last executing test programs: 3m20.580540708s ago: executing program 0 (id=8): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) 3m20.182561735s ago: executing program 0 (id=10): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000010000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x5}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000340)={0xcf44, 0xfffffffffffffff7}, 0x0) r2 = io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x6a0d, 0x3000, 0x1, 0x387}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f0000000340)={0x0, 0x2fc3f, 0x10, 0x2, 0x377, 0x0, r2}, 0x1) 3m17.382634037s ago: executing program 4 (id=16): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r1, 0x60b, 0x70bd30, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x52}, 0x4040040) 3m17.094459033s ago: executing program 4 (id=18): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @local}, 0x14) 3m16.926047997s ago: executing program 0 (id=20): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 3m16.430637616s ago: executing program 4 (id=23): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001"], 0xe8}}, 0x0) 3m16.355762466s ago: executing program 0 (id=24): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0, 0x0, 0x8}, 0x18) open_by_handle_at(0xffffffffffffffff, 0x0, 0x8242) 3m15.002408183s ago: executing program 0 (id=26): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 3m14.893041876s ago: executing program 4 (id=28): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 3m14.115194403s ago: executing program 0 (id=32): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0x199d2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) rt_sigpending(0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x2) readv(r2, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0xc9}], 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0xb0, 0x1403, 0x1, 0x70bd2c, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) 3m13.33579564s ago: executing program 4 (id=33): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x58}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0xc1}, 0x8) connect$inet6(r0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYBLOB="8edbe80f1ac6220e13a24da209b2044cf270116e56bbcf85f77254f20527337153a052b2ed8b4f366467ae51ccf1ebfb96b83534a0fdfe99fd46ae6154b47bd6f49150091213b1d9b014db00"/87, @ANYRESDEC], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52000039af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "6035ae1e0fe721441705322025000000003e2a5b4377f7ad4bcf2b71d17e1ec0ef54e6773fd7264c39ea00c508ba607269613800"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, r3, 0x0) 3m12.826292254s ago: executing program 4 (id=37): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {0x7}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) 2m58.521826738s ago: executing program 32 (id=32): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0x199d2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) rt_sigpending(0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x2) readv(r2, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0xc9}], 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0xb0, 0x1403, 0x1, 0x70bd2c, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) 2m57.519039478s ago: executing program 33 (id=37): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {0x7}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) 11.566808968s ago: executing program 2 (id=870): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000f700008500000083000000bf090000000000005509010000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast1}, 0xa, 0x0, 0xfffd}}, 0x26) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 11.223896838s ago: executing program 2 (id=871): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e725fa7be3377f61566b045ad4a696e6f64650500000000c84401e228446536ae1fdb512beed85967245899b87de8daeb56e99142750dd53c38339435f507200d39d1b4de760592b98a01eae51b1489c709"]) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "954a5b", 0x50, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf3f030b7d27"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x5, 0xb]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9]}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 10.770648703s ago: executing program 2 (id=873): socket$inet(0x2, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 10.68391207s ago: executing program 3 (id=874): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, 0x0, 0x20000050) 10.378554311s ago: executing program 3 (id=876): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e725fa7be3377f61566b045ad4a696e6f64650500000000c84401e228446536ae1fdb512beed85967245899b87de8daeb56e99142750dd53c38339435f507200d39d1b4de760592b98a01eae51b1489c709da"]) syz_emit_ethernet(0x84, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "954a5b", 0x4e, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf3f030b7d27"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x5]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9]}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff08"], 0x6f4}}, 0x0) 10.264617692s ago: executing program 3 (id=877): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e725fa7be3377f61566b045ad4a696e6f64650500000000c84401e228446536ae1fdb512beed85967245899b87de8daeb56e99142750dd53c38339435f507200d39d1b4de760592b98a01eae51b1489c709da3a944f5427073a2d91ccdc0bc5e6f6fb66e623bc"]) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pim6reg1\x00', 0x1}) syz_emit_ethernet(0x80, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "954a5b", 0x4a, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x5, 0xb]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9]}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) 10.044726845s ago: executing program 3 (id=878): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x80601) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x9a89852df90617b2, 0x12, 0x0, 0x800000c, 0xffffffff, 0x4, 0x3, 0x0, 0x7cce8c743ee810df}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r3, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffd}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r7, 0x4) close_range(r6, r7, 0x0) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r4, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0xe) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000680), 0x73, 0x0, &(0x7f0000000800)="6faf77fddde1b261bb20ac6b177da01f33f294b818db689ef8ca53479475b169c006bafd48aea4a70781ac03390e62a50a341bd6633d95d673a05c83ae6e1baf6bcd4384362ff8eecdb6acd93c08b884c07fccde97628077f8d7ddae23ce744308e67043aee8382ef5431688ac56fbf796d579"}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) 8.793328496s ago: executing program 3 (id=883): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e725fa7be3377f61566b045ad4a696e6f64650500000000c84401e228446536ae1fdb512beed85967245899b87de8daeb56e99142750dd53c38339435f507200d39d1b4de760592b98a01eae51b1489c709"]) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "954a5b", 0x50, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf3f030b7d27"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x5, 0xb]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9]}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 6.944126271s ago: executing program 2 (id=887): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e725fa7be3377f61566b045ad4a696e6f64650500000000c84401e228446536ae1fdb512beed85967245899b87de8daeb56e99142750dd53c38339435f507200d39d1b4de760592b98a01eae51b1489c709da"]) syz_emit_ethernet(0x84, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "954a5b", 0x4e, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf3f030b7d27"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x5]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9]}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) 6.666524701s ago: executing program 2 (id=890): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') pread64(r4, &(0x7f0000000340)=""/246, 0xf6, 0x100000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) sendmsg$unix(r6, 0x0, 0x84) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 6.084502285s ago: executing program 1 (id=894): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e725fa7be3377f61566b045ad4a696e6f64650500000000c84401e228446536ae1fdb512beed85967245899b87de8daeb56e99142750dd53c38339435f507200d39d1b4de760592b98a01eae51b1489c709da3a944f54"]) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pim6reg1\x00', 0x1}) syz_emit_ethernet(0x84, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "954a5b", 0x4e, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf3f030b7d27"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xb]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9]}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.838676699s ago: executing program 1 (id=895): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.828101832s ago: executing program 5 (id=896): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r0, 0x60b, 0x70bd30, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x52}, 0x4040040) 5.751620966s ago: executing program 5 (id=897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') pread64(r4, &(0x7f0000000340)=""/246, 0xf6, 0x100000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) sendmsg$unix(r6, 0x0, 0x84) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 5.374868408s ago: executing program 2 (id=898): socket$inet(0x2, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 4.215344798s ago: executing program 5 (id=899): syz_emit_ethernet(0x7c, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "954a5b", 0x46, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9]}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.126665941s ago: executing program 6 (id=900): syz_open_dev$loop(0x0, 0x75f, 0xa382) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0) 4.095325647s ago: executing program 1 (id=901): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) syz_clone3(0x0, 0x0) 4.06079745s ago: executing program 6 (id=902): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="780000001000830404000000fe"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4.010892592s ago: executing program 3 (id=903): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 4.005725199s ago: executing program 5 (id=904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') pread64(r4, &(0x7f0000000340)=""/246, 0xf6, 0x100000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) sendmsg$unix(r6, 0x0, 0x84) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 3.976924853s ago: executing program 1 (id=905): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e725fa7be3377f61566b045ad4a696e6f64650500000000c84401e228446536ae1fdb512beed85967245899b87de8daeb56e99142750dd53c38339435f507200d39d1b4de760592b98a01eae51b1489c709da3a944f54"]) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pim6reg1\x00', 0x1}) syz_emit_ethernet(0x84, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "954a5b", 0x4e, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf3f030b7d27"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xb]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9]}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.538698797s ago: executing program 1 (id=906): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0xd0) sendmmsg$inet6(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001400)="2838f3", 0x3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8004) 2.538476345s ago: executing program 6 (id=907): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r1, 0x60b, 0x70bd30, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x52}, 0x4040040) 2.396697466s ago: executing program 1 (id=908): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.392151459s ago: executing program 6 (id=909): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/netlink\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 2.196749289s ago: executing program 6 (id=910): syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r3, 0x111, 0x2, 0x0, &(0x7f0000000080)) 2.172551878s ago: executing program 5 (id=911): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') pread64(r3, &(0x7f0000000340)=""/246, 0xf6, 0x100000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) sendmsg$unix(r5, 0x0, 0x84) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 1.981921108s ago: executing program 6 (id=912): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 5 (id=913): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.42' (ED25519) to the list of known hosts. [ 85.011412][ T5785] cgroup: Unknown subsys name 'net' [ 85.262400][ T5785] cgroup: Unknown subsys name 'cpuset' [ 85.306798][ T5785] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.934697][ T31] cfg80211: failed to load regulatory.db [ 87.216925][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.171273][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.174537][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.175677][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.189245][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.192311][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.192827][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.199217][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.199724][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.203333][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.204384][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.233611][ T5116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.235084][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.235863][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.238714][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.246848][ T5116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.274835][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.296985][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.310005][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.334486][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.335794][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.453807][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.455533][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.467630][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.472806][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.474031][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.340510][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 91.387902][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 91.392967][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 91.508929][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 91.845226][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 92.288699][ T5804] Bluetooth: hci3: command tx timeout [ 92.288836][ T5804] Bluetooth: hci1: command tx timeout [ 92.367882][ T5804] Bluetooth: hci2: command tx timeout [ 92.448021][ T5804] Bluetooth: hci0: command tx timeout [ 92.536241][ T5804] Bluetooth: hci4: command tx timeout [ 92.584654][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.586780][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.587502][ T5797] bridge_slave_0: entered allmulticast mode [ 92.590539][ T5797] bridge_slave_0: entered promiscuous mode [ 92.599312][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.599445][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.599798][ T5796] bridge_slave_0: entered allmulticast mode [ 92.604090][ T5796] bridge_slave_0: entered promiscuous mode [ 92.608854][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.608996][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.609191][ T5807] bridge_slave_0: entered allmulticast mode [ 92.615407][ T5807] bridge_slave_0: entered promiscuous mode [ 92.739075][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.739180][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.739356][ T5797] bridge_slave_1: entered allmulticast mode [ 92.741000][ T5797] bridge_slave_1: entered promiscuous mode [ 92.743785][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.743934][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.744062][ T5796] bridge_slave_1: entered allmulticast mode [ 92.745816][ T5796] bridge_slave_1: entered promiscuous mode [ 92.748872][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.749062][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.749234][ T5807] bridge_slave_1: entered allmulticast mode [ 92.752196][ T5807] bridge_slave_1: entered promiscuous mode [ 93.073270][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.073375][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.073491][ T5795] bridge_slave_0: entered allmulticast mode [ 93.075037][ T5795] bridge_slave_0: entered promiscuous mode [ 93.377265][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.377478][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.377678][ T5795] bridge_slave_1: entered allmulticast mode [ 93.379540][ T5795] bridge_slave_1: entered promiscuous mode [ 93.388390][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.392315][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.401157][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.549514][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.556927][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.711464][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.711731][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.711835][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.711949][ T5812] bridge_slave_0: entered allmulticast mode [ 93.713514][ T5812] bridge_slave_0: entered promiscuous mode [ 93.967251][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.967388][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.967741][ T5812] bridge_slave_1: entered allmulticast mode [ 93.969317][ T5812] bridge_slave_1: entered promiscuous mode [ 93.974672][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.280105][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.282052][ T5797] team0: Port device team_slave_0 added [ 94.284331][ T5796] team0: Port device team_slave_0 added [ 94.291739][ T5807] team0: Port device team_slave_0 added [ 94.366214][ T5804] Bluetooth: hci3: command tx timeout [ 94.366223][ T5799] Bluetooth: hci1: command tx timeout [ 94.446150][ T5804] Bluetooth: hci2: command tx timeout [ 94.464379][ T5797] team0: Port device team_slave_1 added [ 94.467337][ T5807] team0: Port device team_slave_1 added [ 94.470368][ T5796] team0: Port device team_slave_1 added [ 94.478225][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.526307][ T5804] Bluetooth: hci0: command tx timeout [ 94.606118][ T5804] Bluetooth: hci4: command tx timeout [ 94.820231][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.823312][ T5795] team0: Port device team_slave_0 added [ 95.369147][ T5795] team0: Port device team_slave_1 added [ 95.372815][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.372830][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.372845][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.376560][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.376588][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.376611][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.381011][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.381028][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.381397][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.628088][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.628103][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.628117][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.629720][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.629732][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.629746][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.630671][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.630683][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.630696][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.632849][ T5812] team0: Port device team_slave_0 added [ 95.781228][ T5812] team0: Port device team_slave_1 added [ 95.782813][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.782829][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.782854][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.888209][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.888232][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.888258][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.247945][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.247962][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.247976][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.446909][ T5804] Bluetooth: hci3: command tx timeout [ 96.446919][ T5799] Bluetooth: hci1: command tx timeout [ 96.481036][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.481058][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.481083][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.498529][ T5797] hsr_slave_0: entered promiscuous mode [ 96.500311][ T5797] hsr_slave_1: entered promiscuous mode [ 96.515749][ T5807] hsr_slave_0: entered promiscuous mode [ 96.517920][ T5807] hsr_slave_1: entered promiscuous mode [ 96.519243][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 96.519387][ T5807] Cannot create hsr debugfs directory [ 96.531511][ T5796] hsr_slave_0: entered promiscuous mode [ 96.533070][ T5796] hsr_slave_1: entered promiscuous mode [ 96.534118][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 96.534145][ T5796] Cannot create hsr debugfs directory [ 96.535974][ T5804] Bluetooth: hci2: command tx timeout [ 96.606199][ T5804] Bluetooth: hci0: command tx timeout [ 96.698003][ T5804] Bluetooth: hci4: command tx timeout [ 96.842366][ T5795] hsr_slave_0: entered promiscuous mode [ 96.843254][ T5795] hsr_slave_1: entered promiscuous mode [ 96.844125][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 96.844149][ T5795] Cannot create hsr debugfs directory [ 97.693366][ T5812] hsr_slave_0: entered promiscuous mode [ 97.694594][ T5812] hsr_slave_1: entered promiscuous mode [ 97.695340][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 97.695364][ T5812] Cannot create hsr debugfs directory [ 98.527987][ T5804] Bluetooth: hci3: command tx timeout [ 98.536299][ T5804] Bluetooth: hci1: command tx timeout [ 98.606187][ T5804] Bluetooth: hci2: command tx timeout [ 98.686865][ T5804] Bluetooth: hci0: command tx timeout [ 98.766249][ T5804] Bluetooth: hci4: command tx timeout [ 98.912960][ T5797] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.966694][ T5797] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.003265][ T5797] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.058126][ T5797] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.209794][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.254476][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.274285][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.335227][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.490835][ T5795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.514959][ T5795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.557308][ T5795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.624470][ T5795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.791465][ T5807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.845931][ T5807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.891858][ T5807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.940509][ T5807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.104332][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.112239][ T5812] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.176122][ T5812] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.223733][ T5812] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.247674][ T5812] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.355168][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.404434][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.405720][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.439609][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.481725][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.481869][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.587681][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.633865][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.644096][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.644240][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.730248][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.730386][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.811014][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.853500][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.881898][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.882065][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.935540][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.935679][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.050676][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.102812][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.143216][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.143452][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.252942][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.253082][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.375142][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.429286][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.432717][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.503965][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.504370][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.555337][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.897029][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.064080][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.231975][ T5796] veth0_vlan: entered promiscuous mode [ 102.332839][ T5796] veth1_vlan: entered promiscuous mode [ 102.496662][ T5795] veth0_vlan: entered promiscuous mode [ 102.534446][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.561991][ T5795] veth1_vlan: entered promiscuous mode [ 102.581561][ T5796] veth0_macvtap: entered promiscuous mode [ 102.623024][ T5796] veth1_macvtap: entered promiscuous mode [ 102.670244][ T5797] veth0_vlan: entered promiscuous mode [ 102.674448][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.730650][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.764635][ T5797] veth1_vlan: entered promiscuous mode [ 102.781645][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.813987][ T5795] veth0_macvtap: entered promiscuous mode [ 102.863340][ T149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.872837][ T5807] veth0_vlan: entered promiscuous mode [ 102.876596][ T5795] veth1_macvtap: entered promiscuous mode [ 102.878140][ T149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.887155][ T149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.914743][ T149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.989826][ T5807] veth1_vlan: entered promiscuous mode [ 103.091536][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.209371][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.212418][ T5812] veth0_vlan: entered promiscuous mode [ 103.214712][ T5797] veth0_macvtap: entered promiscuous mode [ 103.264634][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.311360][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.312145][ T5797] veth1_macvtap: entered promiscuous mode [ 103.343577][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.351025][ T5812] veth1_vlan: entered promiscuous mode [ 103.364206][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.383660][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.383694][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.493492][ T5807] veth0_macvtap: entered promiscuous mode [ 103.579086][ T5807] veth1_macvtap: entered promiscuous mode [ 103.591063][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.604162][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.604182][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.712506][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.794201][ T149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.823925][ T149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.860217][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.860415][ T149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.872935][ T149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.887081][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.887107][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.889404][ T5812] veth0_macvtap: entered promiscuous mode [ 103.926958][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.028249][ T5812] veth1_macvtap: entered promiscuous mode [ 104.116987][ T149] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.150728][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.195183][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.220964][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.220991][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.222364][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.339158][ T37] audit: type=1326 audit(1760359383.303:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5914 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9de19eec9 code=0x7ffc0000 [ 104.343790][ T37] audit: type=1326 audit(1760359383.313:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5914 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7ff9de19eec9 code=0x7ffc0000 [ 104.376220][ T37] audit: type=1326 audit(1760359383.313:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5914 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9de19eec9 code=0x7ffc0000 [ 104.376284][ T37] audit: type=1326 audit(1760359383.313:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5914 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7ff9de19eec9 code=0x7ffc0000 [ 104.376325][ T37] audit: type=1326 audit(1760359383.313:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5914 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9de19eec9 code=0x7ffc0000 [ 104.489456][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.523940][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 104.523976][ T5917] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6'. [ 104.748991][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.795434][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.795458][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.930918][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.931402][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.931745][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.932166][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.267384][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.267411][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.517462][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.517492][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.869665][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.869692][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.974385][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.974408][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.038555][ T37] audit: type=1326 audit(1760359385.013:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5929 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0335eec9 code=0x7ffc0000 [ 106.038635][ T37] audit: type=1326 audit(1760359385.013:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5929 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0335eec9 code=0x7ffc0000 [ 106.038681][ T37] audit: type=1326 audit(1760359385.013:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5929 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0335eec9 code=0x7ffc0000 [ 106.115149][ T37] audit: type=1326 audit(1760359385.033:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5929 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f2f0335eec9 code=0x7ffc0000 [ 106.153839][ T37] audit: type=1326 audit(1760359385.083:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5929 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0335eec9 code=0x7ffc0000 [ 106.198948][ T9] kernel read not supported for file /7/net/netlink (pid: 9 comm: kworker/0:0) [ 106.371604][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.371634][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.208615][ T5940] 9pnet_fd: Insufficient options for proto=fd [ 107.841559][ T5930] syz.1.11 (5930) used greatest stack depth: 18552 bytes left [ 108.213953][ T5948] ref_ctr increment failed for inode: 0x21 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888039446780 [ 109.351023][ T5948] uprobe: syz.1.15:5948 failed to unregister, leaking uprobe [ 109.737624][ T5972] 9pnet_fd: Insufficient options for proto=fd [ 110.537275][ T37] kauditd_printk_skb: 62 callbacks suppressed [ 110.537293][ T37] audit: type=1326 audit(1760359389.513:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5975 comm="syz.0.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9de19eec9 code=0x7ffc0000 [ 110.537335][ T37] audit: type=1326 audit(1760359389.513:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5975 comm="syz.0.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9de19eec9 code=0x7ffc0000 [ 110.550889][ T37] audit: type=1326 audit(1760359389.513:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5974 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789954eec9 code=0x7ffc0000 [ 110.556482][ T37] audit: type=1326 audit(1760359389.523:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5974 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789954eec9 code=0x7ffc0000 [ 110.557152][ T37] audit: type=1326 audit(1760359389.533:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5974 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f789954eec9 code=0x7ffc0000 [ 110.587077][ T37] audit: type=1326 audit(1760359389.543:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5974 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789954eec9 code=0x7ffc0000 [ 110.587143][ T37] audit: type=1326 audit(1760359389.553:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5974 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f789954eec9 code=0x7ffc0000 [ 110.617694][ T37] audit: type=1326 audit(1760359389.583:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5974 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789954eec9 code=0x7ffc0000 [ 110.617950][ T37] audit: type=1326 audit(1760359389.593:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5974 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789954eec9 code=0x7ffc0000 [ 110.618003][ T37] audit: type=1326 audit(1760359389.593:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5974 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f789954eec9 code=0x7ffc0000 [ 110.796624][ T5978] mmap: syz.0.26 (5978) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.812354][ T5993] serio: Serial port ttyS3 [ 113.454017][ T6007] 9pnet_fd: Insufficient options for proto=fd [ 114.207168][ T6004] syzkaller0: entered promiscuous mode [ 114.207202][ T6004] syzkaller0: entered allmulticast mode [ 114.226069][ T6001] hsr0 speed is unknown, defaulting to 1000 [ 114.324386][ T6012] process 'syz.2.38' launched './file0' with NULL argv: empty string added [ 120.606011][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 120.606033][ T37] audit: type=1326 audit(1760359399.573:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6037 comm="syz.1.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0335eec9 code=0x7ffc0000 [ 120.608281][ T37] audit: type=1326 audit(1760359399.583:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6037 comm="syz.1.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0335eec9 code=0x7ffc0000 [ 120.610218][ T37] audit: type=1326 audit(1760359399.583:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6037 comm="syz.1.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f0335eec9 code=0x7ffc0000 [ 120.612489][ T37] audit: type=1326 audit(1760359399.583:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6037 comm="syz.1.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0335eec9 code=0x7ffc0000 [ 120.613357][ T37] audit: type=1326 audit(1760359399.583:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6037 comm="syz.1.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f0335eec9 code=0x7ffc0000 [ 120.614048][ T37] audit: type=1326 audit(1760359399.583:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6037 comm="syz.1.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0335eec9 code=0x7ffc0000 [ 120.614566][ T37] audit: type=1326 audit(1760359399.583:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6037 comm="syz.1.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0335eec9 code=0x7ffc0000 [ 120.614822][ T37] audit: type=1326 audit(1760359399.583:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6037 comm="syz.1.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f2f0335eec9 code=0x7ffc0000 [ 120.615703][ T37] audit: type=1326 audit(1760359399.583:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6037 comm="syz.1.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0335eec9 code=0x7ffc0000 [ 120.624166][ T37] audit: type=1326 audit(1760359399.593:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6037 comm="syz.1.