect, device number 15 [ 1187.225671][ T64] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.229747][ T43] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1187.558711][ T43] usb 5-1: not running at top speed; connect to a high speed hub [ 1187.558780][ T43] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1187.760908][ T36] kauditd_printk_skb: 75 callbacks suppressed [ 1187.760985][ T36] audit: type=1800 audit(1778020986.993:6386): pid=22627 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.4977" name="file0" dev="overlay" ino=157 res=0 errno=0 [ 1188.639929][ T43] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1188.639963][ T43] usb 5-1: can't read configurations, error -61 [ 1188.797932][ T43] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 1188.910159][T22629] vlan2: entered allmulticast mode [ 1188.910182][T22629] bond0: entered allmulticast mode [ 1188.910197][T22629] bond_slave_0: entered allmulticast mode [ 1188.910230][T22629] bond_slave_1: entered allmulticast mode [ 1188.949514][ T43] usb 5-1: not running at top speed; connect to a high speed hub [ 1188.949580][ T43] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1188.951484][ T43] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1188.951517][ T43] usb 5-1: can't read configurations, error -61 [ 1188.965761][ T43] usb usb5-port1: attempt power cycle [ 1189.378254][ T43] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1189.416226][ T43] usb 5-1: not running at top speed; connect to a high speed hub [ 1189.416298][ T43] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1189.418736][ T43] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1189.418771][ T43] usb 5-1: can't read configurations, error -61 [ 1189.470328][ T64] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.557833][ T43] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1189.798578][ T43] usb 5-1: device not accepting address 29, error -71 [ 1189.800946][ T43] usb usb5-port1: unable to enumerate USB device [ 1190.716316][ T5606] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1191.177766][T22667] syz.0.4993 (22667) used greatest stack depth: 16128 bytes left [ 1191.324273][ T5606] usb 4-1: not running at top speed; connect to a high speed hub [ 1191.324350][ T5606] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1191.382000][ T5606] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1191.382038][ T5606] usb 4-1: can't read configurations, error -61 [ 1191.389988][ T64] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.588732][ T5606] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1191.746082][ T5606] usb 4-1: not running at top speed; connect to a high speed hub [ 1191.746152][ T5606] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1191.787490][ T5606] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1191.787527][ T5606] usb 4-1: can't read configurations, error -61 [ 1191.794004][ T5606] usb usb4-port1: attempt power cycle [ 1192.287986][ T5606] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1192.310371][ T5606] usb 4-1: not running at top speed; connect to a high speed hub [ 1192.310440][ T5606] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1192.312825][ T5606] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1192.312860][ T5606] usb 4-1: can't read configurations, error -61 [ 1192.457962][T22474] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.458127][T22474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.458370][T22474] bridge_slave_0: entered allmulticast mode [ 1192.497473][T22474] bridge_slave_0: entered promiscuous mode [ 1192.551321][ T5606] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1192.569798][ T5606] usb 4-1: not running at top speed; connect to a high speed hub [ 1192.569872][ T5606] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1192.571466][ T5606] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1192.571500][ T5606] usb 4-1: can't read configurations, error -61 [ 1192.578027][ T5606] usb usb4-port1: unable to enumerate USB device [ 1193.107141][T22474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.121963][T22474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.216021][T22474] bridge_slave_1: entered allmulticast mode [ 1193.244573][T22474] bridge_slave_1: entered promiscuous mode [ 1193.492399][T22474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1193.548256][T22474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1193.851047][T22474] team0: Port device team_slave_0 added [ 1193.857599][T22474] team0: Port device team_slave_1 added [ 1194.223460][T22474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1194.223479][T22474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1194.223506][T22474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1194.234264][T22474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1194.234281][T22474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1194.234307][T22474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1194.831807][T22732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5015'. [ 1195.950776][T22474] hsr_slave_0: entered promiscuous mode [ 1195.952948][T22474] hsr_slave_1: entered promiscuous mode [ 1198.399600][ T64] bridge_slave_1: left allmulticast mode [ 1198.399631][ T64] bridge_slave_1: left promiscuous mode [ 1198.400376][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.560306][ T64] bridge_slave_0: left allmulticast mode [ 1198.560459][ T64] bridge_slave_0: left promiscuous mode [ 1198.560813][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.636749][T22821] loop5: detected capacity change from 0 to 7 [ 1200.726495][T22821] Dev loop5: unable to read RDB block 7 [ 1200.726548][T22821] loop5: unable to read partition table [ 1200.726779][T22821] loop5: partition table beyond EOD, truncated [ 1200.726811][T22821] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1200.769850][T22823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5045'. [ 1201.469719][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1201.528566][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1201.584660][ T64] bond0 (unregistering): Released all slaves [ 1201.646875][T22817] syz_tun: entered allmulticast mode [ 1201.723144][ T5712] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1201.917930][ T5712] usb 2-1: Using ep0 maxpacket: 8 [ 1201.919879][ T5712] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1201.920013][ T5712] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1201.920040][ T5712] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1201.920063][ T5712] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1201.920114][ T5712] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1201.920136][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.175950][ T5712] usb 2-1: GET_CAPABILITIES returned 0 [ 1202.175999][ T5712] usbtmc 2-1:16.0: can't read capabilities [ 1202.195359][T22823] syz_tun (unregistering): left allmulticast mode [ 1202.383178][ T5606] usb 2-1: USB disconnect, device number 28 [ 1202.581906][T22854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5061'. [ 1202.919424][T16573] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 1203.164230][T16573] usb 5-1: not running at top speed; connect to a high speed hub [ 1203.164765][T16573] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1203.187488][T16573] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1203.187665][T16573] usb 5-1: can't read configurations, error -61 [ 1203.427874][T16573] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1203.611008][T16573] usb 5-1: not running at top speed; connect to a high speed hub [ 1203.611090][T16573] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1203.617259][T16573] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1203.617296][T16573] usb 5-1: can't read configurations, error -61 [ 1203.620611][T16573] usb usb5-port1: attempt power cycle [ 1204.788932][T16573] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 1204.833161][T16573] usb 5-1: not running at top speed; connect to a high speed hub [ 1204.833233][T16573] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1204.855935][T16573] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1204.855973][T16573] usb 5-1: can't read configurations, error -61 [ 1205.137911][T16573] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 1205.169527][T16573] usb 5-1: not running at top speed; connect to a high speed hub [ 1205.169588][T16573] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1205.171894][T16573] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1205.171939][T16573] usb 5-1: can't read configurations, error -61 [ 1205.177181][T16573] usb usb5-port1: unable to enumerate USB device [ 1205.932119][T22896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5076'. [ 1206.018465][ T64] hsr_slave_0: left promiscuous mode [ 1206.058278][ T64] hsr_slave_1: left promiscuous mode [ 1206.085006][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1206.085038][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1206.139116][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1206.139145][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1206.303820][T22908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5077'. [ 1206.323707][ T64] veth1_macvtap: left promiscuous mode [ 1206.323769][ T64] veth0_macvtap: left promiscuous mode [ 1206.323938][ T64] veth1_vlan: left promiscuous mode [ 1206.324048][ T64] veth0_vlan: left promiscuous mode [ 1208.368770][ T64] team0 (unregistering): Port device team_slave_1 removed [ 1208.411542][ T64] team0 (unregistering): Port device team_slave_0 removed [ 1208.627060][T22901] syz_tun: entered allmulticast mode [ 1208.959262][T22908] syz_tun (unregistering): left allmulticast mode [ 1209.227859][ T43] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1209.391559][ T43] usb 2-1: not running at top speed; connect to a high speed hub [ 1209.391700][ T43] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1209.393314][ T43] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1209.393346][ T43] usb 2-1: can't read configurations, error -61 [ 1209.517880][ T43] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 1209.669151][ T43] usb 2-1: not running at top speed; connect to a high speed hub [ 1209.669223][ T43] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1209.670780][ T43] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1209.670814][ T43] usb 2-1: can't read configurations, error -61 [ 1209.671149][ T43] usb usb2-port1: attempt