last executing test programs: 4m13.69803704s ago: executing program 4 (id=243): openat$random(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x0, 0x1}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffecc, &(0x7f0000000200)=0x101) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2b22c0, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x10, r3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 4m12.029584497s ago: executing program 4 (id=248): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02180000180000000000000000000000030006000000000002000000000000000000000000000000080012001000000000000000000000000681a2fd619f418e6a0000000000000000000000000000000000000000000000fe88000000000000000000000000000103000500000000000200000000000000000000000000000008001900000000000a00000000000000fc"], 0xc0}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000da8021e899d6d9376e872ac5694dca7fbc234dfdbd7fc6e71dec9f46788e57e5ce6109cc07bbaa31d5b44c80682fec7bccacc6540171093fb4565cc2fd908497c9e33bae1260ee32e6eb", @ANYRES16=r8, @ANYBLOB], 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x54, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xce4, 0x9}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc7}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1f0}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0x0, 0x0, 0x8001, 0x1ff]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x10, 0x13, [{0x6c}, {0x16, 0x1}, {0x18}, {0x12}, {0x48}, {0xc}, {0x0, 0x1}, {0x24}, {0x18, 0x1}, {0x1b, 0x1}, {0x14}, {0x48}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x40010) write(r6, &(0x7f0000000000)="fa", 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r9, &(0x7f0000000640)={0x13, 0x0, 0x7, {0x0, r10, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f0000000300), r10, 0x2}}, 0x18) 19.806220074s ago: executing program 2 (id=304): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000cd0b000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x32) (async) sendmmsg$sock(r1, &(0x7f0000000500)=[{{&(0x7f0000000080)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, 0x0}}], 0x1, 0x0) (async, rerun: 32) socket(0x0, 0x0, 0x0) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)={0x640, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x624, 0x33, @beacon={{{}, {}, @device_b}, 0x1fffffc, @random, 0x312, @void, @val={0x1, 0x3, [{}, {}, {}]}, @val={0x3, 0x1, 0x3c}, @val={0x4, 0x6}, @val={0x6, 0x2, 0x800}, @void, @val={0x25, 0x3}, @void, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xa8, "93fbaa0b4dff55c87cbc0b22ad3f5c8fb5e55c868e6948535545d2642d43958e63a9e4565c09d421b18c6513dd7b17c0ba8cec48b151771973539c9ac115be437bfd9708e35ff362b0b222ecb874eafd50788025d206892434e440e1ce5d5d4ce05dcda2e5ef5d1144ada4517edd3ba61999c7b2f99aa4651b9b396e7711404f6e76ab51de66c31f43e745840c2139dec2bde00f6568a56fcf2a4339b6fae5b4d982cc493cd12632"}, {0xdd, 0xe9, "93c2a9416d8f3147c1f9e6a23e2e989c2c65a12656e3c59f23857de7dcfe83d82d31c86b50d81db032f4a901af7cfeeb271ffb1cce3aec76b173f13b703f822c15af5fa0aafaba02e6e5574ca324db52aed3af088e68c9d93c7351c68a3baca68c70b33b12a7ce4df397912d1740e8e8664df49ede5a4ae8215d8c0ebb0a11e29f981672a98645d3620f8e3294eb9ea15d2ec67c782110729e7d510b64de84417b76fe1ce182c82acbc285dfe983534b3afee0f80a7af1cd97ab55ba1816fa8d45bd4c3649ae26f92cd4711d43c4856910e4daf8ce8b34c2d31a7b7702f88ead864ff216b60fe28035"}, {0xdd, 0x7d, "9fd3cab8f4a93dbb486be915c0ab57b7cfd46815d1ef7fa5c0f28b834eaa6b6ead67ef6d7f081e43d9b5757783c1110a9e39d3243ef4282388355535751c2bff7c70065657c15b6851a76aca6354b7f5df09a072d092547fa19a820eabe118df2b1a3c1634e36a3ca9f0076646238950c46cacdaa1fef12697eee16d07"}, {0xdd, 0x54, "4987a87c1d667dc01ecf0212ced8b376ef0cad24caa2553b9b4bee90ea073f08badf30076633e6a32de0612fc2837ebd338536084526e0f3ae5d99f5e7e9d78a42f763c741163a10afdc2cd478cb184d5ba68f75"}, {0xdd, 0xe6, "70adefd6785b01f4a8105de85fbb8853da9af2927d5535a993ced02a98478cfb9ab35b777c74249295ea5695286f9b0e3591b4a7eb6395cb904151f6b67068943b0cc1eb0fe8c7357cecb31549e32e4dcb861ebf2d693d087cb25a0c40ec5c44c55d737d27711d6677263973429b4f347792ffe0a613dbdf4b4264b58b6279fb3a2a0e887930cbfa26c5094cda28ca7709592366cc4b7d084bddd369d0d8dd24d8cbda38c85f2dc5c87f5d08d8404325470a5d8e04f3850399f7cd5fd5ade5d2cd983b7f350677da62f3eef7d543c5be247587c2a004dc43af473d0c46b7c6d4909de8e34714"}, {0xdd, 0x86, "e20fd7e4dcf42f6f5b7836d66939b061c5ee9eef37f5514db87d2a1f6b0af82f8d448ef6c3ec1738cbf8d8f7d5e70fafb2224087f8d1fafc60dfc6f58de4683d7f6d7188c70d0873bcc3cd15fac630f6736f97119e6db7efb75ade73ade975b514949d30b551609eb5fe8e83ba3d824d92e7405a072f659679ad17ec02db5a4c4138c41d25c6"}, {0xdd, 0x8a, "91365042ec956870b4e7f9928d65eb877580167e416c7e1f0d1caa34a03543a5142449258783c9fa2d1e1dc9a87038fbe5a7b477b6ebb5b3cd41e9d9f721fe8e4052bb8a71376302528146cc6867ae7d5f9203201f84800afd23b797084d23750306e289bd6cb96b9461c768984460bef8966d821dbb6fca8454412922027d81a44e296b9e6a938e8ee9"}, {0xdd, 0xf5, "1bc65e3ce53ef12531fae86d6abb56b4b6701dba8ff8f81e80e83b3b6958981828b383ba88c2ff15efca8fe229a7bade7427ddc10f88780ba29bc2b576b6aea800b7d056b9b5ffd15073eed736d927d97d67cce42e573ec537d15ba30a95aa0fc20e8e8c76e984aee592aa7a46fbe25b0aff890b2a6d22ab6f291c6bd00ba92161096ec80daa75d4827fbe05dd5694a0c3f79f2f60e3ac49d1aed016c48d12c9dc410591230c105a036f7d1076024c1774f657ba1211f27f339d10bf0e2d461dbc7e710c68c3d9f1e85d9d75951d9601e0f9ae5e06a6deff6bc7e4bf88863092437832fd7c36ae84e432c3b76e8a92e0a19e8324c4"}, {0xdd, 0x7c, "68994333542c1f4efacd57b96dad573166eaf0976729bd09152623ec41d9c3f5bf29c7474318a128824eab9cef966fd38174d73311ac1e573d9d3b455a8c9f43c437079b28e16d8e6e1110c00924a2472d84aa999a52abde175c2f072c22eeb03215618dc66ece792736e4f6049a6137f5c415ea9acd82c2488d0666"}]}}]}, 0x640}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) (async) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000040)={'wlan1\x00', 0x400}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f00000004c0)) (async) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="31830000000c00018001e88d5646a1bd00"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 64) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) pipe(&(0x7f0000000040)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e640000000014000280070000000000000005001d"], 0x44}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 19.410187836s ago: executing program 2 (id=305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x6a040000) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) write$binfmt_misc(r5, 0x0, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x4000000005, 0x0) write$binfmt_misc(r6, 0x0, 0x99) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001e00)={0x44, r8, 0x100, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}]}, 0x44}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) 17.928673091s ago: executing program 0 (id=307): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x3, 0x40000}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcb2, &(0x7f0000000800)=0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) open(0x0, 0x400141042, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000005304b70000000000000000"], 0x14}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000180)=0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={0x0, @nfc={0x27, 0x0, 0x1, 0x6}, @vsock={0x28, 0x0, 0x2710, @my=0x0}, @nfc={0x27, r5, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='veth0_to_batadv\x00', 0x7, 0x7eb, 0x72}) socket$packet(0x11, 0x3, 0x300) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5"], 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/40, @ANYRES8], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000001c0)={0x40d, 0x0, {0x0, 0x0, 0x0, {0x0, 0xaf4}, {}, @rumble}, {0x0, 0x0, 0x0, {}, {}, @ramp}}) 16.640421067s ago: executing program 0 (id=308): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x2e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002311f335850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) uname(0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000"], 0x0) syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() open(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000061111c04000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x60000000}, 0x70) syz_open_dev$evdev(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getpid() r5 = socket$inet(0x2, 0x6, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1, &(0x7f0000001240)=ANY=[@ANYBLOB="97966d8a33577f28bcda9b2ad7bf6550519d9ac50a6964f2fe7e1800041004fe491260d04a3dc97afb718ca2420ed28bcdfb41090d548d77c79136b636a99d91a5d5ac81d6bdfee2a5e460bc16cb972a1e9e36e9c408e8e8b74a389692d3d271d17c1830551a8e53299d987f64fa2993c97534bd74fd25b304c54182a10790612ef0b39d284db18a47f9ec085a03abb4a56ef34e1a3c48798571078e5db5d37302c728b925e0d329330fd0d5654103f4cf0d5468205ec261717e7b14c366d91beb0577e53f998e607b79f7f4f70ac402d8c0dd082e48e3542aa7736facd5f4a2248e4b31bdecc4416053fb69d2ea"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.378253436s ago: executing program 1 (id=309): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xb, &(0x7f0000000580)=@framed={{}, [@printk={@u}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$kcm(0xa, 0x1, 0x106) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285628, &(0x7f0000000080)={0x0, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r7 = accept$alg(r5, 0x0, 0x0) recvmmsg(r7, &(0x7f0000006100), 0x49f, 0x0, 0x0) 14.888753396s ago: executing program 1 (id=310): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0xa9cc4cd43b58366d) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x4, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc72e}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x800) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) (async) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) (async) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r5, r5, r5}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000480)=0x1, 0x4) (rerun: 64) r6 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) (async) sendto$inet(r1, &(0x7f00000004c0)="d1", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) close(r0) 14.506564924s ago: executing program 2 (id=311): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r6 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) (fail_nth: 1) 13.986157237s ago: executing program 1 (id=312): r0 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'nicvf0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000200000c50000000700000045000000a00002"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f00000002c0)="b9ff0307600300", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x6, 0xb, &(0x7f0000000400)="00a529c270e5e483833d04a04012dca0e789b6ac4aeb59da7123b7b880de000000000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0xfffffffffffffcd9, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x7fff, 0x180c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udplite(0x11, 0x2, 0x88) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r4, 0x40184150, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000401000"/19, @ANYBLOB="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", @ANYRESHEX=r2], 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xa0882, 0x0) 13.981915733s ago: executing program 2 (id=313): socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180400000100f1ff0000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000100), 0x8) socket(0x2, 0x80805, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r5, 0x101, 0x1, &(0x7f0000000080), &(0x7f00000001c0)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000380), 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000340)='pids.max\x00', 0x2, 0x0) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) ppoll(&(0x7f0000000740)=[{r8}], 0x1, 0x0, 0x0, 0x0) close(r7) syz_usb_connect(0x5, 0x58e, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x68, 0x2e, 0x35, 0x40, 0x58b, 0x28, 0xf1bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57c, 0x3, 0x9, 0xad, 0x0, 0x6, [{{0x9, 0x4, 0x1, 0xd, 0x5, 0x42, 0x10, 0x3c, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0xf9}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x304, 0x3, 0x4}, @extension_unit={0x9, 0x24, 0x8, 0x6, 0x2c, 0xd6, "34c2"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x6, 0xea, 0x0, 0x40, 0x80}, @mixer_unit={0x9, 0x24, 0x4, 0x2, 0x40, "913526e0"}, @mixer_unit={0x9, 0x24, 0x4, 0x1, 0xf8, "186d094d"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x4, 'r'}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x4, 0x6, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x5, 0x4, 0x2}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0x4, 0xa, "b187546d3d568f6b"}]}], [{{0x9, 0x5, 0x0, 0x8, 0x8, 0x81, 0x0, 0x4}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0xd, 0xd, 0x7, [@generic={0x2e, 0x17, "c78eeea021b348e20a8de41d42796781fe13ba4bd59fd0f4753edff1ad0c85d9bcd18581857c1e5ac906720a"}]}}, {{0x9, 0x5, 0xe, 0x13, 0x0, 0x1, 0x10, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x7, 0x3, 0x7bc}]}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0xff, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x10, 0x1}, @generic={0x2, 0x22}]}}, {{0x9, 0x5, 0xe, 0xc, 0x0, 0xa, 0xed, 0x1}}]}}, {{0x9, 0x4, 0x9c, 0x3, 0xf, 0xff, 0x0, 0x0, 0x3, [], [{{0x9, 0x5, 0x0, 0xc, 0x8, 0x1, 0x1, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x78, 0x4}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0xec, 0x8}}, {{0x9, 0x5, 0x5, 0x1, 0x10, 0xd7, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfd, 0xfff}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x5, 0x0, 0xf}}, {{0x9, 0x5, 0x7, 0x1, 0x10, 0x0, 0x7}}, {{0x9, 0x5, 0x80, 0x0, 0x30a640a82890abae, 0x3, 0x0, 0x2}}, {{0x9, 0x5, 0xc0, 0x10, 0x20, 0xc4, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0xa0, 0x3, 0x5}}, {{0x9, 0x5, 0x5, 0xc, 0x400, 0x0, 0x40}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x5, 0x4, 0x1, [@generic={0xbf, 0x6, "d60020ae9918cfbf19150429ef2e2e50154b2dec86cbc53d0843d12f21aa6280a0b36e46483c94d5bb018da3bfa8d630e2c0f21d0b01d6665565b3a6591e74b4653c1fe601ad9bbc182c7ff143b1ca5ac2c75eda18f4eadbe2899838e44d9466d8bb4cb17739ee86e4be173dca61bca5aa5261e353cab37bed288f3d1f68c4ff4a57bb945a7edf73fa0fbbd802f0f3acccc5b0156637551120a3e69cdf2baaeeab3a126e06313fb6b7e4b00496fc58b80a09ba9a8ae927300e64eb0328"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x9}]}}, {{0x9, 0x5, 0x80, 0x0, 0x0, 0x8, 0x2}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x5, 0x0, 0x12, [@generic={0x74, 0x30, "b38d2e91588fe07f0ffc003bb7428da499b081d22b885bb32985bc95a25b054951eedb796e2fa7890d3708ae9552659e039dc716e3d144f7dbe386970a7d8e1f94e47bb38d8be9491954de1370f3375919fc53e30eaeafd44cb93009bbd159c6b46c858523062349efaf2508ee40a2929a2b"}, @generic={0x56, 0x21, "bc3b3cf06347ac1f181b976e05f0e0b42ac4fa87006d6249359326112ae24591cd5148ca0e03416240db572cca0d4111821054621306f9cf576f8a6bc199bc4eb794cd0ba1437ecd70e4ba434f11f2eb2950b470"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0xc, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x96, 0x4d86}, @generic={0x69, 0x0, "61cbc7f4b11419567854dcc4151af4a89502ab6c533bd310a0be8b70f2e26e54d0040a3258c312bdf286d38f506f5056232606c8c8ab568e8e31cb182b2efe307da6a8c39f4d4fbd413e47fb5341fa309156e9b4ce7280da19c2d383c5cfa0cce04e8f965e2085"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x400, 0x0, 0x6, 0x40, [@generic={0x5d, 0x31, "b47ff452bbb6671aa3b1a8b99e3e38c306da3e79730d350f45483f71594b22aa264026aee85e67c0f0f60a631dec09e9c3043b4f1bd7fff3a4c9b470f23d22aa775f8ff456bd18232bdf0798203a247f405e6c746e1cd2146a2b57"}, @generic={0x16, 0xd, "ded027e505c40beef8db9ee175331af73c6d81ac"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0xf, 0x1c, 0x81, [@generic={0x8f, 0x8, "d5fc2d3499a5bc40e310666b44ecfa739ddd236afdc2cb652bf22229d69965eae3abbdfe0f042d6500f11ba136034a6fd0a08b34c00a2d9191a0f75c161a8a9a94fe0c2082ca529ce432f2646ad6edfa4c4f6993e93441544be03485b9c2309d61d9130b3c5910d3ae6c16ade61d80a7ad410bde9cd50b462e13a4df13b83b8ca61589ed4dbfc7661800199838"}]}}]}}, {{0x9, 0x4, 0x66, 0x56, 0x6, 0xd, 0x1c, 0x8c, 0x3, [], [{{0x9, 0x5, 0x0, 0x2, 0x3ff, 0xe, 0x2, 0x2}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x4, 0xc, 0x9, [@generic={0x9d, 0x21, "13f797c98b9af515c252dedb345d88f67e08e856653924b7e97cf00f21f0e918a06ed0e4c3c839d976bd992d8fd23ab5838ed656f0043f0660ec021ad9bf60cc85df13bde37c70d0f559b20535f7ae582733e6ba7fdd550cd8fee5dbca6db7d9160b87e17b7553cf5ccf3cf604215d5dc18a9cbfbae90c5a481d148b8b1447f4fbb58d07123cb900b8974eba656a275cc8a20182060f2d2bf4fbfc"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x9, 0xf, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x40}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0xd, 0x6, 0x4f, [@generic={0x10, 0x28, "4943cf384df3853ea29861bf7c82"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x9, 0x5, 0x2}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x5, 0x5d}}]}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x86, 0x6, 0x5, 0x8, 0x6}, 0x22, &(0x7f0000000540)={0x5, 0xf, 0x22, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x8, 0x81, 0x10, 0xb1}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xb, 0xe, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3, 0x5, 0xb, 0x9, 0x7}]}, 0x9, [{0x6a, &(0x7f0000000d80)=ANY=[@ANYRESHEX=r7]}, {0x3f, &(0x7f0000000300)=@string={0x3f, 0x3, "f9e35ab8044fe0e802d9b7a302b797d72d9fb556355b746c41d4a736b721d9c6d83c8bd8b4d83f5dbd207c11d9acb506bb6a1b9aaa82d31e7ff8fc84b4"}}, {0xe1, &(0x7f0000000440)=@string={0xe1, 0x3, "c57a75a6a05ed1f69d0cfc82145e885518fdc2f00011eb64560888e75f78b2afe8e69fc2dcca1323ad13981c14bda170bcc654195bd297ef9701b9c469992e80f3fde9d247ddc9a70598a0fbdbb6d3c62e83f9ad6b1ff2ef5afb7bfc843c51d9d066b6bcfe2d46d4cba82b8a4b8e7caebd29203991da5984e7f95bb1c3ef5314a0d6b43d0146afa58883630c17250db8762d603fea417250fc941190cec226b8ea9784ce61e3f88fcb67bca8d1e990460fa9bdc67e106d7d30b0403b229245fa59eadda586ac78d5e6f171357335db97681fd3d6da1632bdd68456aae685a2"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000640)=@lang_id={0x4}}, {0x89, &(0x7f0000000680)=ANY=[@ANYBLOB="89031716948357b653423982c7a9f47eaf275932b4c92ca5fbe195a5710bfd11a1c581f72c85b86cf86deaa8290f3d4aaddfd0c88583cdb8ee3bb50e79dece5c2ec8b2a4d61463333ab60b6a46544c0f3108afb3072eabbd9c08363f73d8654681159563ae1469ec27d4a3dbdfd4bedc85f8c2bafc5b134a67075255c65ffcb04e9428a2dbd4e6dba8"]}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x42}}, {0xe1, &(0x7f0000001240)=ANY=[@ANYBLOB="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"/314]}]}) r9 = openat$cgroup_ro(r6, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$cgroup_type(r9, 0x0, 0x0) 12.953686218s ago: executing program 4 (id=259): openat$random(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x0, 