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0335eec9 code=0x7ffc0000 [ 127.211033][ T5799] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 127.213573][ T5799] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 127.214355][ T5799] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.217052][ T5799] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.217891][ T5799] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 128.205406][ T5804] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 128.214843][ T5804] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 128.215788][ T5804] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 128.228829][ T5804] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 128.229587][ T5804] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 128.538418][ T6001] hsr0 speed is unknown, defaulting to 1000 [ 128.675987][ T6001] hsr0 speed is unknown, defaulting to 1000 [ 128.724745][ T6001] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 128.794948][ T6001] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 129.191764][ T6049] hsr0 speed is unknown, defaulting to 1000 [ 129.223103][ T6001] hsr0 speed is unknown, defaulting to 1000 [ 129.249199][ T5799] Bluetooth: hci5: command tx timeout [ 129.330690][ T6052] hsr0 speed is unknown, defaulting to 1000 [ 129.544594][ T6074] Zero length message leads to an empty skb [ 129.589971][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'. [ 129.666302][ T6001] hsr0 speed is unknown, defaulting to 1000 [ 129.906408][ T6001] hsr0 speed is unknown, defaulting to 1000 [ 130.286210][ T5799] Bluetooth: hci6: command tx timeout [ 130.345286][ T6001] hsr0 speed is unknown, defaulting to 1000 [ 130.391332][ T6001] hsr0 speed is unknown, defaulting to 1000 [ 131.533294][ T5799] Bluetooth: hci5: command tx timeout [ 131.698304][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 131.794205][ T1097] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.367545][ T5799] Bluetooth: hci6: command tx timeout [ 132.550669][ T1097] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.014413][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.014517][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.482058][ T6140] serio: Serial port ptm0 [ 133.566424][ T5799] Bluetooth: hci5: command tx timeout [ 133.977812][ T1097] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.212320][ T37] audit: type=1326 audit(1760359413.183:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6158 comm="syz.2.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789954eec9 code=0x7ffc0000 [ 134.212518][ T37] audit: type=1326 audit(1760359413.183:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6158 comm="syz.2.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789954eec9 code=0x7ffc0000 [ 134.212658][ T37] audit: type=1326 audit(1760359413.183:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6158 comm="syz.2.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f789954eec9 code=0x7ffc0000 [ 134.212813][ T37] audit: type=1326 audit(1760359413.183:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6158 comm="syz.2.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789954eec9 code=0x7ffc0000 [ 134.212962][ T37] audit: type=1326 audit(1760359413.183:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6158 comm="syz.2.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789954eec9 code=0x7ffc0000 [ 134.405384][ T37] audit: type=1326 audit(1760359413.373:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6160 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188f11eec9 code=0x7ffc0000 [ 134.405617][ T1097] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.405764][ T37] audit: type=1326 audit(1760359413.373:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6160 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188f11eec9 code=0x7ffc0000 [ 134.412392][ T37] audit: type=1326 audit(1760359413.383:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6160 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f188f11eec9 code=0x7ffc0000 [ 134.412565][ T37] audit: type=1326 audit(1760359413.383:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6160 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188f11eec9 code=0x7ffc0000 [ 134.413869][ T37] audit: type=1326 audit(1760359413.383:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6160 comm="syz.3.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f188f11eec9 code=0x7ffc0000 [ 134.446012][ T5799] Bluetooth: hci6: command tx timeout [ 134.630370][ T6152] hsr0 speed is unknown, defaulting to 1000 [ 135.151455][ T6174] 9pnet_fd: Insufficient options for proto=fd [ 135.866396][ T5799] Bluetooth: hci5: command tx timeout [ 135.893259][ T6049] chnl_net:caif_netlink_parms(): no params data found [ 136.372949][ T6052] chnl_net:caif_netlink_parms(): no params data found [ 136.531110][ T5799] Bluetooth: hci6: command tx timeout [ 136.559982][ T6199] netlink: 204 bytes leftover after parsing attributes in process `syz.2.113'. [ 137.178827][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.179018][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.179287][ T6049] bridge_slave_0: entered allmulticast mode [ 137.181698][ T6049] bridge_slave_0: entered promiscuous mode [ 137.261101][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.261566][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.261812][ T6049] bridge_slave_1: entered allmulticast mode [ 137.265070][ T6049] bridge_slave_1: entered promiscuous mode [ 137.512119][ T1097] bridge_slave_1: left allmulticast mode [ 137.512210][ T1097] bridge_slave_1: left promiscuous mode [ 137.513667][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.611883][ T1097] bridge_slave_0: left allmulticast mode [ 137.611918][ T1097] bridge_slave_0: left promiscuous mode [ 137.612221][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.756928][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.846864][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.900345][ T1097] bond0 (unregistering): Released all slaves [ 140.174234][ T6052] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.174379][ T6052] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.174651][ T6052] bridge_slave_0: entered allmulticast mode [ 140.187429][ T6052] bridge_slave_0: entered promiscuous mode [ 140.197992][ T6049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.231332][ T6052] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.231486][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.231831][ T6052] bridge_slave_1: entered allmulticast mode [ 140.234968][ T6052] bridge_slave_1: entered promiscuous mode [ 140.262531][ T6049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.467933][ T37] kauditd_printk_skb: 40 callbacks suppressed [ 140.467953][ T37] audit: type=1804 audit(1760359419.423:166): pid=6233 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.124" name="/newroot/26/file0" dev="tmpfs" ino=154 res=1 errno=0 [ 141.377574][ T6052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.418083][ T6049] team0: Port device team_slave_0 added [ 141.434924][ T6052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.438458][ T6049] team0: Port device team_slave_1 added [ 142.149655][ T6052] team0: Port device team_slave_0 added [ 142.169913][ T6049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.169931][ T6049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.169956][ T6049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.172986][ T6052] team0: Port device team_slave_1 added [ 142.379340][ T1097] hsr_slave_0: left promiscuous mode [ 142.426681][ T1097] hsr_slave_1: left promiscuous mode [ 142.428270][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.428426][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.489269][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.489304][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.646300][ T1097] veth1_macvtap: left promiscuous mode [ 142.647443][ T1097] veth0_macvtap: left promiscuous mode [ 142.647832][ T1097] veth1_vlan: left promiscuous mode [ 142.648170][ T1097] veth0_vlan: left promiscuous mode [ 144.466214][ T6258] netlink: 32 bytes leftover after parsing attributes in process `syz.3.135'. [ 144.466264][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'. [ 145.611761][ T6276] netlink: 32 bytes leftover after parsing attributes in process `syz.3.144'. [ 145.611800][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 146.220202][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 146.506928][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 149.377450][ T6049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.377464][ T6049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.377479][ T6049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.578369][ T37] audit: type=1326 audit(1760359428.553:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6285 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789954eec9 code=0x7ffc0000 [ 149.581363][ T37] audit: type=1326 audit(1760359428.553:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6285 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789954eec9 code=0x7ffc0000 [ 149.581412][ T37] audit: type=1326 audit(1760359428.553:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6285 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789954eec9 code=0x7ffc0000 [ 149.581780][ T37] audit: type=1326 audit(1760359428.553:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6285 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f789954eec9 code=0x7ffc0000 [ 149.582083][ T37] audit: type=1326 audit(1760359428.553:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6285 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789954eec9 code=0x7ffc0000 [ 149.633684][ T37] audit: type=1326 audit(1760359428.603:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6285 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7899581785 code=0x7ffc0000 [ 149.635066][ T37] audit: type=1326 audit(1760359428.603:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6285 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7899581785 code=0x7ffc0000 [ 149.638472][ T37] audit: type=1326 audit(1760359428.613:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6285 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7899581785 code=0x7ffc0000 [ 149.639849][ T37] audit: type=1326 audit(1760359428.613:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6285 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7899581785 code=0x7ffc0000 [ 149.641570][ T37] audit: type=1326 audit(1760359428.613:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6285 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7899581785 code=0x7ffc0000 [ 149.916629][ T6252] wg2: entered promiscuous mode [ 149.916660][ T6252] wg2: entered allmulticast mode [ 149.919426][ T6282] netlink: 52 bytes leftover after parsing attributes in process `syz.3.147'. [ 150.123391][ T6052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.123410][ T6052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.123433][ T6052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.132820][ T6052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.132847][ T6052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.132873][ T6052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.310724][ T6296] netlink: 32 bytes leftover after parsing attributes in process `syz.3.153'. [ 150.310784][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 150.460590][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.154'. [ 150.460626][ T6300] netlink: 20 bytes leftover after parsing attributes in process `syz.1.154'. [ 150.550452][ T6049] hsr_slave_0: entered promiscuous mode [ 150.552067][ T6049] hsr_slave_1: entered promiscuous mode [ 150.829798][ T6052] hsr_slave_0: entered promiscuous mode [ 150.831235][ T6052] hsr_slave_1: entered promiscuous mode [ 150.832336][ T6052] debugfs: 'hsr0' already exists in 'hsr' [ 150.832362][ T6052] Cannot create hsr debugfs directory [ 150.912010][ T6317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.163'. [ 150.912061][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'. [ 151.297566][ T6325] 8021q: adding VLAN 0 to HW filter on device € [ 151.499162][ T6329] ref_ctr increment failed for inode: 0xe6 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8880324adc00 [ 151.529732][ T6332] netlink: 1 bytes leftover after parsing attributes in process `syz.1.169'. [ 151.530542][ T6332] xt_policy: neither incoming nor outgoing policy selected [ 151.744561][ T6338] netlink: 32 bytes leftover after parsing attributes in process `syz.2.173'. [ 151.744611][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 152.853914][ T6346] hsr0 speed is unknown, defaulting to 1000 [ 153.095235][ T1097] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.534283][ T1097] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.943871][ T1097] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.976886][ T6049] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 154.086678][ T6049] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 154.138900][ T6049] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 154.354208][ T1097] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.553210][ T6049] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.068695][ T6052] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 155.157363][ T6052] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 155.307596][ T6383] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 155.355590][ T6052] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 155.424878][ T6052] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 155.682530][ T1097] bridge_slave_1: left allmulticast mode [ 155.682559][ T1097] bridge_slave_1: left promiscuous mode [ 155.696447][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.789254][ T1097] bridge_slave_0: left allmulticast mode [ 155.789292][ T1097] bridge_slave_0: left promiscuous mode [ 155.789558][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.849010][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'. [ 156.717358][ T6406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.195'. [ 158.777148][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.837036][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.858578][ T1097] bond0 (unregistering): Released all slaves [ 161.177265][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.206'. [ 161.375971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 161.385965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 161.625642][ T6446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.208'. [ 161.854088][ T6049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.002482][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 162.049361][ T1097] hsr_slave_0: left promiscuous mode [ 162.070372][ T1097] hsr_slave_1: left promiscuous mode [ 162.072350][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.072379][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.143272][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.143308][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.278119][ T1097] veth1_macvtap: left promiscuous mode [ 162.278190][ T1097] veth0_macvtap: left promiscuous mode [ 162.278338][ T1097] veth1_vlan: left promiscuous mode [ 162.278442][ T1097] veth0_vlan: left promiscuous mode [ 162.393940][ T6460] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 163.947234][ T6471] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 165.686992][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 165.937209][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 168.249781][ T5871] hsr0 speed is unknown, defaulting to 1000 [ 168.249811][ T5871] infiniband syz1: ib_query_port failed (-19) [ 168.322173][ T6049] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.339696][ T6485] netlink: 120 bytes leftover after parsing attributes in process `syz.1.228'. [ 168.372551][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.374272][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.419258][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.419915][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.471223][ T6052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.604372][ T6052] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.638072][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.638283][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.681343][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.681520][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.066311][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'. [ 170.121162][ T6049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.352406][ T6052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.316346][ T6531] netlink: 120 bytes leftover after parsing attributes in process `syz.2.239'. [ 171.506102][ T6049] veth0_vlan: entered promiscuous mode [ 171.548092][ T6049] veth1_vlan: entered promiscuous mode [ 171.621959][ T6049] veth0_macvtap: entered promiscuous mode [ 171.649828][ T6049] veth1_macvtap: entered promiscuous mode [ 171.729824][ T6049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.786477][ T6049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.816414][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.244'. [ 171.854046][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.856988][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.858429][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.858708][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.959522][ T37] kauditd_printk_skb: 304 callbacks suppressed [ 171.959543][ T37] audit: type=1326 audit(1760359450.933:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6550 comm="syz.1.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0335eec9 code=0x7ffc0000 [ 171.960214][ T37] audit: type=1326 audit(1760359450.933:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6550 comm="syz.1.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f2f0335eec9 code=0x7ffc0000 [ 171.960754][ T37] audit: type=1326 audit(1760359450.933:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6550 comm="syz.1.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0335eec9 code=0x7ffc0000 [ 172.176721][ T6052] veth0_vlan: entered promiscuous mode [ 172.272972][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.324183][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.418314][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.446002][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.446528][ T37] audit: type=1326 audit(1760359451.383:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6559 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0335eec9 code=0x7ffc0000 [ 172.446584][ T37] audit: type=1326 audit(1760359451.393:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6559 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0335eec9 code=0x7ffc0000 [ 172.529711][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.586619][ T37] audit: type=1326 audit(1760359451.543:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6559 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2f0335eec9 code=0x7ffc0000 [ 172.876860][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.880226][ T37] audit: type=1326 audit(1760359451.583:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6559 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0335eec9 code=0x7ffc0000 [ 172.880282][ T37] audit: type=1326 audit(1760359451.643:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6559 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0335eec9 code=0x7ffc0000 [ 173.043247][ T6052] veth1_vlan: entered promiscuous mode [ 173.206138][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.904435][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.981484][ T6052] veth0_macvtap: entered promiscuous mode [ 174.027961][ T6052] veth1_macvtap: entered promiscuous mode [ 174.152301][ T6052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.169942][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.169962][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.242235][ T6052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.269854][ T1097] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.299533][ T1097] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.305918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 174.309749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 174.310167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 174.310471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 174.316960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 174.325918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 174.334043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 174.334192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 175.566168][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.595208][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.624771][ T1097] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.773475][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.862458][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.919807][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.961164][ T43] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.015788][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'. [ 176.032139][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.032159][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.835010][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.835030][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.109626][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.109647][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.037767][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 178.252318][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.252352][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.279195][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 178.279222][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 178.279240][ T9] usb 6-1: Manufacturer: syz [ 178.322398][ T9] usb 6-1: config 0 descriptor?? [ 178.464998][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 178.522491][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.6.268'. [ 178.729066][ T6610] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 181.899369][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 181.899531][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 181.923831][ T9] usb 6-1: USB disconnect, device number 2 [ 182.082565][ T6636] netlink: 'syz.2.277': attribute type 1 has an invalid length. [ 182.583817][ T6656] netlink: 156 bytes leftover after parsing attributes in process `syz.5.285'. [ 182.583896][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.285'. [ 182.785615][ T6661] ref_ctr increment failed for inode: 0x31 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888026b28000 [ 183.171995][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035e76c00: rx timeout, send abort [ 183.374904][ T6684] netlink: 156 bytes leftover after parsing attributes in process `syz.1.297'. [ 183.374970][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 183.436754][ T6686] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 183.480430][ T6686] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.298'. [ 183.554427][ T6690] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 183.625711][ T6691] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 183.670171][ T6693] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 183.671929][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035e77400: rx timeout, send abort [ 183.673698][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035e76c00: abort rx timeout. Force session deactivation [ 183.730261][ T6691] netlink: 804 bytes leftover after parsing attributes in process `syz.2.300'. [ 183.829703][ T6697] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 184.088668][ T6709] netlink: 156 bytes leftover after parsing attributes in process `syz.3.309'. [ 184.088733][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'. [ 184.172007][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035e77400: abort rx timeout. Force session deactivation [ 184.241613][ T6712] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20002 [ 184.301562][ T6714] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 184.340984][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 184.383910][ T6718] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 184.458114][ T6720] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 184.550304][ T6726] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 184.579131][ T6726] netlink: 804 bytes leftover after parsing attributes in process `syz.1.317'. [ 185.640003][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 185.672995][ T6739] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 185.720293][ T6741] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20002 [ 185.796027][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 185.798818][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.798842][ T31] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 185.798877][ T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 185.798897][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.831264][ T31] usb 3-1: config 0 descriptor?? [ 185.915981][ T5885] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 186.070305][ T5885] usb 7-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 186.070334][ T5885] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.070386][ T5885] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 186.070424][ T5885] usb 7-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 186.070443][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.132623][ T5885] usb 7-1: config 0 descriptor?? [ 186.148597][ T5885] usb-storage 7-1:0.0: USB Mass Storage device detected [ 186.172145][ T5885] usb-storage 7-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 186.370441][ T5885] usb 7-1: USB disconnect, device number 2 [ 186.420554][ T6763] netlink: 'syz.1.333': attribute type 72 has an invalid length. [ 186.483284][ T6767] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20002 [ 186.922892][ T6781] bond_slave_0: entered promiscuous mode [ 186.922950][ T6781] bond_slave_1: entered promiscuous mode [ 187.282535][ T6788] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 187.995738][ T1231] usb 3-1: USB disconnect, device number 2 [ 188.344649][ T6801] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20002 [ 188.487574][ T6803] __nla_validate_parse: 4 callbacks suppressed [ 188.487592][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.6.349'. [ 188.796125][ T6815] netlink: 830 bytes leftover after parsing attributes in process `syz.3.355'. [ 188.799041][ T6815] bond_slave_0: entered promiscuous mode [ 188.799097][ T6815] bond_slave_1: entered promiscuous mode [ 189.154706][ T6826] net_ratelimit: 6 callbacks suppressed [ 189.154727][ T6826] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 189.245709][ T6829] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 189.281146][ T6830] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20002 [ 189.800508][ T1231] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 190.017933][ T6829] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.359'. [ 190.036001][ T1231] usb 3-1: Using ep0 maxpacket: 16 [ 190.038019][ T1231] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.038042][ T1231] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 190.038076][ T1231] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 190.038097][ T1231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.108362][ T1231] usb 3-1: config 0 descriptor?? [ 190.391508][ T6842] netlink: 28 bytes leftover after parsing attributes in process `syz.3.362'. [ 190.471219][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.6.366'. [ 191.245306][ T6855] tap0: tun_chr_ioctl cmd 1074025677 [ 191.245739][ T6855] tap0: linktype set to 825 [ 191.288941][ T6856] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 191.754258][ T6859] netlink: 830 bytes leftover after parsing attributes in process `syz.3.368'. [ 191.942297][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.369'. [ 191.992266][ T992] usb 3-1: USB disconnect, device number 3 [ 192.193417][ T6865] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 192.334343][ T6869] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 192.390515][ T6871] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 192.415505][ T6871] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.374'. [ 192.583838][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.377'. [ 192.697970][ T6881] netlink: 28 bytes leftover after parsing attributes in process `syz.6.378'. [ 192.998987][ T6889] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 195.336787][ T6896] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 195.427853][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.427924][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.834446][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 196.066028][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 196.068793][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.068818][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 196.068853][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 196.068875][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.074492][ T6903] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 196.133809][ T9] usb 4-1: config 0 descriptor?? [ 196.258374][ T6909] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 196.278193][ T6911] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 196.281280][ T6910] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 196.334164][ T6913] __nla_validate_parse: 1 callbacks suppressed [ 196.334183][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 196.337326][ T6911] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.388'. [ 196.479496][ T6919] netlink: 830 bytes leftover after parsing attributes in process `syz.5.393'. [ 196.655735][ T6926] netlink: 28 bytes leftover after parsing attributes in process `syz.6.396'. [ 196.696017][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 196.696169][ T992] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 196.848711][ T992] usb 3-1: Using ep0 maxpacket: 32 [ 196.857338][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.857367][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.861827][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 196.861907][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 196.861924][ T9] usb 2-1: Manufacturer: syz [ 196.867899][ T992] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 196.867924][ T992] usb 3-1: config 0 has no interface number 0 [ 196.867975][ T992] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.868000][ T992] usb 3-1: config 0 interface 85 has no altsetting 0 [ 196.956542][ T992] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 196.956570][ T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.956590][ T992] usb 3-1: Product: syz [ 196.956604][ T992] usb 3-1: Manufacturer: syz [ 196.956618][ T992] usb 3-1: SerialNumber: syz [ 197.018816][ T992] usb 3-1: config 0 descriptor?? [ 197.019537][ T9] usb 2-1: config 0 descriptor?? [ 198.173861][ T992] appletouch 3-1:0.85: Geyser mode initialized. [ 198.216423][ T992] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input5 [ 198.627452][ T992] usb 3-1: USB disconnect, device number 4 [ 198.640995][ C1] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 198.794658][ T992] appletouch 3-1:0.85: input: appletouch disconnected [ 199.025335][ T31] usb 4-1: USB disconnect, device number 2 [ 199.291656][ T6940] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 199.623434][ T6938] program syz.6.399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.742490][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 199.742628][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 199.850326][ T9] usb 2-1: USB disconnect, device number 2 [ 199.899130][ T6944] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 200.119101][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.6.403'. [ 200.123093][ T6947] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 200.197142][ T6952] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 200.234012][ T6954] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 200.615414][ T6968] netlink: 28 bytes leftover after parsing attributes in process `syz.6.409'. [ 200.747632][ T5886] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 200.962083][ T6976] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 201.128517][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.128550][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.129751][ T5886] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 201.129777][ T5886] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 201.131085][ T5886] usb 4-1: Manufacturer: syz [ 201.140240][ T5886] usb 4-1: config 0 descriptor?? [ 201.312877][ T6980] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 201.845523][ T6982] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 202.943365][ T6986] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 203.064725][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.419'. [ 203.102742][ T6991] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 203.422582][ T7002] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 204.419073][ T5886] usbhid 4-1:0.0: can't add hid device: -71 [ 204.419198][ T5886] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 204.457728][ T5886] usb 4-1: USB disconnect, device number 3 [ 204.568536][ T7009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.427'. [ 204.573550][ T7014] netlink: 16 bytes leftover after parsing attributes in process `syz.3.430'. [ 204.573571][ T7014] netlink: 32 bytes leftover after parsing attributes in process `syz.3.430'. [ 204.661027][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.6.432'. [ 204.869175][ T7026] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 207.912754][ T7052] program syz.2.442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.177492][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 208.180801][ T7047] netlink: 28 bytes leftover after parsing attributes in process `syz.6.444'. [ 208.350249][ T7064] netlink: 16 bytes leftover after parsing attributes in process `syz.3.448'. [ 208.350274][ T7064] netlink: 32 bytes leftover after parsing attributes in process `syz.3.448'. [ 209.248240][ T7081] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 209.264791][ T7082] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 209.284049][ T7081] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.455'. [ 209.653215][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.458'. [ 209.833597][ T7098] netlink: 180 bytes leftover after parsing attributes in process `syz.6.461'. [ 210.747045][ T7112] netlink: 16 bytes leftover after parsing attributes in process `syz.5.466'. [ 210.747069][ T7112] netlink: 20 bytes leftover after parsing attributes in process `syz.5.466'. [ 210.838021][ T7119] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 210.942696][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 212.583632][ T7144] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 213.876899][ T7161] __nla_validate_parse: 4 callbacks suppressed [ 213.876911][ T7161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.485'. [ 213.890472][ T7159] netlink: 180 bytes leftover after parsing attributes in process `syz.6.484'. [ 216.734563][ T7194] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 216.776703][ T7198] netlink: 16 bytes leftover after parsing attributes in process `syz.5.498'. [ 217.380008][ T7212] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.505'. [ 217.476902][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 217.476942][ T5801] Bluetooth: hci3: command 0x0406 tx timeout [ 217.476966][ T5801] Bluetooth: hci4: command 0x0406 tx timeout [ 217.526248][ T7217] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 218.307635][ T7226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.509'. [ 218.580414][ T7234] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 218.869502][ T7241] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.517'. [ 219.162010][ T7250] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 221.192723][ T5885] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 221.310067][ T7275] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 221.358796][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 221.358830][ T5885] usb 3-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 221.361856][ T5885] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 221.361882][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.361901][ T5885] usb 3-1: Product: syz [ 221.361914][ T5885] usb 3-1: Manufacturer: syz [ 221.361928][ T5885] usb 3-1: SerialNumber: syz [ 221.373599][ T5885] usb 3-1: config 0 descriptor?? [ 221.621584][ T7264] netlink: 'syz.2.525': attribute type 11 has an invalid length. [ 221.621607][ T7264] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.525'. [ 221.707235][ T7264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.714606][ T7264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.193912][ T7286] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 223.563107][ T5885] usb 3-1: USB disconnect, device number 5 [ 223.607531][ T7304] netlink: 16 bytes leftover after parsing attributes in process `syz.5.539'. [ 223.607556][ T7304] netlink: 20 bytes leftover after parsing attributes in process `syz.5.539'. [ 223.771857][ T7263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.790567][ T7309] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 224.011698][ T7313] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 224.046069][ T7314] netlink: 16 bytes leftover after parsing attributes in process `syz.3.544'. [ 224.201573][ T7324] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 225.344870][ T7347] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 225.464053][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.555'. [ 225.464077][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.555'. [ 225.464102][ T7343] netlink: 'syz.5.555': attribute type 12 has an invalid length. [ 225.464115][ T7343] netlink: 'syz.5.555': attribute type 6 has an invalid length. [ 225.549720][ T7354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.559'. [ 225.670176][ T7359] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 226.251993][ T7375] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 226.453773][ T7381] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 228.424673][ T7388] netlink: 16 bytes leftover after parsing attributes in process `syz.3.573'. [ 229.483078][ T7397] program