last executing test programs: 16m23.92147024s ago: executing program 32 (id=1862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 12m41.234799523s ago: executing program 2 (id=2675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) fsopen(0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964"], 0x44}}, 0x0) 12m36.805920846s ago: executing program 2 (id=2682): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) 12m32.447800777s ago: executing program 2 (id=2695): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$l2tp6(0xa, 0x2, 0x73) 12m28.254180014s ago: executing program 2 (id=2707): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) 12m27.158122935s ago: executing program 2 (id=2709): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}, 0x24008004) 12m27.030649429s ago: executing program 2 (id=2710): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff2}, 0x94) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 12m14.169861986s ago: executing program 33 (id=2706): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) fsopen(0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800"], 0x44}}, 0x0) 12m12.599501031s ago: executing program 34 (id=2708): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x8001}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 12m11.433307482s ago: executing program 35 (id=2710): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff2}, 0x94) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 11m43.131073799s ago: executing program 5 (id=2768): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x8001}, 0x4) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 11m42.722406287s ago: executing program 5 (id=2769): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0xbc) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r5, @ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x5f, 0x0}}], 0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, 0x0) 11m42.660113388s ago: executing program 5 (id=2770): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) 11m40.390291379s ago: executing program 5 (id=2771): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) 11m39.856431s ago: executing program 5 (id=2772): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 11m39.797170765s ago: executing program 5 (id=2773): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x8001}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 11m24.169715826s ago: executing program 36 (id=2773): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x8001}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 7m3.291795913s ago: executing program 6 (id=3424): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x4) socket$l2tp6(0xa, 0x2, 0x73) 7m2.975071608s ago: executing program 6 (id=3427): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./bus\x00', 0x0, 0x400080, 0x0) 7m2.606372196s ago: executing program 6 (id=3431): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, 0x0) 7m2.235169369s ago: executing program 6 (id=3433): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, 0x0, 0x20008000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x80, 0x0, 0x0) sendmmsg(r4, &(0x7f0000004c40)=[{{0x0, 0x0, &(0x7f0000000700)}}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000035c0)=@xdp={0x2c, 0x1, 0x0, 0x3a}, 0x80, 0x0}}], 0x3, 0x4004) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 7m1.636884443s ago: executing program 6 (id=3436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x80800) 7m1.407060936s ago: executing program 6 (id=3439): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 7m0.270077859s ago: executing program 9 (id=3449): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6m57.993783069s ago: executing program 9 (id=3454): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 6m57.665004592s ago: executing program 9 (id=3456): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000008c}, 0x10) 6m56.985776824s ago: executing program 9 (id=3459): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 6m56.748515159s ago: executing program 9 (id=3462): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 6m56.317334632s ago: executing program 9 (id=3465): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 6m45.594070754s ago: executing program 37 (id=3439): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 6m41.133155728s ago: executing program 38 (id=3465): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 4m59.379175213s ago: executing program 7 (id=3888): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) 4m59.191733226s ago: executing program 7 (id=3890): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x3e, 0x0, 0x0) 4m58.960965013s ago: executing program 7 (id=3893): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) 4m58.753940018s ago: executing program 7 (id=3894): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 4m57.764212482s ago: executing program 7 (id=3902): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) 4m57.436350955s ago: executing program 7 (id=3905): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80000000000000101000007f0c08000000000000000071273fa7b49301641184"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x341040, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 4m42.0481452s ago: executing program 39 (id=3905): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80000000000000101000007f0c08000000000000000071273fa7b49301641184"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x341040, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 24.850225946s ago: executing program 3 (id=5148): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002"], 0xd4}}, 0x0) 24.640408108s ago: executing program 3 (id=5150): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00), 0x0, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 24.010306966s ago: executing program 3 (id=5152): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000004000000e27f0000010000000000000059e548c7c930a125ac99210f39871f9e92f6395f2741ea146a50c40566907efa"], 0x48) 23.6504912s ago: executing program 3 (id=5154): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x0) 23.27921875s ago: executing program 3 (id=5156): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500), 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r5, &(0x7f0000000b80)=[{&(0x7f00000000c0)="f10dc44f7d20988057f85ab4dd61b58675fb03d944b014fb9cb34ce9a3428ca7df271b1179", 0x25}, {&(0x7f0000000640)="f14e4792586af7f2380c7d51d257826607fd39cc2d3571ac7e6b0f4edf17ed143170620ff63eaff5729afa9b52993626d76acc7c45ed66acb1ef8ba1cf478350334e2e3fac57df457868f7870695a9e2d1b5cd7382abb301e7b41538c733f36483a2418d462b88f7f6f661eeabc2823f86d0e5fe407f4504d78ac48229e940c2d788b3be1cb96e37cddda1244f4361dbf77e0322bfc6ef17abb172a80642b739fc38a4ba24cbf6fc81", 0xa9}, {&(0x7f0000000200)="c6d90d4117fc24396ad8457eeefe95e5c67a103dcd850a086c484bfb2d7c31d81a5cc1ebeb7150aa3f34f53ec3879a2ea5b8efcd9bbd102fbf", 0x39}, {&(0x7f0000000180)="81881934a67305703f57d290aa6fcedcf1b035cab7bb9c49bb077684435f", 0x1e}, {&(0x7f0000000700)="b87703fcf01a3e7bb667b404b97c7cc284a90404a5a96ff4559329d80d037b08d8810e457b955102a0e93e966b04be1aafc2067dbc6c99566ce636740265f60f3467c311c5bab39f814b6b46458e362728f8f0b6156075616f87842f97f9061c2e676278f96044c4db7785a62f601e32e57baed01ea1e7b49c6a395169e8bd722545", 0x82}, {&(0x7f00000007c0)="0b3c4fef437f956b626afd4d40ff19d50600b9d7685894a615d4cfc14f8aa828f0f9e21991906806421f38317973338885fc13112b46ec2f4a9efc8697f50fcc51b719c7d9516b708dab574174ba512f16c93772d676234ff465b761be7dc6811c889b9673101b91666e02f2bd878349b4b9a50ca7a17dcd1a99", 0x7a}], 0x6) 22.954556244s ago: executing program 3 (id=5158): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x10000002]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigaction(0x9, &(0x7f00000002c0)={&(0x7f0000000240)="ca00d1c441ef196ec866400fe2de8f49109ba44100000100faf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@empty, 0x4b, r5}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendmmsg$inet6(r6, &(0x7f0000000b00), 0x1, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@local, 0x23, r8}) 16.649758297s ago: executing program 4 (id=5203): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) close_range(r4, 0xffffffffffffffff, 0x2) 16.322384268s ago: executing program 4 (id=5207): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000d00)=""/225, 0xe1}, {&(0x7f0000001100)=""/4096, 0x1000}], 0x2}, 0x7}], 0x2, 0x2000, 0x0) 15.954340287s ago: executing program 0 (id=5208): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES8=r1, @ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r2) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4042841) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') 15.845414782s ago: executing program 0 (id=5209): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, 0x0, 0x0) 15.650883704s ago: executing program 0 (id=5210): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2000, 0x0) 8.821615176s ago: executing program 0 (id=5212): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 8.697796132s ago: executing program 4 (id=5215): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x10000002]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) 8.520069335s ago: executing program 1 (id=5216): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 8.351397999s ago: executing program 0 (id=5218): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}]}, 0x2c}}, 0x0) 8.241866635s ago: executing program 1 (id=5219): syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r3, 0x16) 7.399600964s ago: executing program 0 (id=5223): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xd0e29cde0b9a4f94, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) setns(r7, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 5.386258958s ago: executing program 4 (id=5225): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syslog(0x3, &(0x7f00000011c0)=""/234, 0xea) 5.047877199s ago: executing program 1 (id=5226): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28012, r6, 0x0) 4.892692857s ago: executing program 1 (id=5227): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setns(0xffffffffffffffff, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 4.721478728s ago: executing program 1 (id=5228): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) read(r4, &(0x7f00000000c0)=""/61, 0x3d) 4.235480123s ago: executing program 1 (id=5230): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="715a0300231a05002000128008000100736974"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 4.211734835s ago: executing program 4 (id=5231): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002"], 0xd4}}, 0x0) 4.115275238s ago: executing program 4 (id=5232): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}]}, 0x2c}}, 0x0) 3.601886261s ago: executing program 8 (id=5234): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 3.521649169s ago: executing program 8 (id=5235): syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r3, 0x16) 394.226215ms ago: executing program 8 (id=5236): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28012, r6, 0x0) 347.653479ms ago: executing program 8 (id=5237): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setns(0xffffffffffffffff, 0x66020000) 253.637433ms ago: executing program 8 (id=5238): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)=ANY=[]) 0s ago: executing program 8 (id=5239): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x10000002]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0x9, &(0x7f00000002c0)={&(0x7f0000000240)="ca00d1c441ef196ec866400fe2de8f49109ba44100000100faf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@empty, 0x4b, r5}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendmmsg$inet6(r6, &(0x7f0000000b00), 0x1, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@local, 0x23, r8}) kernel console output (not intermixed with test programs): ] team0: Port device team_slave_0 added [ 960.528274][T14062] team0: Port device team_slave_0 added [ 960.555486][T14057] team0: Port device team_slave_1 added [ 960.558063][T14065] team0: Port device team_slave_1 added [ 960.593855][T14062] team0: Port device team_slave_1 added [ 961.281077][T14057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.281096][T14057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.281155][T14057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.282959][T14065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.282976][T14065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.283005][T14065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.336299][T14062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.336323][T14062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.336358][T14062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.380897][T14057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.380920][T14057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.380953][T14057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.391428][T14065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.391452][T14065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.391488][T14065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.443867][T14062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.443890][T14062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.443926][T14062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.138034][T14057] hsr_slave_0: entered promiscuous mode [ 962.139741][ T1006] IPVS: stop unused estimator thread 0... [ 962.140134][T14057] hsr_slave_1: entered promiscuous mode [ 962.148051][T14057] debugfs: 'hsr0' already exists in 'hsr' [ 962.148088][T14057] Cannot create hsr debugfs directory [ 962.173470][T14065] hsr_slave_0: entered promiscuous mode [ 962.176333][T14065] hsr_slave_1: entered promiscuous mode [ 962.177457][T14065] debugfs: 'hsr0' already exists in 'hsr' [ 962.177481][T14065] Cannot create hsr debugfs directory [ 962.198467][T14062] hsr_slave_0: entered promiscuous mode [ 962.200299][T14062] hsr_slave_1: entered promiscuous mode [ 962.203185][T14062] debugfs: 'hsr0' already exists in 'hsr' [ 962.203219][T14062] Cannot create hsr debugfs directory [ 964.205631][T14008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.872182][T14008] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.887730][T14040] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 964.929347][T14040] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 965.311439][T14040] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 965.337781][T14040] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 965.376393][ T6933] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.376548][ T6933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.923663][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.923857][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 967.246830][T14040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.255841][T14008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.336281][T14040] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.419072][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.433723][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.537334][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.537508][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 967.605920][ T1006] bridge_slave_1: left allmulticast mode [ 967.605952][ T1006] bridge_slave_1: left promiscuous mode [ 967.606242][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.692174][ T1006] bridge_slave_0: left allmulticast mode [ 967.692204][ T1006] bridge_slave_0: left promiscuous mode [ 967.692456][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.793938][ T1006] bridge_slave_1: left allmulticast mode [ 967.793962][ T1006] bridge_slave_1: left promiscuous mode [ 967.794146][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.852198][ T1006] bridge_slave_0: left allmulticast mode [ 967.852222][ T1006] bridge_slave_0: left promiscuous mode [ 967.852443][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.914846][ T1006] bridge_slave_1: left allmulticast mode [ 967.914871][ T1006] bridge_slave_1: left promiscuous mode [ 967.915046][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.972194][ T1006] bridge_slave_0: left allmulticast mode [ 967.972219][ T1006] bridge_slave_0: left promiscuous mode [ 967.972413][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.033882][ T1006] bridge_slave_1: left allmulticast mode [ 968.033907][ T1006] bridge_slave_1: left promiscuous mode [ 968.034083][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.102067][ T1006] bridge_slave_0: left allmulticast mode [ 968.102092][ T1006] bridge_slave_0: left promiscuous mode [ 968.102387][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.194566][ T1006] bridge_slave_1: left allmulticast mode [ 968.194590][ T1006] bridge_slave_1: left promiscuous mode [ 968.194779][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.262251][ T1006] bridge_slave_0: left allmulticast mode [ 968.262284][ T1006] bridge_slave_0: left promiscuous mode [ 968.262488][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.681480][ T1006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.761421][ T1006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.822879][ T1006] bond0 (unregistering): Released all slaves [ 969.041824][ T1006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 969.131474][ T1006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 969.193661][ T1006] bond0 (unregistering): Released all slaves [ 969.582139][ T1006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 969.661492][ T1006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 969.723601][ T1006] bond0 (unregistering): Released all slaves [ 971.231524][ T1006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 971.321359][ T1006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 971.343425][ T1006] bond0 (unregistering): Released all slaves [ 971.693963][ T1006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 971.771372][ T1006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 971.852911][ T1006] bond0 (unregistering): Released all slaves [ 972.202103][T14008] veth0_vlan: entered promiscuous mode [ 972.259772][T14008] veth1_vlan: entered promiscuous mode [ 972.604822][T14008] veth0_macvtap: entered promiscuous mode [ 972.621749][T14008] veth1_macvtap: entered promiscuous mode [ 972.699278][T14008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 972.964691][ T1006] hsr_slave_0: left promiscuous mode [ 973.010781][ T1006] hsr_slave_1: left promiscuous mode [ 973.011815][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.061543][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.250673][ T1006] hsr_slave_0: left promiscuous mode [ 973.290688][ T1006] hsr_slave_1: left promiscuous mode [ 973.291763][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.313925][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.470834][ T1006] hsr_slave_0: left promiscuous mode [ 973.490919][ T1006] hsr_slave_1: left promiscuous mode [ 973.491826][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.541269][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.700597][ T1006] hsr_slave_0: left promiscuous mode [ 973.720596][ T1006] hsr_slave_1: left promiscuous mode [ 973.721417][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.781316][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.930824][ T1006] hsr_slave_0: left promiscuous mode [ 973.950696][ T1006] hsr_slave_1: left promiscuous mode [ 973.951782][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 974.001273][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 974.771243][ T1006] team0 (unregistering): Port device team_slave_1 removed [ 974.933407][ T1006] team0 (unregistering): Port device team_slave_0 removed [ 976.101377][ T1006] team0 (unregistering): Port device team_slave_1 removed [ 976.241563][ T1006] team0 (unregistering): Port device team_slave_0 removed [ 977.351137][ T1006] team0 (unregistering): Port device team_slave_1 removed [ 977.481226][ T1006] team0 (unregistering): Port device team_slave_0 removed [ 978.852026][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 978.855228][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 978.858623][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 978.860203][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 978.862992][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 979.061286][ T1006] team0 (unregistering): Port device team_slave_1 removed [ 979.322262][ T1006] team0 (unregistering): Port device team_slave_0 removed [ 980.940635][T14060] Bluetooth: hci0: command tx timeout [ 981.891153][ T1006] team0 (unregistering): Port device team_slave_1 removed [ 982.055171][ T1006] team0 (unregistering): Port device team_slave_0 removed [ 982.675019][T14008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 982.998055][T14040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.021330][T14060] Bluetooth: hci0: command tx timeout [ 983.071236][T14057] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 983.138211][T14057] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 983.208862][T14057] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 983.329453][T14057] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 983.894829][T14065] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 983.942961][T14065] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 983.995975][T14065] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 984.056680][T14065] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 984.353495][T14141] chnl_net:caif_netlink_parms(): no params data found [ 984.395475][T14062] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 984.476638][T14062] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 984.621912][T14062] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 984.686979][T14062] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 984.764944][T14040] veth0_vlan: entered promiscuous mode [ 985.008511][T14141] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.008657][T14141] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.008936][T14141] bridge_slave_0: entered allmulticast mode [ 985.018310][T14141] bridge_slave_0: entered promiscuous mode [ 985.039162][T14141] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.039329][T14141] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.039569][T14141] bridge_slave_1: entered allmulticast mode [ 985.048474][T14141] bridge_slave_1: entered promiscuous mode [ 985.100621][T14060] Bluetooth: hci0: command tx timeout [ 985.254630][T14040] veth1_vlan: entered promiscuous mode [ 985.264178][T14141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.307938][T14141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.530869][T14141] team0: Port device team_slave_0 added [ 985.563202][T14141] team0: Port device team_slave_1 added [ 985.966650][T14141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.966669][T14141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 985.966691][T14141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 985.977755][T14141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.977778][T14141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 985.977811][T14141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.031240][T14057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.277791][T14141] hsr_slave_0: entered promiscuous mode [ 986.278870][T14141] hsr_slave_1: entered promiscuous mode [ 986.413849][T14040] veth0_macvtap: entered promiscuous mode [ 986.598725][T14057] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.694068][T14040] veth1_macvtap: entered promiscuous mode [ 986.746778][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.746936][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.752247][T14065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.813810][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.813932][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.002166][T14040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 987.066195][T14065] 8021q: adding VLAN 0 to HW filter on device team0 [ 987.073224][T14040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 987.180743][T14060] Bluetooth: hci0: command tx timeout [ 987.398386][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.403386][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.409717][T14062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 987.423662][ T6933] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.434714][ T6933] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.455006][ T6933] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.479864][ T6933] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.480104][ T6933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.495488][ T37] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.049011][T14062] 8021q: adding VLAN 0 to HW filter on device team0 [ 988.238388][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.239389][ T6525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.563205][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.565026][ T6525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.594532][ T6525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.594558][ T6525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.879708][ T6966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.879733][ T6966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 989.307798][ T1006] bridge_slave_1: left allmulticast mode [ 989.307830][ T1006] bridge_slave_1: left promiscuous mode [ 989.311469][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.395328][ T1006] bridge_slave_0: left allmulticast mode [ 989.395360][ T1006] bridge_slave_0: left promiscuous mode [ 989.395624][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.231426][ T1006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 991.291453][ T1006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 991.333484][ T1006] bond0 (unregistering): Released all slaves [ 991.362894][T14141] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 991.433802][T14141] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 991.497898][T14057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.510108][T14141] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 991.616917][T14141] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 991.897261][T14131] IPVS: starting estimator thread 0... [ 991.917337][ T1006] hsr_slave_0: left promiscuous mode [ 991.950694][ T1006] hsr_slave_1: left promiscuous mode [ 991.951497][ T1006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 991.951517][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.980757][T14201] IPVS: using max 10 ests per chain, 24000 per kthread [ 991.998717][ T1006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 991.998741][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.079227][ T1006] veth1_macvtap: left promiscuous mode [ 992.079310][ T1006] veth0_macvtap: left promiscuous mode [ 992.079506][ T1006] veth1_vlan: left promiscuous mode [ 992.079633][ T1006] veth0_vlan: left promiscuous mode [ 996.421215][ T1006] team0 (unregistering): Port device team_slave_1 removed [ 996.682500][ T1006] team0 (unregistering): Port device team_slave_0 removed [ 998.468421][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.468532][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.223232][T14065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.583809][T14062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.035881][T14141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.179426][T14240] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2783'. [ 1000.319394][T14240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1000.453583][T14141] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.498696][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.498906][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.683408][T14251] netlink: 'syz.9.2785': attribute type 1 has an invalid length. [ 1000.687178][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.687339][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.763193][T14251] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1000.833821][T14057] veth0_vlan: entered promiscuous mode [ 1001.002743][T14057] veth1_vlan: entered promiscuous mode [ 1001.032456][T14065] veth0_vlan: entered promiscuous mode [ 1001.159406][T14065] veth1_vlan: entered promiscuous mode [ 1001.210084][T14264] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2788'. [ 1001.327785][T14062] veth0_vlan: entered promiscuous mode [ 1001.441334][T14062] veth1_vlan: entered promiscuous mode [ 1001.461168][T14057] veth0_macvtap: entered promiscuous mode [ 1001.523996][T14057] veth1_macvtap: entered promiscuous mode [ 1001.581446][T14065] veth0_macvtap: entered promiscuous mode [ 1001.627611][T14065] veth1_macvtap: entered promiscuous mode [ 1001.662873][T14057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.733108][T14057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.770687][T14062] veth0_macvtap: entered promiscuous mode [ 1001.817373][T14062] veth1_macvtap: entered promiscuous mode [ 1001.819984][ T6525] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.825373][ T6525] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.825777][ T6525] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.826737][ T6525] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.858477][T14065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.921999][T14065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.027381][ T3592] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.138978][ T3592] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.150004][ T3592] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.174730][ T3592] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.213371][T14062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.363619][T14062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.534665][ T3592] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.559038][ T3592] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.591913][T14141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1002.593169][ T3592] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.676968][ T6525] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.708134][ T6933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.708162][ T6933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.160678][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.160702][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.242021][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.242046][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.444633][T14141] veth0_vlan: entered promiscuous mode [ 1003.447331][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.447353][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.671307][T14141] veth1_vlan: entered promiscuous mode [ 1003.687399][ T3592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.687423][ T3592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.842563][ T6933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.842588][ T6933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.011156][T14141] veth0_macvtap: entered promiscuous mode [ 1004.056331][T14141] veth1_macvtap: entered promiscuous mode [ 1004.319993][T14141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1004.385304][T14141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1004.501392][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.501659][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.501912][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.502236][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.631207][T14321] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2795'. [ 1006.638542][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.638565][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.913788][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.913812][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.508104][T14335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2671'. [ 1007.614103][T14337] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2798'. [ 1007.685880][T14337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1008.434469][T14360] netlink: 'syz.8.2806': attribute type 1 has an invalid length. [ 1009.371646][T14367] FAT-fs (loop13): unable to read boot sector [ 1009.640837][T14360] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1011.191228][T14404] XFS (nullb0): Invalid superblock magic number [ 1018.850799][T14505] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2850'. [ 