0x1}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffecc, &(0x7f0000000200)=0x101) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2b22c0, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x10, r3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 11.640175243s ago: executing program 4 (id=315): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$kcm(0x10, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffff16) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)=@newtaction={0x97c, 0x30, 0x1, 0x0, 0x0, {}, [{0x968, 0x1, [@m_police={0x91c, 0x1, 0x0, 0x0, {{0xb}, {0x8f0, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x4}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8fd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x400}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x3, 0x9, 0x28ba, 0x7f, 0x7, 0x2, 0x8169, 0x4, 0x80000001, 0x6, 0x8000, 0xfffffff9, 0xd, 0x6, 0x2, 0x401, 0x9, 0x3, 0x2, 0x0, 0x3, 0x4, 0x1, 0xa, 0x5, 0x4, 0x7fff, 0x1, 0xfffffffd, 0x5, 0x2, 0x7, 0x6, 0x3, 0x4d014546, 0x8, 0x4, 0x3, 0x6, 0xaa8, 0xd2, 0x6, 0x7fff, 0x1, 0x400, 0x2f3e, 0xa17, 0x459, 0xc7, 0x5, 0xadba, 0x2, 0x8e, 0x6, 0x2, 0xe00000, 0x1, 0xfffffbff, 0xb5, 0x4, 0x9, 0x9, 0x21, 0x9, 0x2, 0x7, 0x5, 0xfffff800, 0xe, 0x9, 0x80000001, 0x8, 0x5, 0x7, 0x10001, 0x80000001, 0x3, 0x0, 0xc, 0x8, 0xe2b, 0x9, 0x7c8bbeb1, 0x7, 0x6, 0x0, 0x2073, 0x0, 0x6, 0x8, 0x7ff, 0x800, 0x2, 0x49c, 0x9, 0x2, 0x1, 0x3, 0x5, 0x400, 0xa, 0x7, 0x45, 0x3ff, 0x6, 0x2b, 0x2, 0x1, 0x3, 0x0, 0xffffffff, 0x3, 0x8, 0xa, 0x1, 0x0, 0xc, 0x8, 0xa, 0x9, 0x10001, 0x8000, 0x10000, 0x3ff, 0x6, 0x9, 0x3, 0x8, 0x9dd, 0x5, 0x1, 0xff800000, 0xe, 0x8, 0x65d, 0x0, 0x9, 0x40, 0x1e3, 0x3, 0x2583, 0x800, 0xfdb, 0x6, 0x3ff, 0x100, 0x6, 0xb0, 0x3, 0x8, 0x3, 0x7fff, 0x400, 0x9, 0xfffff8ab, 0x6af43b03, 0xffffffff, 0x3, 0x4, 0x6, 0x8000, 0x7, 0xffffffff, 0xc76, 0x4, 0x0, 0x5, 0x9be, 0x0, 0x67fe843a, 0x8001, 0x1, 0x1ff, 0x3, 0x2, 0x5b76, 0xa08, 0x7fff, 0x9, 0x3, 0xc6e, 0x6, 0x2, 0x5, 0x1f55, 0x9, 0x3ff, 0x0, 0x5d, 0x1, 0x2, 0x868, 0x1ff, 0x7, 0x59, 0x1, 0x4, 0x80000001, 0x800, 0x5, 0xfa6, 0x6, 0x61b, 0x3, 0x3ea, 0xffff, 0x6e, 0x3, 0x81, 0x7, 0x6, 0xa6, 0x8, 0x3, 0x3, 0x17d, 0x6, 0x1, 0x7ff, 0x5, 0x4, 0x0, 0xfff, 0x73a, 0x7, 0x6, 0x9, 0x0, 0x0, 0x5, 0x5, 0x7f, 0xfffffff8, 0x6, 0x4, 0x800, 0x7, 0x1, 0x4c4a, 0x3, 0x5, 0xd9000000, 0x800, 0x8, 0xffffff43, 0x2, 0x0, 0xfffffff7, 0x5c2, 0xf6, 0x1000, 0x1, 0xcbb2, 0x3]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x9, 0x7, 0xc3e6, 0x3, 0x5, 0x1, 0x5, 0x702, 0x7, 0x6, 0xfffffbff, 0x8, 0x10, 0x8001, 0x0, 0x7, 0x2, 0x6, 0x101, 0x2, 0x1, 0x1, 0x0, 0x5, 0x13a0, 0x16, 0x9, 0xc61, 0x1ff, 0xfff, 0x2, 0x4, 0x0, 0x4, 0x7, 0x2, 0x5, 0x2, 0x0, 0x7fff, 0x3, 0x3, 0xffff, 0x3, 0x3, 0xffffffff, 0x2, 0x3, 0x1ff, 0xffff, 0xcf0, 0x1, 0x0, 0x8, 0x0, 0x7, 0xbe, 0xe, 0x3c2f, 0xffff894c, 0x9, 0x5e537bf8, 0x3, 0x3, 0x80000001, 0x9, 0x3, 0x7fffffff, 0x0, 0x5, 0xa6, 0x6, 0x5, 0xd88, 0x9, 0x3, 0x7, 0x1, 0x4, 0x9, 0xb, 0x8, 0x10000, 0x7fff, 0xc, 0x6, 0x2, 0x9, 0x7ff, 0x8000, 0x2, 0x2, 0x2, 0x40, 0x8001, 0x5, 0x6, 0x8, 0x0, 0x10001, 0x27, 0x9, 0x4ec, 0x7f, 0x2000000, 0xb5b, 0x8, 0x6, 0x7f, 0x955, 0xfffffffb, 0xfff, 0x81, 0xffff, 0xff, 0x2, 0x4, 0x3, 0x7, 0x3, 0x0, 0x80, 0x4, 0x4, 0x3, 0x5, 0x10, 0x9, 0x101, 0x3, 0x9, 0x7, 0xb, 0x7ff, 0x4, 0x80000001, 0x2, 0x7, 0x0, 0xe8, 0xcb, 0x0, 0xd3d, 0x3, 0x9, 0x9, 0x5, 0x3, 0x2, 0x2, 0x6, 0x773be2f6, 0x5, 0x5, 0x8, 0x7, 0x8, 0xffffff4d, 0x69, 0x4, 0x3, 0x4, 0x0, 0x6, 0x7ff, 0x8, 0xa11, 0xd, 0x80, 0x1, 0x5, 0x800, 0x1, 0xfff, 0x20, 0x1, 0x2, 0xc1, 0x7fffffff, 0x2, 0xffff8001, 0x8001, 0x3, 0x2, 0x4, 0x38000000, 0x0, 0x101, 0x400, 0x80000000, 0xff, 0x1, 0x2, 0x6, 0x6, 0x7, 0x8, 0x0, 0x9, 0x81, 0x0, 0x3ff, 0x3, 0x6, 0x0, 0x200, 0x101, 0xb5, 0xe353, 0xa, 0x8, 0x9, 0x1, 0x7, 0x3, 0x3, 0x7f, 0x4, 0x10, 0x1, 0x3, 0x5, 0x6d2c, 0x0, 0x5, 0x7fff, 0x0, 0x7, 0x401, 0x0, 0x3, 0x4, 0x1aa0, 0x2, 0x1, 0x8001, 0x2, 0x13c, 0x2, 0x35, 0x9, 0x8c97, 0xf, 0x0, 0x9, 0x8, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0x3, 0x3, 0x8, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x166}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9484, 0x3, 0x8001, 0x5070, 0x3, {0x81, 0x1, 0x7, 0x8, 0x4, 0x3}, {0x7, 0x1, 0x0, 0x7fff, 0x0, 0x2}, 0x75, 0x2, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x1, 0x5, 0x0, {0x2, 0x2, 0x0, 0x3, 0x2, 0x1ff}, {0x2, 0x1, 0x5, 0x9, 0x2, 0x993}, 0x1, 0x7, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x97c}}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b404000000000000611030000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1000, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x90) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000100)=0x300000000) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, {&(0x7f0000000580)=""/68, 0xfffffffffffffea9, 0x0, 0x1}}, 0x48) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x7400}, 0x20040040) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r8}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 11.141354343s ago: executing program 0 (id=316): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x3, 0x40000}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcb2, &(0x7f0000000800)=0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) open(0x0, 0x400141042, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000005304b70000000000000000"], 0x14}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000180)=0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={0x0, @nfc={0x27, 0x0, 0x1, 0x6}, @vsock={0x28, 0x0, 0x2710, @my=0x0}, @nfc={0x27, r5, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='veth0_to_batadv\x00', 0x7, 0x7eb, 0x72}) socket$packet(0x11, 0x3, 0x300) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5"], 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/40, @ANYRES8], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000001c0)={0x40d, 0x0, {0x0, 0x0, 0x0, {0x0, 0xaf4}, {}, @rumble}, {0x0, 0x0, 0x0, {}, {}, @ramp}}) 9.728001484s ago: executing program 3 (id=318): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xb, &(0x7f0000000580)=@framed={{}, [@printk={@u}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$kcm(0xa, 0x1, 0x106) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285628, &(0x7f0000000080)={0x0, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r7 = accept$alg(r5, 0x0, 0x0) recvmmsg(r7, &(0x7f0000006100), 0x49f, 0x0, 0x0) 9.37572827s ago: executing program 2 (id=319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x6a040000) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) write$binfmt_misc(r5, 0x0, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x4000000005, 0x0) write$binfmt_misc(r6, 0x0, 0x99) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001e00)={0x44, r8, 0x100, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}]}, 0x44}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) 8.33923773s ago: executing program 3 (id=320): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000001140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000240)) pipe2(0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(0x0, 0x14927e, 0x0) r5 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x83000, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xa37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x98, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xffff, 0x0, 0xfffffffffffffffa, 0xf, 0x0, 0xd5, 0x8, 0x0, 0x2, 0xfffffffffffffff7}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000001180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0104000000000000000052c5000014008480100001800b0001007461aa67657400000900010073797a30000000000900020073797a3200000000140000001100010000000000"], 0x68}}, 0xe4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) 8.176707688s ago: executing program 1 (id=321): openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6}, 0xffffff4c, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000a000030000000000000000019700"/32], &(0x7f00000023c0)='syzkaller\x00', 0x0, 0x9b, &(0x7f0000002400)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) dup2(r2, r3) pwritev(r3, &(0x7f0000000900)=[{&(0x7f0000000780)='C', 0x1}], 0x1, 0xa40, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x10ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c00)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000004300)={0x2020}, 0x2020) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0xb3, 0x0, r4, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200200c100007006000000002000020d3"]) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0xffffffffffffffff, 0xd, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x5, 0x3, 0x7, 0x209, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x19, 0x1b, &(0x7f00000024c0)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000fc8400000083000000bf09000000000000550901000000000095000000000000008520000001000000181100006053dea23c1f8e853744a9bd8dea95d0ee4c6eec031e4ab12f2a78f1c85b3dddbb88622f3856012d", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000cf0d00007b8af8ff00000000bfa200000000000007020000f8aad9402a03000008000000b704000000000000850000008200000018000000060000000000000008bc0d00bf91000000000000b7020000000000008500000085000000b7000040000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0xfd, &(0x7f0000000480)=""/253, 0x41100, 0x72, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x1, 0x0, 0x5, 0xffffff7b}, 0x10, 0x0, r1, 0x1, &(0x7f0000002340), &(0x7f0000002380)=[{0x2, 0x1, 0x2, 0xb}]}, 0x90) 6.985763186s ago: executing program 3 (id=322): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x0, 0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0xb) (async) madvise(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0xb) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$kcm(0x10, 0x2, 0x4) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000400020011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1f}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1f}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x80c0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mmap$dsp(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x0, 0x4000010, r6, 0x0) 6.597291925s ago: executing program 0 (id=323): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14140be000000100000000880000000000000000000000070000009404000044241a"], 0xe0}, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x1ff, @none, 0x4, 0x2}, 0xe) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000200)='io.pressure\x00', 0x2, 0x0) recvmmsg(r1, &(0x7f0000006c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000480)={0x0, 0x780, "a2fb85e5bb3604f7d134a24096656e914c40746e1989c2c3a658296f248dba0699a021c95e93423eb32e9f194656ee3acb2f5d72040f415cfed5db385f8cd772b060d8345445b2cb04f04f2dae8ec0248f86d70a2621a50a3a5d25f25380ea2eedcf4ca9aac45c83561acc1736c80fc580feaf6e3637b15515745e74c0bd3062a5df524d353e54265863a46ba0d79382db7e525c1fa9519a3344336b7d3e88c20525e9573808cadfbfc911e98556eb0170d48eb23e4694513b8c813dfe65792ab3e88cdb66afa2e1c3010d0c233c217e3a6a4804843cdac896bbbbc5e4285895ee9a67b596ec2db784789e93b5d6a4bd23146b60b403a1e6f784b28b407faab3439af81fcf245b954e02abd172bad917dbee53339465f57cddd88366ef52ee6d3365d42adb777193fac22f4defc93d2344ae45de6843d477465429a01a445f0a3a3f496df58f5f486cd862166ca0678c5d0472312b4f2114c964866ca988d4d6ca3265fe89248f307ba55b1849e0b801c5fa78c9e72e24bfca69e6b2a885d968033d69619797a5eca2b2413a4831720dd84af8f24271d5feeb52274e23d5667b3e79cc2c004b69e4e46c4129c04f5ec05bd7481f42f118b6fb2365314362902280fe13c57fa088a5851ab52e2130358e065c3a98a4326d566b882ece6fd0700e823ed01aa4a5e1ce109307bc4d047218fa2e37b56940a1bf3fd608a533e0cf1737f9535454bf696a3bbf7746f2f68ded1a0b737ed9c89897292211d2279c4b82bbf47f0b56c6a4f1fc1d4fe02a9e1641c0dd17c3450ace4fbe878e8cbe4f49770272cbc4450a1a1bfbabff50cbdd93da211b3fea4c1962857874e3c00ecb9e0a88e2ea2e673046f3496ba51dd1171921173fa07e874ce83689a51580a603e651a2e7c3d65c2a6dd7ed69822d0896bfa49761af6d70d8f3a3c17eeaa1c61fa3236eb07e4c38f43cdaef3b7fd6dde4faf5011584f24da656a4420a5f95a9ab7d4c8fa781f3e39f756fd1c73b9cfa53271021306d49fc31f59e1ae48e75eb5193da6d58aa6fd6f959c5b90ff3cfa602524c8cd59bf0c3f53f141343ff85fad6c6773de3866fbe3420618851bf8efc1ee13fecc5ac919ae911a4f7bcfd75ac6b2140d5a7e7d92e7ca95b99362e340f481a85ec04f90447308f3aadb7e23309833304dc2793aeaf72c152c85d1a4462620c6d8c6dd37fc8e6f012a0ae363fcf7591d6751a3a0f0ea7aeb0882446557be7e27af9dc167e935dac24cbccd2946fc0844d86eb697cf5f8dfe2f9b9f20549e3272b00e7c62b1931a1b32c160a9d7168a0fae4e1cea5fdcf21607c249556412eac0127e0e1a99b5909063f76a7285eb2bac42867130d17ddd6d14a9e23a87561ac434607716821085e3fd8b77ae321d3bc2b4e8a9105e1a11d98505c1ed7a75d5f6b24654bede1acf74518e15e16a50c7e90c659019c3c2dda2481556cbfd45997214e8603c861d6eb1b84ee8203f08c40623e008b2b32238f96beacea1fa6e1fa279d0f3f8b0c9bd214e3c7059d0580579dc4bd1e9da929ff9fceb57430387b9b2e3313dcfdee51320129d1034d25327a4366dfc1273e31512bd117f428365c62ace2e89814d7a73fd8d299f76ef2c6699e6e78e76c45384fa9411bacfc328501452a9dafaf86c3489e6a8845b054935b299dcbac0b35334c9d5e2b66d57b0542c21524cc1abf5f549ad560e5a322df3835e3110f48d9e24d5371e493784078d3d103c9e59a5aff1460765f1ecaac5cb34f2a09ddcd938fdf4ca95be48279e078548cfef801ded545df173afde4f74a80ce1ba3b183e21e86e78098b73cfa9f0280a64a4c4f4292d21d2fe1ea166a52a526c9cf79e767d645bce3c08a7c57189d6193ac4a875c27c1a97a4d21d67139bb6780487f168465618c24d797aba057cde37260ade293e93e13e3ce3a6f07fef2d912b9839b310fb2bb52e960ff6c0671660913715c114fd648e8cf8da094579d3853c9c2c6918102d80f00ce07b70d4c56a2687d2e9dd472fc61244eb680668ade6cbe4c5f22481611fb85cca8126100e897704b74f12646ec4b946b364b0ddcb8dc4f33dbc26d0fddbf1bb6608a055a3111fa8fa3a68607191f44780338c5c559bd6d45db9339e20d19686467aed487b336f035f7ff34420c62b3f855eb1adb5d365ba4f5d1ff36c204ac913e12a44ba8affd4d4dddeb24c55d27c115eeb5642ae7ba58632c19631cbb528a60771796ec2e3a389befc6161d735da3ac501343ecec25b12b297abf11069825c834d0a4e0cdcb3561c27caa796e83ee3cb81ee8933d74fcea106e0ec068508d0fc99e20415f1582e5711d2a37aad5ed508cac69b066943ea380a0e695f4d3ee33828f7e3a489255ce626496e6a0149ed3870eaa1014c10627589c7441b1d55486311b94bdf149bb3ab0544940e2fed3f2da8da567c7599889a64252180440bda193aeb9bea175630b820145e176b78aa827f4a4c9aaf866d5dbf52f4834cc40ab893a0af0f76c1ccc9fdbd74c955e19b9fb09fd257fe3fc6b2b4bd1a137c989745b2dddf08102766354269a0b22e94fb41e4ad92fb9be4627302a3e96aaf0a0018ec18767f3cc55b2634079da7cda1c37bd2a66c1f60c08cc2acf12bf7958e01d8dc868cfebe5278f016f5ad64c037d1c13b59fc0847f4f177f49632b1125bfe9dbbb9e8ede89c33e7ce28c3da15366f8616fc5e9"}, &(0x7f0000000080)=0x788) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r5, 0x9}, 0x8) listen(r1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getuid() sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg$unix(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) 6.171376331s ago: executing program 1 (id=324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x0) io_submit(0x0, 0x0, 0x0) unshare(0x6a040000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f0000000240)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000000000000110000006700000020010000000000000009000000000000001ab6069c9e103e6603b255dd3aa9", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r3, 0x0, 0x0}, &(0x7f0000000200)=0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x100, 0x1d8, 0x100, 0x100, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c0}}, {{@ipv6={@mcast2, @private1, [], [], 'pim6reg1\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@mcast1}}}, {{@ipv6={@private0, @remote, [], [], 'tunl0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) syz_emit_vhci(&(0x7f0000000640)=ANY=[], 0x22) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000280)={r6}) 5.068017682s ago: executing program 4 (id=325): openat$random(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x0, 0x1}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffecc, &(0x7f0000000200)=0x101) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2b22c0, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x10, r3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 4.942522579s ago: executing program 0 (id=326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = io_uring_setup(0x497c, &(0x7f0000000400)) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 4.816328513s ago: executing program 3 (id=327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x56, 0x56, 0x3, [@datasec={0x1, 0x6, 0x0, 0xf, 0x2, [{0x3, 0x4, 0x6}, {0x4, 0x6, 0x5}, {0x3, 0xa000, 0x8}, {0x4, 0x4}, {0x1, 0x487c, 0x8}, {0x1, 0x9, 0x100}], "cd99"}]}, {0x0, [0x0]}}, &(0x7f0000000240)=""/141, 0x73, 0x8d, 0x0, 0x5}, 0x20) r4 = io_uring_setup(0x497c, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x1}) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 4.752206493s ago: executing program 2 (id=328): clock_gettime(0x0, &(0x7f00000032c0)={0x0}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x0, &(0x7f0000000100), &(0x7f0000000340)=0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) futex_waitv(&(0x7f0000002940)=[{0x0, &(0x7f0000001000), 0x82}, {0x0, &(0x7f0000001040), 0x82}, {0x0, &(0x7f0000001080), 0x82}, {0x0, &(0x7f00000010c0), 0x82}, {0x0, &(0x7f0000001100), 0x82}, {0x0, &(0x7f0000001140), 0x82}, {0x0, &(0x7f0000001180)}, {0x0, &(0x7f00000011c0)}, {0x0, &(0x7f0000001200)}, {0x0, &(0x7f0000001240)}, {0x0, &(0x7f0000001280)}, {0x0, &(0x7f00000012c0)}, {}, {0x0, &(0x7f0000001340)}, {0x0, &(0x7f0000001380)}, {0x0, &(0x7f00000013c0)}, {0x0, &(0x7f0000001400)}, {0x0, &(0x7f0000001440)}, {0x0, &(0x7f0000001480)=0x3}, {0x0, &(0x7f00000014c0)}, {0x0, &(0x7f0000001500)}, {0x0, &(0x7f0000001540)}, {0x0, &(0x7f0000001580)}, {0x0, &(0x7f00000015c0)}, {0x0, &(0x7f0000001600)}, {0x0, &(0x7f0000001640)}, {0x0, &(0x7f0000001680)}, {0x0, &(0x7f00000016c0)}, {0x0, &(0x7f0000001700)}, {0x0, &(0x7f0000001740)}, {0x0, &(0x7f0000001780)}, {0x0, &(0x7f00000017c0)}, {0x0, &(0x7f0000001800)}, {0x0, &(0x7f0000001840)}, {0x0, &(0x7f0000001880)}, {0x0, &(0x7f00000018c0)}, {0x0, &(0x7f0000001900)}, {0x0, &(0x7f0000001940)}, {0x0, &(0x7f0000001980)}, {0x0, &(0x7f00000019c0)}, {0x0, &(0x7f0000001a00)}, {0x0, &(0x7f0000001a40)}, {0x0, &(0x7f0000001a80)}, {0x0, &(0x7f0000001ac0)}, {0x0, &(0x7f0000001b00)}, {0x0, &(0x7f0000001b40)}, {0x0, &(0x7f0000001b80)}, {0x0, &(0x7f0000001bc0)}, {0x0, &(0x7f0000001c00)}, {0x0, &(0x7f0000001c40)}, {0x0, &(0x7f0000001c80)}, {0x0, &(0x7f0000001cc0)}, {0x0, &(0x7f0000001d00)}, {0x0, &(0x7f0000001d40)}, {0x0, &(0x7f0000001d80)}, {0x0, &(0x7f0000001dc0)}, {0x0, &(0x7f0000001e00)}, {0x0, &(0x7f0000001e40)}, {0x0, &(0x7f0000001e80)}, {0x0, &(0x7f0000001ec0)}, {0x0, &(0x7f0000001f00)}, {0x0, &(0x7f0000001f40)}, {0x0, &(0x7f0000001f80)}, {0x0, &(0x7f0000001fc0)}, {0x0, &(0x7f0000002000), 