power cycle [ 1210.120051][ T43] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 1210.140816][ T43] usb 2-1: not running at top speed; connect to a high speed hub [ 1210.140883][ T43] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1210.144421][ T43] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1210.144456][ T43] usb 2-1: can't read configurations, error -61 [ 1210.336837][ T43] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1210.370813][ T43] usb 2-1: not running at top speed; connect to a high speed hub [ 1210.370883][ T43] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1210.382922][ T43] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1210.382962][ T43] usb 2-1: can't read configurations, error -61 [ 1210.391610][ T43] usb usb2-port1: unable to enumerate USB device [ 1210.754989][T22958] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5091'. [ 1210.881725][T22960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.217371][T22974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5094'. [ 1211.436767][T22981] lo: entered allmulticast mode [ 1211.498212][T22984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5098'. [ 1211.870779][T22978] lo: left allmulticast mode [ 1213.649051][T22994] vxfs: unable to read disk superblock at 1 [ 1214.337187][T22994] vxfs: unable to read disk superblock at 8 [ 1214.337212][T22994] vxfs: can't find superblock. [ 1215.393017][T23041] lo: entered allmulticast mode [ 1215.490214][T23045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5110'. [ 1216.219529][T23040] lo: left allmulticast mode [ 1217.292415][T22474] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1217.329218][T22474] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1217.332996][T22474] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1217.529933][T22474] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1217.579789][T22474] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1220.544303][T22474] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1220.549499][T22474] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1220.775723][T22474] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1220.795281][T23093] syz_tun: entered allmulticast mode [ 1220.848572][T23092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5125'. [ 1220.891489][ T36] audit: type=1400 audit(1778021020.093:6387): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=23091 comm="syz.3.5125" daddr=224.0.3.0 netif=wpan0 [ 1220.891904][ T36] audit: type=1400 audit(1778021020.193:6388): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=23091 comm="syz.3.5125" daddr=224.0.3.0 netif=wpan0 [ 1220.904172][T23099] mroute: pending queue full, dropping entries [ 1220.904442][ T36] audit: type=1400 audit(1778021020.193:6389): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=23091 comm="syz.3.5125" daddr=224.0.3.0 [ 1221.207937][ T5981] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 1221.329274][T23092] syz_tun (unregistering): left allmulticast mode [ 1222.282120][ T5981] usb 2-1: not running at top speed; connect to a high speed hub [ 1222.282188][ T5981] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1222.285143][ T5981] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1222.285177][ T5981] usb 2-1: can't read configurations, error -61 [ 1222.410512][ T5981] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 1222.490595][T22474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.562522][ T5981] usb 2-1: not running at top speed; connect to a high speed hub [ 1222.562589][ T5981] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1222.564219][ T5981] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1222.564259][ T5981] usb 2-1: can't read configurations, error -61 [ 1222.564843][ T5981] usb usb2-port1: attempt power cycle [ 1222.575398][T22474] 8021q: adding VLAN 0 to HW filter on device team0 [ 1222.728643][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.729040][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1222.797244][ T1834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.797377][ T1834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1222.980973][ T5981] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1222.988306][T22474] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1223.003113][ T5981] usb 2-1: not running at top speed; connect to a high speed hub [ 1223.003181][ T5981] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1223.019292][ T5981] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1223.019329][ T5981] usb 2-1: can't read configurations, error -61 [ 1223.147903][ T5981] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 1223.171738][ T5981] usb 2-1: not running at top speed; connect to a high speed hub [ 1223.171807][ T5981] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1223.182517][ T5981] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1223.182551][ T5981] usb 2-1: can't read configurations, error -61 [ 1223.188109][ T5981] usb usb2-port1: unable to enumerate USB device [ 1223.357904][T16573] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 1223.557542][T16573] usb 1-1: not running at top speed; connect to a high speed hub [ 