last executing test programs: 4m11.274382396s ago: executing program 1 (id=4274): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0xd, 0x4, "fef890a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0xfffffffffffffffc, 0x0) 4m8.243786009s ago: executing program 1 (id=4312): unshare(0x24040600) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000800)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000010000000000a00000000000006"], 0x30}}, 0x4090) r1 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x3a0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], 0x0, [], 0x0, 0x7, 0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) socket$inet_udp(0x2, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102385, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000009c0)=ANY=[@ANYBLOB="05000000a14bba91ed0402f4d51751e5d0a6a12e1a323a7920b88c5033d010a16c82c06a567265f39e54d682767468fb7f20f1f8f212699ef7c3008cf3035ec8015e5b8593e713219c259a6b1fe08cf21f0839ac3a392ba4038e44a41fc0427f5712fc97b0afd459ee26c7ca69a185096bde0901920f579edbd10bd9fc6be614793ad519da5521dbaeeae9f8bf7536aee9450789a419724510010575622095d70485a4d898b4979a16fabcf8e316afeed43d353a3bb741d976e9", @ANYRES16=r7, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x8c1}, 0x20000800) recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000004e80)={0x0, 0x0, &(0x7f0000004e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000020101080000000000000000020000051c00198008000200c002000004000280e962c4b6b74e5fcbf374e99d92492ee1f1de9021b27afa6fed0a5b557ca576ac193d762b859ae6079d676945ae3710f8d4694260b6dd7e7dcb57f8b73735936d0068478e84c87b9ccc82834a814d2bb2af6d246617"], 0x24}, 0x1, 0x0, 0x0, 0x200480c4}, 0x20048000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r9, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2, 0x4}, 0x1c) ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) 4m7.273701611s ago: executing program 1 (id=4318): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4", 0x64, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}, {&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a60", 0xb0}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae", 0x39}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m6.612448112s ago: executing program 2 (id=4324): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x94) r3 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000400)=r2, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) writev(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="80", 0x1}], 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c0000008500000005"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x27, 0x39, 0x0, &(0x7f0000000500), 0x0, 0x1402, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="09000300010001", 0x7) 4m6.602611315s ago: executing program 4 (id=4325): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414"], 0xfdef) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4m6.551099035s ago: executing program 2 (id=4327): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='yeah', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x48}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 4m6.538128487s ago: executing program 4 (id=4328): sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000", @ANYRES32=0x1], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 4m6.473088166s ago: executing program 3 (id=4329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @local}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)="3c85000014", 0x5}], 0x3}, 0x20000000) 4m6.434228126s ago: executing program 2 (id=4330): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823", 0x3f, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)}], 0x1}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c", 0xb7}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e", 0xaa}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a13024", 0xcf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b523983", 0x72}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf15}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m6.433513885s ago: executing program 4 (id=4331): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002200)=[{0x0}, {&(0x7f0000002100)=""/212, 0xd4}], 0x2}, 0xa}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6dafe0900"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x40}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800300}, 0x4040891) 4m6.274968766s ago: executing program 3 (id=4332): mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x5, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x2, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r3, 0x109}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x20000885) 4m5.914965481s ago: executing program 1 (id=4333): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) unshare(0x20000400) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) 4m5.809580685s ago: executing program 1 (id=4334): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, 0x0, 0x0) 4m5.759153438s ago: executing program 1 (id=4336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2040400) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080), 0x4) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000004c0)=0x2, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000000c0)="8c", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @random="1fac3b08cacd"}, 0x14) 4m5.470322636s ago: executing program 4 (id=4338): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4m5.320236595s ago: executing program 2 (id=4339): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4m5.237840238s ago: executing program 2 (id=4340): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x2000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 4m4.986044717s ago: executing program 4 (id=4341): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x1f, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb022000020205090505"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x5b02, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000200f3241504000"], 0x0) syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000840), 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff", @ANYRES32], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000a80)=""/188, 0xba) write$char_usb(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x49) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x8e2b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x1068) 4m4.821004144s ago: executing program 0 (id=4342): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(0x3) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x63, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="610601e004"], 0xd) 4m4.758350045s ago: executing program 2 (id=4343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4008000) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 4m4.661030256s ago: executing program 0 (id=4344): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x2, 0x3, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESHEX=r0], 0x20) 4m4.660742892s ago: executing program 0 (id=4345): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) unshare(0x20000400) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) 4m4.610428426s ago: executing program 0 (id=4346): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x11, &(0x7f00000004c0)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk, @call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m4.589239887s ago: executing program 0 (id=4347): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, 0x0, 0x0) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) unshare(0x2c020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x1005, 0x80005, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(0x0, 0x0, 0x9) 4m4.463111029s ago: executing program 0 (id=4348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m3.336895035s ago: executing program 4 (id=4349): socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$cgroup_devices(r0, 0x0, 0x6) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r0, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 3m57.389970359s ago: executing program 3 (id=4350): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x2004c004}, 0x4) 3m57.323762579s ago: executing program 3 (id=4351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @local}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)="3c85000014", 0x5}], 0x3}, 0x20000000) 3m57.223720674s ago: executing program 3 (id=4352): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 3m57.196800854s ago: executing program 3 (id=4353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="8b4d4a4f", @ANYRES16=r1, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32, @ANYBLOB="08003200050000000500330001000000"], 0x2c}}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x5820a61ca228551, 0x4, 0x2, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x81}}]}, 0x2c}}, 0x8d0) unshare(0x22020400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) sendmmsg(r2, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) 3m49.934343881s ago: executing program 32 (id=4336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2040400) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080), 0x4) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000004c0)=0x2, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000000c0)="8c", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @random="1fac3b08cacd"}, 0x14) 3m49.433787301s ago: executing program 33 (id=4348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m49.401663723s ago: executing program 34 (id=4343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4008000) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 3m47.921013026s ago: executing program 35 (id=4349): socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$cgroup_devices(r0, 0x0, 0x6) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r0, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 3m41.916113106s ago: executing program 36 (id=4353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="8b4d4a4f", @ANYRES16=r1, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32, @ANYBLOB="08003200050000000500330001000000"], 0x2c}}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x5820a61ca228551, 0x4, 0x2, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x81}}]}, 0x2c}}, 0x8d0) unshare(0x22020400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) sendmmsg(r2, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) 40.430381365s ago: executing program 8 (id=6201): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000101010200000000000508000840000004"], 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x28}, 0x4004004) 40.157743386s ago: executing program 8 (id=6204): ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x8902, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020059fe", 0x6}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="6a38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 39.900555468s ago: executing program 8 (id=6207): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a00810a1d08007b490d4f1e81f8d804000100ff05142603600e12080005007a01e300a8001600200003400400000003a84942de4fe3aefb8000a007a290457f01e84460dd46302af989b316277ce06bbace8017cbec4cce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025c4679ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1", 0x99}], 0x1}, 0x8880) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 39.691361997s ago: executing program 8 (id=6208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 39.341977545s ago: executing program 8 (id=6212): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r0, &(0x7f0000000380), 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) openat$tun(0xffffff9c, &(0x7f0000000400), 0x428000, 0x0) sendmmsg$inet(r3, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)}}, {{&(0x7f0000000380)={0x2, 0x4c20, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v', 0x1}], 0x1}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000003c0)={0xfffe, 0x0, 0x53, 0x7fffffff, r4}, 0x10) madvise(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x64) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000002c0)={0x2, 0x4, 0x1, 0x7fffffff, 0x3451}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6091}}, 0x101, 0x2, 0x0, 0x0, 0xd4}, 0x9c) r7 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\xeaul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) r8 = mmap$IORING_OFF_SQ_RING(0x0, 0x4000, 0x2000006, 0x810, 0xffffffffffffffff, 0x0) syz_io_uring_modify_offsets$generic(0x0, r8, 0x60, 0x81) sendto$inet6(r1, &(0x7f00000003c0)=' ', 0xfffffffffffffd70, 0x4c000, &(0x7f0000000480)={0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x7b8}, 0x1c) 39.1662793s ago: executing program 8 (id=6214): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x6}, 0x8) syz_clone(0x2c9d4480, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)=ANY=[]) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) socket(0x400000000010, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r6, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000040)=0x30, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 37.404775038s ago: executing program 9 (id=6222): move_pages(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r1 = dup(r0) pwritev2(r1, 0x0, 0x0, 0x2000, 0x0, 0x3) 37.180725525s ago: executing program 9 (id=6223): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x298}, 0xc054) 36.896153111s ago: executing program 9 (id=6226): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvmmsg(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}, 0xfffffff3}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001c00)=""/62, 0x3e}], 0x1}, 0x174}], 0x2, 0x10122, 0x0) 34.629777641s ago: executing program 9 (id=6231): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a36", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000001b40)=""/4065, 0xfe1}, {&(0x7f0000003b80)=""/4111, 0x100f}, {&(0x7f0000000a40)=""/231, 0xe7}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f0000000880)=""/159, 0x9f}], 0x6}, 0x20) 33.66531841s ago: executing program 9 (id=6236): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 32.022494633s ago: executing program 9 (id=6248): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/227, 0xe3}, {&(0x7f0000000440)=""/162, 0xa2}, {&(0x7f0000000500)=""/97, 0x61}, {&(0x7f0000000580)=""/66, 0x42}, {&(0x7f0000001a00)=""/255, 0xff}, {&(0x7f0000000740)=""/109, 0x6d}, {&(0x7f00000007c0)=""/191, 0xbf}], 0x7, &(0x7f00000008c0)=""/49, 0x31}, 0x3}, {{&(0x7f0000000900)=@tipc=@id, 0x80, &(0x7f0000001680)=[{&(0x7f0000000980)=""/203, 0xcb}, {&(0x7f0000000a80)=""/220, 0xdc}, {&(0x7f0000000b80)=""/241, 0xf1}, {&(0x7f0000000c80)=""/164, 0xa4}, {&(0x7f00000014c0)=""/120, 0x78}, {&(0x7f0000001540)=""/177, 0xb1}, {&(0x7f0000001600)=""/96, 0x60}], 0x7, &(0x7f00000016c0)=""/170, 0xaa}, 0xfffffffc}, {{&(0x7f0000001780)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001800)=""/118, 0x76}], 0x1, &(0x7f00000018c0)=""/157, 0x9d}, 0xffff}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x3b6, &(0x7f0000000300)=ANY=[@ANYRESDEC=r2], 0x0) pipe2$watch_queue(0x0, 0x80) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x20000004) r4 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40040) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x8000) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) 26.978697069s ago: executing program 5 (id=6257): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newchain={0x448, 0x64, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {0xa, 0xfffd}, {0xfff3, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}, @filter_kind_options=@f_u32={{0x8}, {0x40c, 0x2, [@TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8, 0x4, 0x9, 0x30b4, 0xa, 0x0, 0x6, 0x7fffffff, 0x2, 0x27, 0x7a25, 0x7fffffff, 0x6, 0x40, 0x8, 0x81, 0x1, 0x0, 0x40, 0x0, 0xfffffffb, 0xe3b, 0x3, 0x200, 0x4, 0xffffff80, 0x3, 0x1, 0x0, 0x6, 0x0, 0x2, 0x29f75488, 0x0, 0x10001, 0x8bb, 0x7, 0xa83, 0xc, 0x9, 0x8, 0x3, 0x800, 0x9, 0x4, 0x3ff, 0x1, 0x5, 0x9, 0x7, 0x2, 0xe6bf, 0x3, 0xcc9, 0x8000, 0x6, 0x5, 0xfd3, 0x6, 0xfa15, 0x80000000, 0xb68a, 0x9, 0x40, 0x7, 0x6, 0x81, 0xa33c, 0x81, 0x4, 0x6, 0x2, 0xe49, 0x8, 0x81, 0x7, 0x7fff, 0x1918, 0xf7a, 0x80, 0x1, 0x2ecc, 0xc000000, 0x2c23, 0x9, 0x80004, 0x5, 0xb60, 0x2, 0x7ff, 0x6, 0x1, 0x0, 0x3, 0xf0eb, 0x3, 0x8, 0xe00000, 0x80000000, 0x4, 0x2, 0x569db32e, 0x7f, 0xaa60, 0x7, 0x9, 0xf3, 0x2, 0x3, 0x3, 0x8, 0x1, 0xc, 0x1, 0x7, 0x1, 0x7, 0xffff8001, 0xffff, 0xc83, 0x2, 0xc, 0x6, 0x5, 0x100, 0x2, 0x0, 0x7, 0xffffff3e, 0x23, 0x4, 0xd94, 0x0, 0x4, 0x8, 0x5, 0x9e2c, 0xffff9f8b, 0x1, 0x3ff, 0x5, 0x80, 0x9, 0xe475, 0x1, 0x8, 0x8d4b, 0x100, 0x100, 0x7fffffff, 0x0, 0xe4, 0x200, 0x45, 0x7fff, 0x9, 0x1, 0x18295722, 0xd, 0x9, 0x53, 0xaf2, 0xe701, 0x0, 0x9, 0x101, 0x86000, 0x70e, 0x10, 0x2ded, 0x7, 0x793, 0x8001, 0x3, 0x2, 0x400, 0x1, 0x5, 0xd2, 0x3, 0x1, 0x7, 0x4, 0xfffffffc, 0x7, 0xfffffffd, 0x4, 0xfffffff1, 0xb, 0x3, 0x9, 0x3, 0x6, 0x3, 0x0, 0xffffff67, 0x2, 0x3, 0x1, 0x2b, 0x6, 0x1, 0x1, 0x5, 0x0, 0x0, 0x10001, 0x0, 0x8, 0x8, 0x11e, 0x2, 0xfff, 0x1f9a, 0x200, 0x5, 0x8, 0x5, 0x8, 0x14, 0xffffffff, 0xfa, 0x6, 0x3, 0x380, 0x100, 0x2, 0x2a49, 0x4, 0x1, 0x9, 0x9d3e, 0xf5, 0x36b, 0x3db7e015, 0x2, 0x6, 0x8, 0xcb1f, 0x73d, 0x9, 0x9, 0x0, 0x1, 0x10, 0x7fff, 0x4, 0x0, 0x6, 0x40000, 0x9, 0x7, 0xa9, 0xa8, 0xd709]}]}]}}]}, 0x448}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18020000020000000000089366217b200cd7020200000000000018010020732500000000002020207b1af8ff00000000bfa100010000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 26.873808785s ago: executing program 5 (id=6258): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 26.816417945s ago: executing program 5 (id=6259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="671723c202002b", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)="000000b814", 0x5}, {&(0x7f0000000340)="33c4", 0x2}], 0x4}, 0x0) 26.103655213s ago: executing program 5 (id=6261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}]}]}, 0x4c}}, 0x0) 26.052407028s ago: executing program 5 (id=6262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) 25.938669044s ago: executing program 5 (id=6263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffc, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0xb6f3, 0x0, 0x1, r2}) 23.764671153s ago: executing program 37 (id=6214): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x6}, 0x8) syz_clone(0x2c9d4480, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)=ANY=[]) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) socket(0x400000000010, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r6, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000040)=0x30, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 16.888860931s ago: executing program 7 (id=6300): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0xff97, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) 16.480095562s ago: executing program 38 (id=6248): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)=""/227, 0xe3}, {&(0x7f0000000440)=""/162, 0xa2}, {&(0x7f0000000500)=""/97, 0x61}, {&(0x7f0000000580)=""/66, 0x42}, {&(0x7f0000001a00)=""/255, 0xff}, {&(0x7f0000000740)=""/109, 0x6d}, {&(0x7f00000007c0)=""/191, 0xbf}], 0x7, &(0x7f00000008c0)=""/49, 0x31}, 0x3}, {{&(0x7f0000000900)=@tipc=@id, 0x80, &(0x7f0000001680)=[{&(0x7f0000000980)=""/203, 0xcb}, {&(0x7f0000000a80)=""/220, 0xdc}, {&(0x7f0000000b80)=""/241, 0xf1}, {&(0x7f0000000c80)=""/164, 0xa4}, {&(0x7f00000014c0)=""/120, 0x78}, {&(0x7f0000001540)=""/177, 0xb1}, {&(0x7f0000001600)=""/96, 0x60}], 0x7, &(0x7f00000016c0)=""/170, 0xaa}, 0xfffffffc}, {{&(0x7f0000001780)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001800)=""/118, 0x76}], 0x1, &(0x7f00000018c0)=""/157, 0x9d}, 0xffff}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x3b6, &(0x7f0000000300)=ANY=[@ANYRESDEC=r2], 0x0) pipe2$watch_queue(0x0, 0x80) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x20000004) r4 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40040) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x8000) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) 16.479708785s ago: executing program 6 (id=6302): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x41, 0xfffffff8, 0x0, 'queue1\x00', 0x5}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x5, 0x4}, {}, {}, @raw32}], 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)={0x0, 0xc, 0xbe}) close_range(r0, 0xffffffffffffffff, 0x0) 16.479052471s ago: executing program 6 (id=6303): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r0, &(0x7f0000000380), 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xd) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffff9c, &(0x7f0000000400), 0x428000, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)}}, {{&(0x7f0000000380)={0x2, 0x4c20, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v', 0x1}], 0x1}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) madvise(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x64) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000002c0)={0x2, 0x4, 0x1, 0x7fffffff, 0x3451}) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6091}}, 0x101, 0x2, 0x0, 0x0, 0xd4}, 0x9c) r6 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\xeaul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) r7 = mmap$IORING_OFF_SQ_RING(0x0, 0x4000, 0x2000006, 0x810, 0xffffffffffffffff, 0x0) syz_io_uring_modify_offsets$generic(0x0, r7, 0x60, 0x81) sendto$inet6(r1, &(0x7f00000003c0)=' ', 0xfffffffffffffd70, 0x4c000, &(0x7f0000000480)={0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x7b8}, 0x1c) 16.47826921s ago: executing program 6 (id=6304): close(0x3) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) close(0x3) 16.359216157s ago: executing program 6 (id=6305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000000900010073797a3100000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100cb0000000800014000000003240001800a000100"], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 16.137812862s ago: executing program 7 (id=6306): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, 0x0, 0x5, 0x0, 0x3, 0xa, 0x80, 0x0, 0x33, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x0, 0xa04, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}}, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)}, 0x0) 16.02330191s ago: executing program 7 (id=6307): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3ffc, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 15.956517453s ago: executing program 6 (id=6308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, 0x0, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="671723c202002b", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)="000000b814", 0x5}, {&(0x7f0000000340)="33c4", 0x2}], 0x4}, 0x0) 15.879220861s ago: executing program 7 (id=6309): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x160, 0x0) 15.810848272s ago: executing program 7 (id=6310): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310304000000000000000900000008000300", @ANYRES32, @ANYBLOB="08000600", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x0) 15.680631571s ago: executing program 7 (id=6311): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newlink={0x20, 0x10, 0x503, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000001c0)={0x1, r4}) openat$full(0xffffff9c, &(0x7f0000000200), 0x248200, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000c40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x8}]}}}]}, 0x44}}, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x800000000001e8, 0x12) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0), 0x0}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f00000000c0)=0x58, 0x5) write$hidraw(r6, &(0x7f0000000100)="4d9df35f71b136673bce5e0e1a3addbeb088a794ef6fa62d938be1b88f21428434a3fe3a3a1b698a94532a6b0b93597ba5eb9762dad498fc23267f81db892bb0c60b89d791bb3c0441faf49d37ac1c77", 0x50) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0105702, &(0x7f0000000380)={0x200, "425aeb75378a39b4c98900000f010008000000f3ff0014340900"}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x1, r5}) 15.271153107s ago: executing program 6 (id=6312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x7fffffffffffffff, 0x58f24868, 0x4, 0x7f, 0x80000001, 0x1, 0xb, 0x4, 0x1000, 0x3fb, 0x2, 0x8, 0x8001], 0x1000, 0x100204}) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000240)) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000380)=ANY=[@ANYRES8], 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xfe, 0x1, 0x0, 0x5, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x0, 0x40004, 0x6, 0x5, 0x4, 0xbd, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.571655385s ago: executing program 39 (id=6263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffc, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0xb6f3, 0x0, 0x1, r2}) 459.256939ms ago: executing program 40 (id=6311): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newlink={0x20, 0x10, 0x503, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000001c0)={0x1, r4}) openat$full(0xffffff9c, &(0x7f0000000200), 0x248200, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000c40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x8}]}}}]}, 0x44}}, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x800000000001e8, 0x12) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0), 0x0}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f00000000c0)=0x58, 0x5) write$hidraw(r6, &(0x7f0000000100)="4d9df35f71b136673bce5e0e1a3addbeb088a794ef6fa62d938be1b88f21428434a3fe3a3a1b698a94532a6b0b93597ba5eb9762dad498fc23267f81db892bb0c60b89d791bb3c0441faf49d37ac1c77", 0x50) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0105702, &(0x7f0000000380)={0x200, "425aeb75378a39b4c98900000f010008000000f3ff0014340900"}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x1, r5}) 0s ago: executing program 41 (id=6312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x7fffffffffffffff, 0x58f24868, 0x4, 0x7f, 0x80000001, 0x1, 0xb, 0x4, 0x1000, 0x3fb, 0x2, 0x8, 0x8001], 0x1000, 0x100204}) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000240)) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000380)=ANY=[@ANYRES8], 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xfe, 0x1, 0x0, 0x5, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x0, 0x40004, 0x6, 0x5, 0x4, 0xbd, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): im5 netdevsim3: renamed from eth3 [ 628.818913][T18400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 628.874755][T18415] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 628.898144][T18415] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 628.901603][T18415] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 628.949167][T18415] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 628.957137][T18415] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 628.987698][T18415] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 628.995344][T18415] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 629.026826][T18415] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 629.029669][ T5256] 8021q: adding VLAN 0 to HW filter on device eth3 [ 629.077954][T18411] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 629.105790][T18411] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 629.107459][T18411] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 629.156374][T18411] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 629.162339][T18411] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 629.195670][T18411] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 629.203364][T18411] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 629.238677][T18411] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 629.340672][T18425] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 629.367950][T18425] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 629.376746][T18425] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 629.409063][T18425] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 629.420901][T18425] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 629.446372][T18425] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 629.455275][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.455340][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.483752][T18425] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 629.508561][T18425] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 629.724747][ T4161] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.781603][ T5256] 8021q: adding VLAN 0 to HW filter on device eth4 [ 629.804513][T18400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.820206][T18420] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 629.846058][T18420] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 629.850921][T18420] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 629.885648][T18420] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 630.025195][ T4161] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.064112][T18420] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 630.085731][T18420] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 630.089423][T18420] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 630.136506][T18420] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 630.172369][T18400] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.335675][ T4161] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.400801][ T4075] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.400971][ T4075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.424851][T18415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.435785][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.435881][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.489804][T18415] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.510732][T18411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.515932][ T1299] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.516060][ T1299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.676643][ T4161] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.718683][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.718748][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.753591][T18411] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.757131][T18425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.774813][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.774931][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.798606][ T1299] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.798688][ T1299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.823541][T18425] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.848751][ T4144] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.850192][ T4144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.858568][T18420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.874194][ T4144] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.874305][ T4144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.928748][T18420] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.948521][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.948628][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.968173][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.968298][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.355198][ T4161] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.665435][ T4161] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.995460][ T4161] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.049498][ T5256] 8021q: adding VLAN 0 to HW filter on device eth5 [ 632.060895][T18400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.276023][ T4161] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.337346][T18411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.344849][T18415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.579640][T18425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.771982][T18420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.955557][ T4161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.255589][ T4161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.288230][ T5256] 8021q: adding VLAN 0 to HW filter on device eth6 [ 633.291105][T18400] veth0_vlan: entered promiscuous mode [ 633.330362][T18400] veth1_vlan: entered promiscuous mode [ 633.555540][ T4161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.647325][T18425] veth0_vlan: entered promiscuous mode [ 633.654785][T18415] veth0_vlan: entered promiscuous mode [ 633.657007][T18411] veth0_vlan: entered promiscuous mode [ 633.671793][T18400] veth0_macvtap: entered promiscuous mode [ 633.687925][ T5256] 8021q: adding VLAN 0 to HW filter on device eth7 [ 633.844995][ T4161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.888456][T18425] veth1_vlan: entered promiscuous mode [ 633.889540][T18400] veth1_macvtap: entered promiscuous mode [ 633.890705][T18411] veth1_vlan: entered promiscuous mode [ 633.897217][T18415] veth1_vlan: entered promiscuous mode [ 633.926876][T18420] veth0_vlan: entered promiscuous mode [ 633.948917][T18400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.961650][T18420] veth1_vlan: entered promiscuous mode [ 633.966478][T18400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.000941][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.012911][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.016689][T18425] veth0_macvtap: entered promiscuous mode [ 634.018644][T18411] veth0_macvtap: entered promiscuous mode [ 634.021228][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.030026][ T4040] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.033118][T18415] veth0_macvtap: entered promiscuous mode [ 634.038126][T18425] veth1_macvtap: entered promiscuous mode [ 634.041907][T18411] veth1_macvtap: entered promiscuous mode [ 634.077895][T18415] veth1_macvtap: entered promiscuous mode [ 634.215219][T18420] veth0_macvtap: entered promiscuous mode [ 634.228763][T18425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.247816][T18411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.265125][T18415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.278149][T18420] veth1_macvtap: entered promiscuous mode [ 634.297596][T18425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.302166][T18411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.327803][T18415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.359950][ T4040] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.360096][ T2980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.360113][ T2980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.371022][ T4040] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.375987][ T4040] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.386750][ T4040] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.394207][ T4040] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.409001][ T4040] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.410336][T18420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.459070][ T4040] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.655293][ T4161] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.696273][ T4040] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.697652][ T4144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.697672][ T4144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.737306][ T5256] 8021q: adding VLAN 0 to HW filter on device eth8 [ 634.738120][ T4040] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.740384][T18420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.746047][ T4040] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.816539][ T4040] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.856494][ T4040] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.015049][ T4161] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.160133][ T4040] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.315135][ T4161] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.343989][ T4040] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.349968][ T4040] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.356958][ T4040] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.390060][ T4040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.390080][ T4040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.595951][ T4161] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.634756][ T4040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.634781][ T4040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.652326][ T4040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.655394][ T4040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.681978][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.681996][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.743169][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.743192][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.808367][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.808391][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.881615][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.881639][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.002711][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.002734][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.012469][T18744] __nla_validate_parse: 7 callbacks suppressed [ 636.012489][T18744] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4358'. [ 636.257748][ T4161] bridge_slave_1: left allmulticast mode [ 636.257852][ T4161] bridge_slave_1: left promiscuous mode [ 636.258027][ T4161] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.404467][T18764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4361'. [ 636.425942][ T4161] bridge_slave_0: left allmulticast mode [ 636.425972][ T4161] bridge_slave_0: left promiscuous mode [ 636.426182][ T4161] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.723920][ T4161] bridge_slave_1: left allmulticast mode [ 636.723941][ T4161] bridge_slave_1: left promiscuous mode [ 636.724058][ T4161] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.856299][ T4161] bridge_slave_0: left allmulticast mode [ 636.856331][ T4161] bridge_slave_0: left promiscuous mode [ 636.856497][ T4161] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.114011][ T4161] bridge_slave_1: left allmulticast mode [ 637.114033][ T4161] bridge_slave_1: left promiscuous mode [ 637.114171][ T4161] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.215330][ T4161] bridge_slave_0: left allmulticast mode [ 637.215361][ T4161] bridge_slave_0: left promiscuous mode [ 637.215522][ T4161] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.434738][ T4161] bridge_slave_1: left allmulticast mode [ 637.434758][ T4161] bridge_slave_1: left promiscuous mode [ 637.434862][ T4161] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.610047][ T4161] bridge_slave_0: left allmulticast mode [ 637.610077][ T4161] bridge_slave_0: left promiscuous mode [ 637.610238][ T4161] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.660887][T18778] netlink: 'syz.5.4366': attribute type 39 has an invalid length. [ 638.634170][ T4161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.714573][ T4161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.736265][ T4161] bond0 (unregistering): Released all slaves [ 639.194138][ T4161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.254234][ T4161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.275226][ T4161] bond0 (unregistering): Released all slaves [ 639.655213][ T4161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.714625][ T4161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.755026][ T4161] bond0 (unregistering): Released all slaves [ 640.144135][ T4161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.204825][ T4161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.245838][ T4161] bond0 (unregistering): Released all slaves [ 640.368248][T18764] bond0: option arp_all_targets: invalid value (18446744071564623876) [ 640.369422][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 641.155172][ T4161] tipc: Left network mode [ 641.552341][T18846] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4378'. [ 641.552378][T18846] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4378'. [ 641.594448][ T4075] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.595714][ T5256] 8021q: adding VLAN 0 to HW filter on device eth10 [ 641.598152][ T4075] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.599631][ T4075] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.600011][ T4075] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.767916][T18853] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4379'. [ 642.114796][T18853] hsr_slave_0: left promiscuous mode [ 642.157366][T18853] hsr_slave_1: left promiscuous mode [ 642.260502][T18888] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4383'. [ 642.775262][T18885] syzkaller0: entered promiscuous mode [ 642.775293][T18885] syzkaller0: entered allmulticast mode [ 642.809083][T18911] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4388'. [ 642.919915][T18916] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4388'. [ 643.086906][ T5256] 8021q: adding VLAN 0 to HW filter on device eth11 [ 651.449153][T18940] syzkaller1: entered promiscuous mode [ 651.449180][T18940] syzkaller1: entered allmulticast mode [ 651.450826][T18943] syzkaller0: entered promiscuous mode [ 651.450840][T18943] syzkaller0: entered allmulticast mode [ 651.613263][T18974] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4403'. [ 651.729535][T18976] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4403'. [ 653.713769][ T5809] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 653.867698][ T5809] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 653.867751][ T5809] usb 8-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 653.867777][ T5809] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.871504][ T5809] usb 8-1: config 0 descriptor?? [ 653.872216][T19040] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 654.077059][T19040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.077388][T19040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.175806][ T5709] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 654.281684][T19040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.282808][T19040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.306751][T19040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.307105][T19040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.323801][ T5709] usb 6-1: Using ep0 maxpacket: 8 [ 654.334719][ T5709] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.348412][ T5709] usb 6-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 654.348446][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.348468][ T5709] usb 6-1: Product: syz [ 654.348484][ T5709] usb 6-1: Manufacturer: syz [ 654.348500][ T5709] usb 6-1: SerialNumber: syz [ 654.352335][ T5709] usb 6-1: config 0 descriptor?? [ 654.396929][ T5709] gspca_main: t613-2.14.0 probing 17a1:0128 [ 654.513036][ T5809] usbhid 8-1:0.0: can't add hid device: -71 [ 654.513156][ T5809] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 654.532650][ T5809] usb 8-1: USB disconnect, device number 2 [ 654.566021][T19042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.568814][T19042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.773056][T19042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.773944][T19042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.904302][ T5709] gspca_t613: unknown sensor 0000 [ 654.904374][ T5709] t613 6-1:0.0: probe with driver t613 failed with error -22 [ 655.393852][T19042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.396211][T19042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.399210][T19042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.399550][T19042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.476122][ T5809] usb 6-1: USB disconnect, device number 2 [ 655.614786][T19062] syz.9.4430 (19062) used greatest stack depth: 17552 bytes left [ 658.503496][T19072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 661.511942][T19104] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4441'. [ 661.555488][ T59] block nbd0: Receive control failed (result -107) [ 662.051956][T19122] netlink: 1688 bytes leftover after parsing attributes in process `syz.7.4447'. [ 667.954880][T19095] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 667.960197][T19095] syzkaller0: entered promiscuous mode [ 667.960214][T19095] syzkaller0: entered allmulticast mode [ 668.196192][T19181] bridge_slave_0: left allmulticast mode [ 668.196223][T19181] bridge_slave_0: left promiscuous mode [ 668.196421][T19181] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.359388][T19181] bridge_slave_1: left allmulticast mode [ 668.359416][T19181] bridge_slave_1: left promiscuous mode [ 668.359581][T19181] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.623476][T19207] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4466'. [ 668.696407][T19181] bond0: (slave bond_slave_0): Releasing backup interface [ 668.775171][T19181] bond0: (slave bond_slave_1): Releasing backup interface [ 668.858003][T19181] team0: Port device team_slave_0 removed [ 668.897646][T19181] team0: Port device team_slave_1 removed [ 668.899625][T19181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.899649][T19181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.935608][T19181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.935634][T19181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.398890][T19212] bridge_slave_0: left allmulticast mode [ 669.398921][T19212] bridge_slave_0: left promiscuous mode [ 669.399192][T19212] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.555514][T19212] bridge_slave_1: left allmulticast mode [ 669.555534][T19212] bridge_slave_1: left promiscuous mode [ 669.555629][T19212] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.724382][T19212] bond0: (slave bond_slave_0): Releasing backup interface [ 669.806495][T19212] bond0: (slave bond_slave_1): Releasing backup interface [ 669.888378][T19212] team0: Port device team_slave_0 removed [ 669.928969][T19212] team0: Port device team_slave_1 removed [ 669.934324][T19212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.934359][T19212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.964985][T19212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.965003][T19212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.015621][T19212] net_ratelimit: 30 callbacks suppressed [ 670.015638][T19212] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 670.102697][T19240] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4478'. [ 670.766470][ T5256] 8021q: adding VLAN 0 to HW filter on device eth12 [ 670.998667][T19287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4486'. [ 671.780823][T19303] syzkaller0: entered promiscuous mode [ 671.780851][T19303] syzkaller0: entered allmulticast mode [ 672.549907][T19353] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4504'. [ 672.582469][T19325] syzkaller1: entered promiscuous mode [ 672.582497][T19325] syzkaller1: entered allmulticast mode [ 672.623252][T19340] bridge_slave_0: left allmulticast mode [ 672.623283][T19340] bridge_slave_0: left promiscuous mode [ 672.623548][T19340] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.759537][T19340] bridge_slave_1: left allmulticast mode [ 672.759568][T19340] bridge_slave_1: left promiscuous mode [ 672.759721][T19340] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.954867][T19340] bond0: (slave bond_slave_0): Releasing backup interface [ 673.035034][T19340] bond0: (slave bond_slave_1): Releasing backup interface [ 673.116344][T19340] team0: Port device team_slave_0 removed [ 673.155873][T19340] team0: Port device team_slave_1 removed [ 673.156495][T19340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.156510][T19340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.195812][T19340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.195830][T19340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.235515][T19340] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 673.484886][T19379] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4510'. [ 673.499746][ T5256] 8021q: adding VLAN 0 to HW filter on device eth13 [ 673.605265][T19384] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4510'. [ 674.175694][ T4161] hsr_slave_0: left promiscuous mode [ 674.214808][ T4161] hsr_slave_1: left promiscuous mode [ 674.215543][ T4161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.215565][ T4161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.275739][ T4161] batman_adv: batadv0: Interface deactivated: €Â0Ûµz [ 674.275764][ T4161] batman_adv: batadv0: Removing interface: €Â0Ûµz [ 674.508825][ T4161] hsr_slave_0: left promiscuous mode [ 674.593832][ T4161] hsr_slave_1: left promiscuous mode [ 674.596334][ T4161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.596366][ T4161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.685899][ T4161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.685924][ T4161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.895315][T19436] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4527'. [ 674.896331][ T4161] hsr_slave_0: left promiscuous mode [ 674.934892][ T4161] hsr_slave_1: left promiscuous mode [ 674.935550][ T4161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.935570][ T4161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.144375][ T4161] hsr_slave_0: left promiscuous mode [ 675.184485][ T4161] hsr_slave_1: left promiscuous mode [ 675.186529][ T4161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.186552][ T4161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.215736][ T4161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.215759][ T4161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.295333][ T4161] veth1_macvtap: left promiscuous mode [ 675.295397][ T4161] veth0_macvtap: left promiscuous mode [ 675.295531][ T4161] veth1_vlan: left promiscuous mode [ 675.295625][ T4161] veth0_vlan: left promiscuous mode [ 675.413976][ T4161] veth1_macvtap: left promiscuous mode [ 675.414041][ T4161] veth0_macvtap: left promiscuous mode [ 675.414170][ T4161] veth1_vlan: left promiscuous mode [ 675.414315][ T4161] veth0_vlan: left promiscuous mode [ 675.573873][ T4161] veth1_macvtap: left promiscuous mode [ 675.573913][ T4161] veth0_macvtap: left promiscuous mode [ 675.573992][ T4161] veth1_vlan: left promiscuous mode [ 675.574045][ T4161] veth0_vlan: left promiscuous mode [ 675.733927][ T4161] veth1_macvtap: left promiscuous mode [ 675.733996][ T4161] veth0_macvtap: left promiscuous mode [ 675.734143][ T4161] veth1_vlan: left promiscuous mode [ 675.734238][ T4161] veth0_vlan: left promiscuous mode [ 676.404382][ T4161] team0 (unregistering): Port device team_slave_1 removed [ 676.444069][ T4161] team0 (unregistering): Port device team_slave_0 removed [ 676.934763][ T4161] team0 (unregistering): Port device team_slave_1 removed [ 676.977202][ T4161] team0 (unregistering): Port device team_slave_0 removed [ 677.334823][ T4161] team0 (unregistering): Port device team_slave_1 removed [ 677.354299][ T4161] team0 (unregistering): Port device team_slave_0 removed [ 677.804700][ T4161] team0 (unregistering): Port device team_slave_1 removed [ 677.844590][ T4161] team0 (unregistering): Port device team_slave_0 removed [ 677.915469][T19396] syzkaller0: entered promiscuous mode [ 677.915499][T19396] syzkaller0: entered allmulticast mode [ 677.917808][T19400] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 677.919762][T19402] tipc: Started in network mode [ 677.919783][T19402] tipc: Node identity 8ae7ad3ab2d2, cluster identity 4711 [ 677.919866][T19402] tipc: Enabled bearer , priority 0 [ 678.023948][T19392] tipc: Resetting bearer [ 678.146307][T19392] tipc: Disabling bearer [ 678.390942][T19472] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.4542'. [ 679.348481][T19517] bond1: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 679.348695][T19517] bond1: entered allmulticast mode [ 679.392323][T19520] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.4555'. [ 679.459868][T19526] tipc: Enabled bearer , priority 0 [ 679.460686][T19526] syzkaller0: entered promiscuous mode [ 679.460709][T19526] syzkaller0: entered allmulticast mode [ 679.489819][T19526] tipc: Resetting bearer [ 679.526712][T19525] tipc: Resetting bearer [ 679.644427][T19525] tipc: Disabling bearer [ 679.932904][T19531] syzkaller0: entered promiscuous mode [ 679.932933][T19531] syzkaller0: entered allmulticast mode [ 680.218560][T19561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4566'. [ 680.247245][T19564] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4567'. [ 680.247278][T19564] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4567'. [ 688.174402][T19551] €Â0Ûµz: renamed from batadv_slave_1 (while UP) [ 688.315633][T19580] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 688.565120][T19601] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4578'. [ 