last executing test programs: 15.191356586s ago: executing program 2 (id=57): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) 14.716628641s ago: executing program 2 (id=59): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3d04b63e3ee3755, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 12.031981578s ago: executing program 2 (id=71): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000240), 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, 0x0, 0xfce1) ioctl$TCFLSH(r0, 0x540b, 0x1) 8.792974774s ago: executing program 1 (id=78): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000400)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.575649251s ago: executing program 3 (id=80): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setreuid(0x0, 0x0) io_setup(0x4, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) 8.378315417s ago: executing program 2 (id=81): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3d04b63e3ee3755, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 7.427641038s ago: executing program 4 (id=83): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) recvmsg$unix(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)=""/236, 0xec}], 0x1}, 0x40000140) socket$nl_netfilter(0x10, 0x3, 0xc) connect$phonet_pipe(r4, 0x0, 0x0) syz_emit_vhci(0x0, 0x20) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc0046209, 0x0) 5.977909775s ago: executing program 3 (id=85): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000680)='@', &(0x7f0000000400)=@tcp6=r2, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.799083711s ago: executing program 1 (id=86): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000409'], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), 0x0, &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 5.686911215s ago: executing program 3 (id=87): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000400)=0x14e1, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fsopen(0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000400000002000000000000d54a308a000c000c4000000000000000"], 0x44}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0xc004054}, 0x0) fsmount(r3, 0x0, 0x80) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0xf8}}, 0x40000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 5.310443657s ago: executing program 4 (id=88): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x24}, 0x14) r0 = socket$qrtr(0x2a, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x40d0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a", 0x10) connect$qrtr(r0, &(0x7f0000000040), 0xc) 4.534494213s ago: executing program 3 (id=89): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48040}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xffffffff, 0xdb7, 0x6, 0x4, 0x9}, 0xd, 0xeb, [{0x3, 0xc, 0x2, 0x7ff, 0x9, 0x40}]}, [{0x2, 0x8, 0xfff, 0x8, 0x7ff, 0x7}, {0x626, 0x5, 0x5, 0xe38b, 0x54, 0x3bf}, {0x59, 0xffff, 0x4, 0xffffffff, 0x4, 0x9}, {0xb, 0x1355, 0x4, 0x8, 0x51e, 0x806}, {0x4, 0x5, 0xf02, 0xffff, 0xe, 0x94a}, {0x3, 0x6, 0x7, 0x0, 0x8, 0x4}, {0x2f, 0x3, 0xb, 0x0, 0x9, 0xf}, {0x3ff, 0x80000001, 0xa3, 0x200, 0x913, 0x8001}, {0x1f0, 0x10000, 0xfffffff8, 0x0, 0x3, 0x8000}, {0xc, 0x5, 0x8, 0x0, 0x101, 0x4}, {0x200, 0x8, 0xfc3, 0xffffffff, 0xf, 0x1}, {0x2, 0x7, 0x662, 0x7, 0x4}, {0x0, 0x9511, 0xf, 0xfffff001, 0x0, 0x89a}, {0x6, 0x5, 0x7ff, 0x7, 0xffff}, {0x7a, 0x5, 0x800, 0x6, 0x6, 0x1}, {0x600000, 0x9e, 0x8039, 0x102d, 0x90, 0x9}, {0xffd, 0xa7, 0x200, 0xa4, 0x3, 0xffffff01}, {0x3, 0x200, 0xffffffff, 0x4, 0x4, 0x500}, {0x7, 0xc, 0x8, 0x7, 0x3, 0x4000}, {0x401, 0x81, 0x8, 0x6, 0xffff, 0x59}, {0x401, 0x4, 0x9, 0x9, 0xee, 0xa0e}, {0x9, 0x1, 0x7, 0x1, 0xc, 0xf0}, {0x40, 0x0, 0x0, 0x4, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x7, 0x200}, {0x6, 0x10001, 0x0, 0x8, 0xf31d, 0x95}, {0x2, 0xfffffffe, 0xe, 0x5, 0x7fff, 0xffffffc3}, {0x3, 0x400, 0x4, 0x3ff, 0x0, 0x61b9f92}, {0x1, 0x349, 0x7e, 0x6, 0x1, 0x7fff}, {0x188, 0x2, 0x418b3d83, 0x8, 0x3, 0x8}, {0x1ff, 0x8, 0x8, 0x7, 0x1000, 0x4}, {0x7f33eafe, 0xffffffff, 0xb, 0x2, 0x7, 0x8}, {0x1, 0x7f, 0x7, 0x9, 0x3, 0x6}, {0xf469, 0x2, 0x401, 0x4, 0x8, 0x4}, {0x5, 0x2, 0x6, 0x1, 0x401, 0x2}, {0x0, 0x7fffffff, 0x4, 0x4, 0x6, 0x8515}, {0x7, 0x7, 0x8001, 0x76, 0x8000, 0xffffffff}, {0xc0f, 0x6, 0x1, 0x8, 0x200, 0xa7a2ee47}, {0x8, 0x2, 0x4e, 0xff, 0x7, 0x6}, {0x6, 0xfffffffc, 0x63a8, 0x6, 0x288a6aae, 0x1}, {0xc52, 0x0, 0xfff, 0xe3c, 0x8, 0x10}, {0x80, 0xb, 0x8, 0x1, 0xa, 0x1}, {0x7, 0x9, 0x5, 0x4, 0x9, 0x80000001}, {0x5, 0x5, 0xffff, 0x3, 0x96e, 0x800}, {0x3, 0xa, 0x6, 0xffff1816, 0x9, 0x7f}, {0xd4, 0x100, 0x1, 0x2, 0x9, 0x9}, {0xcf680000, 0x3b9e, 0x28b7, 0x1, 0x4, 0x5}, {0xf8cd, 0x805, 0x900, 0xffffffeb, 0x1, 0x7}, {0x9, 0x24fd, 0x7, 0x80, 0x237e078f, 0x80}, {0x6, 0x55, 0x7, 0x101, 0xfffffffb, 0x1}, {0x8, 0x7, 0x8, 0xf9, 0x877, 0x7c}, {0xd732, 0xa, 0x2, 0x7, 0x1}, {0x81, 0x8, 0x6, 0xffff7fff, 0x80000001, 0x5}, {0x8, 0xc, 0xeb6, 0x8, 0x80, 0xfffffffe}, {0x5, 0x56b, 0x0, 0x1, 0x9, 0x3}, {0x2, 0x8, 0x6, 0x9, 0xfffffff8, 0x48}, {0x6, 0xa5cb, 0x100, 0x9, 0x400, 0x7}, {0xfffffff6, 0x4, 0x6, 0x8, 0x2b13, 0x80}, {0x4, 0x1c0000, 0x7, 0xe, 0x0, 0x2}, {0x6, 0x1, 0x6, 0x4, 0x202, 0xb}, {0x425, 0x0, 0x3, 0x4f, 0x7, 0x8}, {0x4, 0x8, 0xd9b, 0x4, 0x9, 0x9}, {0xfe, 0x8, 0x2, 0x0, 0x930, 0xc3c}, {0x85f, 0x3, 0x0, 0xcd4, 0x7, 0x484}, {0x2, 0x2, 0x0, 0x9, 0x7, 0x40}, {0x1ff, 0x5, 0x7, 0x6, 0x400, 0x3ff}, {0xa, 0x5, 0x80000001, 0x5, 0x5, 0x6}, {0x2, 0x5, 0x80, 0xfffffffd}, {0xcd, 0xfac, 0xb19d, 0x6, 0x4}, {0xc, 0x3, 0x1, 0x7, 0x7fff, 0x8}, {0x81, 0x10, 0x1, 0x273, 0x1, 0xd}, {0x5c39c017, 0x7f, 0xffff7fff, 0x5, 0x3, 0x3}, {0x2, 0x3, 0x8, 0x81, 0xa, 0x9b7b}, {0x4, 0x39, 0xc, 0xb4c, 0xd, 0x6}, {0x9, 0x303a, 0x6, 0x6, 0x7, 0x6}, {0x2, 0xfffff942, 0xfb5, 0x4, 0x0, 0x7}, {0x0, 0x10001, 0x0, 0x4, 0x401, 0x3}, {0x65, 0x7, 0x9, 0xff, 0x2, 0x8}, {0xe, 0x200, 0x8, 0x7fff, 0x7, 0x8}, {0xf, 0xfffffffb, 0x8, 0x2, 0x1, 0x7}, {0x3, 0x7, 0x2, 0x1a, 0x11a, 0x100}, {0xe, 0x7, 0x6, 0x6c95, 0x10000}, {0x6, 0x5, 0x2, 0x921, 0x0, 0x20}, {0x795c, 0x494d, 0xfff, 0x80, 0x17fff, 0x3}, {0x3, 0x6, 0xb, 0xfffffffc, 0xfffffffe, 0x8}, {0x9, 0xfffffff7, 0x2, 0x2, 0xf68, 0x7}, {0x5, 0x4, 0x8, 0x7, 0xf5c, 0x80000001}, {0x1, 0x0, 0x5419, 0xc, 0x9, 0x7}, {0x3ff, 0x3, 0x1037, 0x5, 0xd, 0x10000}, {0x101, 0x9, 0x102, 0xb99, 0x2e7, 0x8}, {0x3, 0x8001, 0x10003, 0x6, 0x54f7, 0x6}, {0x1, 0x7, 0x8, 0x1, 0x400, 0xd}, {0x8, 0x6, 0xfff, 0xce, 0x1b, 0x6}, {0x8, 0x9, 0x2bd, 0xffff79af, 0x7, 0x3}, {0x7, 0x0, 0x6, 0x1, 0x6, 0x5}, {0x7, 0xe, 0x7, 0xfff, 0x7, 0x2}, {0x0, 0x8, 0xfff, 0x4, 0x28000000}, {0x9, 0x200, 0x1, 0x8702, 0xffff8a6e, 0x8}, {0x200, 0x2, 0x4, 0xc, 0x3, 0x5}, {0xe, 0x6, 0x0, 0x9, 0x8, 0xb5}, {0x100, 0x5, 0x2400000, 0x8, 0x0, 0x8000}, {0x0, 0xfffffff0, 0x101, 0xd786, 0x7}, {0x5, 0x6, 0x5, 0x0, 0x97, 0x10001}, {0x2, 0x45c9, 0x5, 0x5, 0x6, 0x337bc25c}, {0x7f, 0x10, 0x6, 0x834, 0x5, 0x4e8e}, {0x0, 0x4, 0x14, 0x2, 0x2, 0x4}, {0x8001, 0x0, 0x25, 0x869, 0x3, 0x7}, {0x1000000a, 0x9, 0x100, 0x4, 0x5, 0x8000}, {0x8, 0x4, 0x8, 0x8, 0x1, 0x2}, {0x7, 0x1, 0x400, 0x6, 0x5, 0x2de}, {0x1, 0xfffffff7, 0x6, 0x4f, 0x401, 0x610ddc80}, {0x6, 0x1ff, 0x0, 0x0, 0x7f}, {0x6, 0x0, 0x1fbb, 0x5, 0xe53, 0x73}, {0x8, 0x3, 0x0, 0x10, 0x4e5ae85, 0x1}, {0x8, 0xa8e, 0x2, 0x4, 0x1, 0x8}, {0x5, 0x4, 0x7559, 0x800, 0x7507f659, 0x1000}, {0x4, 0xa3, 0xad4, 0x0, 0x400004, 0x9d2}, {0x4, 0x0, 0x17c, 0x5, 0xfffffffc, 0xeae8}, {0xd, 0x81, 0x8, 0x6, 0x0, 0x2}, {0xfffffffa, 0xa, 0xffffff96, 0x5, 0x3, 0xffd9}, {0x9, 0x7ff, 0xfffffff8, 0x1, 0x3ff}, {0x0, 0x9, 0x8, 0x2, 0xdec9, 0x5}, {0x9, 0x1ff, 0x800, 0x8, 0x1, 0x5}, {0x1, 0xfff, 0x10001, 0x6, 0x80, 0x5}, {0xffffffdf, 0xd55c, 0x68, 0xfffffffd, 0xa5b7, 0x10001}, {0x9, 0x9, 0x80, 0x6e0, 0x8, 0x389}, {0xa0, 0x3111013c, 0x8, 0x3, 0x80000000, 0x93fb}, {0x1, 0x9, 0x6, 0x5, 0x32, 0x800}, {0x7, 0x76, 0x5, 0x4, 0x101, 0x7}], [{}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x854056177ef68b07, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x6fb9e8e116338fa4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0xebb446fe48414d9f}, {}, {0x2, 0x1}, {0x7}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {}, {}, {0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x2}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) 4.514780903s ago: executing program 0 (id=90): socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) pipe(&(0x7f0000000140)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000100)={0x10}) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x75, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0x5, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x284a93}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.102430166s ago: executing program 1 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xbc}}, 0x0) 4.036279779s ago: executing program 3 (id=92): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x6, @random="9529f7f600", 'wg1\x00'}}, 0x1e) socket(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa7f0e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map, 0x26, 0x0, 0xf51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendfile(0xffffffffffffffff, r0, 0x0, 0x1) 4.00361137s ago: executing program 4 (id=93): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba801"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x1, 0x7f, 0x2, &(0x7f00000000c0)={0xf, "18096693297e294e3d70684d3e1dc807ac8faa28791336fdca13baf089d08d42d0"}}) 3.955499141s ago: executing program 1 (id=94): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f00000005c0)=""/88, 0x58) syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) 3.6943951s ago: executing program 0 (id=95): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setreuid(0x0, 0x0) io_setup(0x4, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) 2.829100548s ago: executing program 3 (id=96): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d010110000000090400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b23, 0x0) 2.828065848s ago: executing program 1 (id=97): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000400)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.691111552s ago: executing program 2 (id=98): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) recvmsg$unix(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)=""/236, 0xec}], 0x1}, 0x40000140) socket$nl_netfilter(0x10, 0x3, 0xc) connect$phonet_pipe(r4, 0x0, 0x0) syz_emit_vhci(0x0, 