1019.792036][T14536] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2865'. [ 1024.390514][T12522] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1024.543620][T12522] usb 9-1: Using ep0 maxpacket: 8 [ 1024.546198][T12522] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1024.546231][T12522] usb 9-1: config 179 has no interface number 0 [ 1024.546289][T12522] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1024.546319][T12522] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1024.546351][T12522] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1024.546379][T12522] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1024.546408][T12522] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1024.546454][T12522] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1024.546479][T12522] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.682588][T14606] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1025.090172][ T9] usb 9-1: USB disconnect, device number 2 [ 1025.090291][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1025.090404][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1025.836101][T14633] XFS (nullb0): Invalid superblock magic number [ 1035.431303][T14745] netlink: 'syz.3.2924': attribute type 1 has an invalid length. [ 1035.668288][T14745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1036.135501][T14765] netlink: 'syz.8.2929': attribute type 1 has an invalid length. [ 1036.247888][T14765] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1041.208225][T14827] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2950'. [ 1041.527356][T14837] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2954'. [ 1046.244871][T14864] infiniband syz2: set down [ 1046.244896][T14864] infiniband syz2: added ipvlan0 [ 1046.246515][T14864] syz2: rxe_create_cq: returned err = -12 [ 1046.246593][T14864] infiniband syz2: Couldn't create ib_mad CQ [ 1046.246789][T14864] infiniband syz2: Couldn't open port 1 [ 1047.649083][T14864] RDS/IB: syz2: added [ 1047.649189][T14864] smc: adding ib device syz2 with port count 1 [ 1047.649217][T14864] smc: ib device syz2 port 1 has no pnetid [ 1050.824673][T14883] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1054.559071][T14985] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1055.857739][T14998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3000'. [ 1056.092622][T15004] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1058.115218][T15037] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3011'. [ 1059.483257][T15060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3018'. [ 1059.908517][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.908601][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.980456][ T5118] Bluetooth: hci2: command 0x0406 tx timeout [ 1063.955451][T15111] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3029'. [ 1064.745522][T15124] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3032'. [ 1065.738976][T15147] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3040'. [ 1066.545342][T15163] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3044'. [ 1067.540272][T15187] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3052'. [ 1069.094318][T15223] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3066'. [ 1070.373688][T15252] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3073'. [ 1071.909145][T15297] netlink: 'syz.9.3089': attribute type 1 has an invalid length. [ 1072.074836][T15297] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1072.220895][T15249] Bluetooth: hci3: command 0x0406 tx timeout [ 1072.223292][ T61] Bluetooth: hci4: command 0x0406 tx timeout [ 1077.341695][ T5813] Bluetooth: hci7: command 0x0406 tx timeout [ 1077.399859][T15418] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3131'. [ 1078.093119][T15435] netlink: 'syz.6.3137': attribute type 1 has an invalid length. [ 1078.312230][T15435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1082.637760][T15513] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1087.593033][T15578] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1088.006457][T15580] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3187'. [ 1092.813977][T15666] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1096.222286][T15732] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3232'. [ 1097.598507][T15756] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3239'. [ 1098.207882][T15766] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3243'. [ 1099.812037][T15796] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3252'. [ 1100.152647][T15805] netlink: 'syz.8.3247': attribute type 1 has an invalid length. [ 1100.422659][T15805] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1100.697296][T15814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3257'. [ 1101.412950][T15836] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3264'. [ 1102.119989][T15851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3270'. [ 1102.946718][T14060] Bluetooth: hci0: command 0x0406 tx timeout [ 1109.235164][T15971] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1114.451201][T16035] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3322'. [ 1116.477940][T16063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3333'. [ 1118.860088][T16100] netlink: 'syz.8.3346': attribute type 1 has an invalid length. [ 1118.959146][T16100] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1121.391509][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.391590][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.796119][T16133] netlink: 'syz.3.3360': attribute type 1 has an invalid length. [ 1122.015138][T16133] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1122.113795][T16137] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3361'. [ 1125.688188][T16153] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3369'. [ 1127.534032][T16172] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3373'. [ 1130.177413][T16208] FAT-fs (loop19): unable to read boot sector [ 1131.477560][T16212] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3395'. [ 1134.545158][T16252] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3411'. [ 1134.625512][T16252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1140.053118][T16336] XFS (nullb0): Invalid superblock magic number [ 1140.611086][T16355] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1141.333171][T16362] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1142.866018][T16367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3455'. [ 1146.541586][T16407] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3473'. [ 1147.441727][T16423] netlink: 'syz.3.3479': attribute type 1 has an invalid length. [ 1147.556105][T16423] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1148.368680][T16441] netlink: 'syz.3.3487': attribute type 1 has an invalid length. [ 1148.465819][T16441] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1155.923555][T16490] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1159.723205][T14060] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1159.726330][T14060] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1159.729325][T14060] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1159.763526][T14060] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1159.766359][T14060] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1160.513582][T14060] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1160.532931][T14060] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1160.557756][T14060] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1160.574052][T14060] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1160.576316][T14060] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1162.181880][T14060] Bluetooth: hci1: command tx timeout [ 1162.240052][ T68] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.690510][T16537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3527'. [ 1162.700425][T14060] Bluetooth: hci3: command tx timeout [ 1163.029234][ T68] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.659109][ T68] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.221505][T14060] Bluetooth: hci1: command tx timeout [ 1164.647796][ T68] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.780405][T14060] Bluetooth: hci3: command tx timeout [ 1165.191705][T16550] netlink: 'syz.8.3533': attribute type 1 has an invalid length. [ 1165.344657][T16550] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1165.993019][T16557] netlink: 'syz.8.3535': attribute type 1 has an invalid length. [ 1166.049740][ T68] bridge_slave_1: left allmulticast mode [ 1166.049793][ T68] bridge_slave_1: left promiscuous mode [ 1166.050093][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.152123][ T68] bridge_slave_0: left allmulticast mode [ 1166.152159][ T68] bridge_slave_0: left promiscuous mode [ 1166.152441][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.310473][T14060] Bluetooth: hci1: command tx timeout [ 1166.900442][T14060] Bluetooth: hci3: command tx timeout [ 1168.391541][T14060] Bluetooth: hci1: command tx timeout [ 1168.941146][T14060] Bluetooth: hci3: command tx timeout [ 1169.291307][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1169.353804][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.394964][ T68] bond0 (unregistering): Released all slaves [ 1170.644141][ T68] bond1 (unregistering): Released all slaves [ 1170.715172][T16557] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1170.854114][T16501] chnl_net:caif_netlink_parms(): no params data found [ 1171.124208][T16603] trusted_key: encrypted_key: master key parameter 'u' is invalid [ 1171.817283][T16618] FAT-fs (loop15): unable to read boot sector [ 1172.431331][T16622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3562'. [ 1173.118297][T16518] chnl_net:caif_netlink_parms(): no params data found [ 1177.240853][T16651] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3574'. [ 1178.069121][T16661] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1180.756126][T16501] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.756351][T16501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.756985][T16501] bridge_slave_0: entered allmulticast mode [ 1180.760201][T16501] bridge_slave_0: entered promiscuous mode [ 1181.131698][T16501] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.131862][T16501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.132137][T16501] bridge_slave_1: entered allmulticast mode [ 1181.161536][T16501] bridge_slave_1: entered promiscuous mode [ 1181.398437][T16671] FAT-fs (loop17): unable to read boot sector [ 1182.586624][ T68] hsr_slave_0: left promiscuous mode [ 1182.670449][ T68] hsr_slave_1: left promiscuous mode [ 1182.672517][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1182.672548][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1182.761563][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1182.761596][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1182.787359][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.787446][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.981756][ T68] veth1_macvtap: left promiscuous mode [ 1182.981876][ T68] veth0_macvtap: left promiscuous mode [ 1182.982188][ T68] veth1_vlan: left promiscuous mode [ 1182.982384][ T68] veth0_vlan: left promiscuous mode [ 1184.447475][T16693] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3588'. [ 1184.766798][T16705] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3592'. [ 1185.048386][T16714] netlink: 'syz.3.3596': attribute type 1 has an invalid length. [ 1186.902809][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1187.141095][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1189.948544][T16714] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1190.278950][T16727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3601'. [ 1192.505309][T16739] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3605'. [ 1192.945994][T16501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1193.134989][T16501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1193.309572][T16518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.309787][T16518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.310022][T16518] bridge_slave_0: entered allmulticast mode [ 1193.332206][T16518] bridge_slave_0: entered promiscuous mode [ 1194.614987][T16518] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.615139][T16518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.615394][T16518] bridge_slave_1: entered allmulticast mode [ 1194.626730][T16518] bridge_slave_1: entered promiscuous mode [ 1194.630803][T16501] team0: Port device team_slave_0 added [ 1194.634822][T16501] team0: Port device team_slave_1 added [ 1194.657371][T16754] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3611'. [ 1195.588331][T16501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1195.588351][T16501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1195.588382][T16501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1195.621141][T16518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1195.721969][T16501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1195.721991][T16501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1195.722022][T16501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1195.762360][T16518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1196.094374][T16792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3621'. [ 1196.403586][T16518] team0: Port device team_slave_0 added [ 1196.886040][T16518] team0: Port device team_slave_1 added [ 1196.995092][T16812] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1198.636992][T16819] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3632'. [ 1198.912055][T16823] XFS (nullb0): Invalid superblock magic number [ 1199.942070][T16839] syz2: rxe_newlink: already configured on ipvlan0 [ 1204.173014][T16501] hsr_slave_0: entered promiscuous mode [ 1204.174741][T16501] hsr_slave_1: entered promiscuous mode [ 1204.175805][T16501] debugfs: 'hsr0' already exists in 'hsr' [ 1204.175832][T16501] Cannot create hsr debugfs directory [ 1204.371814][T16518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1204.371836][T16518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.371876][T16518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1204.391614][T16518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1204.391635][T16518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.391669][T16518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1204.655746][T16880] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3656'. [ 1205.489329][ T68] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.906734][T16911] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3670'. [ 1206.427191][ T68] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.558056][T16915] FAT-fs (loop15): unable to read boot sector [ 1207.400711][T16518] hsr_slave_0: entered promiscuous mode [ 1207.402252][T16518] hsr_slave_1: entered promiscuous mode [ 1207.403247][T16518] debugfs: 'hsr0' already exists in 'hsr' [ 1207.403273][T16518] Cannot create hsr debugfs directory [ 1207.983765][ T68] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.155782][T16936] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3680'. [ 1208.784804][ T68] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.781087][T16955] netlink: 'syz.7.3687': attribute type 1 has an invalid length. [ 1211.162189][ T68] bridge_slave_1: left allmulticast mode [ 1211.162221][ T68] bridge_slave_1: left promiscuous mode [ 1211.162500][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.282254][ T68] bridge_slave_0: left allmulticast mode [ 1211.282290][ T68] bridge_slave_0: left promiscuous mode [ 1211.282572][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.096573][T16986] netlink: 'syz.7.3696': attribute type 1 has an invalid length. [ 1214.829525][T16996] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3700'. [ 1215.571479][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1215.621100][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1215.644189][ T68] bond0 (unregistering): Released all slaves [ 1215.846303][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1215.863687][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1215.873320][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1215.909486][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1215.910388][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1216.423014][ T68] bond1 (unregistering): Released all slaves [ 1217.199635][ T68] bond2 (unregistering): Released all slaves [ 1217.984158][ T68] bond3 (unregistering): Released all slaves [ 1218.060574][ T5813] Bluetooth: hci2: command tx timeout [ 1218.438146][T17006] XFS (nullb0): Invalid superblock magic number [ 1219.317243][T17037] netlink: 'syz.8.3712': attribute type 1 has an invalid length. [ 1219.420421][T17030] can0: slcan on ttyS3. [ 1219.758839][T17046] XFS (nullb0): Invalid superblock magic number [ 1220.150456][ T5813] Bluetooth: hci2: command tx timeout [ 1220.482671][T17062] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1221.678024][T14060] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1221.693474][T14060] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1221.695111][T14060] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1221.696449][T14060] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1221.702226][T14060] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1222.311472][ T5813] Bluetooth: hci2: command tx timeout [ 1223.038199][T17028] can0 (unregistered): slcan off ttyS3. [ 1223.741322][ T5813] Bluetooth: hci5: command tx timeout [ 1224.569660][T17111] FAT-fs (loop15): unable to read boot sector [ 1224.647725][ T5813] Bluetooth: hci2: command tx timeout [ 1228.071212][T14060] Bluetooth: hci5: command tx timeout [ 1228.524325][T17120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3739'. [ 1229.376130][T17134] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3743'. [ 1230.140392][T14060] Bluetooth: hci5: command tx timeout [ 1232.999360][ T5813] Bluetooth: hci5: command tx timeout [ 1233.620835][ T68] hsr_slave_0: left promiscuous mode [ 1233.676976][T17160] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3750'. [ 1233.690670][ T68] hsr_slave_1: left promiscuous mode [ 1233.691699][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1233.691728][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1233.751763][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1233.751796][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1233.866629][ T68] veth1_macvtap: left promiscuous mode [ 1233.866711][ T68] veth0_macvtap: left promiscuous mode [ 1233.866891][ T68] veth1_vlan: left promiscuous mode [ 1233.867017][ T68] veth0_vlan: left promiscuous mode [ 1234.916453][T17165] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3752'. [ 1236.891195][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1237.114559][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1240.716630][T16999] chnl_net:caif_netlink_parms(): no params data found [ 1241.616517][T17232] Driver unsupported XDP return value 0 on prog (id 392) dev N/A, expect packet loss! [ 1243.202600][T16999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.202744][T16999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.203169][T16999] bridge_slave_0: entered allmulticast mode [ 1243.292156][T16999] bridge_slave_0: entered promiscuous mode [ 1243.335608][T16999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.335768][T16999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.336043][T16999] bridge_slave_1: entered allmulticast mode [ 1243.390851][T16999] bridge_slave_1: entered promiscuous mode [ 1244.234139][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.234217][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.357096][T16999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1244.364108][ T68] IPVS: stop unused estimator thread 0... [ 1244.369917][T17067] chnl_net:caif_netlink_parms(): no params data found [ 1244.449551][T16999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1245.019905][T16999] team0: Port device team_slave_0 added [ 1245.149787][T16999] team0: Port device team_slave_1 added [ 1245.548728][ T68] bridge_slave_1: left allmulticast mode [ 1245.548760][ T68] bridge_slave_1: left promiscuous mode [ 1245.549028][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.635421][ T68] bridge_slave_0: left allmulticast mode [ 1245.635454][ T68] bridge_slave_0: left promiscuous mode [ 1245.635925][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.725080][ T68] bridge_slave_1: left allmulticast mode [ 1245.725111][ T68] bridge_slave_1: left promiscuous mode [ 1245.725318][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.813709][ T68] bridge_slave_0: left allmulticast mode [ 1245.813745][ T68] bridge_slave_0: left promiscuous mode [ 1245.814053][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.411483][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1246.711174][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1246.841587][ T68] bond0 (unregistering): Released all slaves [ 1247.326825][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1247.456160][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1247.547917][ T68] bond0 (unregistering): Released all slaves [ 1248.354663][T16999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1248.354685][T16999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1248.354716][T16999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1248.543990][T16999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1248.544009][T16999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1248.544036][T16999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1248.616973][T17383] netlink: 996 bytes leftover after parsing attributes in process `syz.3.3809'. [ 1248.684589][T17067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.684734][T17067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.684943][T17067] bridge_slave_0: entered allmulticast mode [ 1248.689671][T17067] bridge_slave_0: entered promiscuous mode [ 1248.748650][T17067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.748874][T17067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.749097][T17067] bridge_slave_1: entered allmulticast mode [ 1248.773718][T17067] bridge_slave_1: entered promiscuous mode [ 1248.938585][T17390] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3814'. [ 1249.016597][T17386] input: syz0 as /devices/virtual/input/input8 [ 1249.387975][T17398] loop5: detected capacity change from 0 to 7 [ 1250.289190][T17175] Dev loop5: unable to read RDB block 7 [ 1250.289264][T17175] loop5: unable to read partition table [ 1250.289551][T17175] loop5: partition table beyond EOD, truncated [ 1250.576137][T17409] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1250.580785][T17067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.652438][T16999] hsr_slave_0: entered promiscuous mode [ 1250.653832][T16999] hsr_slave_1: entered promiscuous mode [ 1250.654801][T16999] debugfs: 'hsr0' already exists in 'hsr' [ 1250.654828][T16999] Cannot create hsr debugfs directory [ 1250.715450][T17067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.995769][ T68] hsr_slave_0: left promiscuous mode [ 1251.113919][ T68] hsr_slave_1: left promiscuous mode [ 1251.115017][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1251.178000][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1251.316800][T17437] netlink: 'syz.7.3834': attribute type 1 has an invalid length. [ 1251.316824][T17437] netlink: 'syz.7.3834': attribute type 2 has an invalid length. [ 1251.316840][T17437] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3834'. [ 1251.380787][ T68] hsr_slave_0: left promiscuous mode [ 1251.400755][ T68] hsr_slave_1: left promiscuous mode [ 1251.401813][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1251.441434][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1252.154508][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1252.312386][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1253.402298][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1253.552858][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1254.638362][T17067] team0: Port device team_slave_0 added [ 1254.725778][T17067] team0: Port device team_slave_1 added [ 1255.386906][T17471] input: syz0 as /devices/virtual/input/input10 [ 1255.494225][T17067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1255.494245][T17067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1255.494276][T17067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1255.547482][T17067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1255.547507][T17067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1255.547543][T17067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1255.641013][T17476] loop5: detected capacity change from 0 to 7 [ 1256.469324][T17067] hsr_slave_0: entered promiscuous mode [ 1256.486770][T17476] Dev loop5: unable to read RDB block 7 [ 1256.486829][T17476] loop5: unable to read partition table [ 1256.487087][T17476] loop5: partition table beyond EOD, truncated [ 1256.487122][T17476] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 1256.493700][T17067] hsr_slave_1: entered promiscuous mode [ 1256.494782][T17067] debugfs: 'hsr0' already exists in 'hsr' [ 1256.494809][T17067] Cannot create hsr debugfs directory [ 1258.027590][T16999] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1258.129352][T16999] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1258.235276][T17527] IPv6: sit1: Disabled Multicast RS [ 1258.236503][T17527] sit1: entered allmulticast mode [ 1258.243071][T16999] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1258.374015][T16999] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1260.097600][T17067] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1260.167407][T17067] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1260.232924][T17067] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1260.342139][T17067] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1260.833024][T16999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1261.007211][T16999] 8021q: adding VLAN 0 to HW filter on device team0 [ 1261.082536][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.084345][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1261.173140][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.173291][ T6525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1261.305086][T17067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1261.507996][T17067] 8021q: adding VLAN 0 to HW filter on device team0 [ 1261.637229][T16280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.652619][T16280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1261.727764][T16280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.738871][T16280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.076222][T17624] warning: `syz.3.3895' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1262.698153][T16999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1262.906903][T17067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1263.064730][T16999] veth0_vlan: entered promiscuous mode [ 1263.150996][T16999] veth1_vlan: entered promiscuous mode [ 1263.494705][T17662] syzkaller0: entered promiscuous mode [ 1263.494735][T17662] syzkaller0: entered allmulticast mode [ 1263.549961][T17067] veth0_vlan: entered promiscuous mode [ 1265.221562][T17695] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3917'. [ 1275.827273][T14060] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1275.842179][T14060] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1275.853529][T14060] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1275.855541][T14060] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1275.856969][T14060] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1277.900565][T14060] Bluetooth: hci1: command tx timeout [ 1278.905784][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1278.908403][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1278.909597][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1278.930915][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1278.931858][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1279.985542][T14060] Bluetooth: hci1: command tx timeout [ 1280.353574][ T38] audit: type=1326 audit(1763185888.876:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17754 comm="syz.8.3940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a264f6c9 code=0x7ffc0000 [ 1280.353638][ T38] audit: type=1326 audit(1763185888.876:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17754 comm="syz.8.3940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41a264f6c9 code=0x7ffc0000 [ 1280.353688][ T38] audit: type=1326 audit(1763185888.886:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17754 comm="syz.8.3940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a264f6c9 code=0x7ffc0000 [ 1281.101010][T14060] Bluetooth: hci3: command tx timeout [ 1281.631643][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1281.638228][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1281.657513][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1281.684115][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1281.686240][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1282.072307][T14060] Bluetooth: hci1: command tx timeout [ 1283.184425][T14060] Bluetooth: hci3: command tx timeout [ 1283.740601][T14060] Bluetooth: hci2: command tx timeout [ 1284.141161][T14060] Bluetooth: hci1: command tx timeout [ 1285.260698][T14060] Bluetooth: hci3: command tx timeout [ 1285.820397][T14060] Bluetooth: hci2: command tx timeout [ 1286.441037][T17744] chnl_net:caif_netlink_parms(): no params data found [ 1286.650742][T17740] chnl_net:caif_netlink_parms(): no params data found [ 1286.673326][ T1006] bridge_slave_1: left allmulticast mode [ 1286.673358][ T1006] bridge_slave_1: left promiscuous mode [ 1286.673616][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.743827][ T1006] bridge_slave_0: left allmulticast mode [ 1286.743861][ T1006] bridge_slave_0: left promiscuous mode [ 1286.744134][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.340877][T14060] Bluetooth: hci3: command tx timeout [ 1287.900862][T14060] Bluetooth: hci2: command tx timeout [ 1289.631509][ T1006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1289.714494][ T1006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1289.756770][ T1006] bond0 (unregistering): Released all slaves [ 1289.980494][T14060] Bluetooth: hci2: command tx timeout [ 1291.050716][ T1006] hsr_slave_0: left promiscuous mode [ 1291.093845][ T1006] hsr_slave_1: left promiscuous mode [ 1291.094953][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1291.142366][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1291.267522][ T1006] veth1_vlan: left promiscuous mode [ 1291.267743][ T1006] veth0_vlan: left promiscuous mode [ 1293.841262][ T1006] team0 (unregistering): Port device team_slave_1 removed [ 1294.201144][ T1006] team0 (unregistering): Port device team_slave_0 removed [ 1297.550975][T17744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.551145][T17744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.551421][T17744] bridge_slave_0: entered allmulticast mode [ 1297.585507][T17744] bridge_slave_0: entered promiscuous mode [ 1297.725931][T17744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.726074][T17744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.726308][T17744] bridge_slave_1: entered allmulticast mode [ 1297.729271][T17744] bridge_slave_1: entered promiscuous mode [ 1298.026656][T17740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.026849][T17740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.027079][T17740] bridge_slave_0: entered allmulticast mode [ 1298.030140][T17740] bridge_slave_0: entered promiscuous mode [ 1298.065610][T17770] chnl_net:caif_netlink_parms(): no params data found [ 1298.204239][T17740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.204376][T17740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.204595][T17740] bridge_slave_1: entered allmulticast mode [ 1298.208772][T17740] bridge_slave_1: entered promiscuous mode [ 1298.294504][T17744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1298.534130][T17744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1299.036602][T17740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1299.186663][T17740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1299.235265][T17744] team0: Port device team_slave_0 added [ 1299.341416][T17744] team0: Port device team_slave_1 added [ 1299.635162][T17740] team0: Port device team_slave_0 