689.356188][T19639] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 689.406430][ T5256] 8021q: adding VLAN 0 to HW filter on device eth14 [ 689.428168][ T36] audit: type=1804 audit(1781795221.366:2): pid=19647 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.4591" name="/newroot/39/memory.events" dev="tmpfs" ino=217 res=1 errno=0 [ 689.428216][ T36] audit: type=1800 audit(1781795221.366:3): pid=19647 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.4591" name="memory.events" dev="tmpfs" ino=217 res=0 errno=0 [ 689.485565][T19650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4592'. [ 689.485614][T19650] bond0: option arp_validate: invalid value (18446744071564623876) [ 689.887267][T19671] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4600'. [ 689.887301][T19671] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4600'. [ 689.941830][T19674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4601'. [ 690.748630][ T5256] 8021q: adding VLAN 0 to HW filter on device eth15 [ 690.895165][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.895218][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.311578][T19725] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4615'. [ 691.472936][T19741] syzkaller1: entered promiscuous mode [ 691.472964][T19741] syzkaller1: entered allmulticast mode [ 691.646613][ T5256] 8021q: adding VLAN 0 to HW filter on device eth16 [ 691.790258][T19755] bridge_slave_0: left allmulticast mode [ 691.790289][T19755] bridge_slave_0: left promiscuous mode [ 691.790487][T19755] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.957554][T19755] bridge_slave_1: left allmulticast mode [ 691.957585][T19755] bridge_slave_1: left promiscuous mode [ 691.957736][T19755] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.158489][T19755] bond0: (slave bond_slave_0): Releasing backup interface [ 692.234457][T19755] bond0: (slave bond_slave_1): Releasing backup interface [ 692.319485][T19755] team0: Port device team_slave_0 removed [ 692.362537][T19755] team0: Port device team_slave_1 removed [ 692.363246][T19755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.363268][T19755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.415916][T19755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.415941][T19755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.465299][T19755] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 692.524722][T19757] team0: Failed to send port change of device syz_tun via netlink (err -105) [ 692.525887][T19757] team0: Failed to send options change via netlink (err -105) [ 692.525909][T19757] team0: Port device syz_tun added [ 693.119870][T19813] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4636'. [ 693.119906][T19813] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4636'. [ 693.553181][ T5256] 8021q: adding VLAN 0 to HW filter on device eth17 [ 693.873806][T19860] netlink: 'syz.7.4647': attribute type 39 has an invalid length. [ 694.064390][T19860] team0: Port device syz_tun removed [ 694.386155][T19865] €Â0: renamed from batadv_slave_1 (while UP) [ 694.430795][ T5256] 8021q: adding VLAN 0 to HW filter on device eth18 [ 694.539614][T19887] syzkaller1: entered promiscuous mode [ 694.539642][T19887] syzkaller1: entered allmulticast mode [ 694.879576][ T5256] 8021q: adding VLAN 0 to HW filter on device eth19 [ 695.367486][ T5256] 8021q: adding VLAN 0 to HW filter on device eth20 [ 696.154817][T19971] syzkaller1: entered promiscuous mode [ 696.154845][T19971] syzkaller1: entered allmulticast mode [ 696.157080][T19971] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 696.255714][T19976] bridge_slave_0: left allmulticast mode [ 696.255748][T19976] bridge_slave_0: left promiscuous mode [ 696.256233][T19976] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.443369][T19976] bridge_slave_1: left allmulticast mode [ 696.443399][T19976] bridge_slave_1: left promiscuous mode [ 696.445245][T19976] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.644802][T19976] bond0: (slave bond_slave_0): Releasing backup interface [ 696.725177][T19976] bond0: (slave bond_slave_1): Releasing backup interface [ 696.810764][T19976] team0: Port device team_slave_0 removed [ 696.848061][T19976] team0: Port device team_slave_1 removed [ 696.849150][T19976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.849176][T19976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.898977][T19976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.899002][T19976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.947283][T19976] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 697.342231][T20023] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4674'. [ 697.521067][T20032] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4678'. [ 697.604551][T20039] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4678'. [ 698.156615][T20068] bond1: Unable to set down delay as MII monitoring is disabled [ 698.204570][T20068] bond1 (unregistering): Released all slaves [ 698.403670][ T5710] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 698.440004][T20082] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 698.565352][ T5710] usb 9-1: config 5 has an invalid interface number: 123 but max is 0 [ 698.565383][ T5710] usb 9-1: config 5 has no interface number 0 [ 698.565424][ T5710] usb 9-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 698.565453][ T5710] usb 9-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 698.565479][ T5710] usb 9-1: config 5 interface 123 has no altsetting 0 [ 698.568218][ T5710] usb 9-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 698.568248][ T5710] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.568270][ T5710] usb 9-1: Product: syz [ 698.568286][ T5710] usb 9-1: Manufacturer: syz [ 698.568302][ T5710] usb 9-1: SerialNumber: syz [ 698.636208][T20074] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 698.889989][T20088] syz.6.4694 (20088) used greatest stack depth: 17136 bytes left [ 699.060878][T20074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.062728][T20074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.080128][T20074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.081651][T20074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.087657][T20074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.087956][T20074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.096942][T20074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.097271][T20074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.357075][ T5710] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 699.360792][ T5710] usb 9-1: USB disconnect, device number 2 [ 699.567076][T20127] €Â0Ûµz: renamed from batadv_slave_1 (while UP) [ 699.667473][T20131] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4708'. [ 699.751729][T20133] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4708'. [ 699.835107][T20137] netlink: 120 bytes leftover after parsing attributes in process `syz.5.4710'. [ 700.273758][ T5605] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 700.346638][T20155] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4716'. [ 700.433790][ T5605] usb 9-1: Using ep0 maxpacket: 32 [ 700.437378][ T5605] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 700.437409][ T5605] usb 9-1: config 0 has no interface number 0 [ 700.465567][ T5605] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 700.465601][ T5605] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.465623][ T5605] usb 9-1: Product: syz [ 700.465638][ T5605] usb 9-1: Manufacturer: syz [ 700.465653][ T5605] usb 9-1: SerialNumber: syz [ 700.470814][ T5605] usb 9-1: config 0 descriptor?? [ 700.911973][ T5605] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 700.912009][ T5605] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 700.984935][T20177] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 701.328135][T20195] tipc: Started in network mode [ 701.328169][T20195] tipc: Node identity 2addb66cd6d4, cluster identity 4711 [ 701.328311][T20195] tipc: Enabled bearer , priority 0 [ 701.329130][T20195] syzkaller0: entered promiscuous mode [ 701.329153][T20195] syzkaller0: entered allmulticast mode [ 701.380849][T20195] tipc: Resetting bearer [ 701.404024][T20193] tipc: Resetting bearer [ 701.524342][T20193] tipc: Disabling bearer [ 701.664199][T20204] €Â0Ûµz: renamed from batadv_slave_1 (while UP) [ 702.123875][ T5605] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 702.124104][ T5605] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -61 [ 703.310707][T20285] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4749'. [ 703.446974][T14753] usb 9-1: USB disconnect, device number 3 [ 703.556083][T20294] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 704.768786][T20341] syzkaller0: entered promiscuous mode [ 704.768811][T20341] syzkaller0: entered allmulticast mode [ 706.570017][T20300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 707.066858][T20418] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4789'. [ 708.169602][T20477] nbd: must specify at least one socket [ 709.932491][T20545] geneve2: entered promiscuous mode [ 710.293375][T20564] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 710.867209][ T36] audit: type=1804 audit(1781795242.806:4): pid=20584 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.9.4827" name="/newroot/93/memory.events" dev="tmpfs" ino=488 res=1 errno=0 [ 710.869465][ T36] audit: type=1800 audit(1781795242.806:5): pid=20584 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.4827" name="memory.events" dev="tmpfs" ino=488 res=0 errno=0 [ 711.669075][T20622] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 712.238421][T20647] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4840'. [ 712.238447][T20647] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4840'. [ 712.239716][T20647] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4840'. [ 712.239737][T20647] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4840'. [ 713.105298][T20693] Driver unsupported XDP return value 0 on prog (id 352) dev N/A, expect packet loss! [ 713.877818][T20721] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 715.218973][T20764] netlink: 'syz.6.4869': attribute type 12 has an invalid length. [ 715.218995][T20764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4869'. [ 715.777357][T20785] netlink: 'syz.7.4876': attribute type 39 has an invalid length. [ 716.422461][T20818] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4886'. [ 716.422477][T20818] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4886'. [ 716.467417][T20818] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4886'. [ 716.467442][T20818] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4886'. [ 716.779315][T20832] netlink: 'syz.5.4890': attribute type 39 has an invalid length. [ 717.914165][ T5684] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 718.070753][ T5684] usb 9-1: unable to get BOS descriptor or descriptor too short [ 718.091596][ T5684] usb 9-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 718.091634][ T5684] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.091656][ T5684] usb 9-1: Product: syz [ 718.091671][ T5684] usb 9-1: Manufacturer: syz [ 718.091687][ T5684] usb 9-1: SerialNumber: syz [ 718.109986][T20905] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4910'. [ 718.183870][T20910] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4910'. [ 718.382937][T20878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.383280][T20878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.409531][T20878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.412426][T20878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.426682][T20878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.426981][T20878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.468563][T20878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.484666][T20878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.625356][T20919] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4913'. [ 718.991481][ T5684] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 718.991531][ T5684] usb 9-1: MIDIStreaming interface descriptor not found [ 719.076917][ T5684] usb 9-1: USB disconnect, device number 4 [ 719.151493][T19610] udevd[19610]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 720.055377][T20976] syzkaller0: entered promiscuous mode [ 720.055403][T20976] syzkaller0: entered allmulticast mode [ 722.014183][T21086] syzkaller1: entered promiscuous mode [ 722.014209][T21086] syzkaller1: entered allmulticast mode [ 722.386895][T21102] batman_adv: batadv0: Adding interface: dummy0 [ 722.386916][T21102] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.387212][T21102] batman_adv: batadv0: Interface activated: dummy0 [ 722.481860][T21107] batadv0: mtu less than device minimum [ 722.490766][T21107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 722.492070][T21107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 722.517343][T21107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 722.518614][T21107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 722.519852][T21107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 722.521078][T21107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 722.522317][T21107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 722.576788][T21107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 722.578202][T21107] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 722.874384][ T5601] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 723.028336][ T5601] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 723.028390][ T5601] usb 9-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 723.028415][ T5601] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.034057][ T5601] usb 9-1: config 0 descriptor?? [ 723.034727][T21104] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 723.261111][T21104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.262680][T21104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.510434][ T5601] hid_parser_main: 458 callbacks suppressed [ 723.510463][ T5601] logitech-djreceiver 0003:046D:C71F.004B: unknown main item tag 0x0 [ 723.510493][ T5601] logitech-djreceiver 0003:046D:C71F.004B: unknown main item tag 0x0 [ 723.510548][ T5601] logitech-djreceiver 0003:046D:C71F.004B: unknown main item tag 0x0 [ 723.510576][ T5601] logitech-djreceiver 0003:046D:C71F.004B: unknown main item tag 0x0 [ 723.510602][ T5601] logitech-djreceiver 0003:046D:C71F.004B: unknown main item tag 0x0 [ 723.510628][ T5601] logitech-djreceiver 0003:046D:C71F.004B: unknown main item tag 0x0 [ 723.510685][ T5601] logitech-djreceiver 0003:046D:C71F.004B: unknown main item tag 0x0 [ 723.510712][ T5601] logitech-djreceiver 0003:046D:C71F.004B: unknown main item tag 0x0 [ 723.510738][ T5601] logitech-djreceiver 0003:046D:C71F.004B: unknown main item tag 0x0 [ 723.510764][ T5601] logitech-djreceiver 0003:046D:C71F.004B: unknown main item tag 0x0 [ 723.534388][ T5601] logitech-djreceiver 0003:046D:C71F.004B: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.8-1/input0 [ 723.751044][T21104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.751400][T21104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.758786][T21104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.759089][T21104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.965835][T14753] usb 9-1: USB disconnect, device number 5 [ 724.023447][T21138] batman_adv: batadv0: Interface deactivated: dummy0 [ 724.023477][T21138] batman_adv: batadv0: Removing interface: dummy0 [ 724.259949][T21152] syzkaller0: entered promiscuous mode [ 724.259967][T21152] syzkaller0: entered allmulticast mode [ 724.443726][T14753] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 724.473707][ T5601] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 724.599147][T14753] usb 7-1: unable to get BOS descriptor or descriptor too short [ 724.601950][T14753] usb 7-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 724.601983][T14753] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.602004][T14753] usb 7-1: Product: syz [ 724.602020][T14753] usb 7-1: Manufacturer: syz [ 724.602035][T14753] usb 7-1: SerialNumber: syz [ 724.625651][ T5601] usb 6-1: config 5 has an invalid interface number: 123 but max is 0 [ 724.625680][ T5601] usb 6-1: config 5 has no interface number 0 [ 724.625710][ T5601] usb 6-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 724.625737][ T5601] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 724.625763][ T5601] usb 6-1: config 5 interface 123 has no altsetting 0 [ 724.632339][ T5601] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 724.632371][ T5601] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.632390][ T5601] usb 6-1: Product: syz [ 724.632404][ T5601] usb 6-1: Manufacturer: syz [ 724.632758][ T5601] usb 6-1: SerialNumber: syz [ 724.668386][T21156] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 724.866498][T21154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.867474][T21154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.876553][T21154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.878994][T21154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.888875][T21154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.889985][T21154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.912880][T21154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.915417][T21154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.041593][T14753] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 725.041641][T14753] usb 7-1: MIDIStreaming interface descriptor not found [ 725.131084][T21156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.132784][T21156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.143548][T14753] usb 