0x20) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc0046209, 0x0) 2.412182221s ago: executing program 0 (id=99): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000400)=0x14e1, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fsopen(0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000400000002000000000000d54a308a000c000c4000000000000000"], 0x44}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0xc004054}, 0x0) fsmount(r3, 0x0, 0x80) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0xf8}}, 0x40000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 1.121941344s ago: executing program 0 (id=100): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0x88, &(0x7f0000000300)={[{@nobh}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@grpquota}, {@nodiscard}, {@nouser_xattr}]}, 0xff, 0x45e, &(0x7f0000000580)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1d8}}, 0x0) 903.5852ms ago: executing program 0 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000409'], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), 0x0, &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 811.343823ms ago: executing program 4 (id=102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48040}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xffffffff, 0xdb7, 0x6, 0x4, 0x9}, 0xd, 0xeb, [{0x3, 0xc, 0x2, 0x7ff, 0x9, 0x40}]}, [{0x2, 0x8, 0xfff, 0x8, 0x7ff, 0x7}, {0x626, 0x5, 0x5, 0xe38b, 0x54, 0x3bf}, {0x59, 0xffff, 0x4, 0xffffffff, 0x4, 0x9}, {0xb, 0x1355, 0x4, 0x8, 0x51e, 0x806}, {0x4, 0x5, 0xf02, 0xffff, 0xe, 0x94a}, {0x3, 0x6, 0x7, 0x0, 0x8, 0x4}, {0x2f, 0x3, 0xb, 0x0, 0x9, 0xf}, {0x3ff, 0x80000001, 0xa3, 0x200, 0x913, 0x8001}, {0x1f0, 0x10000, 0xfffffff8, 0x0, 0x3, 0x8000}, {0xc, 0x5, 0x8, 0x0, 0x101, 0x4}, {0x200, 0x8, 0xfc3, 0xffffffff, 0xf, 0x1}, {0x2, 0x7, 0x662, 0x7, 0x4}, {0x0, 0x9511, 0xf, 0xfffff001, 0x0, 0x89a}, {0x6, 0x5, 0x7ff, 0x7, 0xffff}, {0x7a, 0x5, 0x800, 0x6, 0x6, 0x1}, {0x600000, 0x9e, 0x8039, 0x102d, 0x90, 0x9}, {0xffd, 0xa7, 0x200, 0xa4, 0x3, 0xffffff01}, {0x3, 0x200, 0xffffffff, 0x4, 0x4, 0x500}, {0x7, 0xc, 0x8, 0x7, 0x3, 0x4000}, {0x401, 0x81, 0x8, 0x6, 0xffff, 0x59}, {0x401, 0x4, 0x9, 0x9, 0xee, 0xa0e}, {0x9, 0x1, 0x7, 0x1, 0xc, 0xf0}, {0x40, 0x0, 0x0, 0x4, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x7, 0x200}, {0x6, 0x10001, 0x0, 0x8, 0xf31d, 0x95}, {0x2, 0xfffffffe, 0xe, 0x5, 0x7fff, 0xffffffc3}, {0x3, 0x400, 0x4, 0x3ff, 0x0, 0x61b9f92}, {0x1, 0x349, 0x7e, 0x6, 0x1, 0x7fff}, {0x188, 0x2, 0x418b3d83, 0x8, 0x3, 0x8}, {0x1ff, 0x8, 0x8, 0x7, 0x1000, 0x4}, {0x7f33eafe, 0xffffffff, 0xb, 0x2, 0x7, 0x8}, {0x1, 0x7f, 0x7, 0x9, 0x3, 0x6}, {0xf469, 0x2, 0x401, 0x4, 0x8, 0x4}, {0x5, 0x2, 0x6, 0x1, 0x401, 0x2}, {0x0, 0x7fffffff, 0x4, 0x4, 0x6, 0x8515}, {0x7, 0x7, 0x8001, 0x76, 0x8000, 0xffffffff}, {0xc0f, 0x6, 0x1, 0x8, 0x200, 0xa7a2ee47}, {0x8, 0x2, 0x4e, 0xff, 0x7, 0x6}, {0x6, 0xfffffffc, 0x63a8, 0x6, 0x288a6aae, 0x1}, {0xc52, 0x0, 0xfff, 0xe3c, 0x8, 0x10}, {0x80, 0xb, 0x8, 0x1, 0xa, 0x1}, {0x7, 0x9, 0x5, 0x4, 0x9, 0x80000001}, {0x5, 0x5, 0xffff, 0x3, 0x96e, 0x800}, {0x3, 0xa, 0x6, 0xffff1816, 0x9, 0x7f}, {0xd4, 0x100, 0x1, 0x2, 0x9, 0x9}, {0xcf680000, 0x3b9e, 0x28b7, 0x1, 0x4, 0x5}, {0xf8cd, 0x805, 0x900, 0xffffffeb, 0x1, 0x7}, {0x9, 0x24fd, 0x7, 0x80, 0x237e078f, 0x80}, {0x6, 0x55, 0x7, 0x101, 0xfffffffb, 0x1}, {0x8, 0x7, 0x8, 0xf9, 0x877, 0x7c}, {0xd732, 0xa, 0x2, 0x7, 0x1}, {0x81, 0x8, 0x6, 0xffff7fff, 0x80000001, 0x5}, {0x8, 0xc, 0xeb6, 0x8, 0x80, 0xfffffffe}, {0x5, 0x56b, 0x0, 0x1, 0x9, 0x3}, {0x2, 0x8, 0x6, 0x9, 0xfffffff8, 0x48}, {0x6, 0xa5cb, 0x100, 0x9, 0x400, 0x7}, {0xfffffff6, 0x4, 0x6, 0x8, 0x2b13, 0x80}, {0x4, 0x1c0000, 0x7, 0xe, 0x0, 0x2}, {0x6, 0x1, 0x6, 0x4, 0x202, 0xb}, {0x425, 0x0, 0x3, 0x4f, 0x7, 0x8}, {0x4, 0x8, 0xd9b, 0x4, 0x9, 0x9}, {0xfe, 0x8, 0x2, 0x0, 0x930, 0xc3c}, {0x85f, 0x3, 0x0, 0xcd4, 0x7, 0x484}, {0x2, 0x2, 0x0, 0x9, 0x7, 0x40}, {0x1ff, 0x5, 0x7, 0x6, 0x400, 0x3ff}, {0xa, 0x5, 0x80000001, 0x5, 0x5, 0x6}, {0x2, 0x5, 0x80, 0xfffffffd}, {0xcd, 0xfac, 0xb19d, 0x6, 0x4}, {0xc, 0x3, 0x1, 0x7, 0x7fff, 0x8}, {0x81, 0x10, 0x1, 0x273, 0x1, 0xd}, {0x5c39c017, 0x7f, 0xffff7fff, 0x5, 0x3, 0x3}, {0x2, 0x3, 0x8, 0x81, 0xa, 0x9b7b}, {0x4, 0x39, 0xc, 0xb4c, 0xd, 0x6}, {0x9, 0x303a, 0x6, 0x6, 0x7, 0x6}, {0x2, 0xfffff942, 0xfb5, 0x4, 0x0, 0x7}, {0x0, 0x10001, 0x0, 0x4, 0x401, 0x3}, {0x65, 0x7, 0x9, 0xff, 0x2, 0x8}, {0xe, 0x200, 0x8, 0x7fff, 0x7, 0x8}, {0xf, 0xfffffffb, 0x8, 0x2, 0x1, 0x7}, {0x3, 0x7, 0x2, 0x1a, 0x11a, 0x100}, {0xe, 0x7, 0x6, 0x6c95, 0x10000}, {0x6, 0x5, 0x2, 0x921, 0x0, 0x20}, {0x795c, 0x494d, 0xfff, 0x80, 0x17fff, 0x3}, {0x3, 0x6, 0xb, 0xfffffffc, 0xfffffffe, 0x8}, {0x9, 0xfffffff7, 0x2, 0x2, 0xf68, 0x7}, {0x5, 0x4, 0x8, 0x7, 0xf5c, 0x80000001}, {0x1, 0x0, 0x5419, 0xc, 0x9, 0x7}, {0x3ff, 0x3, 0x1037, 0x5, 0xd, 0x10000}, {0x101, 0x9, 0x102, 0xb99, 0x2e7, 0x8}, {0x3, 0x8001, 0x10003, 0x6, 0x54f7, 0x6}, {0x1, 0x7, 0x8, 0x1, 0x400, 0xd}, {0x8, 0x6, 0xfff, 0xce, 0x1b, 0x6}, {0x8, 0x9, 0x2bd, 0xffff79af, 0x7, 0x3}, {0x7, 0x0, 0x6, 0x1, 0x6, 0x5}, {0x7, 0xe, 0x7, 0xfff, 0x7, 0x2}, {0x0, 0x8, 0xfff, 0x4, 0x28000000}, {0x9, 0x200, 0x1, 0x8702, 0xffff8a6e, 0x8}, {0x200, 0x2, 0x4, 0xc, 0x3, 0x5}, {0xe, 0x6, 0x0, 0x9, 0x8, 0xb5}, {0x100, 0x5, 0x2400000, 0x8, 0x0, 0x8000}, {0x0, 0xfffffff0, 0x101, 0xd786, 0x7}, {0x5, 0x6, 0x5, 0x0, 0x97, 0x10001}, {0x2, 0x45c9, 0x5, 0x5, 0x6, 0x337bc25c}, {0x7f, 0x10, 0x6, 0x834, 0x5, 0x4e8e}, {0x0, 0x4, 0x14, 0x2, 0x2, 0x4}, {0x8001, 0x0, 0x25, 0x869, 0x3, 0x7}, {0x1000000a, 0x9, 0x100, 0x4, 0x5, 0x8000}, {0x8, 0x4, 0x8, 0x8, 0x1, 0x2}, {0x7, 0x1, 0x400, 0x6, 0x5, 0x2de}, {0x1, 0xfffffff7, 0x6, 0x4f, 0x401, 0x610ddc80}, {0x6, 0x1ff, 0x0, 0x0, 0x7f}, {0x6, 0x0, 0x1fbb, 0x5, 0xe53, 0x73}, {0x8, 0x3, 0x0, 0x10, 0x4e5ae85, 0x1}, {0x8, 0xa8e, 0x2, 0x4, 0x1, 0x8}, {0x5, 0x4, 0x7559, 0x800, 0x7507f659, 0x1000}, {0x4, 0xa3, 0xad4, 0x0, 0x400004, 0x9d2}, {0x4, 0x0, 0x17c, 0x5, 0xfffffffc, 0xeae8}, {0xd, 0x81, 0x8, 0x6, 0x0, 0x2}, {0xfffffffa, 0xa, 0xffffff96, 0x5, 0x3, 0xffd9}, {0x9, 0x7ff, 0xfffffff8, 0x1, 0x3ff}, {0x0, 0x9, 0x8, 0x2, 0xdec9, 0x5}, {0x9, 0x1ff, 0x800, 0x8, 0x1, 0x5}, {0x1, 0xfff, 0x10001, 0x6, 0x80, 0x5}, {0xffffffdf, 0xd55c, 0x68, 0xfffffffd, 0xa5b7, 0x10001}, {0x9, 0x9, 0x80, 0x6e0, 0x8, 0x389}, {0xa0, 0x3111013c, 0x8, 0x3, 0x80000000, 0x93fb}, {0x1, 0x9, 0x6, 0x5, 0x32, 0x800}, {0x7, 0x76, 0x5, 0x4, 0x101, 0x7}], [{}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x854056177ef68b07, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x6fb9e8e116338fa4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0xebb446fe48414d9f}, {}, {0x2, 0x1}, {0x7}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {}, {}, {0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x2}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) 508.994493ms ago: executing program 4 (id=103): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x24}, 0x14) r0 = socket$qrtr(0x2a, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x40d0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a", 0x10) connect$qrtr(r0, &(0x7f0000000040), 0xc) 399.708677ms ago: executing program 0 (id=104): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffebffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffff"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000000)=[@dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0x20, 0x4000}, 0x28008841) 27.369779ms ago: executing program 2 (id=105): socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) pipe(&(0x7f0000000140)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000100)={0x10}) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x75, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0x5, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x284a93}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.605739ms ago: executing program 4 (id=106): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x6, @random="9529f7f600", 'wg1\x00'}}, 0x1e) socket(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa7f0e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map, 0x26, 0x0, 0xf51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendfile(0xffffffffffffffff, r0, 0x0, 0x1) 0s ago: executing program 1 (id=107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xbc}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. [ 72.476181][ T4260] cgroup: Unknown subsys name 'net' [ 72.612167][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.192157][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 75.738791][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.746954][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.754923][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.763416][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.773014][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.780737][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.788735][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.796474][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.804529][ T4286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.811926][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.817784][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.819815][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.827936][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.838967][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.846047][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.850216][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.857852][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.863176][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.868563][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.875720][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.884629][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.897697][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.904998][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.912521][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.919767][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.989565][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.997046][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.006489][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.014420][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.029979][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.463064][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 76.502749][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 