last executing test programs: 4m53.898671059s ago: executing program 3 (id=4): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000100)={'syz_tun\x00', @random="f401401000"}) 4m50.068299542s ago: executing program 3 (id=9): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/16], 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe, 0x4}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x98}}, 0x0) 4m48.056611856s ago: executing program 3 (id=12): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2200004) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) write$dsp(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x20000806) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000280)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x5, "0adb3fb8"}, 0x5}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0, 0x80, 0x0, 0x7fff0000}]}) 4m41.253407507s ago: executing program 3 (id=19): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000880)="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", 0x15f}, {&(0x7f00000005c0)="92c8308f50bba2da5ee082c3b8dfae49dd913523b57daa0c3360c48ac2dfb3c6766fcbe70c4b01053f175c14d0139d4521b8458fcc5c4950702163dabc8596fafcbf867a70f93838c529160935b2e8d215daa857d8d8af704772858ca50a7a49490e69f8b09e8171f47d792d6e2e9d6ee610c807b96eae4617639b498aec97ad751e6a924fbe1ce6c356f36146cc623822d4a805af61c1031850719f98167d74535d308c736a0c17cf0742bf2dae0007ff4e", 0xb2}, {&(0x7f0000000a00)="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", 0xd39}], 0x3}, 0x810) 4m39.722994432s ago: executing program 3 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="420bb6873bff", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000840)="5bba4406c37b6c2e1662e1d37e5900e41d36d277c3616b73c16d4f56903b31d71bdb5137e8d3c7d31279cff9572da0f9e3fe1507188d69a979779e44d361571bafe5799eb6a677180ac595c871150624abc3c38ce1a4369aa6ea47e23ac6f5d98f55440f96647af83b1df3781ead1c", 0x6f}, {0x0}, {&(0x7f0000000940)="db34238ff8c24119302b2ed38d5e", 0xe}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x400c404) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r3, 0x3) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3d}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000200000a400004803c0001800b00010065787468647200002c000280050002008900000008000340000000000800044000000001080006400000000208000140000040030900010073797a30000000000900020073797a32"], 0x94}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) 4m35.057228426s ago: executing program 3 (id=28): r0 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) r2 = openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x40000000002, 0x8000009, 0xfffffffffffffffd, 0x0, 0x2, 0xc, 0x4002004c8, 0x1004, 0xffff, 0xc595, 0x7, 0x2, 0x3171, 0x0, 0x80000004000000, 0x200000000c], 0x80a0000, 0x2010d3}) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8084}, 0x800) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 4m18.962581548s ago: executing program 32 (id=28): r0 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) r2 = openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x40000000002, 0x8000009, 0xfffffffffffffffd, 0x0, 0x2, 0xc, 0x4002004c8, 0x1004, 0xffff, 0xc595, 0x7, 0x2, 0x3171, 0x0, 0x80000004000000, 0x200000000c], 0x80a0000, 0x2010d3}) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8084}, 0x800) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 3m23.769342022s ago: executing program 0 (id=126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000003000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="420bb6873bff", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000840)="5bba4406c37b6c2e1662e1d37e5900e41d36d277c3616b73c16d4f56903b31d71bdb5137e8d3c7d31279cff9572da0f9e3fe1507188d69a979779e44d361571bafe5799eb6a677180ac595c871150624abc3c38ce1a4369aa6ea47e23ac6f5d98f55440f96647af83b1df3781ead1c", 0x6f}, {0x0}, {&(0x7f0000000940)="db34238ff8c24119302b2ed38d5e", 0xe}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x400c404) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r3, 0x3) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3d}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000200000a400004803c0001800b00010065787468647200002c000280050002008900000008000340000000000800044000000001080006400000000208000140000040030900010073797a30000000000900020073797a32"], 0x94}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) 3m20.939859046s ago: executing program 0 (id=130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x2, 0x4, 0x8a3, 0x8, 0x1000, 0x6, 0x2, 0x1}, &(0x7f0000000140)={0x6, 0x81, 0x100000001, 0x7, 0xa, 0x9, 0xffffffff, 0x6}, 0x0, &(0x7f0000000400)={r1, r2+60000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {}, 0xa}}, 0x26) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="2503000000000000000004"], 0x14}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x0, 0x8, 0xff3, 0x1, {{0x1a, 0x4, 0x0, 0x36, 0x68, 0x67, 0x0, 0xd6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_prespec={0x44, 0x54, 0x4d, 0x3, 0x4, [{@broadcast, 0x10001}, {@empty, 0x5}, {@remote, 0x2}, {@multicast1, 0x10001}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x401}, {@broadcast, 0x3}, {@multicast2, 0x2}, {@remote, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2000080}]}]}}}}}) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_newaddrlabel={0x24, 0x48, 0x8, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x38, 0x0, r11, 0x1}, [@IFAL_LABEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r14, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r15, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m18.033254266s ago: executing program 0 (id=134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x18) syz_clone(0x9080400, 0x0, 0x0, 0x0, 0x0, 0x0) 3m15.184284555s ago: executing program 0 (id=140): r0 = socket$pptp(0x18, 0x1, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) close(0xffffffffffffffff) mount(&(0x7f00000001c0)=@filename='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$KVM_VCPU(&(0x7f0000f3d000/0x4000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x10000040}, 0x3c) 3m12.391804224s ago: executing program 0 (id=143): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x18, 0x8, 0x40, 0x40, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 3m11.123541267s ago: executing program 0 (id=148): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xa) 2m55.813878245s ago: executing program 33 (id=148): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xa) 37.756497508s ago: executing program 4 (id=385): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89f0, &(0x7f00000000c0)={0xffffffffffffffff, r1}) 37.022711888s ago: executing program 4 (id=389): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000, 0x3, &(0x7f0000fc3000/0x1000)=nil) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xfb, 0x10000, 0x2, 0x0, 0x100000000, 0x4000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0) 35.008691874s ago: executing program 4 (id=392): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1) socket$packet(0x11, 0x0, 0x300) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000340)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x40, @local}}}, 0x32) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001000)={0xf, {"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", 0x1000}}, 0x1006) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) 33.618770615s ago: executing program 4 (id=393): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r4, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r5, @ANYBLOB="08000600", @ANYRES32=r3], 0x24}}, 0x4000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) 32.649520241s ago: executing program 4 (id=394): sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x400, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040000}, 0x8004) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000014}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x338, r1, 0x300, 0x2, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x7d, 0x45, "74bead620975602443b923488aca3c4da646c212915a23216fd9394d91449eb4f8ba9e7a8926a34a38f44aea52b97dbed1047dfff713cd091907a764f5463d9729d49bb2e84d90ff556638d2ad1d6a0cfede755b84669026052a54780884b81d88b2db11952105b696da13a457a4d43be4d81dd15e3d9ca2c8"}, @NL80211_ATTR_TESTDATA={0xe7, 0x45, "a498f0b68023348128a37ed4e534fba7bcdf9f79f77ef1883bf4b075728e0897e1d6339f8f09aafd6ef33af38e863974f8ed10251a7abc8ea6b15dcd33795075f78caa1329078a1f883cf569722f17e64e0d416ad47f2f0bad078d2670073afe75fb65352b360f6ef34280e13452058c1e9030f2ce69a2cde95e73ebf53e4c3f52a52367fff10535e3ef87769fc154d62416ac1e6b34fe9ec07fd541289cd758c67bf762fc8b53a9af74ab6b7a730bc2a11c2bd1dc5c3fb4eb9e87af61c4fc3568424221585b6680b056044368a0b4f82984afec8ec08ae40b345eef2c8071856d4471"}, @NL80211_ATTR_TESTDATA={0x19, 0x45, "b76502e67917c3bfe5cbac509978710b3003ba519a"}, @NL80211_ATTR_TESTDATA={0x28, 0x45, "2e1df8327e2b226f5c3a541a2673ea7c78ae87e573ca8fce5a75874cc4d3a32c015d3c46"}, @NL80211_ATTR_TESTDATA={0xb8, 0x45, "937bcd8c5d31d0c777b863bb0b560d74d4f796b1f948b7acf2beb51f50f3f64f43d14b8511b7999acf866095b0df4974fb135c7599bc335e7492dc77c1ea13ef38a61b28678c853fc30a7ef7b1dc405dc9fa1870eeb05129efbc5f4f14dbeaa8a5c23ecde220c5431ed555fa8f326ae56502a33b698141165c20106e5f50ee587051e38fff1802615334d1cc868cc77c7b695725011cdc78aebce4e860da370914479fb148c48af19bd83a9a80ee746ac62d6de7"}, @NL80211_ATTR_TESTDATA={0xb2, 0x45, "28c558a679f6bcbf2bb406834c8cc20173eef1b2942a17ccbb79834636773cc2aa007aed0c0b18a7b17ab1071c41eb024b85d28665a278ec44fb0e9d64c53f863ada03617b78df944ba348feb067ee634bcc00bb52bc6cb1047f686fc6f1cd2d4f3ecfb0aeb1490fdc6ecfcba7f5499486a6fdf5ff0033e86a3b3b91dace1cf729df699613451bb7f2fbee913b24e6b0878ced33781b87197d4ec8f6952f3d32feb8ea40637ad2c2e82996092b0d"}]}, 0x338}, 0x1, 0x0, 0x0, 0x8004}, 0x20040880) (async) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f00000005c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @private=0xa010101}, 0x324, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)='hsr0\x00', 0x5, 0x9, 0x9}) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000640), r0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x7, 0x70f8, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x7800, 0x8, 0xfffff000}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xc0, r3, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000840}, 0x4040800) r5 = accept4(r0, &(0x7f0000000900)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000000980)=0x80, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, 0x3, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040887}, 0x800) (async) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl(r6, 0xa629, &(0x7f0000000ac0)="76a55df27b49c2eeffa2a6583df3911588241839ddff83258b8a6f1c00c448aa4dc1d6aa6a7ba8441b0529699168ea6ab14ba1f16376b009a96205778afa1c5b957014da0a2ded7b77c8dd5956fdd1c9d9c9cdec9bb9d5ac3d51e55ea61c3198ef7ad8668a2b33aa4a59ecb689eff13c02cdf5bb88a71fe94d6ae517266b2e2c3c") sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240480c0}, 0xc0040) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0xffff, '\x00', r4, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) r8 = syz_io_uring_complete(0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r0, {0xffff520a}}, './file0\x00'}) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001000), 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0], 0x0, 0xa7, &(0x7f0000001180)=[{}], 0x8, 0x10, &(0x7f00000011c0), &(0x7f0000001200), 0x8, 0xd0, 0x8, 0x8, &(0x7f0000001240)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x4, 0x29, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@exit, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}, @map_fd={0x18, 0x9, 0x1, 0x0, r8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_fd={0x18, 0x0, 0x1, 0x0, r9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ec0)='syzkaller\x00', 0x3, 0xcb, &(0x7f0000000f00)=""/203, 0x41100, 0x42, '\x00', r4, @fallback=0x2c, r10, 0x8, &(0x7f0000001040)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x3, 0xd, 0x2, 0x8}, 0x10, r11, 0xffffffffffffffff, 0x6, 0x0, &(0x7f00000013c0)=[{0x0, 0x1, 0xb, 0x3}, {0x5, 0x5, 0xd, 0x9}, {0x1, 0x2, 0x1}, {0x1, 0x2, 0xe, 0x3}, {0x2, 0x1, 0x3, 0x6}, {0x5, 0x4, 0x5}], 0x10, 0x2}, 