7-1: USB disconnect, device number 2 [ 725.147577][T21156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.148935][T21156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.160238][T21156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.161773][T21156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.184679][T21156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.190072][T21156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.194031][ T9] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 725.245983][T19610] udevd[19610]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 725.345950][ T9] usb 8-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 725.345997][ T9] usb 8-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 725.348125][ T9] usb 8-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 725.348157][ T9] usb 8-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 725.348181][ T9] usb 8-1: Manufacturer: syz [ 725.348396][ T9] usb 8-1: SerialNumber: syz [ 725.412700][T21181] €Â0Ûµz: renamed from batadv_slave_1 (while UP) [ 725.453359][ T5601] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 725.458839][ T5601] usb 6-1: USB disconnect, device number 3 [ 725.468468][T19611] udevd[19611]: setting owner of /dev/bus/usb/006/003 to uid=0, gid=0 failed: No such file or directory [ 725.589731][ T9] usbhid 8-1:36.0: couldn't find an input interrupt endpoint [ 725.596484][ T9] usb 8-1: USB disconnect, device number 3 [ 725.812894][T21191] syzkaller0: entered promiscuous mode [ 725.812911][T21191] syzkaller0: entered allmulticast mode [ 726.058614][ T5824] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 726.078800][T21196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4987'. [ 726.078838][T21196] netlink: 'syz.5.4987': attribute type 2 has an invalid length. [ 726.207900][ T5824] usb 8-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 726.207950][ T5824] usb 8-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 726.210954][ T5824] usb 8-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 726.210985][ T5824] usb 8-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 726.211007][ T5824] usb 8-1: Manufacturer: syz [ 726.211023][ T5824] usb 8-1: SerialNumber: syz [ 726.446241][ T5824] usbhid 8-1:36.0: couldn't find an input interrupt endpoint [ 726.458539][ T5824] usb 8-1: USB disconnect, device number 4 [ 726.885176][ T5824] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 726.963092][T21225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4998'. [ 726.963128][T21225] netlink: 'syz.6.4998': attribute type 2 has an invalid length. [ 727.041930][ T5824] usb 8-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 727.041978][ T5824] usb 8-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 727.051220][ T5824] usb 8-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 727.051253][ T5824] usb 8-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 727.051275][ T5824] usb 8-1: Manufacturer: syz [ 727.051289][ T5824] usb 8-1: SerialNumber: syz [ 727.119605][T21228] syzkaller0: entered promiscuous mode [ 727.119631][T21228] syzkaller0: entered allmulticast mode [ 727.490726][T21176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.502880][T21176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.633330][T21240] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5005'. [ 727.719041][T21176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.719357][T21176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.751177][ T5824] usbhid 8-1:36.0: couldn't find an input interrupt endpoint [ 727.977026][T21176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.979644][T21176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.170144][T21258] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5012'. [ 728.233416][ T5709] usb 8-1: USB disconnect, device number 5 [ 728.455423][T21264] net_ratelimit: 11 callbacks suppressed [ 728.455445][T21264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.925608][T21299] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5026'. [ 729.275314][T21307] netlink: 120 bytes leftover after parsing attributes in process `syz.8.5030'. [ 729.999504][T21319] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5034'. [ 730.082209][T21321] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5034'. [ 733.407658][T21340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 734.145393][T21393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 734.193814][T21393] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 735.073069][T21440] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5072'. [ 735.320334][T21455] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5082'. [ 735.458318][T21462] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5082'. [ 737.135781][T21532] tipc: Enabled bearer , priority 0 [ 737.136563][T21532] syzkaller0: entered promiscuous mode [ 737.136602][T21532] syzkaller0: entered allmulticast mode [ 737.140551][T21532] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 737.192173][T21532] tipc: Resetting bearer [ 737.244864][T21531] tipc: Resetting bearer [ 737.366319][T21531] tipc: Disabling bearer [ 737.445000][T21555] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5115'. [ 737.497905][T21560] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5115'. [ 738.460587][ T36] audit: type=1800 audit(1781795270.396:6): pid=21583 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.5125" name="memory.events" dev="tmpfs" ino=739 res=0 errno=0 [ 738.980166][ T36] audit: type=1800 audit(1781795270.916:7): pid=21603 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.5133" name="memory.events" dev="tmpfs" ino=789 res=0 errno=0 [ 739.053762][T21526] Bluetooth: hci7: command 0x0406 tx timeout [ 739.053816][T21526] Bluetooth: hci6: command 0x0406 tx timeout [ 739.053842][T21526] Bluetooth: hci1: command 0x0406 tx timeout [ 739.063750][T21525] Bluetooth: hci4: command 0x0406 tx timeout [ 740.233166][T21642] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5144'. [ 740.456820][T21648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 740.960279][T21657] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5152'. [ 741.056007][T21659] 8021q: adding VLAN 0 to HW filter on device bond2 [ 743.493681][ T9] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 743.645179][ T9] usb 10-1: config 5 has an invalid interface number: 123 but max is 0 [ 743.645212][ T9] usb 10-1: config 5 has no interface number 0 [ 743.645247][ T9] usb 10-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 743.645278][ T9] usb 10-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 743.645307][ T9] usb 10-1: config 5 interface 123 has no altsetting 0 [ 743.648218][ T9] usb 10-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 743.648248][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.648271][ T9] usb 10-1: Product: syz [ 743.648287][ T9] usb 10-1: Manufacturer: syz [ 743.648302][ T9] usb 10-1: SerialNumber: syz [ 743.662406][T21725] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 743.916101][T21738] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5180'. [ 743.971044][T21742] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5180'. [ 744.038697][T21743] syzkaller1: entered promiscuous mode [ 744.038726][T21743] syzkaller1: entered allmulticast mode [ 744.098519][T21725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.099431][T21725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.121513][T21725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.122392][T21725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.131587][T21725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.133106][T21725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.147687][T21725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.150684][T21725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.463668][ T9] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 744.467895][ T9] usb 10-1: USB disconnect, device number 2 [ 745.191000][T21778] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5192'. [ 745.527318][T21790] syzkaller1: entered promiscuous mode [ 745.527344][T21790] syzkaller1: entered allmulticast mode [ 745.956008][T21806] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5204'. [ 746.493002][T21836] netlink: 'syz.5.5216': attribute type 1 has an invalid length. [ 746.570587][T21836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 746.577990][T21842] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 746.887922][T21861] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5225'. [ 746.977118][T21863] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5225'. [ 747.696609][T21887] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5236'. [ 748.185175][T21906] syzkaller1: entered promiscuous mode [ 748.185202][T21906] syzkaller1: entered allmulticast mode [ 749.264037][T21928] syzkaller1: entered promiscuous mode [ 749.264066][T21928] syzkaller1: entered allmulticast mode [ 749.549766][T21966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 749.867341][T21976] netlink: 120 bytes leftover after parsing attributes in process `syz.8.5264'. [ 750.203696][ T5605] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 750.361284][ T5605] usb 10-1: config 5 has an invalid interface number: 123 but max is 0 [ 750.361318][ T5605] usb 10-1: config 5 has no interface number 0 [ 750.361363][ T5605] usb 10-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 750.361395][ T5605] usb 10-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 750.361425][ T5605] usb 10-1: config 5 interface 123 has no altsetting 0 [ 750.367021][ T5605] usb 10-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 750.367052][ T5605] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.367071][ T5605] usb 10-1: Product: syz [ 750.367085][ T5605] usb 10-1: Manufacturer: syz [ 750.367099][ T5605] usb 10-1: SerialNumber: syz [ 750.375864][T21983] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 750.818712][T21983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.823456][T21983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.836354][T21983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.840887][T21983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.852595][T21983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.854431][T21983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.865460][T21983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.867172][T21983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.913313][ T36] audit: type=1800 audit(1781795282.846:8): pid=21999 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.5273" name="memory.events" dev="tmpfs" ino=927 res=0 errno=0 [ 751.592323][T22026] netlink: 'syz.5.5283': attribute type 39 has an invalid length. [ 751.681192][T22028] netlink: 120 bytes leftover after parsing attributes in process `syz.5.5284'. [ 751.842813][T22036] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5288'. [ 752.023300][T22044] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5292'. [ 752.336976][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.337026][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.646055][T22057] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5298'. [ 753.008532][ T5605] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 753.019595][ T5605] usb 10-1: USB disconnect, device number 3 [ 753.998365][T22100] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5312'. [ 757.222491][T22219] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 759.532228][T22301] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 759.788057][T22298] syzkaller1: entered promiscuous mode [ 759.788084][T22298] syzkaller1: entered allmulticast mode [ 760.389740][T22341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5392'. [ 760.389768][T22341] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5392'. [ 760.576570][T22344] syzkaller0: entered promiscuous mode [ 760.576598][T22344] syzkaller0: entered allmulticast mode [ 760.691380][T22349] 8021q: adding VLAN 0 to HW filter on device bond2 [ 761.754272][T22370] netlink: 120 bytes leftover after parsing attributes in process `syz.9.5401'. [ 771.399105][T22451] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5428'. [ 771.618465][T22465] netlink: 'syz.9.5433': attribute type 1 has an invalid length. [ 771.850571][T22479] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5440'. [ 772.054972][T22490] sctp: [Deprecated]: syz.9.5445 (pid 22490) Use of struct sctp_assoc_value in delayed_ack socket option. [ 772.054972][T22490] Use struct sctp_sack_info instead [ 772.375109][T22514] netlink: 'syz.5.5455': attribute type 22 has an invalid length. [ 772.709378][T22535] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5467'. [ 773.592222][T22574] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.5485'. [ 773.607022][T22574] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.5485'. [ 773.608752][T22574] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.5485'. [ 773.692251][T22409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 774.340895][T22614] block nbd0: NBD_DISCONNECT [ 774.340932][T22614] block nbd0: Send disconnect failed -111 [ 774.340953][T22614] block nbd0: shutting down sockets [ 774.808512][T22638] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5518'. [ 774.901865][T22646] .¿: renamed from vlan0 (while UP) [ 775.516872][T22687] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.5542'. [ 775.519644][T22687] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.5542'. [ 775.520642][T22687] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.5542'. [ 776.890069][T22772] __nla_validate_parse: 4 callbacks suppressed [ 776.890091][T22772] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5584'. [ 776.968698][T22773] sctp: [Deprecated]: syz.8.5583 (pid 22773) Use of struct sctp_assoc_value in delayed_ack socket option. [ 776.968698][T22773] Use struct sctp_sack_info instead [ 777.128420][T22784] netlink: 88 bytes leftover after parsing attributes in process `syz.8.5589'. [ 777.755063][T22822] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5608'. [ 778.400185][T22847] sctp: [Deprecated]: syz.6.5620 (pid 22847) Use of struct sctp_assoc_value in delayed_ack socket option. [ 778.400185][T22847] Use struct sctp_sack_info instead [ 778.411402][T22848] netlink: 'syz.9.5619': attribute type 1 has an invalid length. [ 778.411427][T22848] netlink: 'syz.9.5619': attribute type 1 has an invalid length. [ 778.411440][T22848] netlink: 76 bytes leftover after parsing attributes in process `syz.9.5619'. [ 778.411456][T22848] netlink: 1 bytes leftover after parsing attributes in process `syz.9.5619'. [ 778.411471][T22848] netlink: 658 bytes leftover after parsing attributes in process `syz.9.5619'. [ 778.502032][T22851] netlink: 244 bytes leftover after parsing attributes in process `syz.6.5622'. [ 778.962531][T22879] netlink: 144 bytes leftover after parsing attributes in process `syz.8.5635'. [ 779.267046][T22893] sctp: [Deprecated]: syz.5.5643 (pid 22893) Use of struct sctp_assoc_value in delayed_ack socket option. [ 779.267046][T22893] Use struct sctp_sack_info instead [ 779.419054][T22905] netlink: 144 bytes leftover after parsing attributes in process `syz.8.5647'. [ 780.226346][T22961] netlink: 'syz.5.5676': attribute type 1 has an invalid length. [ 780.226371][T22961] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5676'. [ 780.226389][T22961] netlink: 'syz.5.5676': attribute type 1 has an invalid length. [ 781.176022][T23022] sctp: [Deprecated]: syz.8.5705 (pid 23022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 781.176022][T23022] Use struct sctp_sack_info instead [ 782.069526][T23070] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 782.255634][T23096] __nla_validate_parse: 4 callbacks suppressed [ 782.255656][T23096] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5741'. [ 782.905991][T23135] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5760'. [ 782.906021][T23135] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5760'. [ 783.289459][T23162] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5773'. [ 783.505282][T23173] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5777'. [ 783.505310][T23173] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5777'. [ 783.510816][T23174] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5779'. [ 783.743230][T23188] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5786'. [ 783.853101][T23195] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5791'. [ 783.853130][T23195] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5791'. [ 786.343782][T19278] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 786.493695][T19278] usb 7-1: Using ep0 maxpacket: 16 [ 786.502953][T19278] usb 7-1: unable to get BOS descriptor or descriptor too short [ 786.521240][T19278] usb 7-1: config 4 has an invalid interface number: 55 but max is 0 [ 786.521261][T19278] usb 7-1: config 4 has no interface number 0 [ 786.521278][T19278] usb 7-1: config 4 interface 55 has no altsetting 0 [ 786.546799][T19278] usb 7-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 786.546821][T19278] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.546833][T19278] usb 7-1: Product: syz [ 786.546846][T19278] usb 7-1: Manufacturer: syz [ 786.546855][T19278] usb 7-1: SerialNumber: syz [ 786.917533][T23371] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 787.108616][T19278] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 787.108686][T19278] gspca_mr97310a: reg write [21] error -22 [ 787.108738][T19278] mr97310a 7-1:4.55: probe with driver mr97310a failed with error -22 [ 787.112871][T19278] usb 7-1: USB