added [ 1299.851122][T17740] team0: Port device team_slave_1 added [ 1299.856623][T17770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.856769][T17770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.857028][T17770] bridge_slave_0: entered allmulticast mode [ 1299.862943][T17770] bridge_slave_0: entered promiscuous mode [ 1300.043407][T17744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1300.043428][T17744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1300.043458][T17744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1300.158688][T17770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.158835][T17770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.159122][T17770] bridge_slave_1: entered allmulticast mode [ 1300.177496][T17770] bridge_slave_1: entered promiscuous mode [ 1300.181853][T17744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1300.181873][T17744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1300.181911][T17744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1300.662843][T17740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1300.662863][T17740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1300.662894][T17740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1301.271840][T17740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1301.271857][T17740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1301.271883][T17740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1301.328564][T17770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1301.393797][T17770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1302.465869][T17744] hsr_slave_0: entered promiscuous mode [ 1302.467400][T17744] hsr_slave_1: entered promiscuous mode [ 1302.468481][T17744] debugfs: 'hsr0' already exists in 'hsr' [ 1302.468508][T17744] Cannot create hsr debugfs directory [ 1302.816496][T17770] team0: Port device team_slave_0 added [ 1302.953016][T17770] team0: Port device team_slave_1 added [ 1303.606608][T17740] hsr_slave_0: entered promiscuous mode [ 1303.611520][T17740] hsr_slave_1: entered promiscuous mode [ 1303.616386][T17740] debugfs: 'hsr0' already exists in 'hsr' [ 1303.616426][T17740] Cannot create hsr debugfs directory [ 1304.251608][T17770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1304.251629][T17770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1304.251660][T17770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1304.483279][T17770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1304.483301][T17770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1304.483330][T17770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.402574][T17770] hsr_slave_0: entered promiscuous mode [ 1305.404071][T17770] hsr_slave_1: entered promiscuous mode [ 1305.405155][T17770] debugfs: 'hsr0' already exists in 'hsr' [ 1305.405183][T17770] Cannot create hsr debugfs directory [ 1305.668523][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.668601][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.759091][T18079] IPv6: sit1: Disabled Multicast RS [ 1305.763665][T18079] sit1: entered allmulticast mode [ 1307.514683][ T1006] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.331493][ T1006] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.063968][ T1006] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.675741][ T1006] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.240927][ T1006] bridge_slave_1: left allmulticast mode [ 1311.240960][ T1006] bridge_slave_1: left promiscuous mode [ 1311.241280][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.329892][ T1006] bridge_slave_0: left allmulticast mode [ 1311.329924][ T1006] bridge_slave_0: left promiscuous mode [ 1311.350465][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.438557][ T1006] bridge_slave_1: left allmulticast mode [ 1311.438618][ T1006] bridge_slave_1: left promiscuous mode [ 1311.438877][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.532181][ T1006] bridge_slave_0: left allmulticast mode [ 1311.532214][ T1006] bridge_slave_0: left promiscuous mode [ 1311.532482][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.014198][ T1006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1315.091508][ T1006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1315.119689][ T1006] bond0 (unregistering): Released all slaves [ 1317.581467][ T1006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1317.671139][ T1006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1317.694636][ T1006] bond0 (unregistering): Released all slaves [ 1318.788595][ T1006] bond1 (unregistering): Released all slaves [ 1321.485196][T17744] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1321.600462][T17744] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1321.806473][T17744] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1321.868628][T17744] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1322.132559][ T1006] hsr_slave_0: left promiscuous mode [ 1322.173731][ T1006] hsr_slave_1: left promiscuous mode [ 1322.176136][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.211464][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1322.420663][ T1006] hsr_slave_0: left promiscuous mode [ 1322.462414][ T1006] hsr_slave_1: left promiscuous mode [ 1322.463486][ T1006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1322.463513][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.513307][ T1006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1322.513338][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1322.676284][ T1006] veth0_vlan: left promiscuous mode [ 1322.713130][ T1006] veth1_macvtap: left promiscuous mode [ 1322.713251][ T1006] veth0_macvtap: left promiscuous mode [ 1322.713526][ T1006] veth1_vlan: left promiscuous mode [ 1322.713719][ T1006] veth0_vlan: left promiscuous mode [ 1325.151315][ T1006] team0 (unregistering): Port device team_slave_1 removed [ 1325.482655][ T1006] team0 (unregistering): Port device team_slave_0 removed [ 1330.462412][ T1006] team0 (unregistering): Port device team_slave_1 removed [ 1330.713709][ T1006] team0 (unregistering): Port device team_slave_0 removed [ 1333.426675][T17740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1333.474785][T17740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1333.509419][T17740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1333.654531][T17740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1334.057952][T17770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1334.134440][T17770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1334.188888][T17770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1334.253361][T17770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1334.736048][T17744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1334.876030][T17740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1334.899165][T17744] 8021q: adding VLAN 0 to HW filter on device team0 [ 1334.953364][ T6485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.961253][ T6485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1335.037629][T16280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.038321][T16280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1335.057345][T17740] 8021q: adding VLAN 0 to HW filter on device team0 [ 1335.179362][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.179471][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1335.227404][T16280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.227619][T16280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1335.411586][T17770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1335.644438][T17770] 8021q: adding VLAN 0 to HW filter on device team0 [ 1335.768624][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.768927][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1335.871085][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.871249][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1336.654922][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1336.659596][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1336.672994][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1336.674352][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1336.676159][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1336.958274][T17744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1337.626158][T17770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1338.781956][T14060] Bluetooth: hci4: command tx timeout [ 1339.826208][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1339.864330][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1339.875183][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1339.894035][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1339.902308][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1340.870806][ T5813] Bluetooth: hci4: command tx timeout [ 1341.115253][T14060] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1341.126833][T14060] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1341.128380][T14060] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1341.131078][T14060] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1341.142494][T14060] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1341.383351][T18435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4129'. [ 1341.980616][T14060] Bluetooth: hci1: command tx timeout [ 1342.081537][T18354] chnl_net:caif_netlink_parms(): no params data found [ 1342.914424][T16280] bridge_slave_1: left allmulticast mode [ 1342.914458][T16280] bridge_slave_1: left promiscuous mode [ 1342.914733][T16280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.954795][T14060] Bluetooth: hci4: command tx timeout [ 1343.034275][T16280] bridge_slave_0: left allmulticast mode [ 1343.034307][T16280] bridge_slave_0: left promiscuous mode [ 1343.034652][T16280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.261103][T14060] Bluetooth: hci3: command tx timeout [ 1344.070378][T14060] Bluetooth: hci1: command tx timeout [ 1345.020674][ T5813] Bluetooth: hci4: command tx timeout [ 1345.341236][ T5813] Bluetooth: hci3: command tx timeout [ 1345.391161][T16280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1345.445288][T16280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1345.489804][T16280] bond0 (unregistering): Released all slaves [ 1345.979027][T18354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.979194][T18354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.979425][T18354] bridge_slave_0: entered allmulticast mode [ 1345.986094][T18354] bridge_slave_0: entered promiscuous mode [ 1346.090745][T18354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.090971][T18354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.091243][T18354] bridge_slave_1: entered allmulticast mode [ 1346.142035][ T5813] Bluetooth: hci1: command tx timeout [ 1346.173048][T18354] bridge_slave_1: entered promiscuous mode [ 1347.368742][T18354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.439561][ T5813] Bluetooth: hci3: command tx timeout [ 1347.772001][T16280] hsr_slave_0: left promiscuous mode [ 1347.820529][T16280] hsr_slave_1: left promiscuous mode [ 1347.821571][T16280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1347.871365][T16280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1348.220691][ T5813] Bluetooth: hci1: command tx timeout [ 1349.365493][T16280] team0 (unregistering): Port device team_slave_1 removed [ 1349.500634][ T5813] Bluetooth: hci3: command tx timeout [ 1349.713491][T16280] team0 (unregistering): Port device team_slave_0 removed [ 1352.054900][T18354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1352.513478][T18354] team0: Port device team_slave_0 added [ 1352.606689][T18354] team0: Port device team_slave_1 added [ 1353.104127][T18354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1353.104148][T18354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1353.104179][T18354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1353.142512][T18411] chnl_net:caif_netlink_parms(): no params data found [ 1353.195117][T18354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1353.195136][T18354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1353.195166][T18354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1354.492641][T18354] hsr_slave_0: entered promiscuous mode [ 1354.494169][T18354] hsr_slave_1: entered promiscuous mode [ 1354.495159][T18354] debugfs: 'hsr0' already exists in 'hsr' [ 1354.495186][T18354] Cannot create hsr debugfs directory [ 1354.732265][T18431] chnl_net:caif_netlink_parms(): no params data found [ 1354.968038][T18411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.968185][T18411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.968457][T18411] bridge_slave_0: entered allmulticast mode [ 1354.990695][T18411] bridge_slave_0: entered promiscuous mode [ 1355.064426][T18611] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4163'. [ 1355.187669][T18411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.187900][T18411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.188148][T18411] bridge_slave_1: entered allmulticast mode [ 1355.202684][T18411] bridge_slave_1: entered promiscuous mode [ 1356.205358][T18411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1356.275543][T18411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1357.730565][T18431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.730725][T18431] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.730984][T18431] bridge_slave_0: entered allmulticast mode [ 1357.734086][T18431] bridge_slave_0: entered promiscuous mode [ 1357.775597][T18411] team0: Port device team_slave_0 added [ 1357.801254][T18431] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.801479][T18431] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.801722][T18431] bridge_slave_1: entered allmulticast mode [ 1357.804843][T18431] bridge_slave_1: entered promiscuous mode [ 1357.808852][T18411] team0: Port device team_slave_1 added [ 1359.296764][T18431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1359.318084][T18411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1359.318102][T18411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.318142][T18411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1359.373493][T18411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1359.373511][T18411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.373540][T18411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1359.430585][T18431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1360.062822][T18431] team0: Port device team_slave_0 added [ 1360.211716][T18696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4178'. [ 1360.246410][T18431] team0: Port device team_slave_1 added [ 1360.732827][T18411] hsr_slave_0: entered promiscuous mode [ 1360.734272][T18411] hsr_slave_1: entered promiscuous mode [ 1360.735259][T18411] debugfs: 'hsr0' already exists in 'hsr' [ 1360.735293][T18411] Cannot create hsr debugfs directory [ 1361.074228][T18431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1361.074248][T18431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.074280][T18431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1361.241086][T18431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1361.241106][T18431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.241136][T18431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1362.400760][T18431] hsr_slave_0: entered promiscuous mode [ 1362.402311][T18431] hsr_slave_1: entered promiscuous mode [ 1362.403489][T18431] debugfs: 'hsr0' already exists in 'hsr' [ 1362.403517][T18431] Cannot create hsr debugfs directory [ 1364.453403][T18354] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1364.535786][T18354] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1364.904572][T18354] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1365.001959][T18354] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1366.039993][T16280] bridge_slave_1: left allmulticast mode [ 1366.040025][T16280] bridge_slave_1: left promiscuous mode [ 1366.052216][T16280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.122283][T16280] bridge_slave_0: left allmulticast mode [ 1366.122317][T16280] bridge_slave_0: left promiscuous mode [ 1366.122607][T16280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.235218][T16280] bridge_slave_1: left allmulticast mode [ 1366.235252][T16280] bridge_slave_1: left promiscuous mode [ 1366.235510][T16280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.312694][T16280] bridge_slave_0: left allmulticast mode [ 1366.312726][T16280] bridge_slave_0: left promiscuous mode [ 1366.313002][T16280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.118462][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.118540][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1369.303784][T16280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1369.412795][T16280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1369.476752][T16280] bond0 (unregistering): Released all slaves [ 1372.057180][T16280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1372.131554][T16280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1372.180990][T16280] bond0 (unregistering): Released all slaves [ 1372.785551][T18354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1373.108320][T18354] 8021q: adding VLAN 0 to HW filter on device team0 [ 1373.127281][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.138742][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1373.177594][ T6485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1373.177719][ T6485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1374.461748][T16280] hsr_slave_0: left promiscuous mode [ 1374.527652][T16280] hsr_slave_1: left promiscuous mode [ 1374.528718][T16280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1374.581518][T16280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1374.800424][T16280] hsr_slave_0: left promiscuous mode [ 1374.840585][T16280] hsr_slave_1: left promiscuous mode [ 1374.841681][T16280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1374.891310][T16280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1377.951156][T16280] team0 (unregistering): Port device team_slave_1 removed [ 1378.331234][T16280] team0 (unregistering): Port device team_slave_0 removed [ 1382.792686][T16280] team0 (unregistering): Port device team_slave_1 removed [ 1383.041118][T16280] team0 (unregistering): Port device team_slave_0 removed [ 1385.774438][T18974] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4225'. [ 1385.843300][T18354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1386.218601][T18354] veth0_vlan: entered promiscuous mode [ 1386.280609][T18354] veth1_vlan: entered promiscuous mode [ 1386.623273][T18354] veth0_macvtap: entered promiscuous mode [ 1386.663082][T18354] veth1_macvtap: entered promiscuous mode [ 1386.720271][T18411] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1386.776168][T18411] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1386.902026][T18411] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1386.959671][T18411] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1387.138405][T18354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1387.294459][T18354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1387.376990][T16282] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.379387][T16282] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.381966][T16282] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.389181][T16282] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.549921][T18431] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1387.624642][T18431] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1387.817316][T18431] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1387.936240][T18431] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1388.628719][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.628743][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.889863][ T6485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.889887][ T6485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.947721][T18411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.064812][T18411] 8021q: adding VLAN 0 to HW filter on device team0 [ 1389.115797][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.127782][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.168091][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.174229][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1389.328471][T18431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.465794][T18431] 8021q: adding VLAN 0 to HW filter on device team0 [ 1389.497464][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.497889][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.604997][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.608258][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1390.827054][T18411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1390.931409][T18431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1391.283990][T18431] veth0_vlan: entered promiscuous mode [ 1391.368982][T18431] veth1_vlan: entered promiscuous mode [ 1391.616324][T18431] veth0_macvtap: entered promiscuous mode [ 1391.696553][T18431] veth1_macvtap: entered promiscuous mode [ 1391.873246][T18431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1391.888078][T18431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1391.927507][ T3592] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.958127][ T3592] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.049462][ T3592] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.067943][ T3592] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.407270][T19147] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4266'. [ 1392.689423][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.689447][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.745738][T18411] veth0_vlan: entered promiscuous mode [ 1392.900584][T18411] veth1_vlan: entered promiscuous mode [ 1392.961193][ T3592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.961215][ T3592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.165377][T18411] veth0_macvtap: entered promiscuous mode [ 1393.231353][T18411] veth1_macvtap: entered promiscuous mode [ 1393.326774][T18411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1393.412761][T18411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1393.530289][ T3592] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.553043][ T3592] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.562442][ T3592] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.577293][ T3592] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.177230][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1394.177254][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1394.445715][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1394.445737][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1394.552023][T19183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4276'. [ 1396.874470][T19222] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4287'. [ 1403.657348][T19349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4323'. [ 1405.849449][T19388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4335'. [ 1405.907236][T19390] IPv6: sit1: Disabled Multicast RS [ 1405.916286][T19390] sit1: entered allmulticast mode [ 1419.722528][T19659] IPv6: sit1: Disabled Multicast RS [ 1419.723889][T19659] sit1: entered allmulticast mode [ 1420.848908][T19685] input: syz0 as /devices/virtual/input/input19 [ 1422.748266][T19722] input: syz0 as /devices/virtual/input/input21 [ 1426.715174][T19778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4469'. [ 1427.783508][T19805] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4483'. [ 1428.546839][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.546914][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1431.891488][T19867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4495'. [ 1433.018871][T19901] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4502'. [ 1433.195533][T19907] loop5: detected capacity change from 0 to 7 [ 1433.805502][T19907] Dev loop5: unable to read RDB block 7 [ 1433.805558][T19907] loop5: unable to read partition table [ 1433.805886][T19907] loop5: partition table beyond EOD, truncated [ 1433.805923][T19907] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 1434.092490][T19926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4518'. [ 1435.270357][ T5169] Dev loop5: unable to read RDB block 7 [ 1435.270410][ T5169] loop5: unable to read partition table [ 1435.270679][ T5169] loop5: partition table beyond EOD, truncated [ 1439.976848][T20016] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4549'. [ 1442.092482][T20049] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4562'. [ 1447.520271][T14132] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1447.670319][T14132] usb 9-1: Using ep0 maxpacket: 8 [ 1447.677674][T14132] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1447.700723][T14132] usb 9-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 108 [ 1447.700758][T14132] usb 9-1: config 12 interface 0 has no altsetting 0 [ 1447.708239][T14132] usb 9-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1447.708272][T14132] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.708294][T14132] usb 9-1: Product: syz [ 1447.708310][T14132] usb 9-1: Manufacturer: syz [ 1447.708325][T14132] usb 9-1: SerialNumber: syz [ 1447.825215][T20170] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1448.118560][T14132] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1448.118711][T14132] usb 9-1: selecting invalid altsetting 0 [ 1448.592534][T14132] usb 9-1: USB disconnect, device number 3 [ 1449.425844][T20215] loop5: detected capacity change from 0 to 7 [ 1450.388543][T20200] Dev loop5: unable to read RDB block 7 [ 1450.388597][T20200] loop5: unable to read partition table [ 1450.388885][T20200] loop5: partition table beyond EOD, truncated [ 1451.950623][ T38] audit: type=1326 audit(1763186060.476:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20259 comm="syz.8.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a264f6c9 code=0x7ffc0000 [ 1451.959318][ T38] audit: type=1326 audit(1763186060.486:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20259 comm="syz.8.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41a264f6c9 code=0x7ffc0000 [ 1451.959379][ T38] audit: type=1326 audit(1763186060.486:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20259 comm="syz.8.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a264f6c9 code=0x7ffc0000 [ 1456.200351][T20283] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4667'. [ 1459.190295][ T1870] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 1459.393743][ T1870] usb 5-1: config 16 has an invalid interface number: 236 but max is 0 [ 1459.393776][ T1870] usb 5-1: config 16 has no interface number 0 [ 1459.423455][ T1870] usb 5-1: string descriptor 0 read error: -22 [ 1459.423626][ T1870] usb 5-1: New USB device found, idVendor=2040, idProduct=c61a, bcdDevice=f4.96 [ 1459.423653][ T1870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.705112][ T1870] usb 5-1: USB disconnect, device number 2 [ 1461.340478][T20311] Bluetooth: hci4: command 0x0406 tx timeout [ 1466.460419][T20376] Bluetooth: hci3: command 0x0406 tx timeout [ 1466.479754][T20376] Bluetooth: hci1: command 0x0406 tx timeout [ 1468.133863][T20441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4734'. [ 1468.395010][T20447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4736'. [ 1468.395046][T20447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4736'. [ 1468.395787][T20447] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4736'. [ 1469.110377][ T5878] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 1469.273118][ T5878] usb 4-1: config 16 has an invalid interface number: 236 but max is 0 [ 1469.273149][ T5878] usb 4-1: config 16 has no interface number 0 [ 1469.286205][ T5878] usb 4-1: string descriptor 0 read error: -22 [ 1469.286370][ T5878] usb 4-1: New USB device found, idVendor=2040, idProduct=c61a, bcdDevice=f4.96 [ 1469.286397][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.418744][T20474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4748'. [ 1469.418779][T20474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4748'. [ 1469.419459][T20474] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4748'. [ 1469.561007][ T5886] usb 4-1: USB disconnect, device number 5 [ 1469.609179][T20478] loop5: detected capacity change from 0 to 7 [ 1470.227294][T20478] Dev loop5: unable to read RDB block 7 [ 1470.227352][T20478] loop5: unable to read partition table [ 1470.227675][T20478] loop5: partition table beyond EOD, truncated [ 1470.227710][T20478] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 1471.004081][T20507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4761'. [ 1471.004113][T20507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4761'. [ 1471.004814][T20507] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4761'. [ 1472.929618][T20540] loop5: detected capacity change from 0 to 7 [ 1473.319485][T20546] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4777'. [ 1473.607351][T20540] Dev loop5: unable to read RDB block 7 [ 1473.607415][T20540] loop5: unable to read partition table [ 1473.607697][T20540] loop5: partition table beyond EOD, truncated [ 1473.607737][T20540] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 1474.256450][T20559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4783'. [ 1474.257306][T20559] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4783'. [ 1476.825890][T20604] loop5: detected capacity change from 0 to 7 [ 1477.318688][T20604] Dev loop5: unable to read RDB block 7 [ 1477.318746][T20604] loop5: unable to read partition table [ 1477.318984][T20604] loop5: partition table beyond EOD, truncated [ 1477.319026][T20604] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 1477.758030][T20628] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4813'. [ 1478.121305][T20636] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4818'. [ 1478.144018][T20638] loop5: detected capacity change from 0 to 7 [ 1478.705976][T20273] Dev loop5: unable to read RDB block 7 [ 1478.706033][T20273] loop5: unable to read partition table [ 1478.706314][T20273] loop5: partition table beyond EOD, truncated [ 1478.989754][T20650] IPv6: sit1: Disabled Multicast RS [ 1479.001686][T20650] sit1: entered allmulticast mode [ 1479.351894][T20638] Dev loop5: unable to read RDB block 7 [ 1479.351942][T20638] loop5: unable to read partition table [ 1479.352167][T20638] loop5: partition table beyond EOD, truncated [ 1479.352329][T20638] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 1481.650332][ T5878] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 1481.806467][ T5878] usb 2-1: config 16 has an invalid interface number: 236 but max is 0 [ 1481.806496][ T5878] usb 2-1: config 16 has no interface number 0 [ 1481.814139][ T5878] usb 2-1: string descriptor 0 read error: -22 [ 1481.814295][ T5878] usb 2-1: New USB device found, idVendor=2040, idProduct=c61a, bcdDevice=f4.96 [ 1481.814319][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.088908][ T5878] usb 2-1: USB disconnect, device number 4 [ 1482.259767][T20699] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4847'. [ 1483.794760][T20728] input: syz0 as /devices/virtual/input/input25 [ 1485.285529][T20751] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4872'. [ 1486.050494][ T5878] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1486.200436][ T5878] usb 9-1: Using ep0 maxpacket: 8 [ 1486.203797][ T5878] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1486.205445][ T5878] usb 9-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 108 [ 1486.205476][ T5878] usb 9-1: config 12 interface 0 has no altsetting 0 [ 1486.209009][ T5878] usb 9-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1486.209039][ T5878] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.209060][ T5878] usb 9-1: Product: syz [ 1486.209077][ T5878] usb 9-1: Manufacturer: syz [ 1486.209093][ T5878] usb 9-1: SerialNumber: syz [ 1486.249534][T20757] fuse: Bad value for 'group_id' [ 1486.249557][T20757] fuse: Bad value for 'group_id' [ 1486.304717][T20755] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1486.537348][ T5878] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1486.537411][ T5878] usb 9-1: selecting invalid altsetting 0 [ 1486.660625][ T5878] usb 9-1: USB disconnect, device number 4 [ 1486.899822][T20762] udevd[20762]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1487.520268][ T5878] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1487.680216][ T5878] usb 9-1: Using ep0 maxpacket: 32 [ 1487.682591][ T5878] usb 9-1: config 0 has no interfaces? [ 1487.682638][ T5878] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1487.682663][ T5878] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.688323][ T5878] usb 9-1: config 0 descriptor?? [ 1487.951953][T20768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1487.952580][T20768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1487.953872][T20768] capability: warning: `syz.8.4881' uses deprecated v2 capabilities in a way that may be insecure [ 1487.959311][ T5885] usb 9-1: USB disconnect, device number 5 [ 1488.277161][ T38] audit: type=1326 audit(1763186096.806:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20785 comm="syz.4.