0x94) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x80, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x200}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x2000}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4e4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0xdb0d, 0x1, 0x1]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001680), r9) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000001a00)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000019c0)={&(0x7f00000016c0)={0x2d8, r12, 0x20, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x91}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2bb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6596}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x681}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ea}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x8880}, 0x20008000) ioctl$sock_SIOCDELRT(r9, 0x890c, &(0x7f0000001a80)={0x0, @phonet={0x23, 0x81, 0xc0, 0x7}, @hci={0x1f, 0x3, 0x4}, @hci={0x1f, 0x1, 0x1}, 0x7f, 0x0, 0x0, 0x0, 0x80, &(0x7f0000001a40)='bond_slave_0\x00', 0x1, 0xfffffffffffffbff, 0x3}) (async) getsockopt$inet6_int(r9, 0x29, 0x24, &(0x7f0000001b00), &(0x7f0000001b40)=0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000001b80)={0x0, 0x4a, "de9fad8bb2d0b033b1ec9afd3fe1ac03aa2f2ed89432938e1944cd2c2c1d1569a9fd9bda530143aec2a92a7a70e0e12a049cea605086962604c8760ad4cf00c16d694ed7dcc93c2f4999"}, &(0x7f0000001c00)=0x52) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000001c40)={r13, 0x3, 0x2, 0x2}, &(0x7f0000001c80)=0x10) (async) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000001d00), r5) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x24, r14, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4410}, 0x40000) 32.552706943s ago: executing program 4 (id=395): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xff0f, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5ff", 0x30}], 0x1}, 0x48000) 32.434814578s ago: executing program 2 (id=396): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000001c0)={0x1d, r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="70000000150028032bbd7000fbdbdf25020163fd", @ANYRES32=r2, @ANYBLOB="08000100ac55cd9dc07f2c8ff3462164cff385fa1e00010800090005000000f8ff02006d61637674617030000000000000007c084509000100000008000100ffffffff14000000766c616e300000000000000000009dc2dd"], 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xff00000000000001, 0x30402) unshare(0x2040400) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000080)=[{&(0x7f0000000500)='|', 0x1}], 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @local}, 0x5, 0x1, 0x200000, 0x800004}}, 0x2e) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r6, 0xc008551b, 0x0) 31.098693652s ago: executing program 2 (id=399): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001", @ANYRES16], 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000280)={0x1, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000300)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f00"/13], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='GPL\x00', 0x2, 0x8c, &(0x7f0000000400)=""/140, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c00008004000180"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x403, 0xfffffffc, 0x3b, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x5502}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}, @IFLA_MASTER={0x8}]}, 0x4c}, 0x1, 0x300000000000000, 0x0, 0x80}, 0x4040040) 27.380676146s ago: executing program 2 (id=401): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1) socket$packet(0x11, 0x0, 0x300) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000340)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x40, @local}}}, 0x32) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001000)={0xf, {"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", 0x1000}}, 0x1006) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) 27.35755104s ago: executing program 1 (id=402): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r4, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r5, @ANYBLOB="08000600", @ANYRES32=r3], 0x24}}, 0x4000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) 25.736845507s ago: executing program 1 (id=403): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x18) syz_clone(0x9080400, 0x0, 0x0, 0x0, 0x0, 0x0) 24.901889083s ago: executing program 1 (id=404): ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, &(0x7f0000000000)) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi2\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000040)={0x5, 0x6, 0x1, 0x8, 0x3, [0x6, 0x7, 0x7, 0x5]}) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x8}, 0x10) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000001, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x14) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/sockstat6\x00') read$FUSE(r5, &(0x7f00000002c0)={0x2020}, 0x2020) openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x82000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 23.791897133s ago: executing program 1 (id=405): io_uring_setup(0x2, &(0x7f0000000500)={0x0, 0x2, 0x1, 0xb, 0x164}) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x2c49, &(0x7f0000002240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000010000002004e24ac1e00010000000000000000030006003c200000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x0) socket$packet(0x11, 0x0, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f0000000900)=ANY=[@ANYBLOB='lock '], 0x9) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="199374c96ee3", 0x0, 0xffffffff, 0x30, 0x0, 0x0}) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000018110000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000005d15fffffcffffffbf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x5}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0) 23.558737957s ago: executing program 1 (id=406): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x40000000015, 0x5, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r4, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) socket$pppl2tp(0x18, 0x1, 0x1) r9 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x1, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r10 