disconnect, device number 3 [ 787.564409][T23397] __nla_validate_parse: 20 callbacks suppressed [ 787.564433][T23397] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5883'. [ 787.726906][T23403] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5887'. [ 788.000910][T23421] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5893'. [ 788.000940][T23421] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5893'. [ 788.000957][T23421] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5893'. [ 788.049444][ T36] audit: type=1326 audit(1781795319.986:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23415 comm="syz.9.5889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aecc9ce59 code=0x7ffc0000 [ 788.068423][ T36] audit: type=1326 audit(1781795319.996:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23415 comm="syz.9.5889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f7aecc9ce59 code=0x7ffc0000 [ 788.088935][ T36] audit: type=1326 audit(1781795320.016:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23415 comm="syz.9.5889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aecc9ce59 code=0x7ffc0000 [ 788.119945][ T36] audit: type=1326 audit(1781795320.046:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23415 comm="syz.9.5889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7aecc9ce59 code=0x7ffc0000 [ 788.204085][T23430] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5897'. [ 788.370234][ T36] audit: type=1326 audit(1781795320.306:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23415 comm="syz.9.5889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aecc9ce59 code=0x7ffc0000 [ 788.383097][ T36] audit: type=1326 audit(1781795320.306:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23415 comm="syz.9.5889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7aecc5d68e code=0x7ffc0000 [ 788.430722][ T36] audit: type=1326 audit(1781795320.366:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23415 comm="syz.9.5889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7aecc5d68e code=0x7ffc0000 [ 788.467354][ T36] audit: type=1326 audit(1781795320.396:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23415 comm="syz.9.5889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aecc9ce59 code=0x7ffc0000 [ 788.483999][ T36] audit: type=1326 audit(1781795320.406:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23415 comm="syz.9.5889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aecc9ce59 code=0x7ffc0000 [ 788.484046][ T36] audit: type=1326 audit(1781795320.416:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23415 comm="syz.9.5889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aecc9ce59 code=0x7ffc0000 [ 788.593189][T23431] mmap: syz.9.5889 (23431) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 788.726805][T23454] netlink: 176 bytes leftover after parsing attributes in process `syz.6.5907'. [ 789.035524][T23467] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5914'. [ 789.523733][T23492] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5926'. [ 789.523777][T23492] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5926'. [ 790.459894][T23550] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 792.038316][T23651] netlink: 'syz.9.6001': attribute type 1 has an invalid length. [ 792.038346][T23651] netlink: 'syz.9.6001': attribute type 1 has an invalid length. [ 792.420162][T23678] netlink: 'syz.9.6014': attribute type 1 has an invalid length. [ 792.420191][T23678] netlink: 'syz.9.6014': attribute type 1 has an invalid length. [ 792.580582][T23690] __nla_validate_parse: 17 callbacks suppressed [ 792.580606][T23690] netlink: 176 bytes leftover after parsing attributes in process `syz.6.6018'. [ 792.909385][ T59] Bluetooth: hci7: unexpected event for opcode 0x2039 [ 794.081856][T23763] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6053'. [ 794.081884][T23763] nbd: must specify an index to disconnect [ 794.971267][T23812] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6076'. [ 795.337278][T23840] netlink: 2 bytes leftover after parsing attributes in process `syz.8.6089'. [ 795.403662][ T5684] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 795.560480][T23855] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6096'. [ 795.572583][ T5684] usb 10-1: Using ep0 maxpacket: 16 [ 795.580673][ T5684] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.580709][ T5684] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.580735][ T5684] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 795.580787][ T5684] usb 10-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 795.580813][ T5684] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.641860][ T5684] usb 10-1: config 0 descriptor?? [ 795.955411][T23866] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 796.026785][T23866] kvm: pic: non byte read [ 796.027997][T23866] kvm: pic: level sensitive irq not supported [ 796.028136][T23866] kvm: pic: non byte read [ 796.061601][T23880] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6106'. [ 796.079167][ T5684] usbhid 10-1:0.0: can't add hid device: -71 [ 796.079516][ T5684] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 796.099509][ T5684] usb 10-1: USB disconnect, device number 4 [ 796.394192][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 796.543699][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 796.545527][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 796.545560][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 796.545583][ T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 796.545600][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 796.545615][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 796.547511][ T10] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 796.547541][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.547562][ T10] usb 8-1: Product: syz [ 796.547576][ T10] usb 8-1: Manufacturer: syz [ 796.547591][ T10] usb 8-1: SerialNumber: syz [ 796.549634][ T10] usb 8-1: config 0 descriptor?? [ 796.558003][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input84 [ 796.865445][ T5684] usb 8-1: USB disconnect, device number 6 [ 797.086502][T23911] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6120'. [ 797.186681][T23919] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6124'. [ 797.522560][T23939] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6132'. [ 797.554315][T19278] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 797.705210][T19278] usb 7-1: Using ep0 maxpacket: 32 [ 797.736787][T19278] usb 7-1: unable to get BOS descriptor or descriptor too short [ 797.737568][T19278] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 797.737601][T19278] usb 7-1: can't read configurations, error -71 [ 797.974603][T23963] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6144'. [ 798.492704][T23992] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6157'. [ 798.655466][T24000] netlink: 'syz.7.6162': attribute type 1 has an invalid length. [ 798.655491][T24000] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6162'. [ 798.655507][T24000] netlink: 1 bytes leftover after parsing attributes in process `syz.7.6162'. [ 798.655522][T24000] netlink: 'syz.7.6162': attribute type 1 has an invalid length. [ 798.655537][T24000] netlink: 622 bytes leftover after parsing attributes in process `syz.7.6162'. [ 799.150060][T24029] netlink: 'syz.5.6175': attribute type 1 has an invalid length. [ 799.150086][T24029] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6175'. [ 799.150103][T24029] netlink: 1 bytes leftover after parsing attributes in process `syz.5.6175'. [ 799.150119][T24029] netlink: 'syz.5.6175': attribute type 1 has an invalid length. [ 799.150135][T24029] netlink: 622 bytes leftover after parsing attributes in process `syz.5.6175'. [ 799.198455][T24031] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6177'. [ 803.845280][T24121] netlink: 176 bytes leftover after parsing attributes in process `syz.6.6216'. [ 803.906490][T24122] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6214'. [ 804.034168][T24123] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6214'. [ 804.203581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 804.409008][T24130] netlink: 'syz.9.6219': attribute type 1 has an invalid length. [ 804.409027][T24130] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6219'. [ 804.409038][T24130] netlink: 1 bytes leftover after parsing attributes in process `syz.9.6219'. [ 804.409046][T24130] netlink: 'syz.9.6219': attribute type 1 has an invalid length. [ 804.409055][T24130] netlink: 622 bytes leftover after parsing attributes in process `syz.9.6219'. [ 805.483260][T24147] netlink: 176 bytes leftover after parsing attributes in process `syz.6.6227'. [ 806.463590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 806.643602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 809.071797][T24190] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6243'. [ 811.493594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 813.013635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 813.343588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 813.463612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 813.710353][ T59] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 813.785061][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.785135][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.662303][T24224] netlink: 'syz.7.6256': attribute type 5 has an invalid length. [ 814.822172][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 814.822195][ T36] audit: type=1326 audit(1781795346.756:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24223 comm="syz.7.6256" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b0ce59 code=0x7ffc0000 [ 814.822240][ T36] audit: type=1326 audit(1781795346.756:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24223 comm="syz.7.6256" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b0ce59 code=0x7ffc0000 [ 818.607056][T21524] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 818.608806][T21524] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 818.609069][T21524] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 818.611385][T21524] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 818.611905][T21524] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 820.654068][ T59] Bluetooth: hci0: command tx timeout [ 822.098197][T24273] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.098361][T24273] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.098548][T24273] bridge_slave_0: entered allmulticast mode [ 822.109790][T24273] bridge_slave_0: entered promiscuous mode [ 822.137353][T24273] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.137439][T24273] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.137614][T24273] bridge_slave_1: entered allmulticast mode [ 822.140639][T24273] bridge_slave_1: entered promiscuous mode [ 822.210310][T24273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.213242][T24273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.296185][T24273] team0: Port device team_slave_0 added [ 822.298523][T24273] team0: Port device team_slave_1 added [ 822.421391][T24273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.421411][T24273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.421440][T24273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.426611][T24273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.426627][T24273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.426653][T24273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.584434][T24273] hsr_slave_0: entered promiscuous mode [ 822.585343][T24273] hsr_slave_1: entered promiscuous mode [ 822.586034][T24273] debugfs: 'hsr0' already exists in 'hsr' [ 822.586055][T24273] Cannot create hsr debugfs directory [ 822.733649][ T59] Bluetooth: hci0: command tx timeout [ 822.797882][T24339] tipc: Enabled bearer , priority 10 [ 823.094446][ T5824] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 823.249564][ T5824] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.249613][ T5824] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 823.249641][ T5824] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 823.249669][ T5824] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 823.249693][ T5824] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 823.251941][ T5824] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 823.251971][ T5824] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 823.251993][ T5824] usb 8-1: Product: syz [ 823.252009][ T5824] usb 8-1: Manufacturer: syz [ 823.252025][ T5824] usb 8-1: SerialNumber: syz [ 823.346828][ T5824] usb 8-1: config 0 descriptor?? [ 823.572532][ T5824] radio-si470x 8-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 823.572795][ T5824] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -5 [ 823.829061][ T5824] usb 8-1: USB disconnect, device number 7 [ 824.813645][ T59] Bluetooth: hci0: command tx timeout [ 825.553151][T21524] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 825.561190][T21524] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 825.562158][T21524] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 825.579506][T21524] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 825.583067][T21524] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 825.652859][ T5684] tipc: Node number set to 4228494956 [ 825.805537][T24376] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6305'. [ 825.805564][T24376] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6305'. [ 825.983450][T24384] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6306'. [ 826.549889][T24406] block device autoloading is deprecated and will be removed. [ 826.551910][T24403] bond3: option all_slaves_active: invalid value (8) [ 826.805980][T24403] bond3 (unregistering): Released all slaves [ 826.893671][T21524] Bluetooth: hci0: command tx timeout [ 827.613740][T21524] Bluetooth: hci2: command tx timeout [ 827.802392][T24369] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.802542][T24369] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.802699][T24369] bridge_slave_0: entered allmulticast mode [ 827.838628][T24369] bridge_slave_0: entered promiscuous mode [ 827.849094][T24369] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.849267][T24369] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.849453][T24369] bridge_slave_1: entered allmulticast mode [ 827.852570][T24369] bridge_slave_1: entered promiscuous mode [ 828.250537][T24369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.465109][T24369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.554118][T24369] team0: Port device team_slave_0 added [ 828.578595][T24369] team0: Port device team_slave_1 added [ 828.623273][T24369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.623294][T24369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.623323][T24369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.669917][T24369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.669938][T24369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.669969][T24369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.763044][T24369] hsr_slave_0: entered promiscuous mode [ 828.864227][T24369] hsr_slave_1: entered promiscuous mode [ 828.864858][T24369] debugfs: 'hsr0' already exists in 'hsr' [ 828.864878][T24369] Cannot create hsr debugfs directory [ 829.693735][T21524] Bluetooth: hci2: command tx timeout [ 831.639364][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 831.640660][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 831.640945][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 831.642367][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 831.642876][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 831.773818][T21524] Bluetooth: hci2: command tx timeout [ 832.358370][T24450] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.358541][T24450] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.358712][T24450] bridge_slave_0: entered allmulticast mode [ 832.360251][T24450] bridge_slave_0: entered promiscuous mode [ 832.362661][T24450] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.362804][T24450] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.363166][T24450] bridge_slave_1: entered allmulticast mode [ 832.421072][T24450] bridge_slave_1: entered promiscuous mode [ 832.455956][T24450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.459253][T24450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.502992][T24450] team0: Port device team_slave_0 added [ 832.515446][T24450] team0: Port device team_slave_1 added [ 832.553512][T24450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.553769][T24450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.553801][T24450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.555552][T24450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.555566][T24450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.555595][T24450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.705476][T24450] hsr_slave_0: entered promiscuous mode [ 832.706466][T24450] hsr_slave_1: entered promiscuous mode [ 832.707127][T24450] debugfs: 'hsr0' already exists in 'hsr' [ 832.707147][T24450] Cannot create hsr debugfs directory [ 833.693695][T21524] Bluetooth: hci3: command tx timeout [ 833.853954][T21524] Bluetooth: hci2: command tx timeout [ 835.773659][T21524] Bluetooth: hci3: command tx timeout [ 837.853918][T21524] Bluetooth: hci3: command tx timeout [ 839.933636][T21524] Bluetooth: hci3: command tx timeout [ 841.875603][T21524] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 841.876941][T21524] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 841.877239][T21524] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 