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3307f6c9 code=0x7ffc0000 [ 1488.306000][ T38] audit: type=1326 audit(1763186096.806:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20785 comm="syz.4.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c3307f6c9 code=0x7ffc0000 [ 1488.343421][ T38] audit: type=1326 audit(1763186096.866:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20785 comm="syz.4.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3307f6c9 code=0x7ffc0000 [ 1488.343478][ T38] audit: type=1326 audit(1763186096.876:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20785 comm="syz.4.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3307f6c9 code=0x7ffc0000 [ 1488.880565][ T5886] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1489.040327][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 1489.043572][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1489.045130][ T5886] usb 5-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 108 [ 1489.045160][ T5886] usb 5-1: config 12 interface 0 has no altsetting 0 [ 1489.049203][ T5886] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1489.049232][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.049254][ T5886] usb 5-1: Product: syz [ 1489.049269][ T5886] usb 5-1: Manufacturer: syz [ 1489.049284][ T5886] usb 5-1: SerialNumber: syz [ 1489.112532][T20794] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1489.385064][ T5886] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1489.385128][ T5886] usb 5-1: selecting invalid altsetting 0 [ 1489.562253][ T5886] usb 5-1: USB disconnect, device number 3 [ 1489.761936][T20481] udevd[20481]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1489.988517][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.988590][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.305395][ T38] audit: type=1326 audit(1763186098.836:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20819 comm="syz.4.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3307f6c9 code=0x7ffc0000 [ 1490.308100][ T38] audit: type=1326 audit(1763186098.836:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20819 comm="syz.4.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3307f6c9 code=0x7ffc0000 [ 1490.309743][ T38] audit: type=1326 audit(1763186098.836:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20819 comm="syz.4.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c3307f6c9 code=0x7ffc0000 [ 1490.322432][ T38] audit: type=1326 audit(1763186098.856:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20819 comm="syz.4.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3307f6c9 code=0x7ffc0000 [ 1490.322503][ T38] audit: type=1326 audit(1763186098.856:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20819 comm="syz.4.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c3307f6c9 code=0x7ffc0000 [ 1491.891103][T20842] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4915'. [ 1494.255612][T20872] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4927'. [ 1494.912627][T20882] loop5: detected capacity change from 0 to 7 [ 1495.594403][T20882] Dev loop5: unable to read RDB block 7 [ 1495.594461][T20882] loop5: unable to read partition table [ 1495.594699][T20882] loop5: partition table beyond EOD, truncated [ 1495.594734][T20882] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 1498.878744][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1498.902334][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1498.904846][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1498.922044][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1498.925740][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1499.250621][T20936] input: syz0 as /devices/virtual/input/input28 [ 1500.055327][T20965] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4971'. [ 1500.121667][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.367923][T20973] input: syz0 as /devices/virtual/input/input29 [ 1500.560951][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.020589][T20311] Bluetooth: hci2: command tx timeout [ 1501.022798][T20994] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4984'. [ 1501.094191][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.556948][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.920400][ T1870] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 1501.946178][T21019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4994'. [ 1502.072924][ T1870] usb 2-1: config 16 has an invalid interface number: 236 but max is 0 [ 1502.072953][ T1870] usb 2-1: config 16 has no interface number 0 [ 1502.077917][ T1870] usb 2-1: string descriptor 0 read error: -22 [ 1502.078075][ T1870] usb 2-1: New USB device found, idVendor=2040, idProduct=c61a, bcdDevice=f4.96 [ 1502.078100][ T1870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.376333][ T1870] usb 2-1: USB disconnect, device number 5 [ 1502.678778][ T13] bridge_slave_1: left allmulticast mode [ 1502.678878][ T13] bridge_slave_1: left promiscuous mode [ 1502.679149][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.755073][ T13] bridge_slave_0: left allmulticast mode [ 1502.755105][ T13] bridge_slave_0: left promiscuous mode [ 1502.755373][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.100274][T20311] Bluetooth: hci2: command tx timeout [ 1505.200927][T20311] Bluetooth: hci2: command tx timeout [ 1506.647045][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1506.742840][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1506.785420][ T13] bond0 (unregistering): Released all slaves [ 1507.259151][ T5878] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1507.260599][T20311] Bluetooth: hci2: command tx timeout [ 1507.410263][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 1507.413377][ T5878] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1507.415081][ T5878] usb 4-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 108 [ 1507.415112][ T5878] usb 4-1: config 12 interface 0 has no altsetting 0 [ 1507.421935][ T5878] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1507.421967][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.421989][ T5878] usb 4-1: Product: syz [ 1507.422004][ T5878] usb 4-1: Manufacturer: syz [ 1507.422020][ T5878] usb 4-1: SerialNumber: syz [ 1507.433569][T21071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1507.660489][ T5878] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1507.660554][ T5878] usb 4-1: selecting invalid altsetting 0 [ 1507.796955][ T5878] usb 4-1: USB disconnect, device number 6 [ 1507.939500][T20481] udevd[20481]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1508.403754][ T13] bond1 (unregistering): Released all slaves [ 1509.738974][ T13] bond2 (unregistering): Released all slaves [ 1510.095096][T21097] netlink: 120 bytes leftover after parsing attributes in process `syz.0.5031'. [ 1510.095128][T21097] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5031'. [ 1510.912179][ T13] bond3 (unregistering): Released all slaves [ 1511.996735][ T13] bond4 (unregistering): Released all slaves [ 1513.044289][ T13] bond5 (unregistering): Released all slaves [ 1514.133648][ T13] bond6 (unregistering): Released all slaves [ 1514.274060][T20929] chnl_net:caif_netlink_parms(): no params data found [ 1514.756551][T21143] loop5: detected capacity change from 0 to 7 [ 1515.662312][T21130] Dev loop5: unable to read RDB block 7 [ 1515.662366][T21130] loop5: unable to read partition table [ 1515.662627][T21130] loop5: partition table beyond EOD, truncated [ 1516.632962][T20929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.634271][T20929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.634545][T20929] bridge_slave_0: entered allmulticast mode [ 1516.643142][T20929] bridge_slave_0: entered promiscuous mode [ 1516.677159][T20929] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.677303][T20929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.678406][T20929] bridge_slave_1: entered allmulticast mode [ 1516.700992][T20929] bridge_slave_1: entered promiscuous mode [ 1517.376229][T20929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1517.427583][T20929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1518.365622][ T13] hsr_slave_0: left promiscuous mode [ 1518.412483][ T13] hsr_slave_1: left promiscuous mode [ 1518.413779][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1518.413808][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1518.474477][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1518.474508][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1518.682324][ T13] veth1_macvtap: left promiscuous mode [ 1518.682443][ T13] veth0_macvtap: left promiscuous mode [ 1518.682729][ T13] veth1_vlan: left promiscuous mode [ 1518.682921][ T13] veth0_vlan: left promiscuous mode [ 1522.126733][T21221] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5080'. [ 1522.126769][T21221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5080'. [ 1523.612640][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1524.112130][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1526.388823][T21244] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5090'. [ 1526.388844][T21244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5090'. [ 1527.513156][T20929] team0: Port device team_slave_0 added [ 1527.550772][T20929] team0: Port device team_slave_1 added [ 1527.896530][T20929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1527.896550][T20929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1527.896579][T20929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1527.899069][T20929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1527.899085][T20929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1527.899115][T20929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1528.400028][T20929] hsr_slave_0: entered promiscuous mode [ 1528.426631][T20929] hsr_slave_1: entered promiscuous mode [ 1528.427941][T20929] debugfs: 'hsr0' already exists in 'hsr' [ 1528.427969][T20929] Cannot create hsr debugfs directory [ 1530.022401][T21301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5110'. [ 1530.256889][T21306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5112'. [ 1532.053287][T20929] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1532.101177][T20929] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1532.189549][T20929] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1532.250622][T21336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5121'. [ 1532.280961][T20929] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1532.918734][T20929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1533.027837][T20929] 8021q: adding VLAN 0 to HW filter on device team0 [ 1533.095666][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.105865][ T6525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1533.127987][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.128148][ T6525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1533.730359][ T1870] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1533.880257][ T1870] usb 2-1: Using ep0 maxpacket: 8 [ 1533.884630][ T1870] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1533.886408][ T1870] usb 2-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 108 [ 1533.886438][ T1870] usb 2-1: config 12 interface 0 has no altsetting 0 [ 1533.935962][ T1870] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1533.935993][ T1870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.936014][ T1870] usb 2-1: Product: syz [ 1533.936029][ T1870] usb 2-1: Manufacturer: syz [ 1533.936044][ T1870] usb 2-1: SerialNumber: syz [ 1533.994720][T21374] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1534.264218][ T1870] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1534.264284][ T1870] usb 2-1: selecting invalid altsetting 0 [ 1534.452635][T20929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1534.491562][ T1870] usb 2-1: USB disconnect, device number 6 [ 1534.877324][T21407] udevd[21407]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1535.826078][T21433] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5148'. [ 1535.826112][T21433] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5148'. [ 1535.956064][T20929] veth0_vlan: entered promiscuous mode [ 1536.012923][T20929] veth1_vlan: entered promiscuous mode [ 1536.049941][ T38] audit: type=1326 audit(1763186144.576:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21434 comm="syz.0.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0c90f6c9 code=0x7ffc0000 [ 1536.050002][ T38] audit: type=1326 audit(1763186144.576:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21434 comm="syz.0.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0c90f6c9 code=0x7ffc0000 [ 1536.051343][ T38] audit: type=1326 audit(1763186144.586:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21434 comm="syz.0.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd0c90f6c9 code=0x7ffc0000 [ 1536.062914][ T38] audit: type=1326 audit(1763186144.586:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21434 comm="syz.0.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0c90f6c9 code=0x7ffc0000 [ 1536.062971][ T38] audit: type=1326 audit(1763186144.596:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21434 comm="syz.0.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0c90f6c9 code=0x7ffc0000 [ 1536.064580][ T38] audit: type=1326 audit(1763186144.596:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21434 comm="syz.0.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd0c90f6c9 code=0x7ffc0000 [ 1536.064642][ T38] audit: type=1326 audit(1763186144.596:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21434 comm="syz.0.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0c90f6c9 code=0x7ffc0000 [ 1536.064708][ T38] audit: type=1326 audit(1763186144.596:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21434 comm="syz.0.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0c90f6c9 code=0x7ffc0000 [ 1536.065362][ T38] audit: type=1326 audit(1763186144.596:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21434 comm="syz.0.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd0c90f6c9 code=0x7ffc0000 [ 1536.065438][ T38] audit: type=1326 audit(1763186144.596:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21434 comm="syz.0.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0c90f6c9 code=0x7ffc0000 [ 1536.449446][T20929] veth0_macvtap: entered promiscuous mode [ 1536.515055][T20929] veth1_macvtap: entered promiscuous mode [ 1536.639895][T20929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1536.732884][T20929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1536.794186][T16282] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.799350][T16282] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.799803][T16282] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.800324][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.304699][T16282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.304738][T16282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.534629][ T6933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.534653][ T6933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1538.657946][T21479] fuse: Invalid rootmode [ 1539.751928][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1539.766763][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1539.770827][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1539.775585][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1539.778732][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1539.976782][T21516] loop5: detected capacity change from 0 to 7 [ 1540.797413][T21516] Dev loop5: unable to read RDB block 7 [ 1540.797464][T21516] loop5: unable to read partition table [ 1540.797682][T21516] loop5: partition table beyond EOD, truncated [ 1540.799335][T21516] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 1540.813668][ T6933] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.112315][ T38] kauditd_printk_skb: 9 callbacks suppressed [ 1541.112336][ T38] audit: type=1326 audit(1763186149.646:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21533 comm="syz.1.