0x82}, {0x0, &(0x7f0000002040)}, {0x0, &(0x7f0000002080)}, {0x0, &(0x7f00000020c0)}, {0x0, &(0x7f0000002100)}, {0x0, &(0x7f0000002140)}, {0x0, &(0x7f0000002180)}, {0x0, &(0x7f00000021c0)}, {0x0, &(0x7f0000002200)}, {0x0, &(0x7f0000002240)}, {0x0, &(0x7f0000002280)}, {0x0, &(0x7f00000022c0)}, {0x0, &(0x7f0000002300)}, {0x0, &(0x7f0000002340)}, {0x0, &(0x7f0000002380)}, {0x0, &(0x7f00000023c0)}, {0x0, &(0x7f0000002400)}, {0x0, &(0x7f0000002440)}, {0x0, &(0x7f0000002480)}, {0x0, &(0x7f00000024c0), 0x82}, {0x0, &(0x7f0000002500)}, {0x0, &(0x7f0000002540)}, {0x0, &(0x7f0000002580)}, {0x40, &(0x7f00000025c0)}, {0x0, &(0x7f0000002600)}, {0x0, &(0x7f0000002640)}, {0x0, &(0x7f0000002680)}, {0x0, &(0x7f00000026c0)}, {0x0, &(0x7f0000002700)}, {0x0, &(0x7f0000002740)}, {0x0, &(0x7f0000002780)}, {0x0, &(0x7f00000027c0)}, {0x0, &(0x7f0000002800)}, {0x0, &(0x7f0000002840)}, {0x0, &(0x7f0000002880)}, {0x0, &(0x7f0000003380)}, {0x0, &(0x7f0000002900)}], 0x65, 0x0, &(0x7f0000003300)={r0}, 0x1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socket$packet(0x11, 0x0, 0x300) syz_usb_connect_ath9k(0x3, 0x9b, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e3d3, [{{0x9, 0x2, 0xfffffffffffffdd3}}]}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) 3.850604603s ago: executing program 0 (id=329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x0) io_submit(0x0, 0x0, 0x0) unshare(0x6a040000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f0000000240)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000000000000110000006700000020010000000000000009000000000000001ab6069c9e103e6603b255dd3aa9", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r3, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000200)=0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@random="b4d163a017a6", @empty, @val, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$MRT6(r6, 0x29, 0xd0, 0x0, &(0x7f0000000040)) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x100, 0x1d8, 0x100, 0x100, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c0}}, {{@ipv6={@mcast2, @private1, [], [], 'pim6reg1\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@mcast1}}}, {{@ipv6={@private0, @remote, [], [], 'tunl0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) syz_emit_vhci(&(0x7f0000000640)=ANY=[], 0x22) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x0, 0x0, 0xffff}) 2.750182253s ago: executing program 3 (id=330): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xb, &(0x7f0000000580)=@framed={{}, [@printk={@u}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$kcm(0xa, 0x1, 0x106) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285628, &(0x7f0000000080)={0x0, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r7 = accept$alg(r5, 0x0, 0x0) recvmmsg(r7, &(0x7f0000006100), 0x49f, 0x0, 0x0) 979.795831ms ago: executing program 3 (id=331): r0 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'nicvf0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000200000c50000000700000045000000a00002"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f00000002c0)="b9ff0307600300", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x6, 0xb, &(0x7f0000000400)="00a529c270e5e483833d04a04012dca0e789b6ac4aeb59da7123b7b880de000000000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0xfffffffffffffcd9, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x7fff, 0x180c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udplite(0x11, 0x2, 0x88) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r4, 0x40184150, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000401000"/19, @ANYBLOB="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", @ANYRESHEX=r2], 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xa0882, 0x0) 732.408292ms ago: executing program 4 (id=332): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0x1, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7aa, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001600050200000000000000000a000000a530b75225448eb30bbeeb355e0d9656", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000000)={&(0x7f0000000340)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000029000000080000000000fcffffffffff11"], 0x30}, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0) pwritev(r9, &(0x7f0000000040)=[{&(0x7f00000000c0)="83", 0x1}], 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_extract_tcp_res(&(0x7f0000000100), 0x6, 0x9) 0s ago: executing program 1 (id=333): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x3, 0x40000}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcb2, &(0x7f0000000800)=0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) open(0x0, 0x400141042, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000005304b70000000000000000"], 0x14}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000180)=0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={0x0, @nfc={0x27, 0x0, 0x1, 0x6}, @vsock={0x28, 0x0, 0x2710, @my=0x0}, @nfc={0x27, r5}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)='veth0_to_batadv\x00', 0x7, 0x7eb, 0x72}) socket$packet(0x11, 0x3, 0x300) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5"], 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/40, @ANYRES8], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000001c0)={0x40d, 0x0, {0x0, 0x0, 0x0, {0x0, 0xaf4}, {}, @rumble}, {0x0, 0x0, 0x0, {}, {}, @ramp}}) kernel console output (not intermixed with test programs): 76] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.548745][ T6776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.612257][ T6776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.667798][ T6776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.705915][ T6776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.213210][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.235691][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.354893][ T29] audit: type=1400 audit(1722013677.663:357): avc: denied { connect } for pid=7041 comm="syz.4.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 405.409701][ T1823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.646261][ T1823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.738535][ T29] audit: type=1400 audit(1722013678.043:358): avc: denied { bind } for pid=7041 comm="syz.4.226" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 405.922723][ T29] audit: type=1400 audit(1722013678.043:359): avc: denied { node_bind } for pid=7041 comm="syz.4.226" saddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 406.704588][ T1169] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 406.902497][ T1169] usb 2-1: config 255 has an invalid interface number: 16 but max is 1 [ 406.933951][ T1169] usb 2-1: config 255 has an invalid interface number: 16 but max is 1 [ 406.960720][ T1169] usb 2-1: config 255 has an invalid descriptor of length 216, skipping remainder of the config [ 407.013141][ T1169] usb 2-1: config 255 has 1 interface, different from the descriptor's value: 2 [ 407.132056][ T1169] usb 2-1: config 255 has no interface number 0 [ 407.198267][ T1169] usb 2-1: too many endpoints for config 255 interface 16 altsetting 0: 127, using maximum allowed: 30 [ 407.307363][ T1169] usb 2-1: config 255 interface 16 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 407.352288][ T1169] usb 2-1: config 255 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 407.428540][ T1169] usb 2-1: config 255 interface 16 has no altsetting 1 [ 407.459626][ T1169] usb 2-1: New USB device found, idVendor=12d1, idProduct=ca04, bcdDevice=f7.7c [ 407.478732][ T1169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.503893][ T1169] usb 2-1: Product: syz [ 407.523910][ T1169] usb 2-1: Manufacturer: syz [ 407.528577][ T1169] usb 2-1: SerialNumber: syz [ 407.872081][ T1169] usb 2-1: USB disconnect, device number 9 [ 408.831640][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 409.150732][ T5273] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 409.723988][ T5273] usb 1-1: Using ep0 maxpacket: 32 [ 409.792405][ T5275] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 410.103290][ T5275] usb 4-1: Using ep0 maxpacket: 8 [ 410.262210][ T5275] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 410.270758][ T5275] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 410.272867][ T5273] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.283346][ T5275] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.483293][ T5275] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 410.492655][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.160843][ T5275] usbtmc 4-1:16.0: bulk endpoints not found [ 411.216168][ T5273] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 411.238466][ T5273] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 411.253925][ T5273] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 411.262539][ T5273] usb 1-1: Product: syz [ 411.267461][ T5273] usb 1-1: Manufacturer: syz [ 411.272197][ T5273] usb 1-1: SerialNumber: syz [ 411.307047][ T5273] appletouch 1-1:1.0: Could not find int-in endpoint [ 411.334562][ T5273] appletouch 1-1:1.0: probe with driver appletouch failed with error -5 [ 411.354577][ T5273] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 411.731458][ T9] usb 1-1: USB disconnect, device number 9 [ 411.994252][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.236'. [ 412.900230][ T29] audit: type=1400 audit(1722013685.203:360): avc: denied { read } for pid=7070 comm="syz.3.233" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 412.968333][ T29] audit: type=1400 audit(1722013685.203:361): avc: denied { open } for pid=7070 comm="syz.3.233" path="/dev/nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 413.084137][ T5303] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 413.104136][ T5305] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 413.228026][ T29] audit: type=1400 audit(1722013685.503:362): avc: denied { ioctl } for pid=7070 comm="syz.3.233" path="socket:[21647]" dev="sockfs" ino=21647 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 413.252739][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.363885][ T5303] usb 2-1: Using ep0 maxpacket: 16 [ 413.395323][ T5305] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 413.421658][ T5303] usb 2-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice=be.6d [ 413.493369][ T5305] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 413.517721][ T5303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.533953][ T5305] usb 3-1: config 9 has no interface number 0 [ 413.553773][ T5303] usb 2-1: Product: syz [ 413.576786][ T5303] usb 2-1: Manufacturer: syz [ 413.586353][ T5305] usb 3-1: config 9 interface 1 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 413.603963][ T5303] usb 2-1: SerialNumber: syz [ 413.633150][ T5303] usb 2-1: config 0 descriptor?? [ 413.647679][ T5305] usb 3-1: config 9 interface 1 has no altsetting 0 [ 413.738528][ T5305] usb 3-1: language id specifier not provided by device, defaulting to English [ 413.839957][ T5305] usb 3-1: New USB device found, idVendor=058b, idProduct=0028, bcdDevice=f1.bf [ 413.875620][ T7117] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 413.902476][ T5305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.003331][ T5305] usb 3-1: Product: 竅ꙵ庠ಝ苼帔喈ﴘᄀ擫ࡖ硟꾲슟쫜⌓ᎭᲘ봔炡욼ᥔ퉛Ɨ쒹饩耮ﷳ틩Ꟊ項ﮠ뛛웓茮극Ὣﭚﱻ㲄曐벶ⷾ푆꣋訫蹋깼⦽㤠葙裏녛ᑓ횠㶴䘁ꖯ莈ౣ┗렍⵶㽠䇪偲铼逑싎렦韪캄迸柋ꢼ䚐ꤏ욽ၾ絭뀰㭀鈢海ꗝ겆핸㕱㕳韛Ὠ훓ᛚ봲蓖꩖藦 [ 414.035935][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.072175][ T5305] usb 3-1: Manufacturer: 롚伄ꎷ뜂힗鼭嚵嬵汴푁㚧↷웙㳘崿₽ᅼ곙ڵ檻騛芪ồ蓼 [ 415.248530][ T5305] usb 3-1: SerialNumber: Ⰹ [ 415.915378][ T5303] kaweth 2-1:0.0: Firmware present in device. [ 415.958151][ T5303] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 416.053317][ T5303] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 416.074982][ T5305] usb 3-1: can't set config #9, error -71 [ 416.141439][ T5305] usb 3-1: USB disconnect, device number 23 [ 416.155324][ T5303] usb 2-1: USB disconnect, device number 10 [ 416.289319][ T5273] usb 4-1: USB disconnect, device number 8 [ 416.779045][ T29] audit: type=1400 audit(1722013689.063:363): avc: denied { create } for pid=7138 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 416.915128][ T29] audit: type=1400 audit(1722013689.073:364): avc: denied { setopt } for pid=7138 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 417.007757][ T29] audit: type=1400 audit(1722013689.083:365): avc: denied { connect } for pid=7138 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 417.081261][ T29] audit: type=1400 audit(1722013689.133:366): avc: denied { read } for pid=7138 comm="syz.3.247" name="usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 417.148705][ T7143] netlink: 'syz.1.246': attribute type 4 has an invalid length. [ 417.208745][ T29] audit: type=1400 audit(1722013689.133:367): avc: denied { open } for pid=7138 comm="syz.3.247" path="/dev/usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 417.366215][ T29] audit: type=1107 audit(1722013689.413:368): pid=7139 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 417.725154][ T7145] netlink: 'syz.1.246': attribute type 4 has an invalid length. [ 418.902657][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 419.214248][ T5275] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 419.224358][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 419.434005][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 419.459112][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.532550][ T5275] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 419.544887][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 419.569725][ T5275] usb 1-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 419.608616][ T5275] usb 1-1: config 9 has no interface number 0 [ 419.618643][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 419.650368][ T5275] usb 1-1: config 9 interface 1 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 419.663927][ T9] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 419.675822][ T9] usb 2-1: Product: syz [ 419.686428][ T5275] usb 1-1: config 9 interface 1 has no altsetting 0 [ 419.700152][ T9] usb 2-1: Manufacturer: syz [ 419.712521][ T9] usb 2-1: SerialNumber: syz [ 419.757925][ T5275] usb 1-1: language id specifier not provided by device, defaulting to English [ 419.771929][ T9] appletouch 2-1:1.0: Could not find int-in endpoint [ 419.781467][ T9] appletouch 2-1:1.0: probe with driver appletouch failed with error -5 [ 419.801414][ T5275] usb 1-1: New USB device found, idVendor=058b, idProduct=0028, bcdDevice=f1.bf [ 419.813623][ T9] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 419.821188][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.833109][ T5275] usb 1-1: Product: 竅ꙵ庠ಝ苼帔喈ﴘᄀ擫ࡖ硟꾲슟쫜⌓ᎭᲘ봔炡욼ᥔ퉛Ɨ쒹饩耮ﷳ틩Ꟊ項ﮠ뛛웓茮극Ὣﭚﱻ㲄曐벶ⷾ푆꣋訫蹋깼⦽㤠葙裏녛ᑓ횠㶴䘁ꖯ莈ౣ┗렍⵶㽠䇪偲铼逑싎렦韪캄迸柋ꢼ䚐ꤏ욽ၾ絭뀰㭀鈢海ꗝ겆핸㕱㕳韛Ὠ훓ᛚ봲蓖꩖藦 [ 419.901117][ T5275] usb 1-1: Manufacturer: 롚伄ꎷ뜂힗鼭嚵嬵汴푁㚧↷웙㳘崿₽ᅼ곙ڵ檻騛芪ồ蓼 [ 419.936619][ T5275] usb 1-1: SerialNumber: Ⰹ [ 420.313026][ T5271] usb 2-1: USB disconnect, device number 11 [ 420.879126][ T5275] ftdi_sio 1-1:9.1: FTDI USB Serial Device converter detected [ 420.921762][ T5275] ftdi_sio ttyUSB0: unknown device type: 0xf1bf [ 420.940714][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'. [ 420.994066][ T5275] usb 1-1: USB disconnect, device number 10 [ 421.001947][ T5275] ftdi_sio 1-1:9.1: device disconnected [ 422.127236][ T7184] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 422.544041][ T5303] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 422.753945][ T5303] usb 2-1: Using ep0 maxpacket: 16 [ 422.826025][ T5303] usb 2-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice=be.6d [ 422.867847][ T5303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.909499][ T5303] usb 2-1: Product: syz [ 422.931180][ T5303] usb 2-1: Manufacturer: syz [ 422.955070][ T5303] usb 2-1: SerialNumber: syz [ 423.011135][ T5303] usb 2-1: config 0 descriptor?? [ 423.610947][ T5271] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 426.365236][ T5271] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 426.389642][ T5271] usb 4-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 426.401808][ T5271] usb 4-1: config 9 has no interface number 0 [ 426.410392][ T5271] usb 4-1: config 9 interface 1 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 426.425947][ T5271] usb 4-1: config 9 interface 1 has no altsetting 0 [ 428.320088][ T5303] kaweth 2-1:0.0: Firmware present in device. [ 429.282601][ T1169] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 429.574627][ T5303] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 429.673481][ T5303] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 429.735020][ T1169] usb 3-1: too many configurations: 211, using maximum allowed: 8 [ 429.793259][ T1169] usb 3-1: config index 0 descriptor too short (expected 64979, got 137) [ 429.844409][ T1169] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.861243][ T5303] usb 2-1: USB disconnect, device number 12 [ 429.911001][ T1169] usb 3-1: config index 1 descriptor too short (expected 64979, got 137) [ 429.942563][ T1169] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.996418][ T1169] usb 3-1: config index 2 descriptor too short (expected 64979, got 137) [ 430.062420][ T1169] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.133011][ T1169] usb 3-1: config index 3 descriptor too short (expected 64979, got 137) [ 430.177008][ T1169] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.227037][ T1169] usb 3-1: config index 4 descriptor too short (expected 64979, got 137) [ 430.263943][ T1169] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.313408][ T1169] usb 3-1: config index 5 descriptor too short (expected 64979, got 137) [ 430.342193][ T1169] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.419791][ T1169] usb 3-1: config index 6 descriptor too short (expected 64979, got 137) [ 430.474320][ T1169] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.523722][ T1169] usb 3-1: config index 7 descriptor too short (expected 64979, got 137) [ 430.555962][ T1169] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.594760][ T1169] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 430.626034][ T1169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.646102][ T1169] usb 3-1: Product: syz [ 430.664410][ T1169] usb 3-1: Manufacturer: syz [ 430.680952][ T1169] usb 3-1: SerialNumber: syz [ 430.721156][ T1169] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 430.749033][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 431.004252][ T29] audit: type=1400 audit(1722013959.269:369): avc: denied { read } for pid=7197 comm="syz.2.258" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 431.362289][ T5271] usb 4-1: string descriptor 0 read error: -71 [ 431.371830][ T5271] usb 4-1: New USB device found, idVendor=058b, idProduct=0028, bcdDevice=f1.bf [ 431.404515][ T29] audit: type=1400 audit(1722013959.269:370): avc: denied { open } for pid=7197 comm="syz.2.258" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 431.468723][ T5271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.604318][ T5271] usb 4-1: can't set config #9, error -71 [ 431.662201][ T5271] usb 4-1: USB disconnect, device number 9 [ 431.866026][ T5225] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 431.887736][ T5225] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 431.898224][ T5225] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 431.912001][ T5225] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 431.920915][ T5225] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 431.930691][ T5225] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 431.934202][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 432.007009][ T9] ath9k_htc: Failed to initialize the device [ 432.055770][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 432.202403][ T5274] usb 3-1: USB disconnect, device number 24 [ 432.584202][ T2542] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.119393][ T2542] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.409701][ T2542] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.780274][ T2542] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.815649][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 433.836621][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 433.844798][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 433.854402][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 433.863547][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 433.873253][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 434.026098][ T5231] Bluetooth: hci2: command tx timeout [ 435.584230][ T5274] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 435.814031][ T5274] usb 3-1: Using ep0 maxpacket: 32 [ 435.845365][ T5274] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.870783][ T7206] chnl_net:caif_netlink_parms(): no params data found [ 435.881093][ T5274] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 435.913734][ T5274] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 435.936953][ T5274] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 435.937167][ T2542] bridge_slave_1: left allmulticast mode [ 435.944499][ T5303] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 435.959432][ T2542] bridge_slave_1: left promiscuous mode [ 435.968777][ T5274] usb 3-1: Product: syz [ 435.973336][ T2542] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.984829][ T5274] usb 3-1: Manufacturer: syz [ 435.989842][ T5274] usb 3-1: SerialNumber: syz [ 435.997673][ T2542] bridge_slave_0: left allmulticast mode [ 436.003331][ T2542] bridge_slave_0: left promiscuous mode [ 436.014090][ T5231] Bluetooth: hci3: command tx timeout [ 436.032986][ T2542] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.042218][ T5274] appletouch 3-1:1.0: Could not find int-in endpoint [ 436.049686][ T5274] appletouch 3-1:1.0: probe with driver appletouch failed with error -5 [ 436.082265][ T5274] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 436.094974][ T5231] Bluetooth: hci2: command tx timeout [ 436.153914][ T5303] usb 4-1: Using ep0 maxpacket: 16 [ 436.170104][ T5303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 436.196791][ T5303] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 436.218493][ T5303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.244809][ T5303] usb 4-1: config 0 descriptor?? [ 436.299849][ T5305] usb 3-1: USB disconnect, device number 25 [ 437.144314][ T7241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.185100][ T7241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.799196][ T5303] hid (null): invalid report_size 24940 [ 437.804974][ T5303] hid (null): nested delimiters [ 437.812838][ T5303] hid (null): unknown global tag 0x83 [ 437.821962][ T5303] hid (null): unknown global tag 0xc [ 437.830779][ T5303] hid (null): global environment stack underflow [ 437.843073][ T5303] hid-generic 0003:0158:0100.000E: invalid report_size 24940 [ 437.863957][ T5303] hid-generic 0003:0158:0100.000E: item 0 2 1 7 parsing failed [ 437.880022][ T5303] hid-generic 0003:0158:0100.000E: probe with driver hid-generic failed with error -22 [ 438.093917][ T5231] Bluetooth: hci3: command tx timeout [ 438.186336][ T5231] Bluetooth: hci2: command tx timeout [ 438.293956][ T5303] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 438.303467][ T2542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.347512][ T2542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.363763][ T2542] bond0 (unregistering): Released all slaves [ 438.386961][ T5305] usb 4-1: USB disconnect, device number 10 [ 438.507927][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 438.535116][ T5303] usb 2-1: Using ep0 maxpacket: 16 [ 438.565506][ T5303] usb 2-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice=be.6d [ 438.578528][ T5303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.589351][ T5303] usb 2-1: Product: syz [ 438.593661][ T5303] usb 2-1: Manufacturer: syz [ 438.598655][ T5303] usb 2-1: SerialNumber: syz [ 438.610039][ T5303] usb 2-1: config 0 descriptor?? [ 440.576465][ T5231] Bluetooth: hci3: command tx timeout [ 440.589125][ T5231] Bluetooth: hci2: command tx timeout [ 442.664695][ T5225] Bluetooth: hci3: command tx timeout [ 444.038665][ T5303] kaweth 2-1:0.0: Firmware present in device. [ 444.058273][ T5303] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 444.069587][ T5303] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 444.094717][ T5303] usb 2-1: USB disconnect, device number 13 [ 444.628279][ T1169] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 444.892919][ T1169] usb 4-1: too many configurations: 211, using maximum allowed: 8 [ 445.240524][ T1169] usb 4-1: config index 0 descriptor too short (expected 64979, got 137) [ 445.265584][ T1169] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.345013][ T1169] usb 4-1: config index 1 descriptor too short (expected 64979, got 137) [ 445.470261][ T1169] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.485675][ T1169] usb 4-1: config index 2 descriptor too short (expected 64979, got 137) [ 445.528021][ T1169] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.586207][ T1169] usb 4-1: config index 3 descriptor too short (expected 64979, got 137) [ 445.624329][ T1169] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.678223][ T1169] usb 4-1: config index 4 descriptor too short (expected 64979, got 137) [ 445.719662][ T1169] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.205567][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.212033][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.234685][ T1169] usb 4-1: config index 5 descriptor too short (expected 64979, got 137) [ 446.359672][ T1169] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.404331][ T1169] usb 4-1: config index 6 descriptor too short (expected 64979, got 137) [ 446.412862][ T1169] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.450427][ T1169] usb 4-1: config index 7 descriptor too short (expected 64979, got 137) [ 446.473880][ T1169] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.498466][ T1169] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 446.519440][ T1169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.553939][ T1169] usb 4-1: Product: syz [ 446.558205][ T1169] usb 4-1: Manufacturer: syz [ 446.562860][ T1169] usb 4-1: SerialNumber: syz [ 446.670791][ T1169] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 446.706163][ T5275] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 447.249071][ T7206] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.312146][ T7206] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.358103][ T7206] bridge_slave_0: entered allmulticast mode [ 447.381307][ T7206] bridge_slave_0: entered promiscuous mode [ 465.717541][ T5214] usb 4-1: USB disconnect, device number 11 [ 465.736605][ T5275] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 465.744959][ T5275] ath9k_htc: Failed to initialize the device [ 466.039594][ T5214] usb 4-1: ath9k_htc: USB layer deinitialized [ 466.147622][ T2542] hsr_slave_0: left promiscuous mode [ 466.293941][ T2542] 0: left promiscuous mode [ 466.613926][ T2542] veth1_macvtap: left promiscuous mode [ 466.619578][ T2542] veth0_macvtap: left promiscuous mode [ 466.669251][ T2542] veth1_vlan: left promiscuous mode [ 466.714811][ T2542] veth0_vlan: left promiscuous mode [ 467.938419][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 467.967012][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 467.990132][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 468.005037][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 468.018325][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 468.029410][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 468.114635][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 468.127553][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 468.148059][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 468.164704][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 468.206078][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 468.215202][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 468.226906][ T7313] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 468.251599][ T7314] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 468.267837][ T7314] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 468.278485][ T5225] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 468.288912][ T5225] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 468.297581][ T5225] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 468.789461][ T2542] team0 (unregistering): Port device team_slave_1 removed [ 468.849782][ T2542] team0 (unregistering): Port device team_slave_0 removed [ 469.340749][ T7206] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.364519][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.371906][ T7206] bridge_slave_1: entered allmulticast mode [ 469.390750][ T7206] bridge_slave_1: entered promiscuous mode [ 469.622904][ T7222] chnl_net:caif_netlink_parms(): no params data found [ 469.761576][ T7206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.853704][ T7206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.162446][ T7206] team0: Port device team_slave_0 added [ 470.176255][ T5225] Bluetooth: hci1: command tx timeout [ 470.183063][ T7206] team0: Port device team_slave_1 added [ 470.335202][ T5225] Bluetooth: hci4: command tx timeout [ 470.341391][ T5225] Bluetooth: hci0: command tx timeout [ 470.353301][ T7222] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.371917][ T7222] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.386437][ T7222] bridge_slave_0: entered allmulticast mode [ 470.402554][ T7222] bridge_slave_0: entered promiscuous mode [ 470.420622][ T7222] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.442430][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.450506][ T7222] bridge_slave_1: entered allmulticast mode [ 470.466361][ T7222] bridge_slave_1: entered promiscuous mode [ 470.637812][ T7206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.644937][ T7206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.673303][ T7206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.796793][ T7206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.803926][ T7206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.832210][ T7206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.869055][ T7222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.953634][ T7222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.117952][ T7222] team0: Port device team_slave_0 added [ 471.161831][ T2542] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.193052][ T7206] hsr_slave_0: entered promiscuous mode [ 471.200129][ T7206] hsr_slave_1: entered promiscuous mode [ 471.209130][ T7206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 471.217415][ T7206] Cannot create hsr debugfs directory [ 471.265520][ T7222] team0: Port device team_slave_1 added [ 471.321818][ T2542] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.340123][ T7311] chnl_net:caif_netlink_parms(): no params data found [ 471.591145][ T2542] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.847971][ T2542] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.872815][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.880839][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.931657][ T7222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.969451][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.985107][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.017489][ T7222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.152718][ T7309] chnl_net:caif_netlink_parms(): no params data found [ 472.254102][ T5225] Bluetooth: hci1: command tx timeout [ 472.415221][ T5225] Bluetooth: hci0: command tx timeout [ 472.424205][ T5225] Bluetooth: hci4: command tx timeout [ 472.441364][ T7222] hsr_slave_0: entered promiscuous mode [ 472.450465][ T7222] hsr_slave_1: entered promiscuous mode [ 472.458297][ T7222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.465945][ T7222] Cannot create hsr debugfs directory [ 472.648922][ T7311] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.657556][ T7311] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.665128][ T7311] bridge_slave_0: entered allmulticast mode [ 472.673573][ T7311] bridge_slave_0: entered promiscuous mode [ 472.718748][ T7311] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.735752][ T7311] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.757207][ T7311] bridge_slave_1: entered allmulticast mode [ 472.773050][ T7311] bridge_slave_1: entered promiscuous mode [ 472.941528][ T7307] chnl_net:caif_netlink_parms(): no params data found [ 473.336066][ T2542] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.540690][ T7311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.580058][ T7309] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.587554][ T7309] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.595734][ T7309] bridge_slave_0: entered allmulticast mode [ 473.604103][ T7309] bridge_slave_0: entered promiscuous mode [ 473.643218][ T2542] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.727477][ T7311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.833097][ T7309] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.848094][ T7309] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.857213][ T7309] bridge_slave_1: entered allmulticast mode [ 473.868074][ T7309] bridge_slave_1: entered promiscuous mode [ 473.941121][ T2542] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.133315][ T7309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.197136][ T7311] team0: Port device team_slave_0 added [ 474.223257][ T2542] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.252733][ T7309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.344004][ T5225] Bluetooth: hci1: command tx timeout [ 474.356883][ T7311] team0: Port device team_slave_1 added [ 474.426502][ T7309] team0: Port device team_slave_0 added [ 474.455849][ T7307] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.463114][ T7307] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.473093][ T7307] bridge_slave_0: entered allmulticast mode [ 474.482798][ T7307] bridge_slave_0: entered promiscuous mode [ 474.494197][ T5225] Bluetooth: hci4: command tx timeout [ 474.494228][ T5231] Bluetooth: hci0: command tx timeout [ 474.500607][ T7307] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.512885][ T7307] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.520436][ T7307] bridge_slave_1: entered allmulticast mode [ 474.531227][ T7307] bridge_slave_1: entered promiscuous mode [ 474.558506][ T7311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.565545][ T7311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.595216][ T7311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.618604][ T7309] team0: Port device team_slave_1 added [ 474.691413][ T7311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.699057][ T7311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.726691][ T7311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.869051][ T7311] hsr_slave_0: entered promiscuous mode [ 474.876841][ T7311] hsr_slave_1: entered promiscuous mode [ 474.883317][ T7311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.895148][ T7311] Cannot create hsr debugfs directory [ 474.901808][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.909626][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.936278][ T7309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.951304][ T7309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.958510][ T7309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.987018][ T7309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.021619][ T7307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.041068][ T7307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.148033][ T7307] team0: Port device team_slave_0 added [ 475.209303][ T7307] team0: Port device team_slave_1 added [ 475.411004][ T7206] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 475.458073][ T7222] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.580294][ T7309] hsr_slave_0: entered promiscuous mode [ 475.589420][ T7309] hsr_slave_1: entered promiscuous mode [ 475.596874][ T7309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.607937][ T7309] Cannot create hsr debugfs directory [ 475.615487][ T7307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.622460][ T7307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.649872][ T7307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.661476][ T7206] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 475.675427][ T7206] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 475.714371][ T7222] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.762876][ T2542] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.813305][ T7307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.820742][ T7307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.847744][ T7307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.872241][ T7206] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 475.904546][ T7222] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.962072][ T2542] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.083639][ T7222] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.202964][ T2542] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.247505][ T7307] hsr_slave_0: entered promiscuous mode [ 476.260426][ T7307] hsr_slave_1: entered promiscuous mode [ 476.272997][ T7307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.280956][ T7307] Cannot create hsr debugfs directory [ 476.347512][ T2542] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.414725][ T5231] Bluetooth: hci1: command tx timeout [ 476.574337][ T5231] Bluetooth: hci4: command tx timeout [ 476.584709][ T5231] Bluetooth: hci0: command tx timeout [ 476.840802][ T7222] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 476.863165][ T7222] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 476.934808][ T7222] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 476.976386][ T2542] bridge_slave_1: left allmulticast mode [ 476.982101][ T2542] bridge_slave_1: left promiscuous mode [ 476.992115][ T2542] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.003908][ T2542] bridge_slave_0: left allmulticast mode [ 477.009586][ T2542] bridge_slave_0: left promiscuous mode [ 477.016406][ T2542] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.033248][ T2542] bridge_slave_1: left allmulticast mode [ 477.041552][ T2542] bridge_slave_1: left promiscuous mode [ 477.047978][ T2542] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.060122][ T2542] bridge_slave_0: left allmulticast mode [ 477.066414][ T2542] bridge_slave_0: left promiscuous mode [ 477.072236][ T2542] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.087136][ T2542] bridge_slave_1: left allmulticast mode [ 477.092844][ T2542] bridge_slave_1: left promiscuous mode [ 477.100851][ T2542] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.113186][ T2542] bridge_slave_0: left allmulticast mode [ 477.120352][ T2542] bridge_slave_0: left promiscuous mode [ 477.127080][ T2542] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.156350][ T2542] bridge_slave_1: left allmulticast mode [ 477.162040][ T2542] bridge_slave_1: left promiscuous mode [ 477.168659][ T2542] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.179488][ T2542] bridge_slave_0: left allmulticast mode [ 477.185535][ T2542] bridge_slave_0: left promiscuous mode [ 477.191424][ T2542] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.726014][ T2542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.740526][ T2542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.754155][ T2542] bond0 (unregistering): Released all slaves [ 478.872741][ T2542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.905771][ T2542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.919492][ T2542] bond0 (unregistering): Released all slaves [ 479.032212][ T2542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.046333][ T2542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.061350][ T2542] bond0 (unregistering): Released all slaves [ 479.181574][ T2542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.197418][ T2542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.209440][ T2542] bond0 (unregistering): Released all slaves [ 479.315715][ T7222] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 479.755518][ T7206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.380975][ T7206] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.406936][ T5271] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.414267][ T5271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.548161][ T5269] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.555400][ T5269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.840082][ T7222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.948557][ T7222] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.013557][ T5214] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.020859][ T5214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.217489][ T5305] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.224805][ T5305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.539338][ T7309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 481.557412][ T7309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 481.657427][ T7309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 481.779415][ T7309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 481.935127][ T2542] hsr_slave_0: left promiscuous mode [ 481.976287][ T2542] hsr_slave_1: left promiscuous mode [ 481.983094][ T2542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.002849][ T2542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.012951][ T2542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.022044][ T2542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.064822][ T2542] hsr_slave_0: left promiscuous mode [ 482.071411][ T2542] hsr_slave_1: left promiscuous mode [ 482.079186][ T2542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.088843][ T2542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.099409][ T2542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.108849][ T2542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.124472][ T2542] hsr_slave_0: left promiscuous mode [ 482.130625][ T2542] 1: left promiscuous mode [ 482.142992][ T2542] hsr_slave_0: left promiscuous mode [ 482.152057][ T2542] hsr_slave_1: left promiscuous mode [ 482.170407][ T2542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.183139][ T2542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.192864][ T2542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.202972][ T2542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.292609][ T2542] veth1_macvtap: left promiscuous mode [ 482.298324][ T2542] veth0_macvtap: left promiscuous mode [ 482.304248][ T2542] veth1_vlan: left promiscuous mode [ 482.309774][ T2542] veth0_vlan: left promiscuous mode [ 482.319245][ T2542] veth1_macvtap: left promiscuous mode [ 482.324952][ T2542] veth0_macvtap: left promiscuous mode [ 482.330675][ T2542] veth1_vlan: left promiscuous mode [ 482.337252][ T2542] veth0_vlan: left promiscuous mode [ 482.355302][ T2542] veth1_macvtap: left promiscuous mode [ 482.360897][ T2542] veth0_macvtap: left promiscuous mode [ 482.366903][ T2542] veth1_vlan: left promiscuous mode [ 482.372299][ T2542] veth0_vlan: left promiscuous mode [ 482.382346][ T2542] veth1_macvtap: left promiscuous mode [ 482.388063][ T2542] veth0_macvtap: left promiscuous mode [ 482.393861][ T2542] veth1_vlan: left promiscuous mode [ 482.399298][ T2542] veth0_vlan: left promiscuous mode [ 483.510156][ T2542] team0 (unregistering): Port device team_slave_1 removed [ 483.560550][ T2542] team0 (unregistering): Port device team_slave_0 removed [ 484.511569][ T2542] team0 (unregistering): Port device team_slave_1 removed [ 484.561510][ T2542] team0 (unregistering): Port device team_slave_0 removed [ 485.582743][ T2542] team0 (unregistering): Port device team_slave_1 removed [ 485.628511][ T2542] team0 (unregistering): Port device team_slave_0 removed [ 486.542499][ T2542] team0 (unregistering): Port device team_slave_1 removed [ 486.592384][ T2542] team0 (unregistering): Port device team_slave_0 removed [ 487.589994][ T7206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.912426][ T7309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.058225][ T7307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 488.109906][ T7307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 488.169986][ T7307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 488.212898][ T7309] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.257462][ T7222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.266146][ T7307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 488.326744][ T5304] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.334025][ T5304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.488924][ T2640] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.496253][ T2640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.779863][ T7311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 488.929460][ T7311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 489.044654][ T7311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 489.062865][ T7311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 489.249820][ T7222] veth0_vlan: entered promiscuous mode [ 489.379540][ T7206] veth0_vlan: entered promiscuous mode [ 489.401447][ T7222] veth1_vlan: entered promiscuous mode [ 489.449988][ T7206] veth1_vlan: entered promiscuous mode [ 489.587913][ T7307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.923270][ T7307] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.988865][ T7309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.006713][ T7206] veth0_macvtap: entered promiscuous mode [ 490.021583][ T7222] veth0_macvtap: entered promiscuous mode [ 490.066597][ T7222] veth1_macvtap: entered promiscuous mode [ 490.095492][ T7206] veth1_macvtap: entered promiscuous mode [ 490.131017][ T2640] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.138294][ T2640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.169044][ T2640] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.176277][ T2640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.209543][ T7311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.272342][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.291546][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.306541][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.320258][ T7206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.348469][ T7311] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.386793][ T5304] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.394083][ T5304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.486694][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.525624][ T2640] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.532889][ T2640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.602370][ T7222] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.633956][ T7222] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.642725][ T7222] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.677170][ T7222] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.749871][ T7309] veth0_vlan: entered promiscuous mode [ 490.962429][ T7307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 491.031656][ T7309] veth1_vlan: entered promiscuous mode [ 491.198271][ T5225] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 491.215383][ T5225] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 491.226233][ T5225] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 491.256544][ T5225] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 491.269880][ T5225] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 491.282327][ T5225] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 491.572999][ T6040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.608219][ T6040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.757738][ T7309] veth0_macvtap: entered promiscuous mode [ 491.877448][ T7309] veth1_macvtap: entered promiscuous mode [ 492.034308][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.042334][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.088558][ T7307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.195239][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.210011][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.219952][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.233028][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.251337][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.404650][ T7309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.446052][ T7309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.468133][ T7309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.503368][ T7309] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.534090][ T7309] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.542874][ T7309] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.583932][ T7309] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.178879][ T7311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.375994][ T5231] Bluetooth: hci2: command tx timeout [ 493.416435][ T7307] veth0_vlan: entered promiscuous mode [ 493.524747][ T5225] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 493.540639][ T5225] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 493.550986][ T5225] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 493.574338][ T5225] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 493.588722][ T5225] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 493.596578][ T5225] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 493.604184][ T994] bridge_slave_1: left allmulticast mode [ 493.610218][ T994] bridge_slave_1: left promiscuous mode [ 493.616422][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.666987][ T994] bridge_slave_0: left allmulticast mode [ 493.672969][ T994] bridge_slave_0: left promiscuous mode [ 493.686643][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.319372][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.333035][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.357745][ T994] bond0 (unregistering): Released all slaves [ 494.379729][ T7307] veth1_vlan: entered promiscuous mode [ 494.450747][ T2524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.473264][ T2524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.583268][ T994] hsr_slave_0: left promiscuous mode [ 494.590037][ T994] hsr_slave_1: left promiscuous mode [ 494.596615][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.604573][ T994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.612558][ T994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.643741][ T994] veth1_macvtap: left promiscuous mode [ 494.649540][ T994] veth0_macvtap: left promiscuous mode [ 494.655839][ T994] veth1_vlan: left promiscuous mode [ 494.661211][ T994] veth0_vlan: left promiscuous mode [ 495.243088][ T994] team0 (unregistering): Port device team_slave_1 removed [ 495.292722][ T994] team0 (unregistering): Port device team_slave_0 removed [ 495.455311][ T5231] Bluetooth: hci2: command tx timeout [ 495.694691][ T5231] Bluetooth: hci5: command tx timeout [ 495.925101][ T7457] chnl_net:caif_netlink_parms(): no params data found [ 495.945850][ T1823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.968656][ T1823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.107546][ T7311] veth0_vlan: entered promiscuous mode [ 496.292729][ T7307] veth0_macvtap: entered promiscuous mode [ 496.408027][ T7457] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.431562][ T7457] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.451101][ T7457] bridge_slave_0: entered allmulticast mode [ 496.468997][ T7457] bridge_slave_0: entered promiscuous mode [ 496.532333][ T7307] veth1_macvtap: entered promiscuous mode [ 496.557945][ T7457] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.575000][ T7457] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.592746][ T7457] bridge_slave_1: entered allmulticast mode [ 496.610405][ T7457] bridge_slave_1: entered promiscuous mode [ 496.642120][ T7311] veth1_vlan: entered promiscuous mode [ 497.017183][ T7457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.036178][ T7457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.265001][ T7457] team0: Port device team_slave_0 added [ 497.294936][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.326193][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.355537][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.374166][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.421104][ T7307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.467095][ T7457] team0: Port device team_slave_1 added [ 497.530290][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.541884][ T5231] Bluetooth: hci2: command tx timeout [ 497.541916][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.558112][ T7307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.569067][ T7307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.581870][ T7307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.622726][ T6040] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.732775][ T7457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.741462][ T7457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.771921][ T7457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.782813][ T5304] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 497.783037][ T5231] Bluetooth: hci5: command tx timeout [ 497.804684][ T7307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.813466][ T7307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.822622][ T7307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.834484][ T7307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.870632][ T6040] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.892081][ T7457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.899141][ T7457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.926250][ T7457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.009039][ T5304] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 498.024055][ T6040] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.036950][ T5304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.070021][ T5304] usb 2-1: config 0 descriptor?? [ 498.088842][ T5304] cp210x 2-1:0.0: cp210x converter detected [ 498.262073][ T6040] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.432515][ T7457] hsr_slave_0: entered promiscuous mode [ 498.450710][ T7457] hsr_slave_1: entered promiscuous mode [ 498.520561][ T5304] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 498.549280][ T7311] veth0_macvtap: entered promiscuous mode [ 498.772944][ T7311] veth1_macvtap: entered promiscuous mode [ 498.804452][ T5304] usb 2-1: cp210x converter now attached to ttyUSB0 [ 498.814299][ T7493] chnl_net:caif_netlink_parms(): no params data found [ 499.022350][ T7533] syz.1.278: attempt to access beyond end of device [ 499.022350][ T7533] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 499.057756][ T2524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.066909][ T2524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.230310][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.241131][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.252088][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.264169][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.274293][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.285098][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.298268][ T7311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.362794][ T1169] usb 2-1: USB disconnect, device number 14 [ 499.396281][ T1169] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 499.425629][ T1169] cp210x 2-1:0.0: device disconnected [ 499.510196][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.523486][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.533609][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.545282][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.556283][ T7311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.568353][ T7311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.581224][ T7311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.614181][ T5231] Bluetooth: hci2: command tx timeout [ 499.693253][ T7493] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.701396][ T7493] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.708861][ T7493] bridge_slave_0: entered allmulticast mode [ 499.718919][ T7493] bridge_slave_0: entered promiscuous mode [ 499.746055][ T6040] bridge_slave_1: left allmulticast mode [ 499.751756][ T6040] bridge_slave_1: left promiscuous mode [ 499.759858][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.776465][ T6040] bridge_slave_0: left allmulticast mode [ 499.782304][ T6040] bridge_slave_0: left promiscuous mode [ 499.788955][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.854858][ T5231] Bluetooth: hci5: command tx timeout [ 500.453156][ T6040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.472641][ T6040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.492560][ T6040] bond0 (unregistering): Released all slaves [ 500.536209][ T7311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.550358][ T7311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.571897][ T7311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.604028][ T7311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.636899][ T7493] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.654302][ T7493] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.667024][ T7493] bridge_slave_1: entered allmulticast mode [ 500.675906][ T7493] bridge_slave_1: entered promiscuous mode [ 500.722382][ T2524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.745773][ T2524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.014587][ T7493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.348669][ T7493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.945606][ T5231] Bluetooth: hci5: command tx timeout [ 502.390613][ T29] audit: type=1400 audit(1722014286.680:371): avc: denied { setopt } for pid=7568 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 502.459992][ T7493] team0: Port device team_slave_0 added [ 503.797650][ T7493] team0: Port device team_slave_1 added [ 503.941936][ T7577] netlink: 9 bytes leftover after parsing attributes in process `syz.1.282'. [ 503.952440][ T7577] 0: renamed from hsr_slave_1 (while UP) [ 504.027997][ T7577] 0: entered allmulticast mode [ 504.034325][ T7577] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 504.451133][ T6040] hsr_slave_0: left promiscuous mode [ 504.463728][ T6040] hsr_slave_1: left promiscuous mode [ 504.480108][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.493945][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.502383][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.510636][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.541485][ T6040] veth1_macvtap: left promiscuous mode [ 504.549268][ T6040] veth0_macvtap: left promiscuous mode [ 504.555428][ T6040] veth1_vlan: left promiscuous mode [ 504.560846][ T6040] veth0_vlan: left promiscuous mode [ 505.244167][ T5271] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 505.353160][ T6040] team0 (unregistering): Port device team_slave_1 removed [ 505.400533][ T6040] team0 (unregistering): Port device team_slave_0 removed [ 505.438345][ T5271] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 505.447591][ T5271] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.464183][ T5271] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 505.478126][ T5271] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 505.496998][ T5271] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 505.507271][ T5271] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 505.516097][ T5271] usb 3-1: Product: syz [ 505.520342][ T5271] usb 3-1: Manufacturer: syz [ 505.535046][ T5271] cdc_wdm 3-1:1.0: skipping garbage [ 505.540400][ T5271] cdc_wdm 3-1:1.0: skipping garbage [ 505.545774][ T5271] cdc_wdm 3-1:1.0: skipping garbage [ 505.551030][ T5271] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 506.063131][ T7493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.079155][ T7493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.116717][ T7493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.173112][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 506.185618][ T7586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.193062][ T7586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.201777][ T7586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.209422][ T7586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.252390][ T7493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.261489][ T7493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.287639][ T7493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.471541][ T7457] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 506.502028][ T7457] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 506.593043][ T1823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.627499][ T1823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.652457][ T7457] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 506.854892][ T7457] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 506.883006][ T7493] hsr_slave_0: entered promiscuous mode [ 506.892497][ T7493] hsr_slave_1: entered promiscuous mode [ 506.903222][ T7493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.912044][ T7493] Cannot create hsr debugfs directory [ 506.932179][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.942597][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.221254][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.227890][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.657424][ T5214] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 507.855422][ T7611] netlink: 9 bytes leftover after parsing attributes in process `syz.1.285'. [ 507.864625][ T5214] usb 4-1: Using ep0 maxpacket: 32 [ 507.875247][ T5214] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.888049][ T5214] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 507.910431][ T5214] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 507.919805][ T5214] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 507.929728][ T5214] usb 4-1: Product: syz [ 507.935056][ T7611] 1: renamed from c0 (while UP) [ 507.938718][ T5214] usb 4-1: Manufacturer: syz [ 507.946624][ T5214] usb 4-1: SerialNumber: syz [ 508.003113][ T5214] appletouch 4-1:1.0: Could not find int-in endpoint [ 508.012199][ T7611] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check. [ 508.051696][ T5214] appletouch 4-1:1.0: probe with driver appletouch failed with error -5 [ 508.062095][ T5214] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 508.129576][ T5274] usb 3-1: USB disconnect, device number 26 [ 508.294728][ T5271] usb 4-1: USB disconnect, device number 12 [ 508.743429][ T7457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.991210][ T7457] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.131824][ T5271] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.139179][ T5271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.229203][ T7493] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 509.308274][ T7493] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 509.370223][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.377589][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.408953][ T7493] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 509.464982][ T7493] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 509.775974][ T7627] xt_hashlimit: overflow, try lower: 0/0 [ 509.844439][ T29] audit: type=1400 audit(1722014294.150:372): avc: denied { ioctl } for pid=7623 comm="syz.2.288" path="/dev/vhost-net" dev="devtmpfs" ino=1085 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 512.514112][ T7493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.787995][ T7493] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.167515][ T5271] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.174867][ T5271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.229201][ T1169] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 513.406414][ T5271] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.413671][ T5271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.605761][ T1169] usb 2-1: too many configurations: 211, using maximum allowed: 8 [ 513.760668][ T1169] usb 2-1: config index 0 descriptor too short (expected 64979, got 137) [ 513.793812][ T1169] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.888357][ T1169] usb 2-1: config index 1 descriptor too short (expected 64979, got 137) [ 513.924060][ T1169] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.954859][ T1169] usb 2-1: config index 2 descriptor too short (expected 64979, got 137) [ 513.990234][ T1169] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.038117][ T1169] usb 2-1: config index 3 descriptor too short (expected 64979, got 137) [ 514.099695][ T1169] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.129710][ T1169] usb 2-1: config index 4 descriptor too short (expected 64979, got 137) [ 514.175395][ T1169] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.207923][ T1169] usb 2-1: config index 5 descriptor too short (expected 64979, got 137) [ 514.229175][ T7457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.271448][ T1169] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.320938][ T1169] usb 2-1: config index 6 descriptor too short (expected 64979, got 137) [ 514.379145][ T1169] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.510884][ T1169] usb 2-1: config index 7 descriptor too short (expected 64979, got 137) [ 514.656139][ T1169] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.922701][ T1169] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 515.071782][ T1169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.174198][ T1169] usb 2-1: Product: syz [ 515.190464][ T1169] usb 2-1: Manufacturer: syz [ 515.231145][ T1169] usb 2-1: SerialNumber: syz [ 515.303020][ T1169] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 515.356847][ T5269] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 516.600465][ T5269] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 516.679005][ T5269] ath9k_htc: Failed to initialize the device [ 597.910364][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 597.921352][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 599.188509][ T7685] netlink: 9 bytes leftover after parsing attributes in process `syz.2.294'. [ 599.197625][ T7685] 0: renamed from hsr_slave_1 (while UP) [ 604.703951][ T7313] Bluetooth: hci4: command 0x0406 tx timeout [ 604.710076][ T7313] Bluetooth: hci1: command 0x0406 tx timeout [ 604.737587][ T7313] Bluetooth: hci0: command 0x0406 tx timeout [ 613.682491][ T7685] 0: entered allmulticast mode [ 614.033560][ T7685] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 615.950117][ T5275] usb 2-1: USB disconnect, device number 15 [ 615.996648][ T5275] usb 2-1: ath9k_htc: USB layer deinitialized [ 617.111784][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 617.183135][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 617.231240][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 617.300293][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 617.314722][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 617.329245][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 617.377586][ T5231] Bluetooth: hci5: command 0x0406 tx timeout [ 617.384282][ T5231] Bluetooth: hci2: command 0x0406 tx timeout [ 617.622047][ T7313] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 617.637635][ T7313] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 617.646243][ T7313] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 617.684285][ T7313] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 617.707552][ T7313] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 617.715607][ T7313] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 618.076235][ T5225] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 618.093828][ T5225] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 618.125945][ T5225] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 618.189557][ T5225] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 618.208763][ T5225] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 618.224016][ T5225] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 618.632401][ T5225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 618.659749][ T5225] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 618.690306][ T5225] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 618.701245][ T5225] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 618.719046][ T5225] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 618.726978][ T5225] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 618.879923][ T5225] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 618.891525][ T5225] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 618.905681][ T5225] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 618.916367][ T5225] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 618.936792][ T5225] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 618.944617][ T5225] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 620.014275][ T5225] Bluetooth: hci6: command tx timeout [ 620.014332][ T7313] Bluetooth: hci3: command tx timeout [ 620.334158][ T7313] Bluetooth: hci0: command tx timeout [ 620.524193][ T7704] chnl_net:caif_netlink_parms(): no params data found [ 620.814545][ T7313] Bluetooth: hci1: command tx timeout [ 620.863128][ T7714] chnl_net:caif_netlink_parms(): no params data found [ 620.974551][ T7313] Bluetooth: hci2: command tx timeout [ 621.023064][ T7724] chnl_net:caif_netlink_parms(): no params data found [ 621.133655][ T7706] chnl_net:caif_netlink_parms(): no params data found [ 621.301941][ T7704] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.309503][ T7704] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.317050][ T7704] bridge_slave_0: entered allmulticast mode [ 621.327543][ T7704] bridge_slave_0: entered promiscuous mode [ 621.391668][ T7727] chnl_net:caif_netlink_parms(): no params data found [ 621.432822][ T7704] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.442079][ T7704] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.450064][ T7704] bridge_slave_1: entered allmulticast mode [ 621.459645][ T7704] bridge_slave_1: entered promiscuous mode [ 621.731594][ T7704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.758961][ T7704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.845149][ T7724] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.852458][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.862099][ T7724] bridge_slave_0: entered allmulticast mode [ 621.871002][ T7724] bridge_slave_0: entered promiscuous mode [ 621.923234][ T7714] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.935665][ T7714] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.943418][ T7714] bridge_slave_0: entered allmulticast mode [ 621.952045][ T7714] bridge_slave_0: entered promiscuous mode [ 621.970278][ T7714] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.977614][ T7714] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.985091][ T7714] bridge_slave_1: entered allmulticast mode [ 621.993589][ T7714] bridge_slave_1: entered promiscuous mode [ 622.041000][ T7724] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.049062][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.057239][ T7724] bridge_slave_1: entered allmulticast mode [ 622.065847][ T7724] bridge_slave_1: entered promiscuous mode [ 622.094482][ T7707] Bluetooth: hci6: command tx timeout [ 622.100049][ T7313] Bluetooth: hci3: command tx timeout [ 622.155434][ T7704] team0: Port device team_slave_0 added [ 622.322855][ T7704] team0: Port device team_slave_1 added [ 622.379896][ T7714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.423884][ T7313] Bluetooth: hci0: command tx timeout [ 622.469282][ T7706] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.477287][ T7706] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.485424][ T7706] bridge_slave_0: entered allmulticast mode [ 622.495810][ T7706] bridge_slave_0: entered promiscuous mode [ 622.538951][ T7727] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.546588][ T7727] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.555199][ T7727] bridge_slave_0: entered allmulticast mode [ 622.563661][ T7727] bridge_slave_0: entered promiscuous mode [ 622.599363][ T7714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.631255][ T7724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.647794][ T7724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.686886][ T7706] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.694453][ T7706] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.701813][ T7706] bridge_slave_1: entered allmulticast mode [ 622.711849][ T7706] bridge_slave_1: entered promiscuous mode [ 622.719571][ T7727] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.732720][ T7727] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.742433][ T7727] bridge_slave_1: entered allmulticast mode [ 622.750390][ T7727] bridge_slave_1: entered promiscuous mode [ 622.799097][ T7704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.806220][ T7704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.833127][ T7704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.893894][ T7313] Bluetooth: hci1: command tx timeout [ 622.988427][ T7704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.995741][ T7704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.021934][ T7704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.056428][ T7313] Bluetooth: hci2: command tx timeout [ 623.125732][ T7724] team0: Port device team_slave_0 added [ 623.164196][ T7706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.178568][ T7727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.218708][ T7714] team0: Port device team_slave_0 added [ 623.229916][ T7714] team0: Port device team_slave_1 added [ 623.248516][ T7724] team0: Port device team_slave_1 added [ 623.260200][ T7706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.299063][ T7727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.526871][ T7704] hsr_slave_0: entered promiscuous mode [ 623.535269][ T7704] hsr_slave_1: entered promiscuous mode [ 623.542123][ T7704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 623.553123][ T7704] Cannot create hsr debugfs directory [ 623.591387][ T7714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.599290][ T7714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.628840][ T7714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.671596][ T7706] team0: Port device team_slave_0 added [ 623.687457][ T7727] team0: Port device team_slave_0 added [ 623.711714][ T7727] team0: Port device team_slave_1 added [ 623.754503][ T7714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.761514][ T7714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.792453][ T7714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.815722][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.822720][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.849031][ T7724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.863331][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.870765][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.901496][ T7724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.917923][ T7706] team0: Port device team_slave_1 added [ 624.112048][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.120585][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.146893][ T7727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.164290][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.171281][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.183872][ T7313] Bluetooth: hci3: command tx timeout [ 624.203093][ T7727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.205694][ T7707] Bluetooth: hci6: command tx timeout [ 624.374680][ T7706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.382266][ T7706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.419799][ T7706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.472992][ T7714] hsr_slave_0: entered promiscuous mode [ 624.481132][ T7714] hsr_slave_1: entered promiscuous mode [ 624.490877][ T7714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 624.495696][ T7313] Bluetooth: hci0: command tx timeout [ 624.504544][ T7714] Cannot create hsr debugfs directory [ 624.544423][ T6040] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.570912][ T7706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.578649][ T7706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.613271][ T7706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.751196][ T6040] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.838813][ T7724] hsr_slave_0: entered promiscuous mode [ 624.847000][ T7724] hsr_slave_1: entered promiscuous mode [ 624.853599][ T7724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 624.861365][ T7724] Cannot create hsr debugfs directory [ 624.987591][ T7313] Bluetooth: hci1: command tx timeout [ 625.011858][ T6040] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.081405][ T7706] hsr_slave_0: entered promiscuous mode [ 625.089004][ T7706] hsr_slave_1: entered promiscuous mode [ 625.098420][ T7706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 625.107830][ T7706] Cannot create hsr debugfs directory [ 625.135947][ T7313] Bluetooth: hci2: command tx timeout [ 625.152647][ T7727] hsr_slave_0: entered promiscuous mode [ 625.160196][ T7727] hsr_slave_1: entered promiscuous mode [ 625.170061][ T7727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 625.178070][ T7727] Cannot create hsr debugfs directory [ 625.233662][ T6040] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.213526][ T7714] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.254138][ T7707] Bluetooth: hci6: command tx timeout [ 626.260860][ T7313] Bluetooth: hci3: command tx timeout [ 626.372068][ T7714] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.461904][ T7714] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.545992][ T7714] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.573978][ T7313] Bluetooth: hci0: command tx timeout [ 626.665195][ T6040] bridge_slave_1: left allmulticast mode [ 626.670913][ T6040] bridge_slave_1: left promiscuous mode [ 626.685641][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.699054][ T6040] bridge_slave_0: left allmulticast mode [ 626.705089][ T6040] bridge_slave_0: left promiscuous mode [ 626.710965][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.731731][ T6040] bridge_slave_1: left allmulticast mode [ 626.738073][ T6040] bridge_slave_1: left promiscuous mode [ 626.744906][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.759179][ T6040] bridge_slave_0: left allmulticast mode [ 626.766380][ T6040] bridge_slave_0: left promiscuous mode [ 626.772141][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.785175][ T6040] bridge_slave_1: left allmulticast mode [ 626.790871][ T6040] bridge_slave_1: left promiscuous mode [ 626.797805][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.809689][ T6040] bridge_slave_0: left allmulticast mode [ 626.817999][ T6040] bridge_slave_0: left promiscuous mode [ 626.824036][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.839295][ T6040] bridge_slave_1: left allmulticast mode [ 626.845145][ T6040] bridge_slave_1: left promiscuous mode [ 626.852230][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.864531][ T6040] bridge_slave_0: left allmulticast mode [ 626.870320][ T6040] bridge_slave_0: left promiscuous mode [ 626.879716][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.056303][ T7313] Bluetooth: hci1: command tx timeout [ 627.214575][ T7313] Bluetooth: hci2: command tx timeout [ 628.309147][ T6040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.321860][ T6040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.335716][ T6040] bond0 (unregistering): Released all slaves [ 628.470882][ T6040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.502625][ T6040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.529213][ T6040] bond0 (unregistering): Released all slaves [ 628.659683][ T6040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.676415][ T6040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.688445][ T6040] bond0 (unregistering): Released all slaves [ 628.818711][ T6040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.832089][ T6040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.845001][ T6040] bond0 (unregistering): Released all slaves [ 628.985689][ T7714] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 629.036801][ T7714] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 629.067048][ T7714] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 629.101362][ T7714] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 629.394806][ T7704] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 629.418708][ T7704] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 629.513520][ T7704] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 629.538164][ T7704] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 630.120535][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.132682][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.148121][ T7706] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.243230][ T7714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.292830][ T7706] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.393197][ T6040] hsr_slave_0: left promiscuous mode [ 630.402674][ T6040] hsr_slave_1: left promiscuous mode [ 630.411475][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.425921][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.471324][ T6040] hsr_slave_0: left promiscuous mode [ 630.477908][ T6040] hsr_slave_1: left promiscuous mode [ 630.494845][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.515070][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.539772][ T6040] hsr_slave_0: left promiscuous mode [ 630.547131][ T6040] hsr_slave_1: left promiscuous mode [ 630.564675][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.572179][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.598412][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.606410][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.631212][ T6040] hsr_slave_0: left promiscuous mode [ 630.656791][ T6040] 0: left promiscuous mode [ 630.772820][ T6040] veth1_macvtap: left promiscuous mode [ 630.778803][ T6040] veth0_macvtap: left promiscuous mode [ 630.794158][ T6040] veth1_vlan: left promiscuous mode [ 630.799687][ T6040] veth0_vlan: left promiscuous mode [ 630.834299][ T6040] veth1_macvtap: left promiscuous mode [ 630.839899][ T6040] veth0_macvtap: left promiscuous mode [ 630.846678][ T6040] veth1_vlan: left promiscuous mode [ 630.852132][ T6040] veth0_vlan: left promiscuous mode [ 631.900962][ T6040] team0 (unregistering): Port device team_slave_1 removed [ 631.972959][ T6040] team0 (unregistering): Port device team_slave_0 removed [ 632.901463][ T6040] team0 (unregistering): Port device team_slave_1 removed [ 632.958250][ T6040] team0 (unregistering): Port device team_slave_0 removed [ 634.118372][ T6040] team0 (unregistering): Port device team_slave_1 removed [ 634.174220][ T6040] team0 (unregistering): Port device team_slave_0 removed [ 635.347447][ T6040] team0 (unregistering): Port device team_slave_1 removed [ 635.416344][ T6040] team0 (unregistering): Port device team_slave_0 removed [ 636.115687][ T7706] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.193512][ T7714] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.296997][ T7706] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.326294][ T5303] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.333676][ T5303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.401247][ T5214] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.408587][ T5214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.611978][ T7704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.921719][ T7704] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.126454][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.133680][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.216388][ T5269] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.223673][ T5269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.728699][ T7714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.752473][ T7727] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 637.850381][ T7727] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 637.895327][ T7727] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 637.935197][ T7727] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 638.283333][ T7714] veth0_vlan: entered promiscuous mode [ 638.320735][ T7724] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 638.395738][ T7724] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 638.444538][ T7724] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 638.496794][ T7724] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 638.534821][ T7714] veth1_vlan: entered promiscuous mode [ 638.554855][ T7704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.632955][ T7706] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 638.706900][ T7706] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 638.732258][ T7706] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 638.761393][ T6040] bridge_slave_1: left allmulticast mode [ 638.767410][ T6040] bridge_slave_1: left promiscuous mode [ 638.773417][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.790134][ T6040] bridge_slave_0: left allmulticast mode [ 638.798710][ T6040] bridge_slave_0: left promiscuous mode [ 638.809413][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.282284][ T6040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.300341][ T6040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.313113][ T6040] bond0 (unregistering): Released all slaves [ 639.331936][ T7706] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 639.749827][ T7714] veth0_macvtap: entered promiscuous mode [ 639.763627][ T7714] veth1_macvtap: entered promiscuous mode [ 639.788422][ T6040] hsr_slave_0: left promiscuous mode [ 639.795213][ T6040] 1: left promiscuous mode [ 639.800845][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.810515][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.820195][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.829051][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.856719][ T6040] veth1_macvtap: left promiscuous mode [ 639.862383][ T6040] veth0_macvtap: left promiscuous mode [ 639.869752][ T6040] veth1_vlan: left promiscuous mode [ 639.875556][ T6040] veth0_vlan: left promiscuous mode [ 640.531805][ T6040] team0 (unregistering): Port device team_slave_1 removed [ 640.598072][ T6040] team0 (unregistering): Port device team_slave_0 removed [ 641.228867][ T7704] veth0_vlan: entered promiscuous mode [ 641.281150][ T7704] veth1_vlan: entered promiscuous mode [ 641.307977][ T7714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.327727][ T7727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.391490][ T7714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.408609][ T7714] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.417623][ T7714] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.427291][ T7714] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.438072][ T7714] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.499193][ T7727] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.696698][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.704110][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.746671][ T7704] veth0_macvtap: entered promiscuous mode [ 641.810482][ T7724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.830562][ T7706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.862010][ T7706] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.920802][ T5269] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.928131][ T5269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.950627][ T5269] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.957996][ T5269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.976384][ T7704] veth1_macvtap: entered promiscuous mode [ 642.073661][ T5269] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.080966][ T5269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.131100][ T1823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.149962][ T1823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.173246][ T7724] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.307260][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.329499][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.351289][ T7704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.368981][ T5271] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.376309][ T5271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.430185][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.443300][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.457611][ T7704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.467714][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.487452][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.520623][ T5271] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.528053][ T5271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.570267][ T7704] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.582406][ T7704] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.598471][ T7704] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.607919][ T7704] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.215335][ T5276] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 643.341578][ T1823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.382566][ T1823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.423855][ T5276] usb 3-1: Using ep0 maxpacket: 32 [ 643.446228][ T5276] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.494289][ T5276] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 643.572062][ T2560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.591037][ T2560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.599500][ T5276] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 643.648374][ T5276] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 643.685685][ T5276] usb 3-1: Product: syz [ 643.689935][ T5276] usb 3-1: Manufacturer: syz [ 643.724668][ T5276] usb 3-1: SerialNumber: syz [ 643.771911][ T5276] appletouch 3-1:1.0: Could not find int-in endpoint [ 643.813820][ T5276] appletouch 3-1:1.0: probe with driver appletouch failed with error -5 [ 643.823258][ T5276] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 644.046992][ T7706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.059454][ T25] usb 3-1: USB disconnect, device number 27 [ 644.220147][ T29] audit: type=1107 audit(1722014428.500:373): pid=7847 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 644.229246][ T7727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.436405][ T7850] netlink: 'syz.0.260': attribute type 4 has an invalid length. [ 644.718463][ T7853] netlink: 'syz.0.260': attribute type 4 has an invalid length. [ 645.160933][ T7724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.256537][ T7706] veth0_vlan: entered promiscuous mode [ 646.317289][ T7706] veth1_vlan: entered promiscuous mode [ 646.472564][ T7706] veth0_macvtap: entered promiscuous mode [ 646.492418][ T7706] veth1_macvtap: entered promiscuous mode [ 646.622087][ T7724] veth0_vlan: entered promiscuous mode [ 646.783386][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.847248][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.899006][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.925378][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.960801][ T7706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.053658][ T7724] veth1_vlan: entered promiscuous mode [ 647.091610][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.143783][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.180574][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.215309][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.238393][ T7706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.398898][ T7706] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.422157][ T7706] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.457620][ T7706] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.484133][ T7706] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.423853][ T7313] Bluetooth: hci3: command tx timeout [ 648.656644][ T7727] veth0_vlan: entered promiscuous mode [ 648.928767][ T7727] veth1_vlan: entered promiscuous mode [ 649.006932][ T7724] veth0_macvtap: entered promiscuous mode [ 649.104589][ T7899] xt_hashlimit: overflow, try lower: 0/0 [ 649.120567][ T2560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.161739][ T2560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.163903][ T29] audit: type=1400 audit(1722014433.440:374): avc: denied { write } for pid=7907 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 649.229550][ T7724] veth1_macvtap: entered promiscuous mode [ 