841.878034][T21524] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 841.880034][T21524] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 841.952174][ T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.204562][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 842.204862][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 842.205131][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 842.205860][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 842.206356][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 843.933665][T21524] Bluetooth: hci1: command tx timeout [ 844.228382][T24473] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.228707][T24473] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.228886][T24473] bridge_slave_0: entered allmulticast mode [ 844.230488][T24473] bridge_slave_0: entered promiscuous mode [ 844.253761][T21524] Bluetooth: hci5: command tx timeout [ 844.278458][T24473] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.278544][T24473] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.278690][T24473] bridge_slave_1: entered allmulticast mode [ 844.280256][T24473] bridge_slave_1: entered promiscuous mode [ 844.341386][T24479] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.341535][T24479] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.341687][T24479] bridge_slave_0: entered allmulticast mode [ 844.343398][T24479] bridge_slave_0: entered promiscuous mode [ 844.385175][T24479] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.385316][T24479] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.385457][T24479] bridge_slave_1: entered allmulticast mode [ 844.387804][T24479] bridge_slave_1: entered promiscuous mode [ 844.391961][T24473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.452876][T24473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.488062][T24479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.515211][T24479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.517537][T24473] team0: Port device team_slave_0 added [ 844.555536][T24473] team0: Port device team_slave_1 added [ 844.590354][T24479] team0: Port device team_slave_0 added [ 844.611390][T24479] team0: Port device team_slave_1 added [ 844.612236][T24473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.612252][T24473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.612282][T24473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.693200][T24473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.693221][T24473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.693251][T24473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.759151][T24479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.759172][T24479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.759200][T24479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.763092][T24479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.763111][T24479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.763141][T24479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.919649][T24473] hsr_slave_0: entered promiscuous mode [ 844.920604][T24473] hsr_slave_1: entered promiscuous mode [ 844.921256][T24473] debugfs: 'hsr0' already exists in 'hsr' [ 844.921276][T24473] Cannot create hsr debugfs directory [ 844.970865][T24479] hsr_slave_0: entered promiscuous mode [ 844.972176][T24479] hsr_slave_1: entered promiscuous mode [ 844.972820][T24479] debugfs: 'hsr0' already exists in 'hsr' [ 844.972850][T24479] Cannot create hsr debugfs directory [ 846.015257][T21524] Bluetooth: hci1: command tx timeout [ 846.333812][T21524] Bluetooth: hci5: command tx timeout [ 848.093791][T21524] Bluetooth: hci1: command tx timeout [ 848.413787][T21524] Bluetooth: hci5: command tx timeout [ 850.173732][T21524] Bluetooth: hci1: command tx timeout [ 850.493791][T21524] Bluetooth: hci5: command tx timeout [ 875.865530][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.865761][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.814277][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 878.815112][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 878.815472][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 878.816349][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 878.817039][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 879.609081][T24516] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.609235][T24516] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.609433][T24516] bridge_slave_0: entered allmulticast mode [ 879.611037][T24516] bridge_slave_0: entered promiscuous mode [ 879.646419][T24516] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.650979][T24516] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.651888][T24516] bridge_slave_1: entered allmulticast mode [ 879.684974][T24516] bridge_slave_1: entered promiscuous mode [ 879.732557][T24516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.745913][T24516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.791136][T24516] team0: Port device team_slave_0 added [ 879.802562][T24516] team0: Port device team_slave_1 added [ 879.832866][T24516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.832898][T24516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.832928][T24516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.882342][T24516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.882362][T24516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.882390][T24516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.969929][T24516] hsr_slave_0: entered promiscuous mode [ 879.970916][T24516] hsr_slave_1: entered promiscuous mode [ 879.971542][T24516] debugfs: 'hsr0' already exists in 'hsr' [ 879.971563][T24516] Cannot create hsr debugfs directory [ 880.895190][ T59] Bluetooth: hci7: command tx timeout [ 882.973768][ T59] Bluetooth: hci7: command tx timeout [ 885.053728][ T59] Bluetooth: hci7: command tx timeout [ 885.728579][T21524] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 885.729334][T21524] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 885.729668][T21524] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 885.731940][T21524] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 885.732489][T21524] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 886.428740][T24588] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.428901][T24588] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.429108][T24588] bridge_slave_0: entered allmulticast mode [ 886.430702][T24588] bridge_slave_0: entered promiscuous mode [ 886.436900][T24588] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.437031][T24588] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.437447][T24588] bridge_slave_1: entered allmulticast mode [ 886.438810][T24588] bridge_slave_1: entered promiscuous mode [ 886.507321][T24588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.510895][T24588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.558196][T24588] team0: Port device team_slave_0 added [ 886.561096][T24588] team0: Port device team_slave_1 added [ 886.597597][T24588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.597617][T24588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.597647][T24588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.599287][T24588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.599302][T24588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 886.599330][T24588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.737966][T24588] hsr_slave_0: entered promiscuous mode [ 886.738972][T24588] hsr_slave_1: entered promiscuous mode [ 886.739681][T24588] debugfs: 'hsr0' already exists in 'hsr' [ 886.739702][T24588] Cannot create hsr debugfs directory [ 887.133840][ T59] Bluetooth: hci7: command tx timeout [ 887.853770][ T59] Bluetooth: hci4: command tx timeout [ 889.933794][T21524] Bluetooth: hci4: command tx timeout [ 891.854046][T21524] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 891.854430][T21524] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 891.854745][ T5594] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 891.855822][ T5594] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 891.856430][ T5594] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 892.018418][ T5594] Bluetooth: hci4: command tx timeout [ 892.647170][T24608] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.647327][T24608] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.647705][T24608] bridge_slave_0: entered allmulticast mode [ 892.649317][T24608] bridge_slave_0: entered promiscuous mode [ 892.690702][T24608] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.690863][T24608] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.691317][T24608] bridge_slave_1: entered allmulticast mode [ 892.692976][T24608] bridge_slave_1: entered promiscuous mode [ 892.758197][T24608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.761644][T24608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.819302][T24608] team0: Port device team_slave_0 added [ 892.822039][T24608] team0: Port device team_slave_1 added [ 892.862405][T24608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.862425][T24608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.862453][T24608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.922998][T24608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.923018][T24608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.923048][T24608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.031863][T24608] hsr_slave_0: entered promiscuous mode [ 893.032980][T24608] hsr_slave_1: entered promiscuous mode [ 893.046126][T24608] debugfs: 'hsr0' already exists in 'hsr' [ 893.046149][T24608] Cannot create hsr debugfs directory [ 893.933803][ T5594] Bluetooth: hci6: command tx timeout [ 894.093651][ T5594] Bluetooth: hci4: command tx timeout [ 896.013752][ T5594] Bluetooth: hci6: command tx timeout [ 898.093705][ T5594] Bluetooth: hci6: command tx timeout [ 900.175423][ T5594] Bluetooth: hci6: command tx timeout [ 902.459256][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 902.461054][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 902.462796][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 902.493966][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 902.495393][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 902.542734][ T59] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 902.544843][ T59] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 902.546559][ T59] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 902.550876][ T59] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 902.551444][ T59] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 903.881118][T24633] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.881455][T24633] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.881659][T24633] bridge_slave_0: entered allmulticast mode [ 903.883314][T24633] bridge_slave_0: entered promiscuous mode [ 903.930093][T24633] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.930214][T24633] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.930415][T24633] bridge_slave_1: entered allmulticast mode [ 903.932084][T24633] bridge_slave_1: entered promiscuous mode [ 904.012077][T24629] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.012237][T24629] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.012424][T24629] bridge_slave_0: entered allmulticast mode [ 904.050054][T24629] bridge_slave_0: entered promiscuous mode [ 904.062490][T24633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.062764][T24629] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.062844][T24629] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.063031][T24629] bridge_slave_1: entered allmulticast mode [ 904.096429][T24629] bridge_slave_1: entered promiscuous mode [ 904.100716][T24633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.183223][T24629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.197481][T24633] team0: Port device team_slave_0 added [ 904.200962][T24629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.203307][T24633] team0: Port device team_slave_1 added [ 904.295006][T24629] team0: Port device team_slave_0 added [ 904.296501][T24633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.296517][T24633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.296546][T24633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.299521][T24629] team0: Port device team_slave_1 added [ 904.300361][T24633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.300376][T24633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.300406][T24633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.451734][T24629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.451754][T24629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.451784][T24629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.573717][ T59] Bluetooth: hci8: command tx timeout [ 904.733964][ T59] Bluetooth: hci9: command tx timeout [ 906.517945][T24629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.517967][T24629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.517997][T24629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.607074][T24633] hsr_slave_0: entered promiscuous mode [ 906.609258][T24633] hsr_slave_1: entered promiscuous mode [ 906.610047][T24633] debugfs: 'hsr0' already exists in 'hsr' [ 906.610068][T24633] Cannot create hsr debugfs directory [ 906.653782][ T59] Bluetooth: hci8: command tx timeout [ 906.813718][ T59] Bluetooth: hci9: command tx timeout [ 908.733765][ T59] Bluetooth: hci8: command tx timeout [ 908.798377][T24629] hsr_slave_0: entered promiscuous mode [ 908.799260][T24629] hsr_slave_1: entered promiscuous mode [ 908.799673][T24629] debugfs: 'hsr0' already exists in 'hsr' [ 908.799686][T24629] Cannot create hsr debugfs directory [ 908.893831][ T59] Bluetooth: hci9: command tx timeout [ 910.813835][ T59] Bluetooth: hci8: command tx timeout [ 910.973831][ T59] Bluetooth: hci9: command tx timeout [ 936.655080][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.655151][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.316891][ T5594] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 939.317609][ T5594] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 939.317984][ T5594] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 939.319038][ T5594] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 939.321142][ T5594] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 940.077312][T24674] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.077473][T24674] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.077675][T24674] bridge_slave_0: entered allmulticast mode [ 940.079226][T24674] bridge_slave_0: entered promiscuous mode [ 940.081927][T24674] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.082075][T24674] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.082258][T24674] bridge_slave_1: entered allmulticast mode [ 940.087164][T24674] bridge_slave_1: entered promiscuous mode [ 940.117458][T24674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.120771][T24674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.146616][T24674] team0: Port device team_slave_0 added [ 940.149182][T24674] team0: Port device team_slave_1 added [ 940.182659][T24674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.182680][T24674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.182710][T24674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.187932][T24674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.187951][T24674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.187980][T24674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.237553][T24674] hsr_slave_0: entered promiscuous mode [ 940.238669][T24674] hsr_slave_1: entered promiscuous mode [ 940.239352][T24674] debugfs: 'hsr0' already exists in 'hsr' [ 940.239372][T24674] Cannot create hsr debugfs directory [ 941.373794][ T5594] Bluetooth: hci10: command tx timeout [ 943.453745][ T5594] Bluetooth: hci10: command tx timeout [ 943.857261][ T5594] Bluetooth: hci0: command 0x0406 tx timeout [ 945.533961][ T59] Bluetooth: hci10: command tx timeout [ 945.827204][ T5594] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 945.827859][ T5594] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 945.828159][ T5594] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 945.831903][ T5594] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 945.832468][ T5594] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 946.519214][T24696] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.519385][T24696] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.519593][T24696] bridge_slave_0: entered allmulticast mode [ 946.521217][T24696] bridge_slave_0: entered promiscuous mode [ 946.552954][T24696] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.553108][T24696] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.568989][T24696] bridge_slave_1: entered allmulticast mode [ 946.582233][T24696] bridge_slave_1: entered promiscuous mode [ 946.624519][T24696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.631647][T24696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.686857][T24696] team0: Port device team_slave_0 added [ 946.690341][T24696] team0: Port device team_slave_1 added [ 946.738580][T24696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.738601][T24696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.738631][T24696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.740355][T24696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.740376][T24696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.740406][T24696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.890201][T24696] hsr_slave_0: entered promiscuous mode [ 