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1413c0f6c9 code=0x7ffc0000 [ 1541.113056][ T38] audit: type=1326 audit(1763186149.646:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21533 comm="syz.1.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1413c0f6c9 code=0x7ffc0000 [ 1541.113112][ T38] audit: type=1326 audit(1763186149.646:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21533 comm="syz.1.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1413c0f6c9 code=0x7ffc0000 [ 1541.180555][ T38] audit: type=1326 audit(1763186149.716:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21533 comm="syz.1.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1413c0f6c9 code=0x7ffc0000 [ 1541.180993][ T38] audit: type=1326 audit(1763186149.716:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21533 comm="syz.1.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1413c0f6c9 code=0x7ffc0000 [ 1541.181041][ T38] audit: type=1326 audit(1763186149.716:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21533 comm="syz.1.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1413c0f6c9 code=0x7ffc0000 [ 1541.473173][ T38] audit: type=1326 audit(1763186150.006:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21539 comm="syz.1.5186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1413c0f6c9 code=0x7ffc0000 [ 1541.473899][ T38] audit: type=1326 audit(1763186150.006:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21539 comm="syz.1.5186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1413c0f6c9 code=0x7ffc0000 [ 1541.473953][ T38] audit: type=1326 audit(1763186150.006:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21539 comm="syz.1.5186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1413c0f6c9 code=0x7ffc0000 [ 1541.479515][ T38] audit: type=1326 audit(1763186150.006:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21539 comm="syz.1.5186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1413c0f6c9 code=0x7ffc0000 [ 1541.739174][ T6933] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.910321][ T5813] Bluetooth: hci0: command tx timeout [ 1542.343517][ T6933] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.645274][T21567] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5196'. [ 1542.826564][ T6933] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.980258][ T5813] Bluetooth: hci0: command tx timeout [ 1544.195842][ T6933] bridge_slave_1: left allmulticast mode [ 1544.195869][ T6933] bridge_slave_1: left promiscuous mode [ 1544.196074][ T6933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.314129][ T6933] bridge_slave_0: left allmulticast mode [ 1544.314164][ T6933] bridge_slave_0: left promiscuous mode [ 1544.314475][ T6933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.063731][ T5813] Bluetooth: hci0: command tx timeout [ 1547.360846][ T6933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1547.424549][ T6933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1547.464471][ T6933] bond0 (unregistering): Released all slaves [ 1548.150423][ T5813] Bluetooth: hci0: command tx timeout [ 1548.333905][ T6933] bond1 (unregistering): Released all slaves [ 1549.145020][ T6933] bond2 (unregistering): Released all slaves [ 1549.952711][ T6933] bond3 (unregistering): Released all slaves [ 1550.816910][ T6933] bond4 (unregistering): Released all slaves [ 1551.432621][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.432746][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.604350][ T6933] bond5 (unregistering): Released all slaves [ 1551.927681][T21508] chnl_net:caif_netlink_parms(): no params data found [ 1553.892169][T21508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.892313][T21508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.892600][T21508] bridge_slave_0: entered allmulticast mode [ 1553.895422][T21508] bridge_slave_0: entered promiscuous mode [ 1553.929650][T21508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.950405][T21508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.950659][T21508] bridge_slave_1: entered allmulticast mode [ 1553.953712][T21508] bridge_slave_1: entered promiscuous mode [ 1554.636630][T21508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1554.656548][T21508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1554.780400][ T6933] hsr_slave_0: left promiscuous mode [ 1554.840180][ T6933] hsr_slave_1: left promiscuous mode [ 1554.841388][ T6933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1554.841416][ T6933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1554.879095][ T6933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1554.879126][ T6933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1555.067435][ T6933] veth1_macvtap: left promiscuous mode [ 1555.067562][ T6933] veth0_macvtap: left promiscuous mode [ 1555.067845][ T6933] veth1_vlan: left promiscuous mode [ 1555.068038][ T6933] veth0_vlan: left promiscuous mode [ 1556.383219][T21678] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5231'. [ 1556.383256][T21678] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5231'. [ 1556.386998][T21676] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5230'. [ 1556.446691][ T1006] smc: removing ib device syz2 [ 1558.430902][ T6933] team0 (unregistering): Port device team_slave_1 removed [ 1558.701443][ T6933] team0 (unregistering): Port device team_slave_0 removed [ 1561.523971][ T9] ================================================================== [ 1561.523989][ T9] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 1561.524229][ T9] Read of size 8 at addr ffff8880608de2e8 by task kworker/0:0/9 [ 1561.524248][ T9] [ 1561.524276][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1561.524301][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1561.524317][ T9] Workqueue: events smc_ib_port_event_work [ 1561.524420][ T9] Call Trace: [ 1561.524432][ T9] [ 1561.524442][ T9] dump_stack_lvl+0x189/0x250 [ 1561.524533][ T9] ? rcu_is_watching+0x15/0xb0 [ 1561.524569][ T9] ? __kasan_check_byte+0x12/0x40 [ 1561.524614][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1561.524640][ T9] ? rcu_is_watching+0x15/0xb0 [ 1561.524656][ T9] ? lock_release+0x4b/0x3e0 [ 1561.524694][ T9] ? __virt_addr_valid+0x1c8/0x5c0 [ 1561.524734][ T9] ? __virt_addr_valid+0x4a5/0x5c0 [ 1561.524761][ T9] print_report+0xca/0x240 [ 1561.524786][ T9] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 1561.524809][ T9] kasan_report+0x118/0x150 [ 1561.524835][ T9] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 1561.524861][ T9] __ethtool_get_link_ksettings+0x6e/0x190 [ 1561.524884][ T9] ib_get_eth_speed+0x15e/0x7b0 [ 1561.524942][ T9] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1561.524958][ T9] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1561.525035][ T9] ? rxe_query_port+0x7e/0x3b0 [ 1561.525104][ T9] rxe_query_port+0x93/0x3b0 [ 1561.525130][ T9] ib_query_port+0x170/0x830 [ 1561.525168][ T9] smc_ib_port_event_work+0x16f/0x940 [ 1561.525193][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 1561.525223][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 1561.525245][ T9] process_scheduled_works+0xae1/0x17b0 [ 1561.525280][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 1561.525310][ T9] worker_thread+0x8a0/0xda0 [ 1561.525344][ T9] kthread+0x711/0x8a0 [ 1561.525371][ T9] ? __pfx_worker_thread+0x10/0x10 [ 1561.525393][ T9] ? __pfx_kthread+0x10/0x10 [ 1561.525418][ T9] ? rt_spin_unlock+0x150/0x200 [ 1561.525440][ T9] ? rt_spin_unlock+0x161/0x200 [ 1561.525460][ T9] ? __pfx_kthread+0x10/0x10 [ 1561.525486][ T9] ret_from_fork+0x4bc/0x870 [ 1561.525513][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 1561.525538][ T9] ? __switch_to_asm+0x39/0x70 [ 1561.525554][ T9] ? __switch_to_asm+0x33/0x70 [ 1561.525571][ T9] ? __pfx_kthread+0x10/0x10 [ 1561.525597][ T9] ret_from_fork_asm+0x1a/0x30 [ 1561.525623][ T9] [ 1561.525629][ T9] [ 1561.525649][ T9] Allocated by task 14141: [ 1561.525657][ T9] kasan_save_track+0x3e/0x80 [ 1561.525678][ T9] __kasan_kmalloc+0x93/0xb0 [ 1561.525698][ T9] __kvmalloc_node_noprof+0x3fd/0x920 [ 1561.525720][ T9] alloc_netdev_mqs+0xa6/0x11c0 [ 1561.525790][ T9] rtnl_create_link+0x31f/0xd10 [ 1561.525827][ T9] rtnl_newlink_create+0x25c/0xb00 [ 1561.525860][ T9] rtnl_newlink+0x16e4/0x1c80 [ 1561.525874][ T9] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1561.525887][ T9] netlink_rcv_skb+0x208/0x470 [ 1561.525902][ T9] netlink_unicast+0x846/0xa10 [ 1561.525945][ T9] netlink_sendmsg+0x805/0xb30 [ 1561.525961][ T9] __sock_sendmsg+0x21c/0x270 [ 1561.526044][ T9] __sys_sendto+0x3c7/0x520 [ 1561.526066][ T9] __x64_sys_sendto+0xde/0x100 [ 1561.526082][ T9] do_syscall_64+0xfa/0xfa0 [ 1561.526122][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.526154][ T9] [ 1561.526158][ T9] Freed by task 6933: [ 1561.526166][ T9] kasan_save_track+0x3e/0x80 [ 1561.526186][ T9] __kasan_save_free_info+0x46/0x50 [ 1561.526202][ T9] __kasan_slab_free+0x5c/0x80 [ 1561.526223][ T9] kfree+0x197/0x950 [ 1561.526241][ T9] device_release+0x9c/0x1c0 [ 1561.526303][ T9] kobject_put+0x22b/0x480 [ 1561.526341][ T9] netdev_run_todo+0xd2e/0xea0 [ 1561.526361][ T9] default_device_exit_batch+0x81e/0x890 [ 1561.526377][ T9] ops_undo_list+0x525/0x990 [ 1561.526410][ T9] cleanup_net+0x4de/0x820 [ 1561.526424][ T9] process_scheduled_works+0xae1/0x17b0 [ 1561.526443][ T9] worker_thread+0x8a0/0xda0 [ 1561.526463][ T9] kthread+0x711/0x8a0 [ 1561.526486][ T9] ret_from_fork+0x4bc/0x870 [ 1561.526504][ T9] ret_from_fork_asm+0x1a/0x30 [ 1561.526520][ T9] [ 1561.526524][ T9] The buggy address belongs to the object at ffff8880608de000 [ 1561.526524][ T9] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1561.526540][ T9] The buggy address is located 744 bytes inside of [ 1561.526540][ T9] freed 4096-byte region [ffff8880608de000, ffff8880608df000) [ 1561.526558][ T9] [ 1561.526562][ T9] The buggy address belongs to the physical page: [ 1561.526576][ T9] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x608d8 [ 1561.526592][ T9] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1561.526605][ T9] memcg:ffff88803a42ca41 [ 1561.526613][ T9] flags: 0x80000000000040(head|node=0|zone=1) [ 1561.526635][ T9] page_type: f5(slab) [ 1561.526651][ T9] raw: 0080000000000040 ffff88813ff30500 ffffea0000e45a00 dead000000000002 [ 1561.526666][ T9] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff88803a42ca41 [ 1561.526683][ T9] head: 0080000000000040 ffff88813ff30500 ffffea0000e45a00 dead000000000002 [ 1561.526698][ T9] head: 0000000000000000 0000000000040004 00000000f5000000 ffff88803a42ca41 [ 1561.526714][ T9] head: 0080000000000003 ffffea0001823601 00000000ffffffff 00000000ffffffff [ 1561.526729][ T9] head: 00000000000008bc 0000000000000000 00000000ffffffff 0000000000000008 [ 1561.526739][ T9] page dumped because: kasan: bad access detected [ 1561.526752][ T9] page_owner tracks the page as allocated [ 1561.526759][ T9] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13510, tgid 13510 (syz-executor), ts 849253248609, free_ts 849252487549 [ 1561.526790][ T9] post_alloc_hook+0x240/0x2a0 [ 1561.526812][ T9] get_page_from_freelist+0x28c0/0x2960 [ 1561.526838][ T9] __alloc_frozen_pages_noprof+0x181/0x370 [ 1561.526864][ T9] alloc_pages_mpol+0xd1/0x380 [ 1561.526887][ T9] allocate_slab+0x96/0x350 [ 1561.526903][ T9] ___slab_alloc+0xb10/0x1400 [ 1561.526917][ T9] __slab_alloc+0xc6/0x1f0 [ 1561.526930][ T9] __kmalloc_noprof+0x14b/0x7d0 [ 1561.526951][ T9] __register_sysctl_table+0x72/0x1340 [ 1561.526986][ T9] __addrconf_sysctl_register+0x328/0x4c0 [ 1561.527042][ T9] addrconf_sysctl_register+0x168/0x1c0 [ 1561.527066][ T9] ipv6_add_dev+0xd84/0x13c0 [ 1561.527109][ T9] addrconf_notify+0x794/0x1010 [ 1561.527126][ T9] notifier_call_chain+0x1b6/0x3e0 [ 1561.527148][ T9] register_netdevice+0x163c/0x1b10 [ 1561.527167][ T9] nsim_create+0xb51/0x1060 [ 1561.527252][ T9] page last free pid 13510 tgid 13510 stack trace: [ 1561.527262][ T9] __free_frozen_pages+0xfb6/0x1140 [ 1561.527284][ T9] __put_partials+0x149/0x170 [ 1561.527298][ T9] __slab_free+0x29e/0x370 [ 1561.527316][ T9] qlist_free_all+0x97/0x140 [ 1561.527335][ T9] kasan_quarantine_reduce+0x148/0x160 [ 1561.527355][ T9] __kasan_slab_alloc+0x22/0x80 [ 1561.527376][ T9] __kmalloc_cache_noprof+0x181/0x6c0 [ 1561.527398][ T9] dropmon_net_event+0x221/0x2b0 [ 1561.527433][ T9] notifier_call_chain+0x1b6/0x3e0 [ 1561.527455][ T9] register_netdevice+0x163c/0x1b10 [ 1561.527474][ T9] nsim_create+0xb51/0x1060 [ 1561.527499][ T9] __nsim_dev_port_add+0x6b6/0xb10 [ 1561.527517][ T9] nsim_dev_port_add_all+0x37/0xf0 [ 1561.527535][ T9] nsim_drv_probe+0x884/0xba0 [ 1561.527551][ T9] really_probe+0x26d/0x9e0 [ 1561.527590][ T9] __driver_probe_device+0x18c/0x2f0 [ 1561.527613][ T9] [ 1561.527617][ T9] Memory state around the buggy address: [ 1561.527626][ T9] ffff8880608de180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1561.527638][ T9] ffff8880608de200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1561.527651][ T9] >ffff8880608de280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1561.527660][ T9] ^ [ 1561.527670][ T9] ffff8880608de300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1561.527682][ T9] ffff8880608de380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1561.527690][ T9] ================================================================== [ 1561.527715][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1561.527731][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1561.527753][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1561.527767][ T9] Workqueue: events smc_ib_port_event_work [ 1561.527797][ T9] Call Trace: [ 1561.527805][ T9] [ 1561.527814][ T9] dump_stack_lvl+0x99/0x250 [ 1561.527848][ T9] ? __asan_memcpy+0x40/0x70 [ 1561.527873][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1561.527907][ T9] ? __pfx__printk+0x10/0x10 [ 1561.527939][ T9] vpanic+0x237/0x6d0 [ 1561.527959][ T9] ? __pfx_vpanic+0x10/0x10 [ 1561.527985][ T9] panic+0xb9/0xc0 [ 1561.528005][ T9] ? __pfx_panic+0x10/0x10 [ 1561.528025][ T9] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1561.528065][ T9] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1561.528103][ T9] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 1561.528132][ T9] check_panic_on_warn+0x89/0xb0 [ 1561.528152][ T9] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 1561.528181][ T9] end_report+0x78/0x160 [ 1561.528211][ T9] kasan_report+0x129/0x150 [ 1561.528244][ T9] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 1561.528277][ T9] __ethtool_get_link_ksettings+0x6e/0x190 [ 1561.528308][ T9] ib_get_eth_speed+0x15e/0x7b0 [ 1561.528330][ T9] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1561.528349][ T9] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1561.528390][ T9] ? rxe_query_port+0x7e/0x3b0 [ 1561.528421][ T9] rxe_query_port+0x93/0x3b0 [ 1561.528453][ T9] ib_query_port+0x170/0x830 [ 1561.528477][ T9] smc_ib_port_event_work+0x16f/0x940 [ 1561.528508][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 1561.528540][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 1561.528569][ T9] process_scheduled_works+0xae1/0x17b0 [ 1561.528613][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 1561.528650][ T9] worker_thread+0x8a0/0xda0 [ 1561.528691][ T9] kthread+0x711/0x8a0 [ 1561.528725][ T9] ? __pfx_worker_thread+0x10/0x10 [ 1561.528753][ T9] ? __pfx_kthread+0x10/0x10 [ 1561.528785][ T9] ? rt_spin_unlock+0x150/0x200 [ 1561.528812][ T9] ? rt_spin_unlock+0x161/0x200 [ 1561.528836][ T9] ? __pfx_kthread+0x10/0x10 [ 1561.528868][ T9] ret_from_fork+0x4bc/0x870 [ 1561.528895][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 1561.528925][ T9] ? __switch_to_asm+0x39/0x70 [ 1561.528947][ T9] ? __switch_to_asm+0x33/0x70 [ 1561.528966][ T9] ? __pfx_kthread+0x10/0x10 [ 1561.528997][ T9] ret_from_fork_asm+0x1a/0x30 [ 1561.529029][ T9] [ 1561.529409][ T9] Kernel Offset: disabled