649.471979][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.491808][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.585773][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.610310][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.643269][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.669628][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.691088][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.716381][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.780402][ T7724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.861121][ T7727] veth0_macvtap: entered promiscuous mode [ 649.962974][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.974024][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.986768][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.003014][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.037917][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.089758][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.130518][ T7724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.205184][ T7727] veth1_macvtap: entered promiscuous mode [ 650.290263][ T7920] netlink: 9 bytes leftover after parsing attributes in process `syz.2.305'. [ 650.300934][ T7920] 0: renamed from hsr_slave_1 (while UP) [ 650.373813][ T7920] 0: entered allmulticast mode [ 650.380026][ T7920] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 650.461707][ T7724] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.481902][ T7724] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.544231][ T7724] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.573978][ T7724] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.275840][ T29] audit: type=1107 audit(1722014435.560:375): pid=7934 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 651.470625][ T7938] netlink: 'syz.0.307': attribute type 4 has an invalid length. [ 651.519575][ T29] audit: type=1107 audit(1722014435.820:376): pid=7936 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 651.589883][ T7943] netlink: 'syz.0.307': attribute type 4 has an invalid length. [ 651.736179][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.808012][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.849447][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.900763][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.943282][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.003954][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.040135][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.083755][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.150927][ T7727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.306689][ T7941] netlink: 'syz.1.306': attribute type 4 has an invalid length. [ 652.330936][ T7946] netlink: 'syz.1.306': attribute type 4 has an invalid length. [ 652.399853][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.446128][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.503945][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.534720][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.565658][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.586627][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.606566][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.623795][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.643651][ T7727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.724053][ T5269] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 653.997739][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.026885][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.133885][ T5269] usb 1-1: Using ep0 maxpacket: 16 [ 654.150320][ T5269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 654.166245][ T7727] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.177492][ T7727] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.188769][ T5269] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 654.201311][ T7727] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.212796][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.221384][ T7727] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.235771][ T5269] usb 1-1: config 0 descriptor?? [ 654.383199][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.418235][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.650686][ T7973] FAULT_INJECTION: forcing a failure. [ 654.650686][ T7973] name failslab, interval 1, probability 0, space 0, times 0 [ 654.664396][ T7973] CPU: 0 UID: 0 PID: 7973 Comm: syz.2.311 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 654.674666][ T7973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 654.674731][ T7973] Call Trace: [ 654.674745][ T7973] [ 654.674759][ T7973] dump_stack_lvl+0x16c/0x1f0 [ 654.674805][ T7973] should_fail_ex+0x497/0x5b0 [ 654.674852][ T7973] ? fs_reclaim_acquire+0xae/0x160 [ 654.674888][ T7973] should_failslab+0xc2/0x120 [ 654.674933][ T7973] __kmalloc_noprof+0xcb/0x400 [ 654.674978][ T7973] kernfs_fop_write_iter+0x229/0x500 [ 654.675034][ T7973] vfs_write+0x6b6/0x1140 [ 654.675067][ T7973] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 654.675122][ T7973] ? __pfx_vfs_write+0x10/0x10 [ 654.735806][ T7973] ? __pfx___mutex_lock+0x10/0x10 [ 654.740876][ T7973] ? __fget_files+0x256/0x400 [ 654.745603][ T7973] ksys_write+0x12f/0x260 [ 654.749956][ T7973] ? __pfx_ksys_write+0x10/0x10 [ 654.754834][ T7973] do_syscall_64+0xcd/0x250 [ 654.759377][ T7973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.765473][ T7973] RIP: 0033:0x7f0cead77299 [ 654.769913][ T7973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.789554][ T7973] RSP: 002b:00007f0ceba89048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 654.798087][ T7973] RAX: ffffffffffffffda RBX: 00007f0ceaf05f80 RCX: 00007f0cead77299 [ 654.806084][ T7973] RDX: 0000000000000012 RSI: 0000000020000080 RDI: 000000000000000d [ 654.814083][ T7973] RBP: 00007f0ceba890a0 R08: 0000000000000000 R09: 0000000000000000 [ 654.822082][ T7973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.830074][ T7973] R13: 000000000000000b R14: 00007f0ceaf05f80 R15: 00007ffd46ed21f8 [ 654.838075][ T7973] [ 654.891298][ T7952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.925932][ T29] audit: type=1400 audit(1722014439.150:377): avc: denied { search } for pid=4652 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.987941][ T7952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.014887][ T2560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.022805][ T2560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.095240][ T5269] hid (null): invalid report_size 24940 [ 655.100930][ T5269] hid (null): nested delimiters [ 655.138517][ T5269] hid (null): unknown global tag 0x83 [ 655.164249][ T5269] hid (null): unknown global tag 0xc [ 655.179992][ T5269] hid (null): global environment stack underflow [ 655.231908][ T5269] hid-generic 0003:0158:0100.000F: invalid report_size 24940 [ 655.272128][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.284794][ T5269] hid-generic 0003:0158:0100.000F: item 0 2 1 7 parsing failed [ 655.338391][ T5269] hid-generic 0003:0158:0100.000F: probe with driver hid-generic failed with error -22 [ 655.348489][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.701604][ T5269] usb 1-1: USB disconnect, device number 11 [ 656.843935][ T5275] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 656.853807][ T29] audit: type=1400 audit(1722014441.120:378): avc: denied { write } for pid=8000 comm="syz.3.314" name="001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 657.086399][ T29] audit: type=1400 audit(1722014441.230:379): avc: denied { connect } for pid=8000 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 657.210493][ T29] audit: type=1400 audit(1722014441.260:380): avc: denied { setopt } for pid=8000 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 657.311876][ T5275] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 657.346437][ T8003] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 657.347763][ T5275] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 657.363083][ T29] audit: type=1326 audit(1722014441.440:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1b2177299 code=0x0 [ 657.443320][ T5275] usb 3-1: config 9 has no interface number 0 [ 657.465932][ T5275] usb 3-1: config 9 interface 1 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 657.542391][ T5275] usb 3-1: config 9 interface 1 has no altsetting 0 [ 657.597986][ T29] audit: type=1400 audit(1722014441.640:382): avc: denied { shutdown } for pid=8000 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 657.603047][ T5275] usb 3-1: language id specifier not provided by device, defaulting to English [ 657.642544][ T5275] usb 3-1: New USB device found, idVendor=058b, idProduct=0028, bcdDevice=f1.bf [ 657.663451][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.685612][ T8004] netlink: 5 bytes leftover after parsing attributes in process `syz.3.314'. [ 657.733352][ T8004] 0XD: renamed from gretap0 (while UP) [ 657.755671][ T5275] usb 3-1: Product: 竅ꙵ庠ಝ苼帔喈ﴘᄀ擫ࡖ硟꾲슟쫜⌓ᎭᲘ봔炡욼ᥔ퉛Ɨ쒹饩耮ﷳ틩Ꟊ項ﮠ뛛웓茮극Ὣﭚﱻ㲄曐벶ⷾ푆꣋訫蹋깼⦽㤠葙裏녛ᑓ횠㶴䘁ꖯ莈ౣ┗렍⵶㽠䇪偲铼逑싎렦韪캄迸柋ꢼ䚐ꤏ욽ၾ絭뀰㭀鈢海ꗝ겆핸㕱㕳韛Ὠ훓ᛚ봲蓖꩖藦 [ 657.841189][ T8004] 0XD: entered allmulticast mode [ 657.891641][ T8009] xt_hashlimit: overflow, try lower: 0/0 [ 657.909278][ T29] audit: type=1326 audit(1722014441.860:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1b2177299 code=0x0 [ 657.932371][ T5275] usb 3-1: Manufacturer: 롚伄ꎷ뜂힗鼭嚵嬵汴푁㚧↷웙㳘崿₽ᅼ곙ڵ檻騛芪ồ蓼 [ 657.948343][ T5275] usb 3-1: SerialNumber: Ⰹ [ 658.167959][ T29] audit: type=1107 audit(1722014442.470:384): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 658.236291][ T8012] netlink: 'syz.0.316': attribute type 4 has an invalid length. [ 658.524089][ T29] audit: type=1400 audit(1722014442.810:385): avc: denied { create } for pid=8013 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 658.595865][ T8012] netlink: 'syz.0.316': attribute type 4 has an invalid length. [ 659.054047][ T7313] Bluetooth: hci2: command tx timeout [ 659.367006][ T5275] ftdi_sio 3-1:9.1: FTDI USB Serial Device converter detected [ 659.484314][ T5275] ftdi_sio ttyUSB0: unknown device type: 0xf1bf [ 659.563342][ T5275] usb 3-1: USB disconnect, device number 28 [ 659.654155][ T5275] ftdi_sio 3-1:9.1: device disconnected [ 661.934505][ T8031] netlink: 9 bytes leftover after parsing attributes in process `syz.2.319'. [ 661.978187][ T8031] 1: renamed from c0 (while UP) [ 662.322280][ T8036] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 662.329676][ T8036] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 662.350287][ T29] audit: type=1400 audit(1722014446.610:386): avc: granted { setsecparam } for pid=8025 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 662.508231][ T8031] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check. [ 662.891694][ T29] audit: type=1400 audit(1722014447.190:387): avc: denied { read } for pid=8042 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 662.911091][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.919833][ T8045] raw_sendmsg: syz.0.323 forgot to set AF_INET. Fix it! [ 663.166384][ T29] audit: type=1400 audit(1722014447.450:388): avc: denied { listen } for pid=8042 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 663.300187][ T8054] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 663.319597][ T8054] xt_CONNSECMARK: invalid mode: 0 [ 663.967226][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88806215d800: rx timeout, send abort [ 663.978404][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806215d800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 664.209795][ T29] audit: type=1400 audit(1722014448.490:389): avc: denied { read append } for pid=8057 comm="syz.0.326" name="sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 665.027028][ T29] audit: type=1400 audit(1722014448.500:390): avc: denied { open } for pid=8057 comm="syz.0.326" path="/dev/sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 667.857375][ T5269] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 668.184987][ T5269] usb 3-1: too many configurations: 211, using maximum allowed: 8 [ 668.212779][ T5269] usb 3-1: config index 0 descriptor too short (expected 64979, got 137) [ 668.235894][ T5269] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.266586][ T5269] usb 3-1: config index 1 descriptor too short (expected 64979, got 137) [ 668.296908][ T5269] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.346803][ T5269] usb 3-1: config index 2 descriptor too short (expected 64979, got 137) [ 668.365676][ T5269] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.381414][ T5269] usb 3-1: config index 3 descriptor too short (expected 64979, got 137) [ 668.400394][ T5269] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.476631][ T5269] usb 3-1: config index 4 descriptor too short (expected 64979, got 137) [ 668.523943][ T5269] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.581615][ T5269] usb 3-1: config index 5 descriptor too short (expected 64979, got 137) [ 668.610446][ T5269] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.647574][ T5269] usb 3-1: config index 6 descriptor too short (expected 64979, got 137) [ 668.660822][ T5269] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.687545][ T5269] usb 3-1: config index 7 descriptor too short (expected 64979, got 137) [ 668.743281][ T5269] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.853910][ T5269] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 668.879845][ T5269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.890052][ T5269] usb 3-1: Product: syz [ 668.894406][ T5269] usb 3-1: Manufacturer: syz [ 668.900800][ T5269] usb 3-1: SerialNumber: syz [ 668.924152][ T5269] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 668.958174][ T5275] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 669.537958][ T8100] netlink: 'syz.1.333': attribute type 4 has an invalid length. [ 669.835744][ T29] audit: type=1107 audit(1722014453.830:391): pid=8098 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 672.821191][ T5275] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 780.485713][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 780.492710][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2560/1:b..l [ 780.501241][ C0] rcu: (detected by 0, t=10502 jiffies, g=62933, q=722 ncpus=2) [ 780.508971][ C0] task:kworker/u8:10 state:R running task stack:23184 pid:2560 tgid:2560 ppid:2 flags:0x00004000 [ 780.521762][ C0] Workqueue: bat_events batadv_mcast_mla_update [ 780.528040][ C0] Call Trace: [ 780.531323][ C0] [ 780.534259][ C0] __schedule+0xe37/0x5490 [ 780.538697][ C0] ? __pfx_mark_lock+0x10/0x10 [ 780.543475][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 780.548254][ C0] ? batadv_mcast_mla_update+0x1908/0x3200 [ 780.554091][ C0] ? __pfx___schedule+0x10/0x10 [ 780.558974][ C0] ? mark_held_locks+0x9f/0xe0 [ 780.563765][ C0] preempt_schedule_irq+0x51/0x90 [ 780.568818][ C0] irqentry_exit+0x36/0x90 [ 780.573357][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 780.579359][ C0] RIP: 0010:lock_is_held_type+0x107/0x150 [ 780.585111][ C0] Code: 00 00 b8 ff ff ff ff 65 0f c1 05 3c 74 f1 74 83 f8 01 75 2d 9c 58 f6 c4 02 75 43 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 45 31 ed eb [ 780.604914][ C0] RSP: 0000:ffffc900092c7af0 EFLAGS: 00000296 [ 780.611126][ C0] RAX: 0000000000000046 RBX: ffff888029f7a930 RCX: 0000000000000001 [ 780.619105][ C0] RDX: 0000000000000000 RSI: ffffffff8b4cc880 RDI: ffffffff8bb08c00 [ 780.627175][ C0] RBP: ffffffff8ddb5220 R08: 0000000000000005 R09: 0000000000000000 [ 780.635152][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888029f79e00 [ 780.643227][ C0] R13: 0000000000000001 R14: 00000000ffffffff R15: 0000000000000002 [ 780.651228][ C0] batadv_mcast_mla_update+0x16ff/0x3200 [ 780.656903][ C0] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 780.662912][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 780.667955][ C0] ? __pfx_lock_release+0x10/0x10 [ 780.673017][ C0] process_one_work+0x9c5/0x1b40 [ 780.677978][ C0] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 780.684003][ C0] ? __pfx_process_one_work+0x10/0x10 [ 780.689397][ C0] ? assign_work+0x1a0/0x250 [ 780.694003][ C0] worker_thread+0x6c8/0xf20 [ 780.698640][ C0] ? __pfx_worker_thread+0x10/0x10 [ 780.703796][ C0] kthread+0x2c1/0x3a0 [ 780.707878][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 780.713102][ C0] ? __pfx_kthread+0x10/0x10 [ 780.717700][ C0] ret_from_fork+0x45/0x80 [ 780.722154][ C0] ? __pfx_kthread+0x10/0x10 [ 780.726769][ C0] ret_from_fork_asm+0x1a/0x30 [ 780.731579][ C0] [ 780.734614][ C0] rcu: rcu_preempt kthread starved for 5143 jiffies! g62933 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 780.745754][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 780.755736][ C0] rcu: RCU grace-period kthread stack dump: [ 780.761634][ C0] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 780.773401][ C0] Call Trace: [ 780.776690][ C0] [ 780.779650][ C0] __schedule+0xe37/0x5490 [ 780.784177][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 780.789396][ C0] ? __pfx___schedule+0x10/0x10 [ 780.794267][ C0] ? schedule+0x298/0x350 [ 780.798640][ C0] ? __pfx_lock_release+0x10/0x10 [ 780.803694][ C0] ? __pfx___mod_timer+0x10/0x10 [ 780.808740][ C0] ? lock_acquire+0x1b1/0x560 [ 780.813462][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 780.818947][ C0] schedule+0xe7/0x350 [ 780.823045][ C0] schedule_timeout+0x136/0x2a0 [ 780.827914][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 780.833304][ C0] ? __pfx_process_timeout+0x10/0x10 [ 780.838601][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 780.844429][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 780.849923][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 780.854717][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 780.860031][ C0] ? rcu_gp_init+0xc82/0x1630 [ 780.864749][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 780.870057][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 780.876144][ C0] rcu_gp_kthread+0x271/0x380 [ 780.880850][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 780.886060][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 780.891283][ C0] ? __kthread_parkme+0x148/0x220 [ 780.896322][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 780.901537][ C0] kthread+0x2c1/0x3a0 [ 780.905632][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 780.910849][ C0] ? __pfx_kthread+0x10/0x10 [ 780.915460][ C0] ret_from_fork+0x45/0x80 [ 780.919913][ C0] ? __pfx_kthread+0x10/0x10 [ 780.924511][ C0] ret_from_fork_asm+0x1a/0x30 [ 780.929301][ C0] [ 780.932335][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 780.938682][ C0] Sending NMI from CPU 0 to CPUs 1: [ 780.943922][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20