76.520715][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 76.570634][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 76.605445][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 76.749641][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.758938][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.769438][ T4275] device bridge_slave_0 entered promiscuous mode [ 76.799552][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.810164][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.819280][ T4273] device bridge_slave_0 entered promiscuous mode [ 76.830288][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.837490][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.846122][ T4275] device bridge_slave_1 entered promiscuous mode [ 76.853792][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.861023][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.869215][ T4272] device bridge_slave_0 entered promiscuous mode [ 76.898552][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.905675][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.913932][ T4276] device bridge_slave_0 entered promiscuous mode [ 76.922705][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.931170][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.939635][ T4273] device bridge_slave_1 entered promiscuous mode [ 76.963471][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.970680][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.979207][ T4272] device bridge_slave_1 entered promiscuous mode [ 76.992385][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.000386][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.008832][ T4274] device bridge_slave_0 entered promiscuous mode [ 77.017278][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.024404][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.033488][ T4276] device bridge_slave_1 entered promiscuous mode [ 77.061597][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.068829][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.077310][ T4274] device bridge_slave_1 entered promiscuous mode [ 77.093202][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.105651][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.121117][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.154006][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.166632][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.177536][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.188349][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.207566][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.222214][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.267378][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.301316][ T4274] team0: Port device team_slave_0 added [ 77.310118][ T4272] team0: Port device team_slave_0 added [ 77.326305][ T4275] team0: Port device team_slave_0 added [ 77.334312][ T4273] team0: Port device team_slave_0 added [ 77.341740][ T4274] team0: Port device team_slave_1 added [ 77.349262][ T4272] team0: Port device team_slave_1 added [ 77.356593][ T4273] team0: Port device team_slave_1 added [ 77.364620][ T4276] team0: Port device team_slave_0 added [ 77.372068][ T4275] team0: Port device team_slave_1 added [ 77.414824][ T4276] team0: Port device team_slave_1 added [ 77.472575][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.479821][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.505959][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.518732][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.525709][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.552177][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.564278][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.574275][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.600486][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.612892][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.620055][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.650394][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.662400][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.673550][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.700133][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.712645][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.720610][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.746725][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.758908][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.770472][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.796939][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.809197][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.819729][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.849869][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.861423][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.872084][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.898536][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.910686][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.920752][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.938571][ T4287] Bluetooth: hci0: command 0x0409 tx timeout [ 77.955348][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.015918][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 78.022195][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 78.033073][ T4275] device hsr_slave_0 entered promiscuous mode [ 78.040456][ T4275] device hsr_slave_1 entered promiscuous mode [ 78.086683][ T4272] device hsr_slave_0 entered promiscuous mode [ 78.093625][ T4272] device hsr_slave_1 entered promiscuous mode [ 78.096553][ T4287] Bluetooth: hci1: command 0x0409 tx timeout [ 78.101159][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 78.113072][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.121212][ T4272] Cannot create hsr debugfs directory [ 78.181461][ T4276] device hsr_slave_0 entered promiscuous mode [ 78.189418][ T4276] device hsr_slave_1 entered promiscuous mode [ 78.199888][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.207669][ T4276] Cannot create hsr debugfs directory [ 78.220500][ T4274] device hsr_slave_0 entered promiscuous mode [ 78.227282][ T4274] device hsr_slave_1 entered promiscuous mode [ 78.233785][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.241861][ T4274] Cannot create hsr debugfs directory [ 78.256624][ T4273] device hsr_slave_0 entered promiscuous mode [ 78.263326][ T4273] device hsr_slave_1 entered promiscuous mode [ 78.270181][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.278149][ T4273] Cannot create hsr debugfs directory [ 78.646181][ T4272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.659612][ T4272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.671057][ T4272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.680866][ T4272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.739194][ T4275] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.753185][ T4275] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.762760][ T4275] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.773373][ T4275] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.848734][ T4273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.862292][ T4273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.877871][ T4273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.893969][ T4273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.972275][ T4274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.983846][ T4274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.999163][ T4274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.010926][ T4274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.085178][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.120016][ T4276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.142284][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.154313][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.167234][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.177187][ T4276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.208329][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.217712][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.228030][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.235376][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.248762][ T4276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.264239][ T4276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.274391][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.283357][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.294399][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.305828][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.312942][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.328707][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.339095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.361496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.372769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.381815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.393168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.434208][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.443560][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.452944][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.462962][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.481248][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.494689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.504284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.517523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.525432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.534973][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.554666][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.575397][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.590871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.601067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.615207][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.622428][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.637070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.646338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.656811][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.663953][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.695697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.705384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.723052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.733356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.748997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.790771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.807551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.815586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.831052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.840399][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.849671][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.859917][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.874842][ T4275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.886627][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.900430][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.910344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.924381][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.933608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.952117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.961955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.977376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.016150][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 80.035647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.057330][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.072004][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.079198][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.101341][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 80.101352][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 80.127722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.152675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.162576][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.169772][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.177875][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 80.177883][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 80.190943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.200250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.209291][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.216537][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.224916][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.234633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.244354][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.251524][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.260990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.270073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.279362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.288080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.333792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.351129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.364649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.375849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.392420][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.409076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.431731][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.444664][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.459385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.472773][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.485239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.498346][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.512474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.522804][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.538313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.547984][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.560000][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.577759][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.592552][ T4273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.611821][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.630935][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.646485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.664276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.675101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.688652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.698886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.707506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.716976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.724774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.732819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.758693][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.791329][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.801909][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.809097][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.840807][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.857032][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.865688][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.878253][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.892746][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.912752][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.928134][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.935283][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.944722][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.984453][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.002571][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.020325][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.041762][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.109586][ T4272] device veth0_vlan entered promiscuous mode [ 81.131670][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.141328][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.155207][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.165504][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.180858][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.192059][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.206296][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.236482][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.266523][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.276994][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.297969][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.316465][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.339708][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.361072][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.392509][ T4272] device veth1_vlan entered promiscuous mode [ 81.402394][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.419729][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.446878][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.516249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.524605][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.548554][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.574547][ T4275] device veth0_vlan entered promiscuous mode [ 81.611836][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.627080][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.635551][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.668006][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.684634][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.697228][ T4272] device veth0_macvtap entered promiscuous mode [ 81.718238][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.732084][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.740172][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.757693][ T4275] device veth1_vlan entered promiscuous mode [ 81.771606][ T4272] device veth1_macvtap entered promiscuous mode [ 81.864969][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.876849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.885084][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.926876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.934460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.966081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.975092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.031481][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.060865][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.075147][ T4275] device veth0_macvtap entered promiscuous mode [ 82.101659][ T4273] device veth0_vlan entered promiscuous mode [ 82.107783][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 82.113966][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.160993][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.176406][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 82.176413][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 82.191252][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.208457][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.222167][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.232079][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.246873][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.255131][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.256198][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 82.265677][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 82.275617][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.287965][ T4275] device veth1_macvtap entered promiscuous mode [ 82.329925][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.341833][ T4273] device veth1_vlan entered promiscuous mode [ 82.351095][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.376674][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.411952][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.430384][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.457174][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.478451][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.514441][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.559627][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.590409][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.619282][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.648191][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.658190][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.675855][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.684604][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.725574][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.736928][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.748327][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.759217][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.770298][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.782188][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.823786][ T4273] device veth0_macvtap entered promiscuous mode [ 82.842071][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.851152][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.860655][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.870189][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.879191][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.888140][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.896946][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.919657][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.929418][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.942660][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.952814][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.967156][ T4273] device veth1_macvtap entered promiscuous mode [ 83.043191][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.066725][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.085853][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.106040][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.118621][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.132065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.143998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.158646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.191575][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.210552][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.221551][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.229570][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.241829][ T4276] device veth0_vlan entered promiscuous mode [ 83.250267][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.261665][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.271925][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.283252][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.295508][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.324410][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.337211][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.366377][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.375133][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.385998][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.394741][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.424166][ T4276] device veth1_vlan entered promiscuous mode [ 83.447568][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.455726][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.470829][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.485252][ T4274] device veth0_vlan entered promiscuous mode [ 83.501358][ T4274] device veth1_vlan entered promiscuous mode [ 83.508212][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.531196][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.538933][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.540744][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.562576][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.573447][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.582916][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.592205][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.600858][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.685048][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.694521][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.703941][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.716344][ T4276] device veth0_macvtap entered promiscuous mode [ 83.730015][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.752420][ T4276] device veth1_macvtap entered promiscuous mode [ 83.758906][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.774674][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.793220][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.805465][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.814445][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.824023][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.829240][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.844913][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.869360][ T4274] device veth0_macvtap entered promiscuous mode [ 83.913986][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.925203][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.938988][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.950100][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.961548][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.975853][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.992907][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.003958][ T4274] device veth1_macvtap entered promiscuous mode [ 84.016433][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.024288][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.048897][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.059027][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.067744][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.077133][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.086202][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.100592][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.112607][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.123268][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.135155][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.145300][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.156499][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.171468][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.186214][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 84.221234][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.240830][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.255938][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 84.260073][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 84.284022][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.292898][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.311716][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.321634][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.330878][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.339844][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 84.347281][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 84.359834][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.383518][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.407360][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.428016][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.438350][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.449402][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.459548][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.470299][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.480390][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.491187][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.518632][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.546184][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.554049][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.566731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.580255][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.619211][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.640620][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.663139][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.683512][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.705933][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.725845][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.755922][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.775875][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.800924][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.841740][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.870809][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.884283][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.937398][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.958720][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.971959][ T4360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 84.986015][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.001094][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.128835][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.162218][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.219420][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.288861][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.312551][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.331242][ T4343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.378692][ T4343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.406820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.425189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.462764][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.494509][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.524353][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.882677][ T129] cfg80211: failed to load regulatory.db [ 87.245807][ C0] sched: RT throttling activated [ 87.427527][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.572888][ T4392] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9'. [ 87.682710][ T7] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 87.693550][ T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.714588][ T7] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 87.744297][ T7] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 87.771014][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.886794][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 87.894522][ T14] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 87.918140][ T14] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 87.950541][ T14] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 87.977533][ T14] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 88.009247][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.070604][ T4322] usb 2-1: USB