syz.5.576 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.605404][ T7400] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 231.889291][ T7421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.581'. [ 233.259887][ T7446] tap0: tun_chr_ioctl cmd 1074025677 [ 233.260165][ T7446] tap0: linktype set to 825 [ 233.530766][ T7433] Driver unsupported XDP return value 0 on prog (id 151) dev N/A, expect packet loss! [ 234.200099][ T7456] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 235.807286][ T7485] tap0: tun_chr_ioctl cmd 1074025677 [ 235.807518][ T7485] tap0: linktype set to 825 [ 236.617738][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'. [ 236.617762][ T7491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.606'. [ 238.805444][ T7534] tap0: tun_chr_ioctl cmd 1074025677 [ 238.805688][ T7534] tap0: linktype set to 825 [ 239.770081][ T7554] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 241.441780][ T7579] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 241.669849][ T7586] vxfs: unable to read disk superblock at 1 [ 241.671976][ T7586] vxfs: unable to read disk superblock at 8 [ 241.671997][ T7586] vxfs: can't find superblock. [ 242.930126][ T7591] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 242.999288][ T7593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.651'. [ 243.134179][ T7599] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 243.166068][ T7601] netlink: 84 bytes leftover after parsing attributes in process `syz.5.653'. [ 243.266062][ T5885] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 243.486721][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 243.505217][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.505247][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.505268][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 243.505308][ T5885] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 243.505328][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.578373][ T5885] usb 2-1: config 0 descriptor?? [ 243.865403][ T7611] tap0: tun_chr_ioctl cmd 1074025677 [ 243.865631][ T7611] tap0: linktype set to 825 [ 244.109162][ T5885] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 244.111304][ T5885] microsoft 0003:045E:07DA.0001: unsupported Resolution Multiplier 0 [ 244.114602][ T5885] microsoft 0003:045E:07DA.0001: implement() called with n (152) > 32! (kworker/0:6) [ 244.294213][ T7596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.294678][ T7596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.317550][ T7616] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 244.640613][ T5885] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 244.640646][ T5885] microsoft 0003:045E:07DA.0001: no inputs found [ 244.640659][ T5885] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 244.694971][ T5885] usb 2-1: USB disconnect, device number 3 [ 244.902578][ T7626] netlink: 28 bytes leftover after parsing attributes in process `syz.5.662'. [ 245.032524][ T7632] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 245.507901][ T7639] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.667'. [ 246.306275][ T7650] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 246.361611][ T7649] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 246.621533][ T7655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.674'. [ 246.708669][ T7659] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 246.737797][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.6.675'. [ 247.183005][ T7668] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.679'. [ 247.236019][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 247.396256][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 247.420115][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.420152][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.420175][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 247.420221][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 247.420244][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.448057][ T10] usb 3-1: config 0 descriptor?? [ 247.986631][ T10] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 247.988864][ T10] microsoft 0003:045E:07DA.0002: unsupported Resolution Multiplier 0 [ 247.994583][ T10] microsoft 0003:045E:07DA.0002: implement() called with n (152) > 32! (kworker/0:1) [ 248.217405][ T7680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.217854][ T7680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.327140][ T7685] 9pnet_fd: Insufficient options for proto=fd [ 248.462342][ T7690] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 248.534109][ T10] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 248.534142][ T10] microsoft 0003:045E:07DA.0002: no inputs found [ 248.534155][ T10] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 248.574667][ T10] usb 3-1: USB disconnect, device number 6 [ 248.584136][ T7688] netlink: 28 bytes leftover after parsing attributes in process `syz.6.687'. [ 248.814827][ T7695] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 248.986495][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.690'. [ 249.136366][ T7705] tap0: tun_chr_ioctl cmd 1074025677 [ 249.136603][ T7705] tap0: linktype set to 825 [ 249.817352][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.696'. [ 249.817374][ T7717] netlink: 120 bytes leftover after parsing attributes in process `syz.5.696'. [ 249.817394][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.696'. [ 250.263223][ T7723] netlink: 28 bytes leftover after parsing attributes in process `syz.5.699'. [ 250.509538][ T7728] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 251.000288][ T7732] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 251.214068][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'. [ 252.867507][ T5116] Bluetooth: hci5: command 0x0406 tx timeout [ 252.905070][ T5116] Bluetooth: hci6: command 0x0406 tx timeout [ 253.484577][ T7757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.710'. [ 253.531025][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.709'. [ 253.531054][ T7758] netlink: 120 bytes leftover after parsing attributes in process `syz.6.709'. [ 253.739794][ T7764] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 254.129871][ T7766] 9pnet_fd: Insufficient options for proto=fd [ 254.863258][ T7773] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 255.179628][ T7783] __nla_validate_parse: 1 callbacks suppressed [ 255.179651][ T7783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.717'. [ 256.151526][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.151602][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.482310][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.6.720'. [ 256.485373][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.723'. [ 256.485396][ T7797] netlink: 120 bytes leftover after parsing attributes in process `syz.3.723'. [ 256.485655][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.723'. [ 256.524836][ T7784] netlink: 28 bytes leftover after parsing attributes in process `syz.5.719'. [ 256.622860][ T7805] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 256.676875][ T7803] tap0: tun_chr_ioctl cmd 1074025677 [ 256.677102][ T7803] tap0: linktype set to 825 [ 256.780616][ T7808] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 256.983805][ T7808] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.725'. [ 258.205589][ T7815] 9pnet_fd: Insufficient options for proto=fd [ 258.327247][ T7820] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 258.755950][ T5913] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 258.907437][ T5913] usb 7-1: Using ep0 maxpacket: 16 [ 258.912581][ T5913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.912616][ T5913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.912638][ T5913] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 258.912683][ T5913] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 258.912707][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.926089][ T7826] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 258.996855][ T5913] usb 7-1: config 0 descriptor?? [ 259.084460][ T7828] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.733'. [ 259.197091][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'. [ 259.197113][ T7830] netlink: 120 bytes leftover after parsing attributes in process `syz.3.734'. [ 259.233812][ T7832] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 259.555139][ T7838] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 259.706998][ T5913] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 259.708947][ T5913] microsoft 0003:045E:07DA.0003: unsupported Resolution Multiplier 0 [ 259.711032][ T5913] microsoft 0003:045E:07DA.0003: implement() called with n (152) > 32! (kworker/1:5) [ 260.467484][ T7836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.467950][ T7836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.551763][ T7847] 9pnet_fd: Insufficient options for proto=fd [ 262.027799][ T7850] __nla_validate_parse: 2 callbacks suppressed [ 262.027817][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.738'. [ 262.554320][ T7852] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 262.702931][ T5913] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 262.702966][ T5913] microsoft 0003:045E:07DA.0003: no inputs found [ 262.702980][ T5913] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 262.751049][ T5913] usb 7-1: USB disconnect, device number 3 [ 262.909022][ T7860] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 263.033662][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 263.033687][ T7864] netlink: 120 bytes leftover after parsing attributes in process `syz.3.746'. [ 263.033708][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 263.123371][ T7869] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 263.138196][ T7863] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.745'. [ 263.152657][ T7869] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.748'. [ 264.117989][ T7887] tap0: tun_chr_ioctl cmd 1074025677 [ 264.118296][ T7887] tap0: linktype set to 825 [ 264.160006][ T7886] 9pnet_fd: Insufficient options for proto=fd [ 264.987968][ T7896] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 265.105219][ T7898] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 265.140599][ T7898] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.757'. [ 265.366323][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.759'. [ 265.376547][ T7903] netlink: 52 bytes leftover after parsing attributes in process `syz.6.758'. [ 265.651391][ T7909] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 265.653299][ T7907] netlink: 120 bytes leftover after parsing attributes in process `syz.6.760'. [ 265.708771][ T7909] netlink: 'syz.2.761': attribute type 72 has an invalid length. [ 267.066888][ T5913] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 267.325858][ T5913] usb 7-1: Using ep0 maxpacket: 16 [ 267.328012][ T5913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.328062][ T5913] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 267.328085][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.360854][ T5913] usb 7-1: config 0 descriptor?? [ 267.389640][ T5913] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 267.492869][ T7925] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 267.770446][ T7931] netlink: 52 bytes leftover after parsing attributes in process `syz.2.770'. [ 267.806897][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'. [ 267.958176][ T7938] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 267.961979][ T7937] netlink: 120 bytes leftover after parsing attributes in process `syz.2.772'. [ 268.014224][ T7938] netlink: 'syz.3.773': attribute type 72 has an invalid length. [ 269.058170][ T7958] 9pnet_fd: Insufficient options for proto=fd [ 269.224843][ T10] usb 7-1: USB disconnect, device number 4 [ 269.386468][ T7964] netlink: 52 bytes leftover after parsing attributes in process `syz.1.782'. [ 269.489724][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.784'. [ 269.730351][ T7975] netlink: 120 bytes leftover after parsing attributes in process `syz.6.787'. [ 272.751566][ T8003] netlink: 'syz.1.799': attribute type 1 has an invalid length. [ 272.751587][ T8003] netlink: 124 bytes leftover after parsing attributes in process `syz.1.799'. [ 273.256496][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 273.420221][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.420258][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.437067][ T10] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 273.437097][ T10] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 273.437120][ T10] usb 7-1: Manufacturer: syz [ 273.472702][ T10] usb 7-1: config 0 descriptor?? [ 274.026066][ T5913] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 274.186301][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.186339][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.188456][ T5913] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 274.188486][ T5913] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 274.188512][ T5913] usb 2-1: Manufacturer: syz [ 274.240942][ T5913] usb 2-1: config 0 descriptor?? [ 275.766635][ T8030] netlink: 'syz.5.810': attribute type 1 has an invalid length. [ 275.766656][ T8030] netlink: 124 bytes leftover after parsing attributes in process `syz.5.810'. [ 276.978772][ T5913] usbhid 2-1:0.0: can't add hid device: -71 [ 276.992532][ T5913] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 277.757512][ T5913] usb 2-1: USB disconnect, device number 4 [ 278.291916][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 278.292053][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 278.356241][ T10] usb 7-1: USB disconnect, device number 5 [ 278.519103][ T8057] 9pnet_fd: Insufficient options for proto=fd [ 278.776084][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 278.951049][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.951082][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.952645][ T10] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 278.952670][ T10] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 278.952688][ T10] usb 7-1: Manufacturer: syz [ 278.969454][ T10] usb 7-1: config 0 descriptor?? [ 281.083077][ T8069] netlink: 'syz.2.822': attribute type 1 has an invalid length. [ 281.083100][ T8069] netlink: 124 bytes leftover after parsing attributes in process `syz.2.822'. [ 282.275970][ T5886] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 283.474678][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.474710][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.477521][ T5886] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 283.477547][ T5886] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 283.477565][ T5886] usb 4-1: Manufacturer: syz [ 283.710968][ T5886] usb 4-1: config 0 descriptor?? [ 283.777568][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 283.777705][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 283.787259][ T10] usb 7-1: USB disconnect, device number 6 [ 284.236564][ T5913] kernel read not supported for file /457/net/netlink (pid: 5913 comm: kworker/1:5) [ 285.467616][ T5886] usbhid 4-1:0.0: can't add hid device: -71 [ 285.467765][ T5886] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 285.473611][ T5886] usb 4-1: USB disconnect, device number 4 [ 285.704068][ T8122] 8021q: adding VLAN 0 to HW filter on device € [ 285.806265][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 286.824104][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.824142][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.834689][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 286.834720][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 286.834740][ T10] usb 2-1: Manufacturer: syz [ 286.851024][ T8115] 9pnet_fd: Insufficient options for proto=fd [ 286.903292][ T10] usb 2-1: config 0 descriptor?? [ 286.982779][ T8132] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 288.982794][ T8142] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 289.930123][ T8162] 9pnet_fd: Insufficient options for proto=fd [ 290.698345][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'. [ 290.859582][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 290.861008][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 290.874642][ T10] usb 2-1: USB disconnect, device number 5 [ 290.996035][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 291.176810][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.176842][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.191470][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 291.191501][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 291.191518][ T9] usb 6-1: Manufacturer: syz [ 291.231185][ T9] usb 6-1: config 0 descriptor?? [ 291.306654][ T8180] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 293.640907][ T8197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.868'. [ 293.663521][ T8198] 9pnet_fd: Insufficient options for proto=fd [ 294.354724][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 294.375975][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 294.382454][ T9] usb 6-1: USB disconnect, device number 3 [ 294.470735][ T8203] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 295.026832][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 295.066104][ T8217] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 295.211382][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.211420][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.213270][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 295.213305][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 295.213325][ T10] usb 3-1: Manufacturer: syz [ 295.277899][ T10] usb 3-1: config 0 descriptor?? [ 296.169755][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.879'. [ 296.216028][ T8228] 9pnet_fd: Insufficient options for proto=fd [ 296.434817][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.878'. [ 296.636687][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.881'. [ 296.815928][ T8250] program syz.5.882 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.161765][ T8252] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 298.279862][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 298.374966][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 298.482198][ T10] usb 3-1: USB disconnect, device number 7 [ 298.614525][ T8268] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 299.429297][ T8282] 9pnet_fd: Insufficient options for proto=fd [ 299.458927][ T8284] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 300.407977][ T8293] 9pnet_fd: Insufficient options for proto=fd [ 301.263578][ T8298] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.899'. [ 301.385985][ T5886] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 301.473446][ T8307] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 301.758358][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.758391][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.759900][ T5886] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 301.759927][ T5886] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 301.759946][ T5886] usb 3-1: Manufacturer: syz [ 301.769517][ T5886] usb 3-1: config 0 descriptor?? [ 302.157943][ T8310] 9pnet_fd: Insufficient options for proto=fd [ 303.139854][ T8321] 9pnet_fd: Insufficient options for proto=fd [ 304.580608][ T8330] 9pnet_fd: Insufficient options for proto=fd [ 305.536854][ T5886] usbhid 3-1:0.0: can't add hid device: -71 [ 305.536987][ T5886] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 305.548097][ T5886] ================================================================== [ 305.548118][ T5886] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 305.548165][ T5886] Read of size 8 at addr ffffc9000dc12008 by task kworker/1:4/5886 [ 305.548181][ T5886] [ 305.548204][ T5886] CPU: 1 UID: 0 PID: 5886 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 305.548225][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 305.548238][ T5886] Workqueue: usb_hub_wq hub_event [ 305.548275][ T5886] Call Trace: [ 305.548286][ T5886] [ 305.548295][ T5886] dump_stack_lvl+0x189/0x250 [ 305.548322][ T5886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.548342][ T5886] ? __pfx__printk+0x10/0x10 [ 305.548364][ T5886] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 305.548392][ T5886] ? __virt_addr_valid+0xdc/0x5c0 [ 305.548412][ T5886] ? __virt_addr_valid+0xdc/0x5c0 [ 305.548433][ T5886] print_report+0xca/0x240 [ 305.548456][ T5886] ? __list_add_valid_or_report+0x4e/0x130 [ 305.548476][ T5886] kasan_report+0x118/0x150 [ 305.548501][ T5886] ? __list_add_valid_or_report+0x4e/0x130 [ 305.548526][ T5886] __list_add_valid_or_report+0x4e/0x130 [ 305.548549][ T5886] kcov_remote_stop+0x52d/0x660 [ 305.548574][ T5886] hub_event+0x45d2/0x4a20 [ 305.548618][ T5886] ? __pfx_hub_event+0x10/0x10 [ 305.548636][ T5886] ? process_scheduled_works+0x9ef/0x17b0 [ 305.548668][ T5886] ? _raw_spin_unlock_irq+0x23/0x50 [ 305.548692][ T5886] ? process_scheduled_works+0x9ef/0x17b0 [ 305.548716][ T5886] ? process_scheduled_works+0x9ef/0x17b0 [ 305.548742][ T5886] process_scheduled_works+0xae1/0x17b0 [ 305.548783][ T5886] ? __pfx_process_scheduled_works+0x10/0x10 [ 305.548818][ T5886] worker_thread+0x8a0/0xda0 [ 305.548837][ T5886] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 305.548867][ T5886] ? __kthread_parkme+0x7b/0x200 [ 305.548890][ T5886] kthread+0x711/0x8a0 [ 305.548913][ T5886] ? __pfx_worker_thread+0x10/0x10 [ 305.548929][ T5886] ? __pfx_kthread+0x10/0x10 [ 305.548948][ T5886] ? rt_spin_unlock+0x150/0x200 [ 305.548971][ T5886] ? rt_spin_unlock+0x161/0x200 [ 305.548991][ T5886] ? __pfx_kthread+0x10/0x10 [ 305.549011][ T5886] ret_from_fork+0x4bc/0x870 [ 305.549039][ T5886] ? __pfx_ret_from_fork+0x10/0x10 [ 305.549067][ T5886] ? __switch_to_asm+0x39/0x70 [ 305.549089][ T5886] ? __switch_to_asm+0x33/0x70 [ 305.549110][ T5886] ? __pfx_kthread+0x10/0x10 [ 305.549130][ T5886] ret_from_fork_asm+0x1a/0x30 [ 305.549167][ T5886] [ 305.549173][ T5886] [ 305.549178][ T5886] The buggy address belongs to a vmalloc virtual mapping [ 305.549197][ T5886] Memory state around the buggy address: [ 305.549207][ T5886] ffffc9000dc11f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 305.549220][ T5886] ffffc9000dc11f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 305.549231][ T5886] >ffffc9000dc12000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 305.549245][ T5886] ^ [ 305.549255][ T5886] ffffc9000dc12080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 305.549267][ T5886] ffffc9000dc12100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 305.549276][ T5886] ================================================================== [ 305.549294][ T5886] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 305.549307][ T5886] CPU: 1 UID: 0 PID: 5886 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 305.549327][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 305.549343][ T5886] Workqueue: usb_hub_wq hub_event [ 305.549361][ T5886] Call Trace: [ 305.549368][ T5886] [ 305.549374][ T5886] dump_stack_lvl+0x99/0x250 [ 305.549395][ T5886] ? __asan_memcpy+0x40/0x70 [ 305.549419][ T5886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.549440][ T5886] ? __pfx__printk+0x10/0x10 [ 305.549467][ T5886] vpanic+0x237/0x6d0 [ 305.549485][ T5886] ? __pfx_vpanic+0x10/0x10 [ 305.549512][ T5886] panic+0xb9/0xc0 [ 305.549528][ T5886] ? __pfx_panic+0x10/0x10 [ 305.549545][ T5886] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 305.549572][ T5886] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.549600][ T5886] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 305.549628][ T5886] ? __list_add_valid_or_report+0x4e/0x130 [ 305.549649][ T5886] check_panic_on_warn+0x89/0xb0 [ 305.549672][ T5886] ? __list_add_valid_or_report+0x4e/0x130 [ 305.549692][ T5886] end_report+0x78/0x160 [ 305.549710][ T5886] kasan_report+0x129/0x150 [ 305.549731][ T5886] ? __list_add_valid_or_report+0x4e/0x130 [ 305.549756][ T5886] __list_add_valid_or_report+0x4e/0x130 [ 305.549778][ T5886] kcov_remote_stop+0x52d/0x660 [ 305.549800][ T5886] hub_event+0x45d2/0x4a20 [ 305.549844][ T5886] ? __pfx_hub_event+0x10/0x10 [ 305.549861][ T5886] ? process_scheduled_works+0x9ef/0x17b0 [ 305.549889][ T5886] ? _raw_spin_unlock_irq+0x23/0x50 [ 305.549913][ T5886] ? process_scheduled_works+0x9ef/0x17b0 [ 305.549938][ T5886] ? process_scheduled_works+0x9ef/0x17b0 [ 305.549963][ T5886] process_scheduled_works+0xae1/0x17b0 [ 305.550004][ T5886] ? __pfx_process_scheduled_works+0x10/0x10 [ 305.550038][ T5886] worker_thread+0x8a0/0xda0 [ 305.550056][ T5886] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 305.550086][ T5886] ? __kthread_parkme+0x7b/0x200 [ 305.550108][ T5886] kthread+0x711/0x8a0 [ 305.550130][ T5886] ? __pfx_worker_thread+0x10/0x10 [ 305.550146][ T5886] ? __pfx_kthread+0x10/0x10 [ 305.550170][ T5886] ? rt_spin_unlock+0x150/0x200 [ 305.550197][ T5886] ? rt_spin_unlock+0x161/0x200 [ 305.550217][ T5886] ? __pfx_kthread+0x10/0x10 [ 305.550237][ T5886] ret_from_fork+0x4bc/0x870 [ 305.550263][ T5886] ? __pfx_ret_from_fork+0x10/0x10 [ 305.550291][ T5886] ? __switch_to_asm+0x39/0x70 [ 305.550312][ T5886] ? __switch_to_asm+0x33/0x70 [ 305.550334][ T5886] ? __pfx_kthread+0x10/0x10 [ 305.550354][ T5886] ret_from_fork_asm+0x1a/0x30 [ 305.550386][ T5886] [ 305.550665][ T5886] Kernel Offset: disabled