1223.557616][T16573] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1223.586183][T16573] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1223.586222][T16573] usb 1-1: can't read configurations, error -61 [ 1223.717930][T16573] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1223.888267][T16573] usb 1-1: not running at top speed; connect to a high speed hub [ 1223.888336][T16573] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1223.913401][T16573] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1223.913436][T16573] usb 1-1: can't read configurations, error -61 [ 1223.913997][T16573] usb usb1-port1: attempt power cycle [ 1224.247929][T16573] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 1224.270107][T16573] usb 1-1: not running at top speed; connect to a high speed hub [ 1224.270176][T16573] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1224.272220][T16573] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1224.272255][T16573] usb 1-1: can't read configurations, error -61 [ 1224.358498][T22474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1224.807843][T16573] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1224.834406][T16573] usb 1-1: not running at top speed; connect to a high speed hub [ 1224.834479][T16573] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1224.842643][T16573] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1224.842681][T16573] usb 1-1: can't read configurations, error -61 [ 1224.843159][T16573] usb usb1-port1: unable to enumerate USB device [ 1224.960769][T22474] veth0_vlan: entered promiscuous mode [ 1224.984087][T22474] veth1_vlan: entered promiscuous mode [ 1225.099950][T22474] veth0_macvtap: entered promiscuous mode [ 1225.293353][T22474] veth1_macvtap: entered promiscuous mode [ 1225.402487][T22474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1225.449148][T22474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1225.504665][ T1128] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.516989][ T1128] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.519033][ T1128] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.655055][ T1128] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.751898][T23204] overlayfs: missing 'lowerdir' [ 1225.938745][ T5607] Bluetooth: hci0: command 0x0406 tx timeout [ 1226.498800][T16573] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1226.626900][T23214] futex_wake_op: syz.0.5153 tries to shift op by 144; fix this program [ 1226.694538][T16573] usb 5-1: not running at top speed; connect to a high speed hub [ 1226.694605][T16573] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1226.706937][T16573] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1226.707112][T16573] usb 5-1: can't read configurations, error -61 [ 1227.188481][T16573] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1227.569607][T16573] usb 5-1: not running at top speed; connect to a high speed hub [ 1227.569676][T16573] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1227.578326][T16573] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1227.578360][T16573] usb 5-1: can't read configurations, error -61 [ 1227.582016][T16573] usb usb5-port1: attempt power cycle [ 1227.904382][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.904402][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.938614][T16573] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1227.963988][T16573] usb 5-1: not running at top speed; connect to a high speed hub [ 1227.964032][T16573] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1227.965313][T16573] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1227.965333][T16573] usb 5-1: can't read configurations, error -61 [ 1228.142392][T16573] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 1228.790183][T16573] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1228.791195][T16573] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1228.791230][T16573] usb 5-1: can't read configurations, error -71 [ 1228.796611][T16573] usb usb5-port1: unable to enumerate USB device [ 1229.505194][ T1834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.505214][ T1834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1230.167875][T16573] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1230.338189][T16573] usb 1-1: Using ep0 maxpacket: 16 [ 1230.340759][T16573] usb 1-1: config 0 has no interfaces? [ 1230.343754][T16573] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1230.343784][T16573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.343806][T16573] usb 1-1: Product: syz [ 1230.343820][T16573] usb 1-1: Manufacturer: syz [ 1230.343835][T16573] usb 1-1: SerialNumber: syz [ 1230.435236][T16573] usb 1-1: config 0 descriptor?? [ 1230.715493][T16573] usb 1-1: USB disconnect, device number 20 [ 1231.145723][T19817] Bluetooth: hci3: command 0x0406 tx timeout [ 1231.217856][T19817] Bluetooth: hci2: command 0x0406 tx timeout [ 1231.218082][T19817] Bluetooth: hci1: command 0x0406 tx timeout [ 1231.831923][ T5607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1231.904318][ T5607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1231.911587][ T5607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1231.930548][ T5607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1231.946155][ T5607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1233.218435][T15505] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1233.380904][T15505] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.380936][T15505] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.380975][T15505] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1233.380997][T15505] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.421019][T15505] usb 2-1: config 0 descriptor?? [ 1233.462582][T23352] random: crng reseeded on system resumption [ 1233.746453][T23362] vlan2: entered allmulticast mode [ 1233.746468][T23362] bond0: entered allmulticast mode [ 1233.746481][T23362] bond_slave_0: entered allmulticast mode [ 1233.746502][T23362] bond_slave_1: entered allmulticast mode [ 1233.889577][T15505] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1234.005983][T15505] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1234.111585][T20944] Bluetooth: hci4: command tx timeout [ 1234.134253][T15505] cp2112 0003:10C4:EA90.000B: error requesting version [ 1234.388719][T15505] cp2112 0003:10C4:EA90.000B: probe with driver cp2112 failed with error -32 [ 1234.426588][T15505] usb 2-1: USB disconnect, device number 37 [ 1234.687840][T15510] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1234.852185][T15510] usb 5-1: Using ep0 maxpacket: 16 [ 1234.864080][T15510] usb 5-1: config 0 has no interfaces? [ 1234.887296][T15510] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1234.887326][T15510] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.887345][T15510] usb 5-1: Product: syz [ 1234.887360][T15510] usb 5-1: Manufacturer: syz [ 1234.887373][T15510] usb 5-1: SerialNumber: syz [ 1234.953646][T15510] usb 5-1: config 0 descriptor?? [ 1235.226190][T15505] usb 5-1: USB disconnect, device number 38 [ 1235.555502][ T1834] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.178024][T20944] Bluetooth: hci4: command tx timeout [ 1238.286038][T20944] Bluetooth: hci4: command tx timeout [ 1238.615765][ T1834] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.220740][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.220804][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.629672][ T1834] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.354442][T20944] Bluetooth: hci4: command tx timeout [ 1240.880868][ T1834] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.919512][T22477] IPVS: starting estimator thread 0... [ 1243.138057][T23544] IPVS: using max 8 ests per chain, 19200 per kthread [ 1244.987380][T23312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.987512][T23312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.988860][T23312] bridge_slave_0: entered allmulticast mode [ 1245.044062][T23312] bridge_slave_0: entered promiscuous mode [ 1245.101893][T23312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.102006][T23312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.102260][T23312] bridge_slave_1: entered allmulticast mode [ 1245.123319][T23312] bridge_slave_1: entered promiscuous mode [ 1245.838568][T23312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1245.864020][T23312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1246.351142][ T1834] bridge_slave_1: left allmulticast mode [ 1246.351176][ T1834] bridge_slave_1: left promiscuous mode [ 1246.351432][ T1834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.490072][ T1834] bridge_slave_0: left allmulticast mode [ 1246.490104][ T1834] bridge_slave_0: left promiscuous mode [ 1246.490354][ T1834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.766121][T23651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5297'. [ 1249.309379][ T1834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1249.383616][ T1834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1249.433772][ T1834] bond0 (unregistering): Released all slaves [ 1251.813506][T23312] team0: Port device team_slave_0 added [ 1252.207414][T23312] team0: Port device team_slave_1 added [ 1253.578764][T23312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1253.578781][T23312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.578808][T23312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1253.586264][T23312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1253.586280][T23312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.586306][T23312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.980374][T23312] hsr_slave_0: entered promiscuous mode [ 1253.985253][T23312] hsr_slave_1: entered promiscuous mode [ 1253.991726][T23312] debugfs: 'hsr0' already exists in 'hsr' [ 1253.991751][T23312] Cannot create hsr debugfs directory [ 1254.690406][ T1834] hsr_slave_0: left promiscuous mode [ 1254.730962][ T1834] hsr_slave_1: left promiscuous mode [ 1254.734157][ T1834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1254.734191][ T1834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1254.789960][ T1834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1254.790006][ T1834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1255.110380][ T1834] veth1_macvtap: left promiscuous mode [ 1255.110480][ T1834] veth0_macvtap: left promiscuous mode [ 1255.110714][ T1834] veth1_vlan: left promiscuous mode [ 1255.110891][ T1834] veth0_vlan: left promiscuous mode [ 1258.158636][ T1834] team0 (unregistering): Port