disconnect, device number 2 [ 88.276570][ T14] usb 5-1: USB disconnect, device number 2 [ 90.099312][ T4475] syz.3.11 (4475) used greatest stack depth: 18096 bytes left [ 90.407408][ T4368] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.476727][ T4368] usb 2-1: Using ep0 maxpacket: 32 [ 91.489810][ T4368] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 91.507159][ T4368] usb 2-1: config 0 has no interface number 0 [ 91.513434][ T4368] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 91.545261][ T4368] usb 2-1: config 0 interface 89 has no altsetting 0 [ 91.570056][ T4368] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 91.587582][ T4368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.616658][ T4368] usb 2-1: Product: syz [ 91.620900][ T4368] usb 2-1: Manufacturer: syz [ 91.625539][ T4368] usb 2-1: SerialNumber: syz [ 91.666404][ T4368] usb 2-1: config 0 descriptor?? [ 91.706660][ T4368] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 91.717025][ T4368] em28xx 2-1:0.89: Video interface 89 found: [ 91.948112][ T4499] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.075875][ T3655] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.226253][ T4503] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 92.233122][ T4503] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.251679][ T4503] vhci_hcd vhci_hcd.0: Device attached [ 92.279071][ T3655] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 92.291869][ T4368] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 92.315883][ T3655] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 92.331046][ T3655] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 92.352833][ T3655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.381790][ T4368] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 92.404458][ T4368] em28xx 2-1:0.89: board has no eeprom [ 92.475962][ T4368] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 92.495356][ T4368] em28xx 2-1:0.89: analog set to bulk mode. [ 92.501612][ T4322] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.515885][ T14] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 92.560733][ T4368] usb 2-1: USB disconnect, device number 3 [ 92.568519][ T7] em28xx 2-1:0.89: Registering V4L2 extension [ 92.582759][ T4317] usb 3-1: USB disconnect, device number 2 [ 92.588472][ T4368] em28xx 2-1:0.89: Disconnecting em28xx [ 92.792834][ T7] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 92.800949][ T7] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 92.808096][ T7] em28xx 2-1:0.89: No AC97 audio processor [ 92.819787][ T7] usb 2-1: Decoder not found [ 92.824445][ T7] em28xx 2-1:0.89: failed to create media graph [ 92.830861][ T4322] usb 4-1: Using ep0 maxpacket: 8 [ 92.836535][ T7] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 92.846388][ T4322] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 92.854614][ T4322] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 92.871317][ T7] em28xx 2-1:0.89: Registering snapshot button... [ 92.891516][ T7] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input5 [ 92.903328][ T4322] usb 4-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 92.922523][ T4322] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 92.947515][ T7] em28xx 2-1:0.89: Remote control support is not available for this card. [ 92.979868][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.988786][ T4368] em28xx 2-1:0.89: Closing input extension [ 92.995608][ T4368] em28xx 2-1:0.89: Deregistering snapshot button [ 93.054597][ T4368] em28xx 2-1:0.89: Freeing device [ 93.212136][ T4504] vhci_hcd: cannot find a urb of seqnum 3356168 max seqnum 1 [ 93.216850][ T4322] usb 4-1: USB disconnect, device number 2 [ 93.234640][ T4463] vhci_hcd: stop threads [ 93.245044][ T4463] vhci_hcd: release socket [ 93.271471][ T4463] vhci_hcd: disconnect device [ 94.400781][ T129] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.434297][ T4534] trusted_key: encrypted_key: key user:syz not found [ 94.566025][ T129] usb 3-1: device descriptor read/64, error -71 [ 94.632030][ T4538] netlink: 68 bytes leftover after parsing attributes in process `syz.0.34'. [ 94.906744][ T129] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 95.896061][ T129] usb 3-1: device descriptor read/64, error -71 [ 96.016779][ T129] usb usb3-port1: attempt power cycle [ 96.505987][ T129] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.576768][ T129] usb 3-1: device descriptor read/8, error -71 [ 96.856009][ T129] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 96.926417][ T129] usb 3-1: device descriptor read/8, error -71 [ 97.096694][ T129] usb usb3-port1: unable to enumerate USB device [ 97.164287][ T4608] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 97.170887][ T4608] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.194558][ T4608] vhci_hcd vhci_hcd.0: Device attached [ 97.566045][ T7] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 97.616821][ T14] vhci_hcd: vhci_device speed not set [ 97.646055][ T4322] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.855987][ T4322] usb 5-1: Using ep0 maxpacket: 8 [ 97.870707][ T4322] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 97.980070][ T4322] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 98.010211][ T4322] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 98.040231][ T4322] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 98.066619][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.142329][ T4317] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.323734][ T4609] vhci_hcd: cannot find a urb of seqnum 3356168 max seqnum 1 [ 98.337808][ T4368] usb 5-1: USB disconnect, device number 3 [ 98.360156][ T11] vhci_hcd: stop threads [ 98.364467][ T11] vhci_hcd: release socket [ 98.402398][ T11] vhci_hcd: disconnect device [ 98.501562][ T4317] usb 2-1: Using ep0 maxpacket: 32 [ 98.524246][ T4317] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 98.532633][ T4317] usb 2-1: config 0 has no interface number 0 [ 98.539099][ T4317] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 98.549255][ T4317] usb 2-1: config 0 interface 89 has no altsetting 0 [ 98.557256][ T4619] trusted_key: encrypted_key: key user:syz not found [ 98.562620][ T4317] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 98.579848][ T129] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 98.588908][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.598253][ T4317] usb 2-1: Product: syz [ 98.602464][ T4317] usb 2-1: Manufacturer: syz [ 98.620791][ T4317] usb 2-1: SerialNumber: syz [ 98.658052][ T4317] usb 2-1: config 0 descriptor?? [ 98.676554][ T4317] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 98.696135][ T4317] em28xx 2-1:0.89: Video interface 89 found: [ 98.788731][ T129] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 98.805422][ T129] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 98.827581][ T129] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.885854][ T129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.146669][ T4368] usb 3-1: USB disconnect, device number 7 [ 99.314451][ T4630] netlink: 68 bytes leftover after parsing attributes in process `syz.4.48'. [ 99.367117][ T4317] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 99.445374][ T4317] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 99.465620][ T4317] em28xx 2-1:0.89: board has no eeprom [ 99.555845][ T4317] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 99.571212][ T4317] em28xx 2-1:0.89: analog set to bulk mode. [ 99.592893][ T129] em28xx 2-1:0.89: Registering V4L2 extension [ 99.607849][ T4317] usb 2-1: USB disconnect, device number 4 [ 99.627651][ T4317] em28xx 2-1:0.89: Disconnecting em28xx [ 99.758904][ T129] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 99.766350][ T129] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 99.773420][ T129] em28xx 2-1:0.89: No AC97 audio processor [ 99.901316][ T129] usb 2-1: Decoder not found [ 99.920284][ T129] em28xx 2-1:0.89: failed to create media graph [ 99.927649][ T129] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 99.950016][ T129] em28xx 2-1:0.89: Registering snapshot button... [ 99.984619][ T129] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input6 [ 100.048388][ T129] em28xx 2-1:0.89: Remote control support is not available for this card. [ 100.086075][ T4317] em28xx 2-1:0.89: Closing input extension [ 100.091975][ T4317] em28xx 2-1:0.89: Deregistering snapshot button [ 100.133471][ T4317] em28xx 2-1:0.89: Freeing device [ 100.565895][ T4317] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 100.735945][ T4317] usb 2-1: device descriptor read/64, error -71 [ 101.030667][ T4317] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 101.319468][ T4317] usb 2-1: device descriptor read/64, error -71 [ 101.626625][ T4317] usb usb2-port1: attempt power cycle [ 102.538629][ T4695] trusted_key: encrypted_key: key user:syz not found [ 102.690819][ T4317] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 102.736095][ T7] vhci_hcd: vhci_device speed not set [ 102.745707][ T4317] usb 2-1: device descriptor read/8, error -71 [ 102.836573][ T4701] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 102.843169][ T4701] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 102.886140][ T4701] vhci_hcd vhci_hcd.0: Device attached [ 103.015912][ T4317] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 103.112710][ T4317] usb 2-1: device descriptor read/8, error -71 [ 103.171444][ T129] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 103.185976][ T22] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.250019][ T4317] usb usb2-port1: unable to enumerate USB device [ 103.376000][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 103.391023][ T22] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 103.411508][ T22] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 103.424245][ T22] usb 4-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 103.438323][ T22] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 103.451274][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.670515][ T4702] vhci_hcd: cannot find a urb of seqnum 3356168 max seqnum 2 [ 103.674036][ T22] usb 4-1: USB disconnect, device number 3 [ 103.688225][ T4458] vhci_hcd: stop threads [ 103.695993][ T4317] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 103.706493][ T4458] vhci_hcd: release socket [ 