946.891333][T24696] hsr_slave_1: entered promiscuous mode [ 946.892257][T24696] debugfs: 'hsr0' already exists in 'hsr' [ 946.892296][T24696] Cannot create hsr debugfs directory [ 947.613756][ T59] Bluetooth: hci10: command tx timeout [ 947.854126][ T59] Bluetooth: hci11: command tx timeout [ 948.975226][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 949.933761][ T5594] Bluetooth: hci11: command tx timeout [ 952.017139][ T59] Bluetooth: hci11: command tx timeout [ 952.387678][T21524] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 952.388049][T21524] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 952.389549][T21524] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 952.390386][T21524] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 952.390951][T21524] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 953.113397][T24715] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.113722][T24715] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.113922][T24715] bridge_slave_0: entered allmulticast mode [ 953.115481][T24715] bridge_slave_0: entered promiscuous mode [ 953.118493][T24715] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.118652][T24715] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.119045][T24715] bridge_slave_1: entered allmulticast mode [ 953.124168][T24715] bridge_slave_1: entered promiscuous mode [ 953.152462][T24715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.156207][T24715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.284377][T24715] team0: Port device team_slave_0 added [ 953.469690][T24715] team0: Port device team_slave_1 added [ 953.580463][T24715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.580483][T24715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.580513][T24715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.582199][T24715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.582215][T24715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.582244][T24715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.795245][T24715] hsr_slave_0: entered promiscuous mode [ 953.796347][T24715] hsr_slave_1: entered promiscuous mode [ 953.797119][T24715] debugfs: 'hsr0' already exists in 'hsr' [ 953.797138][T24715] Cannot create hsr debugfs directory [ 954.095156][T21524] Bluetooth: hci3: command 0x0406 tx timeout [ 954.095197][T21524] Bluetooth: hci11: command tx timeout [ 954.413902][ T5594] Bluetooth: hci12: command tx timeout [ 956.493950][ T59] Bluetooth: hci12: command tx timeout [ 958.573819][ T5594] Bluetooth: hci12: command tx timeout [ 960.653799][ T5594] Bluetooth: hci12: command tx timeout [ 962.964609][T18402] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 962.966618][T18402] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 962.966936][T18402] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 962.969287][T18402] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 962.971377][T18402] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 963.113094][T21524] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 963.114790][T21524] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 963.115054][T21524] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 963.115737][T21524] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 963.116227][T21524] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 963.978437][T24743] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.978590][T24743] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.978788][T24743] bridge_slave_0: entered allmulticast mode [ 963.980413][T24743] bridge_slave_0: entered promiscuous mode [ 963.982861][T24743] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.983031][T24743] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.983280][T24743] bridge_slave_1: entered allmulticast mode [ 964.032258][T24743] bridge_slave_1: entered promiscuous mode [ 964.066086][T24743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.069459][T24743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.241868][T24743] team0: Port device team_slave_0 added [ 964.256262][T24743] team0: Port device team_slave_1 added [ 964.295222][T24743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.295243][T24743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.295273][T24743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.297013][T24743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.297030][T24743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.297059][T24743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.339240][T21524] Bluetooth: hci1: command 0x0406 tx timeout [ 964.339288][T21524] Bluetooth: hci5: command 0x0406 tx timeout [ 964.458692][T24743] hsr_slave_0: entered promiscuous mode [ 964.459863][T24743] hsr_slave_1: entered promiscuous mode [ 964.460602][T24743] debugfs: 'hsr0' already exists in 'hsr' [ 964.460622][T24743] Cannot create hsr debugfs directory [ 965.053681][ T5594] Bluetooth: hci13: command tx timeout [ 965.215148][ T5594] Bluetooth: hci14: command tx timeout [ 966.808950][T24736] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.823763][T24736] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.824264][T24736] bridge_slave_0: entered allmulticast mode [ 966.828019][T24736] bridge_slave_0: entered promiscuous mode [ 966.829903][T24736] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.829992][T24736] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.830136][T24736] bridge_slave_1: entered allmulticast mode [ 966.830965][T24736] bridge_slave_1: entered promiscuous mode [ 967.133724][ T5594] Bluetooth: hci13: command tx timeout [ 967.203395][T24736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 967.232021][T24736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 967.268014][T24736] team0: Port device team_slave_0 added [ 967.271272][T24736] team0: Port device team_slave_1 added [ 967.293729][ T5594] Bluetooth: hci14: command tx timeout [ 967.321318][T24736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.321337][T24736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.321365][T24736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.323188][T24736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.323203][T24736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.323231][T24736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.476928][T24736] hsr_slave_0: entered promiscuous mode [ 967.477673][T24736] hsr_slave_1: entered promiscuous mode [ 967.480606][T24736] debugfs: 'hsr0' already exists in 'hsr' [ 967.480618][T24736] Cannot create hsr debugfs directory [ 969.213672][ T5594] Bluetooth: hci13: command tx timeout [ 969.373752][ T5594] Bluetooth: hci14: command tx timeout [ 971.293701][ T5594] Bluetooth: hci13: command tx timeout [ 971.453685][ T5594] Bluetooth: hci14: command tx timeout [ 975.431695][ T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.614511][ T37] INFO: task syz-executor:24369 blocked for more than 143 seconds. [ 977.614541][ T37] Not tainted syzkaller #0 [ 977.614554][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 977.614565][ T37] task:syz-executor state:D stack:18808 pid:24369 tgid:24369 ppid:1 task_flags:0x400140 flags:0x00080002 [ 977.614630][ T37] Call Trace: [ 977.614704][ T37] [ 977.614753][ T37] __schedule+0x16dc/0x5500 [ 977.614940][ T37] ? rcu_is_watching+0x15/0xb0 [ 977.615078][ T37] ? __pfx___schedule+0x10/0x10 [ 977.615105][ T37] ? rcu_is_watching+0x15/0xb0 [ 977.615135][ T37] rt_mutex_schedule+0x76/0xf0 [ 977.615191][ T37] rt_mutex_slowlock_block+0x55c/0x680 [ 977.615229][ T37] ? rt_mutex_slowlock_block+0x33a/0x680 [ 977.615264][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 977.615286][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 977.615307][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 977.615333][ T37] ? lock_acquire+0x5f/0x350 [ 977.615388][ T37] ? del_device_store+0xd6/0x370 [ 977.615475][ T37] mutex_lock_nested+0x168/0x1d0 [ 977.615494][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 977.615603][ T37] del_device_store+0xd6/0x370 [ 977.615627][ T37] ? rcu_is_watching+0x15/0xb0 [ 977.615656][ T37] ? __pfx_del_device_store+0x10/0x10 [ 977.615687][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 977.616119][ T37] ? sysfs_kf_write+0x166/0x260 [ 977.616156][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 977.616184][ T37] kernfs_fop_write_iter+0x3a5/0x540 [ 977.616213][ T37] vfs_write+0x61e/0xbb0 [ 977.616290][ T37] ? __pfx_vfs_write+0x10/0x10 [ 977.616313][ T37] ? do_sys_openat2+0x14e/0x200 [ 977.616365][ T37] ? kmem_cache_free+0x187/0x6c0 [ 977.616433][ T37] ksys_write+0x156/0x270 [ 977.616457][ T37] ? __pfx_ksys_write+0x10/0x10 [ 977.616479][ T37] ? rcu_is_watching+0x15/0xb0 [ 977.616510][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.616565][ T37] do_syscall_64+0x174/0x580 [ 977.616623][ T37] ? trace_irq_disable+0x3b/0x140 [ 977.616693][ T37] ? clear_bhb_loop+0x40/0x90 [ 977.616718][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.616741][ T37] RIP: 0033:0x7f05ba05d68e [ 977.616783][ T37] RSP: 002b:00007ffe6d3c4288 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 977.616833][ T37] RAX: ffffffffffffffda RBX: 0000555574cc4500 RCX: 00007f05ba05d68e [ 977.616850][ T37] RDX: 0000000000000001 RSI: 00007ffe6d3c4310 RDI: 0000000000000005 [ 977.616866][ T37] RBP: 00007f05ba1336f2 R08: 0000000000000000 R09: 0000000000000000 [ 977.616880][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.616895][ T37] R13: 00007ffe6d3c4310 R14: 00007f05bae44620 R15: 0000000000000003 [ 977.616918][ T37] [ 977.616933][ T37] INFO: task syz-executor:24450 blocked for more than 143 seconds. [ 977.616951][ T37] Not tainted syzkaller #0 [ 977.616962][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 977.616973][ T37] task:syz-executor state:D stack:22904 pid:24450 tgid:24450 ppid:1 task_flags:0x400140 flags:0x00080002 [ 977.617036][ T37] Call Trace: [ 977.617044][ T37] [ 977.617054][ T37] __schedule+0x16dc/0x5500 [ 977.617085][ T37] ? rcu_is_watching+0x15/0xb0 [ 977.617118][ T37] ? __pfx___schedule+0x10/0x10 [ 977.617142][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 977.617205][ T37] ? rcu_is_watching+0x15/0xb0 [ 977.617236][ T37] ? rcu_is_watching+0x15/0xb0 [ 977.617267][ T37] rt_mutex_schedule+0x76/0xf0 [ 977.617294][ T37] rt_mutex_slowlock_block+0x55c/0x680 [ 977.617334][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 977.617356][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 977.617378][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 977.617404][ T37] ? lock_acquire+0x5f/0x350 [ 977.617434][ T37] ? del_device_store+0xd6/0x370 [ 977.617457][ T37] mutex_lock_nested+0x168/0x1d0 [ 977.617477][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 977.617530][ T37] del_device_store+0xd6/0x370 [ 977.617555][ T37] ? rcu_is_watching+0x15/0xb0 [ 977.617584][ T37] ? __pfx_del_device_store+0x10/0x10 [ 977.617609][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 977.617637][ T37] ? sysfs_kf_write+0x166/0x260 [ 977.617676][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 977.617704][ T37] kernfs_fop_write_iter+0x3a5/0x540 [ 977.617733][ T37] vfs_write+0x61e/0xbb0 [ 977.617758][ T37] ? __pfx_vfs_write+0x10/0x10 [ 977.617780][ T37] ? do_sys_openat2+0x14e/0x200 [ 977.617808][ T37] ? kmem_cache_free+0x187/0x6c0 [ 977.617838][ T37] ksys_write+0x156/0x270 [ 977.617861][ T37] ? __pfx_ksys_write+0x10/0x10 [ 977.617883][ T37] ? rcu_is_watching+0x15/0xb0 [ 977.617913][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.617936][ T37] do_syscall_64+0x174/0x580 [ 977.617964][ T37] ? trace_irq_disable+0x3b/0x140 [ 977.617987][ T37] ? clear_bhb_loop+0x40/0x90 [ 977.618010][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.618031][ T37] RIP: 0033:0x7f855036d68e [ 977.618050][ T37] RSP: 002b:00007ffe9a3821a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 977.618071][ T37] RAX: ffffffffffffffda RBX: 000055556ee12500 RCX: 00007f855036d68e [ 977.618088][ T37] RDX: 0000000000000001 RSI: 00007ffe9a382230 RDI: 0000000000000005 [ 977.618102][ T37] RBP: 00007f85504436f2 R08: 0000000000000000 R09: 0000000000000000 [ 977.618117][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.618131][ T37] R13: 00007ffe9a382230 R14: 00007f8551154620 R15: 0000000000000003 [ 977.618153][ T37] [ 977.618211][ T37] INFO: lockdep is turned off. [ 977.618293][ T37] NMI backtrace for cpu 0 [ 977.618308][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 977.618333][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 977.618345][ T37] Call Trace: [ 977.618354][ T37] [ 977.618362][ T37] dump_stack_lvl+0xe8/0x150 [ 977.618406][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 977.618452][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 977.618513][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 977.618537][ T37] sys_info+0x135/0x170 [ 977.618568][ T37] watchdog+0xfd7/0x1030 [ 977.618626][ T37] ? watchdog+0x1c7/0x1030 [ 977.618650][ T37] kthread+0x388/0x470 [ 977.618708][ T37] ? __pfx_watchdog+0x10/0x10 [ 977.618729][ T37] ? __pfx_kthread+0x10/0x10 [ 977.618750][ T37] ret_from_fork+0x514/0xb70 [ 977.618792][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 977.618814][ T37] ? __switch_to+0xc89/0x1420 [ 977.618846][ T37] ? __pfx_kthread+0x10/0x10 [ 977.618867][ T37] ret_from_fork_asm+0x1a/0x30 [ 977.618899][ T37] [ 977.618907][ T37] Sending NMI from CPU 0 to CPUs 1: [ 977.618935][ C1] NMI backtrace for cpu 1 [ 977.618952][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 977.618973][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 977.618983][ C1] RIP: 0010:__rcu_read_unlock+0x1f/0xe0 [ 977.619005][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 49 bf 00 00 00 00 00 fc ff df 65 48 8b 3d c9 d6 c1 10 <48> 8d 9f c4 04 00 00 49 89 dc 49 c1 ec 03 43 0f b6 04 3c 84 c0 75 [ 977.619051][ C1] RSP: 0018:ffffc90000a2f570 EFLAGS: 00000282 [ 977.619067][ C1] RAX: 6668705f07b08c00 RBX: ffffc90000a2f658 RCX: 0000000080000001 [ 977.619081][ C1] RDX: ffffc90000a2f601 RSI: ffffffff8ba7bb00 RDI: ffff88801d6f5d00 [ 977.619094][ C1] RBP: 1ffffffff2036501 R08: ffffc90000a2f780 R09: 0000000000000000 [ 977.619107][ C1] R10: ffffc90000a2f698 R11: fffff52000145ed5 R12: ffffc90000a28000 [ 977.619120][ C1] R13: ffffffff817691ff R14: ffffc90000a2f648 R15: dffffc0000000000 [ 977.619133][ C1] FS: 0000000000000000(0000) GS:ffff88812625c000(0000) knlGS:0000000000000000 [ 977.619148][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 977.619168][ C1] CR2: 00007fcd36d1c0f5 CR3: 000000000ddae000 CR4: 00000000003526f0 [ 977.619185][ C1] Call Trace: [ 977.619192][ C1] [ 977.619200][ C1] ? unwind_next_frame+0x8f/0x2550 [ 977.619240][ C1] unwind_next_frame+0x1baf/0x2550 [ 977.619262][ C1] ? stack_trace_save+0xa9/0x100 [ 977.619303][ C1] ? unwind_next_frame+0x8f/0x2550 [ 977.619324][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 977.619342][ C1] arch_stack_walk+0x11b/0x150 [ 977.619363][ C1] ? kasan_save_track+0x3e/0x80 [ 977.619432][ C1] stack_trace_save+0xa9/0x100 [ 977.619449][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 977.619467][ C1] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 977.619505][ C1] ? rcu_is_watching+0x15/0xb0 [ 977.619527][ C1] kasan_save_track+0x3e/0x80 [ 977.619568][ C1] kasan_save_free_info+0x40/0x50 [ 977.619606][ C1] __kasan_slab_free+0x5c/0x80 [ 977.619623][ C1] kfree+0x1c5/0x6c0 [ 977.619664][ C1] ? ref_tracker_free+0x4fe/0x820 [ 977.619752][ C1] ref_tracker_free+0x4fe/0x820 [ 977.619774][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 977.619795][ C1] ? dst_destroy+0x108/0x340 [ 977.619886][ C1] ? rcu_cpu_kthread+0x950/0x1480 [ 977.619924][ C1] ? smpboot_thread_fn+0x57c/0xa80 [ 977.619983][ C1] ? kthread+0x388/0x470 [ 977.619999][ C1] ? ret_from_fork+0x514/0xb70 [ 977.620015][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 977.620037][ C1] ? trace_irq_enable+0x3b/0x140 [ 977.620057][ C1] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 977.620115][ C1] dst_destroy+0x108/0x340 [ 977.620132][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 977.620149][ C1] rcu_cpu_kthread+0x950/0x1480 [ 977.620184][ C1] ? rcu_cpu_kthread+0x20b/0x1480 [ 977.620208][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 977.620228][ C1] ? schedule+0x15d/0x360 [ 977.620249][ C1] smpboot_thread_fn+0x57c/0xa80 [ 977.620273][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 977.620299][ C1] kthread+0x388/0x470 [ 977.620315][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 977.620337][ C1] ? __pfx_kthread+0x10/0x10 [ 977.620354][ C1] ret_from_fork+0x514/0xb70 [ 977.620372][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 977.620395][ C1] ? __switch_to+0xc89/0x1420 [ 977.620419][ C1] ? __pfx_kthread+0x10/0x10 [ 977.620435][ C1] ret_from_fork_asm+0x1a/0x30 [ 977.620460][ C1] [ 977.620934][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 977.620952][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 977.620977][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 977.620990][ T37] Call Trace: [ 977.620998][ T37] [ 977.621008][ T37] vpanic+0x56c/0xa60 [ 977.621048][ T37] ? __pfx_vpanic+0x10/0x10 [ 977.621077][ T37] panic+0xc5/0xd0 [ 977.621102][ T37] ? __pfx_panic+0x10/0x10 [ 977.621131][ T37] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 977.621157][ T37] watchdog+0x1030/0x1030 [ 977.621182][ T37] ? watchdog+0x1c7/0x1030 [ 977.621207][ T37] kthread+0x388/0x470 [ 977.621228][ T37] ? __pfx_watchdog+0x10/0x10 [ 977.621249][ T37] ? __pfx_kthread+0x10/0x10 [ 977.621270][ T37] ret_from_fork+0x514/0xb70 [ 977.621294][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 977.621316][ T37] ? __switch_to+0xc89/0x1420 [ 977.621347][ T37] ? __pfx_kthread+0x10/0x10 [ 977.621369][ T37] ret_from_fork_asm+0x1a/0x30 [ 977.621402][ T37] [ 977.621706][ T37] Kernel Offset: disabled