device team_slave_1 removed [ 1258.260800][ T1834] team0 (unregistering): Port device team_slave_0 removed [ 1258.752963][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1260.218707][T23953] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.5419'. [ 1261.509610][T22477] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1261.677950][T22477] usb 1-1: Using ep0 maxpacket: 8 [ 1261.680489][T22477] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 1261.680524][T22477] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1261.680566][T22477] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 1261.680587][T22477] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.686042][T22477] usb 1-1: config 0 descriptor?? [ 1261.687072][T23960] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1262.304338][T22477] logitech 0003:046D:CA04.000C: unknown main item tag 0x0 [ 1262.304377][T22477] logitech 0003:046D:CA04.000C: unknown main item tag 0x0 [ 1262.304405][T22477] logitech 0003:046D:CA04.000C: unknown main item tag 0x0 [ 1262.304433][T22477] logitech 0003:046D:CA04.000C: unknown main item tag 0x0 [ 1262.304460][T22477] logitech 0003:046D:CA04.000C: unknown main item tag 0x0 [ 1262.304486][T22477] logitech 0003:046D:CA04.000C: unknown main item tag 0x0 [ 1262.304579][T22477] logitech 0003:046D:CA04.000C: unknown main item tag 0x0 [ 1262.304608][T22477] logitech 0003:046D:CA04.000C: unknown main item tag 0x0 [ 1262.304635][T22477] logitech 0003:046D:CA04.000C: unknown main item tag 0x0 [ 1262.304663][T22477] logitech 0003:046D:CA04.000C: unknown main item tag 0x0 [ 1262.531981][T22477] logitech 0003:046D:CA04.000C: hidraw0: USB HID v0.08 Device [HID 046d:ca04] on usb-dummy_hcd.0-1/input0 [ 1262.532030][T22477] logitech 0003:046D:CA04.000C: no inputs found [ 1262.587264][T22477] usb 1-1: USB disconnect, device number 21 [ 1262.922476][T23994] fido_id[23994]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1262.993017][T23999] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.5438'. [ 1264.375514][T24011] ================================================================== [ 1264.375533][T24011] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 1264.375564][T24011] Read of size 1 at addr ffff88808c66a200 by task syz.4.5443/24011 [ 1264.375581][T24011] [ 1264.375596][T24011] CPU: 0 UID: 0 PID: 24011 Comm: syz.4.5443 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} SYZFAIL: failed to recv rpc [ 1264.375622][T24011] Tainted: [L]=SOFTLOCKUP [ 1264.375629][T24011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1264.375642][T24011] Call Trace: [ 1264.375649][T24011] [ 1264.375658][T24011] dump_stack_lvl+0xe8/0x150 [ 1264.375680][T24011] print_address_description+0x55/0x1e0 [ 1264.375701][T24011] ? rt_spin_lock+0x83/0x400 [ 1264.375722][T24011] print_report+0x58/0x70 [ 1264.375740][T24011] kasan_report+0x117/0x150 [ 1264.375762][T24011] ? rt_spin_lock+0x83/0x400 [ 1264.375788][T24011] ? __wake_up_common_lock+0x2f/0x1e0 [ 1264.375815][T24011] __kasan_check_byte+0x2a/0x40 [ 1264.375835][T24011] lock_acquire+0x84/0x350 [ 1264.375863][T24011] rt_spin_lock+0x83/0x400 [ 1264.375884][T24011] ? __wake_up_common_lock+0x2f/0x1e0 [ 1264.375906][T24011] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1264.375929][T24011] ? __pfx_rt_spin_lock+0x10/0x10 [ 1264.375950][T24011] ? rt_spin_unlock+0x14f/0x200 [ 1264.375974][T24011] ? rt_spin_unlock+0x160/0x200 [ 1264.375998][T24011] __wake_up_common_lock+0x2f/0x1e0 [ 1264.376023][T24011] snd_pcm_stop+0x428/0x550 [ 1264.376048][T24011] loopback_trigger+0x11ff/0x1cf0 [ 1264.376075][T24011] snd_pcm_start+0x43d/0x5d0 [ 1264.376100][T24011] __snd_pcm_lib_xfer+0x175a/0x1d10 [ 1264.376125][T24011] ? __pfx_interleaved_copy+0x10/0x10 [ 1264.376144][T24011] ? __pfx_default_write_copy+0x10/0x10 [ 1264.376165][T24011] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1264.376185][T24011] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 1264.376203][T24011] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1264.376225][T24011] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1264.376250][T24011] ? snd_pcm_oss_write3+0x191/0x300 [ 1264.376278][T24011] snd_pcm_oss_write3+0x1ab/0x300 [ 1264.376305][T24011] snd_pcm_oss_write2+0x2c2/0x440 [ 1264.376326][T24011] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1264.376343][T24011] ? rt_spin_unlock+0x14f/0x200 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1264.376367][T24011] ? rt_spin_unlock+0x160/0x200 [ 1264.376391][T24011] snd_pcm_oss_sync1+0x180/0x520 [ 1264.376414][T24011] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 1264.376434][T24011] ? __pfx_default_wake_function+0x10/0x10 [ 1264.376453][T24011] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1264.376473][T24011] ? __asan_memset+0x22/0x50 [ 1264.376497][T24011] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 1264.376520][T24011] snd_pcm_oss_sync+0xab2/0xfc0 [ 1264.376542][T24011] snd_pcm_oss_release+0x102/0x250 [ 1264.376560][T24011] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1264.376578][T24011] __fput+0x461/0xa70 [ 1264.376608][T24011] task_work_run+0x1d9/0x270 [ 1264.376633][T24011] ? __pfx_task_work_run+0x10/0x10 [ 1264.376660][T24011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.376679][T24011] exit_to_user_mode_loop+0xed/0x480 [ 1264.376701][T24011] ? rcu_is_watching+0x15/0xb0 [ 1264.376725][T24011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.376744][T24011] do_syscall_64+0x33e/0xf80 [ 1264.376763][T24011] ? clear_bhb_loop+0x40/0x90 [ 1264.376784][T24011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.376808][T24011] RIP: 0033:0x7fabbbf1cdd9 [ 1264.376826][T24011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.376842][T24011] RSP: 002b:00007fff183f43d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1264.376863][T24011] RAX: 0000000000000000 RBX: 00007fabbc197da0 RCX: 00007fabbbf1cdd9 [ 1264.376877][T24011] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1264.376890][T24011] RBP: 00007fabbc197da0 R08: 0000000000000006 R09: 0000000000000000 [ 1264.376902][T24011] R10: 00007fabbc197cb0 R11: 0000000000000246 R12: 0000000000134803 [ 1264.376916][T24011] R13: 00007fabbc195fac R14: 0000000000134590 R15: 00007fabbc195fa0 [ 1264.376939][T24011] [ 1264.376946][T24011] [ 1264.376955][T24011] Allocated by task 24018: [ 1264.376965][T24011] kasan_save_track+0x3e/0x80 [ 1264.376984][T24011] __kasan_kmalloc+0x93/0xb0 [ 1264.377001][T24011] __kmalloc_cache_noprof+0x3a6/0x690 [ 1264.377019][T24011] snd_pcm_attach_substream+0x5b7/0xb20 [ 1264.377037][T24011] snd_pcm_open_substream+0xbd/0x2420 [ 1264.377059][T24011] snd_pcm_oss_open+0xf90/0x1c20 [ 1264.377074][T24011] chrdev_open+0x4d0/0x5f0 [ 1264.377093][T24011] do_dentry_open+0x83d/0x13e0 [ 1264.377115][T24011] vfs_open+0x3b/0x350 [ 1264.377136][T24011] path_openat+0x2e43/0x38a0 [ 1264.377153][T24011] do_file_open+0x23e/0x4a0 [ 1264.377170][T24011] do_sys_openat2+0x113/0x200 [ 1264.377192][T24011] __x64_sys_openat+0x138/0x170 [ 1264.377213][T24011] do_syscall_64+0x15f/0xf80 [ 1264.377229][T24011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.377245][T24011] [ 1264.377250][T24011] Freed by task 24018: [ 1264.377259][T24011] kasan_save_track+0x3e/0x80 [ 1264.377273][T24011] kasan_save_free_info+0x46/0x50 [ 1264.377294][T24011] __kasan_slab_free+0x5c/0x80 [ 1264.377310][T24011] kfree+0x1c5/0x6c[ 1264.377310][T24011] kfree+0x1c5/0x6c0 [ 1264.377325][T24011] snd_pcm_detach_substream+0x1c8/0x270 [ 1264.377343][T24011] snd_pcm_oss_release+0x184/0x250 [ 1264.377358][T24011] __fput+0x461/0xa70 [ 1264.377379][T24011] task_work_run+0x1d9/0x270 [ 1264.377400][T24011] exit_to_user_mode_loop+0xed/0x480 [ 1264.377420][T24011] do_syscall_64+0x33e/0xf80 [ 1264.377435][T24011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.377452][T24011] [ 1264.377456][T24011] The buggy address belongs to the object at ffff88808c66a000 [ 1264.377456][T24011] which belongs to the cache kmalloc-2k of size 2048 [ 1264.377473][T24011] The buggy address is located 512 bytes inside of [ 1264.377473][T24011] freed 2048-byte region [ffff88808c66a000, ffff88808c66a800) [ 1264.377492][T24011] [ 1264.377497][T24011] The buggy address belongs to the physical page: [ 1264.377512][T24011] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88808c66f000 pfn:0x8c668 [ 1264.377531][T24011] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1264.377547][T24011] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 1264.377568][T24011] page_type: f5(slab) [ 1264.377585][T24011] raw: 0080000000000240 ffff88801a010000 ffffea00017cb610 ffffea000076b010 [ 1264.377601][T24011] raw: ffff88808c66f000 0000000800080005 00000000f5000000 0000000000000000 [ 1264.377618][T24011] head: 0080000000000240 ffff88801a010000 ffffea00017cb610 ffffea000076b010 [ 1264.377634][T24011] head: ffff88808c66f000 0000000800080005 00000000f5000000 0000000000000000 [ 1264.377650][T24011] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1264.377666][T24011] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1264.377675][T24011] page dumped because: kasan: bad access detected [ 1264.377683][T24011] page_owner tracks the page as allocated [ 1264.377689][T24011] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5260, tgid 5260 (dhcpcd), ts 1065309978522, free_ts 1065084287822 [ 1264.377716][T24011] post_alloc_hook+0x231/0x280 [ 1264.377734][T24011] get_page_from_freelist+0x27c8/0x2840 [ 1264.377755][T24011] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1264.377775][T24011] allocate_slab+0x77/0x660 [ 1264.377802][T24011] refill_objects+0x33c/0x3d0 [ 1264.377822][T24011] __pcs_replace_empty_main+0x373/0x720 [ 1264.377844][T24011] __kvmalloc_node_noprof+0x6f4/0x8e0 [ 1264.377863][T24011] page_pool_create_percpu+0x2ea/0xba0 [ 1264.377885][T24011] nsim_open+0x3c4/0xa20 [ 1264.377901][T24011] __dev_open+0x44d/0x830 [ 1264.377922][T24011] __dev_change_flags+0x2fa/0x7e0 [ 1264.377939][T24011] netif_change_flags+0x88/0x1a0 [ 1264.377956][T24011] dev_change_flags+0x130/0x270 [ 1264.377972][T24011] devinet_ioctl+0x9f2/0x1b30 [ 1264.377993][T24011] inet_ioctl+0x42a/0x560 [ 1264.378010][T24011] sock_do_ioctl+0x101/0x320 [ 1264.378031][T24011] page last free pid 21049 tgid 21049 stack trace: [ 1264.378042][T24011] __free_frozen_pages+0xfa6/0x10f0 [ 1264.378060][T24011] __slab_free+0x252/0x2a0 [ 1264.378077][T24011] qlist_free_all+0x99/0x100 [ 1264.378091][T24011] kasan_quarantine_reduce+0x148/0x160 [ 1264.378107][T24011] __kasan_slab_alloc+0x22/0x80 [ 1264.378124][T24011] kmem_cache_alloc_noprof+0x33b/0x680 [ 