103.714518][ T4458] vhci_hcd: disconnect device [ 103.736107][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.896023][ T4317] usb 2-1: Using ep0 maxpacket: 32 [ 103.902989][ T4317] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 103.932276][ T4317] usb 2-1: config 0 has no interface number 0 [ 103.938812][ T4317] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 103.950629][ T27] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 103.971322][ T27] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 103.990410][ T4317] usb 2-1: config 0 interface 89 has no altsetting 0 [ 104.018146][ T27] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.047986][ T4317] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 104.067009][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.075269][ T27] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 104.089020][ T4317] usb 2-1: Product: syz [ 104.093246][ T4317] usb 2-1: Manufacturer: syz [ 104.102627][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.114379][ T4317] usb 2-1: SerialNumber: syz [ 104.133071][ T4317] usb 2-1: config 0 descriptor?? [ 104.155720][ T4317] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 104.186312][ T4317] em28xx 2-1:0.89: Video interface 89 found: [ 104.236397][ T27] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 104.289169][ T4711] udevd[4711]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.356864][ T27] usb 1-1: USB disconnect, device number 2 [ 104.779670][ T4317] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 105.107238][ T4317] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 105.241976][ T4317] em28xx 2-1:0.89: board has no eeprom [ 105.435978][ T4317] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 105.445817][ T4317] em28xx 2-1:0.89: analog set to bulk mode. [ 105.529283][ T4317] usb 2-1: USB disconnect, device number 9 [ 105.567113][ T4317] em28xx 2-1:0.89: Disconnecting em28xx [ 105.572798][ T22] em28xx 2-1:0.89: Registering V4L2 extension [ 105.684794][ T4737] netlink: 68 bytes leftover after parsing attributes in process `syz.3.69'. [ 106.464037][ T4740] trusted_key: encrypted_key: key user:syz not found [ 106.825874][ T27] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.166108][ T27] usb 5-1: device descriptor read/64, error -71 [ 107.398097][ T22] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 107.405342][ T22] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 107.435882][ T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 107.477046][ T22] em28xx 2-1:0.89: No AC97 audio processor [ 107.511917][ T22] usb 2-1: Decoder not found [ 107.525955][ T22] em28xx 2-1:0.89: failed to create media graph [ 108.175708][ T27] usb 5-1: device descriptor read/64, error -71 [ 108.182169][ T22] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 108.287259][ T22] em28xx 2-1:0.89: Registering snapshot button... [ 108.325623][ T27] usb usb5-port1: attempt power cycle [ 108.355816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 108.375804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 108.395814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 108.410562][ T129] vhci_hcd: vhci_device speed not set [ 108.435807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 108.469791][ T22] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input7 [ 108.482622][ T22] em28xx 2-1:0.89: Remote control support is not available for this card. [ 108.491710][ T4317] em28xx 2-1:0.89: Closing input extension [ 108.498003][ T4317] em28xx 2-1:0.89: Deregistering snapshot button [ 108.602507][ T4317] em28xx 2-1:0.89: Freeing device [ 108.885985][ T27] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 108.926690][ T27] usb 5-1: device descriptor read/8, error -71 [ 110.043890][ T4317] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 110.051668][ T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 110.245864][ T4317] usb 2-1: Using ep0 maxpacket: 32 [ 110.253125][ T4317] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 110.275908][ T27] usb 5-1: device not accepting address 7, error -71 [ 110.286578][ T27] usb usb5-port1: unable to enumerate USB device [ 110.323836][ T4317] usb 2-1: config 0 has no interface number 0 [ 110.343989][ T4317] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 110.365034][ T4317] usb 2-1: config 0 interface 89 has no altsetting 0 [ 110.375161][ T4317] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 110.395379][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.417948][ T4317] usb 2-1: Product: syz [ 110.440860][ T4317] usb 2-1: Manufacturer: syz [ 110.445531][ T4317] usb 2-1: SerialNumber: syz [ 110.484658][ T4317] usb 2-1: config 0 descriptor?? [ 110.504145][ T4317] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 110.533843][ T4317] em28xx 2-1:0.89: Video interface 89 found: [ 110.955979][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.108509][ T4317] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 111.186385][ T27] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 111.205978][ T4317] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 111.218420][ T27] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 111.239462][ T4317] em28xx 2-1:0.89: board has no eeprom [ 111.249706][ T27] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.265357][ T27] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 111.280327][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.326005][ T4317] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 111.338627][ T4317] em28xx 2-1:0.89: analog set to bulk mode. [ 111.385046][ T4317] usb 2-1: USB disconnect, device number 10 [ 111.433422][ T4317] em28xx 2-1:0.89: Disconnecting em28xx [ 111.640899][ T27] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 111.672463][ T27] em28xx 2-1:0.89: Registering V4L2 extension [ 111.700606][ T4379] udevd[4379]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.799944][ T4320] usb 1-1: USB disconnect, device number 3 [ 111.921303][ T27] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 111.935829][ T27] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 111.942929][ T27] em28xx 2-1:0.89: No AC97 audio processor [ 111.988219][ T27] usb 2-1: Decoder not found [ 112.003148][ T27] em28xx 2-1:0.89: failed to create media graph [ 112.229235][ T27] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 112.238285][ T27] em28xx 2-1:0.89: Registering snapshot button... [ 112.241750][ T4823] trusted_key: encrypted_key: key user:syz not found [ 112.246746][ T27] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input8 [ 112.267250][ T27] em28xx 2-1:0.89: Remote control support is not available for this card. [ 112.289024][ T4317] em28xx 2-1:0.89: Closing input extension [ 112.299059][ T4317] em28xx 2-1:0.89: Deregistering snapshot button [ 112.701415][ T4317] em28xx 2-1:0.89: Freeing device [ 114.046177][ T4317] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 114.360164][ T4317] usb 5-1: no configurations [ 114.367693][ T4317] usb 5-1: can't read configurations, error -22 [ 114.656148][ T4317] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 114.969933][ T4317] usb 5-1: no configurations [ 114.974872][ T4317] usb 5-1: can't read configurations, error -22 [ 114.983130][ T4317] usb usb5-port1: attempt power cycle [ 115.105865][ T4322] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.136565][ T129] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 115.305973][ T4322] usb 4-1: Using ep0 maxpacket: 8 [ 115.313184][ T4322] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 115.355678][ T4322] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 115.418496][ T4322] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.454834][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.466177][ T4317] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 115.506079][ T129] usb 2-1: Using ep0 maxpacket: 32 [ 115.891635][ T4317] usb 5-1: no configurations [ 115.902214][ T4317] usb 5-1: can't read configurations, error -22 [ 115.937154][ T129] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 116.124455][ T129] usb 2-1: config 0 has no interface number 0 [ 116.134577][ T129] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 116.165287][ T129] usb 2-1: config 0 interface 89 has no altsetting 0 [ 116.203370][ T129] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 116.238080][ T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.259341][ T129] usb 2-1: Product: syz [ 116.263607][ T129] usb 2-1: Manufacturer: syz [ 116.279145][ T4317] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 116.299371][ T129] usb 2-1: SerialNumber: syz [ 116.331741][ T4317] usb 5-1: no configurations [ 116.341862][ T129] usb 2-1: config 0 descriptor?? [ 116.347162][ T4317] usb 5-1: can't read configurations, error -22 [ 116.376034][ T4317] usb usb5-port1: unable to enumerate USB device [ 116.386958][ T129] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 116.409213][ T129] em28xx 2-1:0.89: Video interface 89 found: [ 116.559343][ T4873] loop0: detected capacity change from 0 to 512 [ 116.601284][ T4873] EXT4-fs: Ignoring removed nobh option [ 116.607429][ T4873] ext4: Unknown parameter 'nouser_xattr' [ 116.972425][ T129] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 117.000293][ T4875] trusted_key: encrypted_key: key user:syz not found [ 117.082262][ T129] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 117.133242][ T129] em28xx 2-1:0.89: board has no eeprom [ 117.220600][ T129] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 117.342144][ T129] em28xx 2-1:0.89: analog set to bulk mode. [ 117.379387][ T129] usb 2-1: USB disconnect, device number 11 [ 117.389766][ T129] em28xx 2-1:0.89: Disconnecting em28xx [ 117.395441][ T4317] em28xx 2-1:0.89: Registering V4L2 extension [ 117.426032][ T4884] netlink: 68 bytes leftover after parsing attributes in process `syz.0.104'. [ 117.678776][ T4317] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 117.694857][ T4317] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 117.705144][ T4317] em28xx 2-1:0.89: No AC97 audio processor [ 117.749743][ T4317] usb 2-1: Decoder not found [ 117.758508][ T4317] em28xx 2-1:0.89: failed to create media graph [ 117.765037][ T4317] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 117.960713][ T4898] ================================================================== [ 117.961950][ T4317] em28xx 2-1:0.89: Registering snapshot button... [ 117.968833][ T4898] BUG: KASAN: use-after-free in v4l2_open+0x352/0x360 [ 117.968888][ T4898] Read of size 4 at addr ffff8880740187e8 by task v4l_id/4898 [ 117.968905][ T4898] [ 117.968924][ T4898] CPU: 0 PID: 4898 Comm: v4l_id Not tainted syzkaller #0 [ 117.968942][ T4898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.968954][ T4898] Call Trace: [ 117.984144][ T4317] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input9 [ 117.989622][ T4898] [ 117.989633][ T4898] dump_stack_lvl+0x188/0x24e [ 117.989660][ T4898] ? __lock_acquire+0x7d10/0x7d10 [ 117.989688][ T4898] ? show_regs_print_info+0x12/0x12 [ 117.989709][ T4898] ? load_image+0x400/0x400 [ 118.021173][ T4317] em28xx 2-1:0.89: Remote control support is not available for this card. [ 118.022885][ T4898] ? __virt_addr_valid+0x465/0x540 [ 118.036298][ T129] em28xx 2-1:0.89: Closing input extension [ 118.040774][ T4898] ? v4l2_open+0x352/0x360 [ 118.045315][ T129] em28xx 2-1:0.89: Deregistering snapshot button [ 118.053792][ T4898] print_report+0xa8/0x210 [ 118.053827][ T4898] kasan_report+0x10b/0x140 [ 118.053866][ T4898] ? v4l2_open+0x352/0x360 [ 118.089130][ T4898] v4l2_open+0x352/0x360 [ 118.093442][ T4898] chrdev_open+0x5c5/0x6a0 [ 118.097913][ T4898] ? cd_forget+0x160/0x160 [ 118.102380][ T4898] ? fsnotify_perm+0x39b/0x550 [ 118.107204][ T4898] ? cd_forget+0x160/0x160 [ 118.111935][ T4898] do_dentry_open+0x7e9/0x10d0 [ 118.116759][ T4898] path_openat+0x2635/0x2ee0 [ 118.121408][ T4898] ? verify_lock_unused+0x140/0x140 [ 118.126655][ T4898] ? do_syscall_64+0x4c/0xa0 [ 118.131300][ T4898] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.137422][ T4898] ? do_filp_open+0x430/0x430 [ 118.142154][ T4898] do_filp_open+0x1f1/0x430 [ 118.146714][ T4898] ? vfs_tmpfile+0x480/0x480 [ 118.151367][ T4898] ? _raw_spin_unlock+0x24/0x40 [ 118.156269][ T4898] ? alloc_fd+0x58f/0x630 [ 118.160653][ T4898] do_sys_openat2+0x150/0x4b0 [ 118.165389][ T4898] ? do_sys_open+0xe0/0xe0 [ 118.169872][ T4898] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 118.175907][ T4898] ? lock_chain_count+0x20/0x20 [ 118.180819][ T4898] __x64_sys_openat+0x135/0x160 [ 118.185901][ T4898] do_syscall_64+0x4c/0xa0 [ 118.190367][ T4898] ? clear_bhb_loop+0x60/0xb0 [ 118.195102][ T4898] ? clear_bhb_loop+0x60/0xb0 [ 118.199832][ T4898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.205760][ T4898] RIP: 0033:0x7fc2930a7407 [ 118.210419][ T4898] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 118.230076][ T4898] RSP: 002b:00007ffdc63a8b20 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 118.238539][ T4898] RAX: ffffffffffffffda RBX: 00007fc2937c3880 RCX: 00007fc2930a7407 [ 118.246558][ T4898] RDX: 0000000000000000 RSI: 00007ffdc63a9f1c RDI: ffffffffffffff9c [ 118.254579][ T4898] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 118.262597][ T4898] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 118.270623][ T4898] R13: 00007ffdc63a8d70 R14: 00007fc293922000 R15: 00005653a49ab4d8 [ 118.278653][ T4898] [ 118.281724][ T4898] [ 118.284091][ T4898] Allocated by task 4317: [ 118.288451][ T4898] kasan_set_track+0x4b/0x70 [ 118.293100][ T4898] __kasan_kmalloc+0x8e/0xa0 [ 118.297744][ T4898] em28xx_v4l2_init+0x107/0x2e70 [ 118.302737][ T4898] em28xx_init_extension+0x118/0x1b0 [ 118.308075][ T4898] process_one_work+0x8a2/0x1160 [ 118.313079][ T4898] worker_thread+0xd83/0x1270 [ 118.317807][ T4898] kthread+0x29d/0x330 [ 118.321918][ T4898] ret_from_fork+0x1f/0x30 [ 118.326388][ T4898] [ 118.328749][ T4898] Freed by task 4317: [ 118.332759][ T4898] kasan_set_track+0x4b/0x70 [ 118.337407][ T4898] kasan_save_free_info+0x2d/0x50 [ 118.342477][ T4898] ____kasan_slab_free+0x126/0x1e0 [ 118.347644][ T4898] slab_free_freelist_hook+0x131/0x1a0 [ 118.353159][ T4898] __kmem_cache_free+0xb6/0x1f0 [ 118.358063][ T4898] em28xx_v4l2_init+0x166c/0x2e70 [ 118.363233][ T4898] em28xx_init_extension+0x118/0x1b0 [ 118.368570][ T4898] process_one_work+0x8a2/0x1160 [ 118.373562][ T4898] worker_thread+0xd83/0x1270 [ 118.378283][ T4898] kthread+0x29d/0x330 [ 118.382393][ T4898] ret_from_fork+0x1f/0x30 [ 118.386862][ T4898] [ 118.389219][ T4898] The buggy address belongs to the object at ffff888074018000 [ 118.389219][ T4898] which belongs to the cache kmalloc-8k of size 8192 [ 118.403338][ T4898] The buggy address is located 2024 bytes inside of [ 118.403338][ T4898] 8192-byte region [ffff888074018000, ffff88807401a000) [ 118.416922][ T4898] [ 118.419273][ T4898] The buggy address belongs to the physical page: [ 118.425725][ T4898] page:ffffea0001d00600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x74018 [ 118.435912][ T4898] head:ffffea0001d00600 order:3 compound_mapcount:0 compound_pincount:0 [ 118.444274][ T4898] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 118.452409][ T4898] raw: 00fff00000010200 ffffea00007c9800 dead000000000004 ffff888017442280 [ 118.461035][ T4898] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 118.469656][ T4898] page dumped because: kasan: bad access detected [ 118.476117][ T4898] page_owner tracks the page as allocated [ 118.481893][ T4898] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4263, tgid 4263 (syz-executor), ts 72771683341, free_ts 62864279072 [ 118.502527][ T4898] post_alloc_hook+0x173/0x1a0 [ 118.507360][ T4898] get_page_from_freelist+0x1a1e/0x1ab0 [ 118.512973][ T4898] __alloc_pages+0x1ec/0x4f0 [ 118.517640][ T4898] alloc_slab_page+0x5d/0x160 [ 118.522378][ T4898] new_slab+0x87/0x2c0 [ 118.526500][ T4898] ___slab_alloc+0xbc6/0x1240 [ 118.531231][ T4898] __kmem_cache_alloc_node+0x1a0/0x260 [ 118.536733][ T4898] kmalloc_trace+0x26/0xe0 [ 118.541210][ T4898] tomoyo_init_log+0x1090/0x1f80 [ 118.546300][ T4898] tomoyo_supervisor+0x35f/0x11a0 [ 118.551407][ T4898] tomoyo_env_perm+0x14e/0x1f0 [ 118.556226][ T4898] tomoyo_find_next_domain+0x1578/0x1a50 [ 118.561914][ T4898] tomoyo_bprm_check_security+0x100/0x150 [ 118.567702][ T4898] security_bprm_check+0x5e/0x90 [ 118.572687][ T4898] bprm_execve+0xa50/0x17e0 [ 118.577241][ T4898] do_execveat_common+0x51b/0x6c0 [ 118.582318][ T4898] page last free stack trace: [ 118.587023][ T4898] free_unref_page_prepare+0x8b4/0x9a0 [ 118.592543][ T4898] free_unref_page+0x2e/0x3f0 [ 118.597270][ T4898] qlist_free_all+0x76/0xe0 [ 118.601822][ T4898] kasan_quarantine_reduce+0x144/0x160 [ 118.607330][ T4898] __kasan_slab_alloc+0x1e/0x80 [ 118.612262][ T4898] slab_post_alloc_hook+0x4b/0x480 [ 118.617424][ T4898] kmem_cache_alloc+0x123/0x2f0 [ 118.622321][ T4898] vm_area_dup+0x23/0x1a0 [ 118.626691][ T4898] __split_vma+0xb9/0x500 [ 118.631066][ T4898] mprotect_fixup+0x5b1/0x800 [ 118.635808][ T4898] do_mprotect_pkey+0x7fe/0xba0 [ 118.640708][ T4898] __x64_sys_mprotect+0x7c/0x90 [ 118.645620][ T4898] do_syscall_64+0x4c/0xa0 [ 118.650078][ T4898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.656040][ T4898] [ 118.658393][ T4898] Memory state around the buggy address: [ 118.664052][ T4898] ffff888074018680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.672167][ T4898] ffff888074018700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.680265][ T4898] >ffff888074018780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.688361][ T4898] ^ [ 118.695859][ T4898] ffff888074018800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.703953][ T4898] ffff888074018880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.712047][ T4898] ================================================================== [ 118.734175][ T4898] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 118.741433][ T4898] CPU: 0 PID: 4898 Comm: v4l_id Not tainted syzkaller #0 [ 118.748499][ T4898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 118.758593][ T4898] Call Trace: [ 118.761898][ T4898] [ 118.764850][ T4898] dump_stack_lvl+0x188/0x24e [ 118.769556][ T4898] ? memcpy+0x3c/0x60 [ 118.773560][ T4898] ? show_regs_print_info+0x12/0x12 [ 118.778796][ T4898] ? load_image+0x400/0x400 [ 118.783334][ T4898] panic+0x2e5/0x730 [ 118.787257][ T4898] ? bpf_jit_dump+0xd0/0xd0 [ 118.791790][ T4898] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 118.797796][ T4898] ? _raw_spin_unlock+0x40/0x40 [ 118.802692][ T4898] ? print_memory_metadata+0x314/0x400 [ 118.808201][ T4898] check_panic_on_warn+0x80/0xa0 [ 118.813177][ T4898] ? v4l2_open+0x352/0x360 [ 118.817660][ T4898] end_report+0x66/0x110 [ 118.821975][ T4898] kasan_report+0x118/0x140 [ 118.826515][ T4898] ? v4l2_open+0x352/0x360 [ 118.830964][ T4898] v4l2_open+0x352/0x360 [ 118.835241][ T4898] chrdev_open+0x5c5/0x6a0 [ 118.839686][ T4898] ? cd_forget+0x160/0x160 [ 118.844136][ T4898] ? fsnotify_perm+0x39b/0x550 [ 118.848926][ T4898] ? cd_forget+0x160/0x160 [ 118.853366][ T4898] do_dentry_open+0x7e9/0x10d0 [ 118.858159][ T4898] path_openat+0x2635/0x2ee0 [ 118.862778][ T4898] ? verify_lock_unused+0x140/0x140 [ 118.868013][ T4898] ? do_syscall_64+0x4c/0xa0 [ 118.872635][ T4898] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.878745][ T4898] ? do_filp_open+0x430/0x430 [ 118.883456][ T4898] do_filp_open+0x1f1/0x430 [ 118.887988][ T4898] ? vfs_tmpfile+0x480/0x480 [ 118.892693][ T4898] ? _raw_spin_unlock+0x24/0x40 [ 118.897571][ T4898] ? alloc_fd+0x58f/0x630 [ 118.901928][ T4898] do_sys_openat2+0x150/0x4b0 [ 118.906635][ T4898] ? do_sys_open+0xe0/0xe0 [ 118.911076][ T4898] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 118.917082][ T4898] ? lock_chain_count+0x20/0x20 [ 118.921965][ T4898] __x64_sys_openat+0x135/0x160 [ 118.926850][ T4898] do_syscall_64+0x4c/0xa0 [ 118.931285][ T4898] ? clear_bhb_loop+0x60/0xb0 [ 118.935986][ T4898] ? clear_bhb_loop+0x60/0xb0 [ 118.940692][ T4898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.946701][ T4898] RIP: 0033:0x7fc2930a7407 [ 118.951151][ T4898] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 118.970789][ T4898] RSP: 002b:00007ffdc63a8b20 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 118.979221][ T4898] RAX: ffffffffffffffda RBX: 00007fc2937c3880 RCX: 00007fc2930a7407 [ 118.987210][ T4898] RDX: 0000000000000000 RSI: 00007ffdc63a9f1c RDI: ffffffffffffff9c [ 118.995215][ T4898] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 119.003227][ T4898] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 119.011223][ T4898] R13: 00007ffdc63a8d70 R14: 00007fc293922000 R15: 00005653a49ab4d8 [ 119.019224][ T4898] [ 119.022856][ T4898] Kernel Offset: disabled [ 119.027196][ T4898] Rebooting in 86400 seconds..