1264.378140][T24011] __anon_vma_prepare+0xcb/0x4a0 [ 1264.378158][T24011] do_pte_missing+0x1e57/0x2950 [ 1264.378177][T24011] handle_mm_fault+0xd0a/0x13c0 [ 1264.378195][T24011] do_user_addr_fault+0xa73/0x1340 [ 1264.378212][T24011] exc_page_fault+0x6a/0xc0 [ 1264.378235][T24011] asm_exc_page_fault+0x26/0x30 [ 1264.378251][T24011] [ 1264.378255][T24011] Memory state around the buggy address: [ 1264.378265][T24011] ffff88808c66a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1264.378278][T24011] ffff88808c66a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1264.378290][T24011] >ffff88808c66a200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1264.378300][T24011] ^ [ 1264.378310][T24011] ffff88808c66a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1264.378322][T24011] ffff88808c66a300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1264.378332][T24011] ================================================================== [ 1265.035843][T24011] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1265.035868][T24011] CPU: 0 UID: 0 PID: 24011 Comm: syz.4.5443 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1265.035895][T24011] Tainted: [L]=SOFTLOCKUP [ 1265.035903][T24011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1265.035915][T24011] Call Trace: [ 1265.035923][T24011] [ 1265.035930][T24011] vpanic+0x56c/0xa60 [ 1265.035959][T24011] ? __pfx_vpanic+0x10/0x10 [ 1265.035980][T24011] ? __pfx___schedule+0x10/0x10 [ 1265.036009][T24011] panic+0xc5/0xd0 [ 1265.036028][T24011] ? __pfx_panic+0x10/0x10 [ 1265.036057][T24011] ? preempt_schedule_common+0x82/0xd0 [ 1265.036085][T24011] ? rt_spin_lock+0x83/0x400 [ 1265.036106][T24011] check_panic_on_warn+0x89/0xb0 [ 1265.036131][T24011] ? rt_spin_lock+0x83/0x400 [ 1265.036151][T24011] end_report+0x73/0x170 [ 1265.036171][T24011] ? rt_spin_lock+0x83/0x400 [ 1265.036191][T24011] kasan_report+0x128/0x150 [ 1265.036212][T24011] ? rt_spin_lock+0x83/0x400 [ 1265.036236][T24011] ? __wake_up_common_lock+0x2f/0x1e0 [ 1265.036258][T24011] __kasan_check_byte+0x2a/0x40 [ 1265.036277][T24011] lock_acquire+0x84/0x350 [ 1265.036305][T24011] rt_spin_lock+0x83/0x400 [ 1265.036326][T24011] ? __wake_up_common_lock+0x2f/0x1e0 [ 1265.036348][T24011] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1265.036371][T24011] ? __pfx_rt_spin_lock+0x10/0x10 [ 1265.036392][T24011] ? rt_spin_unlock+0x14f/0x200 [ 1265.036416][T24011] ? rt_spin_unlock+0x160/0x200 [ 1265.036438][T24011] __wake_up_common_lock+0x2f/0x1e0 [ 1265.036463][T24011] snd_pcm_stop+0x428/0x550 [ 1265.036488][T24011] loopback_trigger+0x11ff/0x1cf0 [ 1265.036514][T24011] snd_pcm_start+0x43d/0x5d0 [ 1265.036538][T24011] __snd_pcm_lib_xfer+0x175a/0x1d10 [ 1265.036563][T24011] ? __pfx_interleaved_copy+0x10/0x10 [ 1265.036582][T24011] ? __pfx_default_write_copy+0x10/0x10 [ 1265.036603][T24011] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1265.036624][T24011] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 1265.036641][T24011] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1265.036663][T24011] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1265.036688][T24011] ? snd_pcm_oss_write3+0x191/0x300 [ 1265.036715][T24011] snd_pcm_oss_write3+0x1ab/0x300 [ 1265.036743][T24011] snd_pcm_oss_write2+0x2c2/0x440 [ 1265.036763][T24011] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1265.036780][T24011] ? rt_spin_unlock+0x14f/0x200 [ 1265.036803][T24011] ? rt_spin_unlock+0x160/0x200 [ 1265.036826][T24011] snd_pcm_oss_sync1+0x180/0x520 [ 1265.036850][T24011] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 1265.036869][T24011] ? __pfx_default_wake_function+0x10/0x10 [ 1265.036887][T24011] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1265.036908][T24011] ? __asan_memset+0x22/0x50 [ 1265.036931][T24011] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 1265.036953][T24011] snd_pcm_oss_sync+0xab2/0xfc0 [ 1265.036975][T24011] snd_pcm_oss_release+0x102/0x250 [ 1265.036991][T24011] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1265.037008][T24011] __fput+0x461/0xa70 [ 1265.037035][T24011] task_work_run+0x1d9/0x270 [ 1265.037065][T24011] ? __pfx_task_work_run+0x10/0x10 [ 1265.037091][T24011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.037110][T24011] exit_to_user_mode_loop+0xed/0x480 [ 1265.037131][T24011] ? rcu_is_watching+0x15/0xb0 [ 1265.037155][T24011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.037174][T24011] do_syscall_64+0x33e/0xf80 [ 1265.037193][T24011] ? clear_bhb_loop+0x40/0x90 [ 1265.037212][T24011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.037233][T24011] RIP: 0033:0x7fabbbf1cdd9 [ 1265.037250][T24011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1265.037263][T24011] RSP: 002b:00007fff183f43d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1265.037279][T24011] RAX: 0000000000000000 RBX: 00007fabbc197da0 RCX: 00007fabbbf1cdd9 [ 1265.037289][T24011] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1265.037298][T24011] RBP: 00007fabbc197da0 R08: 0000000000000006 R09: 0000000000000000 [ 1265.037306][T24011] R10: 00007fabbc197cb0 R11: 0000000000000246 R12: 0000000000134803 [ 1265.037316][T24011] R13: 00007fabbc195fac R14: 0000000000134590 R15: 00007fabbc195fa0 [ 1265.037331][T24011] [ 1265.041273][T24011] Kernel Offset: disabled