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x120c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) 20.341572912s ago: executing program 1 (id=407): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x1415, 0x101, 0x1, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000580)={0x7fff, 0x10, 0x6}) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x8802, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2c, r7, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x17}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x800, 0x6494, 0x33424752, 0x3, 0x6, 0x5, 0x7, 0x0, 0x1, 0x2, 0x2, 0x6}}) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r7, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x41) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x409, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1321}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @vti_common_policy=[@IFLA_VTI_LINK={0x8}], @IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010101}]}}}]}, 0x48}}, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r9, 0x8915, &(0x7f0000000380)={'ip6_vti0\x00'}) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000400)=[{0x0, 0x3, {0x0, 0x0, 0x3}, {0x3, 0xff, 0xb5136b999d190868}, 0xfe, 0x2}, {0x1, 0x3, {0x0, 0xf0, 0x3}, {0x1}, 0xff, 0xfd}], 0x40) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r7, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x2c000800) 19.480912431s ago: executing program 2 (id=408): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="07000000040000008001000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r1, 0x20}, 0x18) 19.362631714s ago: executing program 2 (id=409): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x40000000015, 0x5, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r5, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x2, 0x0, {0xa, 0x4e22, 0xd0bc, @remote, 0xfffffffc}}}, 0x3a) r9 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x1, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r10 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x120c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) 16.004646768s ago: executing program 34 (id=395): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xff0f, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5ff", 0x30}], 0x1}, 0x48000) 15.97679952s ago: executing program 2 (id=411): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r3, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x3, 0x4, 0x4, 0x1000, 0x1, 0x5, '\x00', r3, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x6, 0x1, 0x1, 0x2000, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x6}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={{0x14, 0x3ea, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x3f4}}, 0x28}}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89fe, &(0x7f0000000380)={'sit0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5ff", 0x30}], 0x1}, 0x48000) 4.413070462s ago: executing program 35 (id=407): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x1415, 0x101, 0x1, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000580)={0x7fff, 0x10, 0x6}) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x8802, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2c, r7, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x17}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x800, 0x6494, 0x33424752, 0x3, 0x6, 0x5, 0x7, 0x0, 0x1, 0x2, 0x2, 0x6}}) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r7, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x41) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x409, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1321}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @vti_common_policy=[@IFLA_VTI_LINK={0x8}], @IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010101}]}}}]}, 0x48}}, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r9, 0x8915, &(0x7f0000000380)={'ip6_vti0\x00'}) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000400)=[{0x0, 0x3, {0x0, 0x0, 0x3}, {0x3, 0xff, 0xb5136b999d190868}, 0xfe, 0x2}, {0x1, 0x3, {0x0, 0xf0, 0x3}, {0x1}, 0xff, 0xfd}], 0x40) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r7, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x2c000800) 0s ago: executing program 36 (id=411): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r3, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x3, 0x4, 0x4, 0x1000, 0x1, 0x5, '\x00', r3, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x6, 0x1, 0x1, 0x2000, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x6}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={{0x14, 0x3ea, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x3f4}}, 0x28}}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89fe, &(0x7f0000000380)={'sit0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5ff", 0x30}], 0x1}, 0x48000) kernel console output (not intermixed with test programs): yz [ 232.169295][ T6149] usb 2-1: config 0 descriptor?? [ 232.261381][ T6149] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 232.468890][ T1599] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 232.476850][ T5910] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 232.646266][ T5821] Bluetooth: hci6: command tx timeout [ 232.705185][ T1599] usb 3-1: Using ep0 maxpacket: 16 [ 232.720030][ T6694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.744937][ T6694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.998220][ T1599] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.998246][ T1599] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.460274][ T1599] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.460296][ T1599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.460305][ T1599] usb 3-1: Product: syz [ 234.460312][ T1599] usb 3-1: Manufacturer: syz [ 234.460319][ T1599] usb 3-1: SerialNumber: syz [ 234.499915][ T5910] usb 5-1: Using ep0 maxpacket: 16 [ 234.514733][ T6525] chnl_net:caif_netlink_parms(): no params data found [ 234.546048][ T5910] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.546531][ T5910] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.593174][ T5910] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.593201][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.593219][ T5910] usb 5-1: Product: syz [ 234.593231][ T5910] usb 5-1: Manufacturer: syz [ 234.593243][ T5910] usb 5-1: SerialNumber: syz [ 234.713195][ T1599] usb 3-1: 0:2 : does not exist [ 234.727685][ T5821] Bluetooth: hci6: command tx timeout [ 234.808903][ T6045] usb 2-1: USB disconnect, device number 7 [ 234.937254][ T5910] usb 5-1: 0:2 : does not exist [ 234.976361][ T1599] usb 3-1: USB disconnect, device number 13 [ 235.068499][ T6698] autofs4:pid:6698:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.8074), cmd(0xc018937e) [ 235.068526][ T6698] autofs4:pid:6698:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 235.410101][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.876600][ T5910] usb 5-1: USB disconnect, device number 7 [ 237.107882][ T6709] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 237.564976][ T6188] udevd[6188]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 237.598089][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.796219][ T9] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 237.958830][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 237.958877][ T9] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.958897][ T9] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 237.958921][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 237.958951][ T9] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 237.958971][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.022427][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.207074][ T6716] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 238.234449][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.325992][ T9] usb 3-1: config 0 descriptor?? [ 238.562623][ T5910] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 238.851347][ T5910] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 238.851396][ T5910] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.851417][ T5910] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 238.851440][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0 [ 238.851471][ T5910] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 238.851490][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.923930][ T5910] usb 2-1: config 0 descriptor?? [ 239.175205][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.236212][ T43] hsr_slave_0: left promiscuous mode [ 239.277792][ T43] hsr_slave_1: left promiscuous mode [ 239.280503][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.280644][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.340575][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.340603][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.578808][ T43] veth1_macvtap: left promiscuous mode [ 239.579152][ T43] veth0_macvtap: left promiscuous mode [ 239.579516][ T43] veth1_vlan: left promiscuous mode [ 239.583982][ T43] veth0_vlan: left promiscuous mode [ 240.879735][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.970855][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 240.972433][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 241.011228][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.016264][ T5910] usbhid 2-1:0.0: can't add hid device: -71 [ 241.016379][ T5910] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 241.054854][ T5910] usb 2-1: USB disconnect, device number 8 [ 241.062616][ T9] usb 3-1: USB disconnect, device number 14 [ 241.226407][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.349512][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.472058][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.021225][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.237645][ T6746] openvswitch: netlink: Missing valid actions attribute. [ 242.237684][ T6746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.389517][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.888048][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.428481][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.700254][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.798559][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.918432][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 248.096238][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 248.098936][ T9] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 248.098960][ T9] usb 3-1: config 6 has no interface number 0 [ 248.099006][ T9] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 248.099025][ T9] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 248.099047][ T9] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 248.099067][ T9] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 248.106478][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 248.106503][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.106519][ T9] usb 3-1: Product: syz [ 248.106531][ T9] usb 3-1: Manufacturer: syz [ 248.106543][ T9] usb 3-1: SerialNumber: syz [ 248.121912][ T9] hso 3-1:6.2: Failed to find BULK IN ep [ 251.822121][ T6787] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 252.226888][ T6045] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 252.419041][ T6045] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 252.419396][ T6045] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.419441][ T6045] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 252.419488][ T6045] usb 5-1: config 0 interface 0 has no altsetting 0 [ 252.419671][ T6045] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 252.419714][ T6045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.596381][ T6045] usb 5-1: config 0 descriptor?? [ 253.277055][ T43] team0 (unregistering): Port device team_slave_1 removed [ 253.498656][ T43] team0 (unregistering): Port device team_slave_0 removed [ 254.489358][ T6045] usbhid 5-1:0.0: can't add hid device: -71 [ 254.489491][ T6045] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 254.497924][ T6045] usb 5-1: USB disconnect, device number 8 [ 254.932278][ T6794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.958100][ T6794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.003738][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.007757][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.011920][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.013993][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.014730][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.126214][ T6045] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 255.312234][ T6045] usb 5-1: Using ep0 maxpacket: 16 [ 255.314673][ T6045] usb 5-1: config 21 has an invalid interface number: 179 but max is 1 [ 255.314700][ T6045] usb 5-1: config 21 contains an unexpected descriptor of type 0x2, skipping [ 255.314718][ T6045] usb 5-1: config 21 has an invalid interface number: 193 but max is 1 [ 255.314736][ T6045] usb 5-1: config 21 has no interface number 0 [ 255.314749][ T6045] usb 5-1: config 21 has no interface number 1 [ 255.314792][ T6045] usb 5-1: config 21 interface 179 altsetting 1 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 255.314806][ T6045] usb 5-1: config 21 interface 179 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 255.314817][ T6045] usb 5-1: config 21 interface 179 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 255.314828][ T6045] usb 5-1: config 21 interface 179 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 255.314839][ T6045] usb 5-1: config 21 interface 179 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 255.314848][ T6045] usb 5-1: config 21 interface 179 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 255.314861][ T6045] usb 5-1: config 21 interface 179 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 255.314871][ T6045] usb 5-1: config 21 interface 179 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 255.314881][ T6045] usb 5-1: config 21 interface 179 altsetting 1 endpoint 0xD has an invalid bInterval 186, changing to 7 [ 255.314915][ T6045] usb 5-1: config 21 interface 193 altsetting 5 endpoint 0x3 has an invalid bInterval 247, changing to 11 [ 255.314926][ T6045] usb 5-1: config 21 interface 193 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 255.314935][ T6045] usb 5-1: config 21 interface 179 has no altsetting 0 [ 255.314943][ T6045] usb 5-1: config 21 interface 193 has no altsetting 0 [ 255.326716][ T6045] usb 5-1: string descriptor 0 read error: -22 [ 255.326877][ T6045] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice= 6.e2 [ 255.326897][ T6045] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.566656][ T6045] usb 5-1: USB disconnect, device number 9 [ 255.856499][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.856571][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.328750][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.201690][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.202741][ T5821] Bluetooth: hci1: command tx timeout [ 257.498218][ T6525] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 258.046736][ T9] usb 3-1: USB disconnect, device number 15 [ 259.652424][ T5821] Bluetooth: hci1: command tx timeout [ 260.735116][ T6848] netlink: 'syz.2.217': attribute type 3 has an invalid length. [ 261.686673][ T5827] Bluetooth: hci1: command tx timeout [ 262.868378][ T6871] Zero length message leads to an empty skb [ 262.914473][ T6635] chnl_net:caif_netlink_parms(): no params data found [ 263.304386][ T6884] netlink: 40 bytes leftover after parsing attributes in process `syz.1.228'. [ 263.544230][ T6887] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 263.591887][ T6045] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 263.906892][ T5827] Bluetooth: hci1: command tx timeout [ 263.916522][ T6045] usb 5-1: Using ep0 maxpacket: 16 [ 264.109491][ T6045] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.109541][ T6045] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.224255][ T6045] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 264.224284][ T6045] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.224301][ T6045] usb 5-1: Product: syz [ 264.224313][ T6045] usb 5-1: Manufacturer: syz [ 264.224326][ T6045] usb 5-1: SerialNumber: syz [ 264.433716][ T6021] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 264.509074][ T6045] usb 5-1: 0:2 : does not exist [ 264.509176][ T6045] usb 5-1: unit 6 not found! [ 264.587948][ T6021] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 264.590192][ T6021] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.590215][ T6021] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 264.590237][ T6021] usb 3-1: config 0 interface 0 has no altsetting 0 [ 264.590269][ T6021] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 264.590289][ T6021] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.764352][ T6902] autofs4:pid:6902:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.8074), cmd(0xc018937e) [ 264.764406][ T6902] autofs4:pid:6902:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 264.918824][ T6045] usb 5-1: USB disconnect, device number 10 [ 265.278613][ T6021] usb 3-1: config 0 descriptor?? [ 265.802242][ T6188] udevd[6188]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.956634][ T6021] usbhid 3-1:0.0: can't add hid device: -71 [ 266.956763][ T6021] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 267.052546][ C0] vkms_vblank_simulate: vblank timer overrun [ 267.126428][ T6021] usb 3-1: USB disconnect, device number 16 [ 267.280020][ T6920] FAULT_INJECTION: forcing a failure. [ 267.280020][ T6920] name failslab, interval 1, probability 0, space 0, times 1 [ 267.280051][ T6920] CPU: 1 UID: 0 PID: 6920 Comm: syz.2.233 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 267.280070][ T6920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 267.280080][ T6920] Call Trace: [ 267.280087][ T6920] [ 267.280095][ T6920] dump_stack_lvl+0x189/0x250 [ 267.280123][ T6920] ? __pfx____ratelimit+0x10/0x10 [ 267.280143][ T6920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.280165][ T6920] ? __pfx__printk+0x10/0x10 [ 267.280185][ T6920] ? rt_spin_unlock+0x150/0x200 [ 267.280211][ T6920] should_fail_ex+0x46c/0x600 [ 267.280237][ T6920] should_failslab+0xa8/0x100 [ 267.280261][ T6920] __kmalloc_cache_noprof+0x6f/0x6c0 [ 267.280285][ T6920] ? sctp_add_bind_addr+0x8c/0x370 [ 267.280309][ T6920] sctp_add_bind_addr+0x8c/0x370 [ 267.280333][ T6920] sctp_do_bind+0x5ab/0x940 [ 267.280366][ T6920] sctp_connect_new_asoc+0x25c/0x690 [ 267.280391][ T6920] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 267.280419][ T6920] ? sctp_inet6_send_verify+0x23a/0x300 [ 267.280438][ T6920] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 267.280464][ T6920] __sctp_connect+0x5ba/0xd50 [ 267.280495][ T6920] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 267.280514][ T6920] ? __pfx___sctp_connect+0x10/0x10 [ 267.280540][ T6920] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 267.280555][ T6920] ? security_sctp_bind_connect+0x7e/0x2e0 [ 267.280575][ T6920] sctp_setsockopt_connectx+0x103/0x1b0 [ 267.280603][ T6920] sctp_setsockopt+0x6d9/0x1200 [ 267.280623][ T6920] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 267.280650][ T6920] do_sock_setsockopt+0x17c/0x1b0 [ 267.280673][ T6920] __x64_sys_setsockopt+0x145/0x1b0 [ 267.280697][ T6920] do_syscall_64+0xfa/0xfa0 [ 267.280716][ T6920] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.280735][ T6920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.280751][ T6920] ? clear_bhb_loop+0x60/0xb0 [ 267.280770][ T6920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.280786][ T6920] RIP: 0033:0x7fd1865cefc9 [ 267.280802][ T6920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.280815][ T6920] RSP: 002b:00007fd184836038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 267.280834][ T6920] RAX: ffffffffffffffda RBX: 00007fd186825fa0 RCX: 00007fd1865cefc9 [ 267.280853][ T6920] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 267.280862][ T6920] RBP: 00007fd184836090 R08: 000000000000002d R09: 0000000000000000 [ 267.280871][ T6920] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 267.280882][ T6920] R13: 00007fd186826038 R14: 00007fd186825fa0 R15: 00007ffc7b97c058 [ 267.280912][ T6920] [ 267.697324][ T6921] netlink: 40 bytes leftover after parsing attributes in process `syz.4.234'. [ 267.703080][ T6921] netlink: 40 bytes leftover after parsing attributes in process `syz.4.234'. [ 267.736009][ T6635] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.736511][ T6635] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.736762][ T6635] bridge_slave_0: entered allmulticast mode [ 267.739555][ T6635] bridge_slave_0: entered promiscuous mode [ 267.764224][ T6635] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.764366][ T6635] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.764609][ T6635] bridge_slave_1: entered allmulticast mode [ 267.777499][ T6635] bridge_slave_1: entered promiscuous mode [ 267.779297][ T6796] chnl_net:caif_netlink_parms(): no params data found [ 267.845251][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.627716][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.307472][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.334720][ T6635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.379377][ T6149] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 269.558669][ T6149] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 269.558726][ T6149] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 269.560453][ T6149] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 269.560477][ T6149] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 269.560494][ T6149] usb 2-1: Manufacturer: syz [ 269.574197][ T6149] usb 2-1: config 0 descriptor?? [ 269.580567][ T6149] igorplugusb 2-1:0.0: incorrect number of endpoints [ 269.601599][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.705106][ T6635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.783042][ T6149] usb 2-1: USB disconnect, device number 9 [ 269.896684][ T6958] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.244'. [ 270.296751][ T6955] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.244'. [ 270.307494][ T6635] team0: Port device team_slave_0 added [ 270.320926][ T6149] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 270.689609][ T6149] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 270.689641][ T6149] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 270.689666][ T6149] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 270.692810][ T6149] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 270.692836][ T6149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.692852][ T6149] usb 5-1: Product: syz [ 270.692863][ T6149] usb 5-1: Manufacturer: syz [ 270.692875][ T6149] usb 5-1: SerialNumber: syz [ 270.699108][ T6149] usb 5-1: config 0 descriptor?? [ 270.700107][ T6969] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 270.700387][ T6969] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 270.704480][ T6149] usb 5-1: ucan: probing device on interface #0 [ 271.633562][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.568409][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.600483][ T6149] usb 5-1: ucan: device reported invalid tx-fifo size [ 272.600497][ T6149] usb 5-1: ucan: probe failed; try to update the device firmware [ 272.633741][ T6635] team0: Port device team_slave_1 added [ 273.074476][ T6998] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.255'. [ 273.074749][ T6995] FAULT_INJECTION: forcing a failure. [ 273.074749][ T6995] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 273.074774][ T6995] CPU: 1 UID: 0 PID: 6995 Comm: syz.1.255 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 273.074791][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 273.074799][ T6995] Call Trace: [ 273.074804][ T6995] [ 273.074811][ T6995] dump_stack_lvl+0x189/0x250 [ 273.074838][ T6995] ? __pfx____ratelimit+0x10/0x10 [ 273.074856][ T6995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.074877][ T6995] ? __pfx__printk+0x10/0x10 [ 273.074897][ T6995] ? fs_reclaim_acquire+0x7d/0x100 [ 273.074926][ T6995] should_fail_ex+0x46c/0x600 [ 273.074954][ T6995] prepare_alloc_pages+0x213/0x670 [ 273.074984][ T6995] __alloc_frozen_pages_noprof+0x123/0x370 [ 273.075011][ T6995] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 273.075042][ T6995] ? policy_nodemask+0x27c/0x720 [ 273.075063][ T6995] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 273.075085][ T6796] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.075086][ T6995] alloc_pages_mpol+0xd1/0x380 [ 273.075111][ T6995] vma_alloc_folio_noprof+0xe4/0x280 [ 273.075130][ T6995] ? rt_spin_lock+0x1c1/0x3e0 [ 273.075149][ T6995] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 273.075184][ T6995] folio_prealloc+0x30/0x180 [ 273.075209][ T6995] do_wp_page+0x11f4/0x4930 [ 273.075247][ T6995] ? preempt_count_add+0x91/0x1a0 [ 273.075270][ T6796] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.075275][ T6995] ? __pfx_do_wp_page+0x10/0x10 [ 273.075293][ T6995] ? rt_spin_lock+0x2ae/0x3e0 [ 273.075312][ T6995] ? __pfx_rt_spin_lock+0x10/0x10 [ 273.075334][ T6995] ? pte_offset_map_rw_nolock+0xea/0x160 [ 273.075357][ T6995] handle_mm_fault+0x97c/0x3400 [ 273.075375][ T6995] ? mt_find+0x15c/0x5e0 [ 273.075397][ T6995] ? __pfx_mt_find+0x10/0x10 [ 273.075415][ T6995] ? handle_mm_fault+0xdb/0x3400 [ 273.075438][ T6995] ? __pfx_handle_mm_fault+0x10/0x10 [ 273.075469][ T6995] ? lock_mm_and_find_vma+0x9c/0x300 [ 273.075488][ T6995] do_user_addr_fault+0x764/0x1380 [ 273.075511][ T6796] bridge_slave_0: entered allmulticast mode [ 273.075520][ T6995] exc_page_fault+0x82/0x100 [ 273.075542][ T6995] asm_exc_page_fault+0x26/0x30 [ 273.075559][ T6995] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 273.075574][ T6995] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 bf 0b 05 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 273.075588][ T6995] RSP: 0018:ffffc90005047638 EFLAGS: 00050202 [ 273.075604][ T6995] RAX: ffffffff8476f201 RBX: ffff888056334000 RCX: 0000000000000e50 [ 273.075615][ T6995] RDX: 0000000000000000 RSI: ffff888056334000 RDI: 0000200000002640 [ 273.075627][ T6995] RBP: ffffc900050477b0 R08: ffff888056334e4f R09: 1ffff1100ac669c9 [ 273.075639][ T6995] R10: dffffc0000000000 R11: ffffed100ac669ca R12: dffffc0000000000 [ 273.075652][ T6995] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000e50 [ 273.075671][ T6995] ? _copy_to_iter+0x391/0x1790 [ 273.075702][ T6995] _copy_to_iter+0x493/0x1790 [ 273.075724][ T6995] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 273.075757][ T6995] ? rt_mutex_slowunlock+0x493/0x8a0 [ 273.075775][ T6995] ? __pfx__copy_to_iter+0x10/0x10 [ 273.075801][ T6995] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 273.075830][ T6995] __skb_datagram_iter+0xf8/0x990 [ 273.075853][ T6995] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 273.075882][ T6995] skb_copy_datagram_iter+0xc5/0x230 [ 273.075907][ T6995] netlink_recvmsg+0x2ab/0xa30 [ 273.075936][ T6995] ? __pfx_netlink_recvmsg+0x10/0x10 [ 273.075964][ T6995] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 273.075985][ T6995] ? security_socket_recvmsg+0x7e/0x2e0 [ 273.076008][ T6995] ? __pfx_netlink_recvmsg+0x10/0x10 [ 273.076026][ T6995] sock_recvmsg+0x22c/0x270 [ 273.076049][ T6995] ____sys_recvmsg+0x1ce/0x470 [ 273.076076][ T6995] ? __pfx_____sys_recvmsg+0x10/0x10 [ 273.076109][ T6995] ? import_iovec+0x74/0xa0 [ 273.076128][ T6995] ___sys_recvmsg+0x1b5/0x510 [ 273.076151][ T6995] ? __pfx____sys_recvmsg+0x10/0x10 [ 273.076194][ T6995] ? __fget_files+0x3a6/0x420 [ 273.076229][ T6995] __x64_sys_recvmsg+0x19e/0x260 [ 273.076252][ T6995] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 273.076289][ T6995] ? __pfx_ksys_write+0x10/0x10 [ 273.076312][ T6995] ? do_syscall_64+0xbe/0xfa0 [ 273.076332][ T6995] do_syscall_64+0xfa/0xfa0 [ 273.076347][ T6995] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.076366][ T6995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.076381][ T6995] ? clear_bhb_loop+0x60/0xb0 [ 273.076400][ T6995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.076415][ T6995] RIP: 0033:0x7f42c60fefc9 [ 273.076430][ T6995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.076443][ T6995] RSP: 002b:00007f42c435e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 273.076460][ T6995] RAX: ffffffffffffffda RBX: 00007f42c6355fa0 RCX: 00007f42c60fefc9 [ 273.076473][ T6995] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 273.076483][ T6995] RBP: 00007f42c435e090 R08: 0000000000000000 R09: 0000000000000000 [ 273.076494][ T6995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.076504][ T6995] R13: 00007f42c6356038 R14: 00007f42c6355fa0 R15: 00007ffeea97a758 [ 273.076533][ T6995] [ 273.188662][ T6796] bridge_slave_0: entered promiscuous mode [ 273.853152][ T6995] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.255'. [ 273.950853][ T7003] 9pnet_fd: Insufficient options for proto=fd [ 274.923981][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.006793][ T6796] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.006929][ T6796] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.007179][ T6796] bridge_slave_1: entered allmulticast mode [ 275.017740][ T6796] bridge_slave_1: entered promiscuous mode [ 275.022970][ T6635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.022986][ T6635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.023009][ T6635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.470242][ T7023] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 275.736716][ T6045] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 276.148342][ T6045] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 276.148391][ T6045] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.148414][ T6045] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 276.148441][ T6045] usb 3-1: config 0 interface 0 has no altsetting 0 [ 276.148473][ T6045] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 276.148492][ T6045] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.149761][ T6149] usb 5-1: USB disconnect, device number 11 [ 276.234031][ T6045] usb 3-1: config 0 descriptor?? [ 276.589965][ T6635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.589980][ T6635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.590002][ T6635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.889341][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.896109][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.898321][ T6045] usbhid 3-1:0.0: can't add hid device: -71 [ 278.898437][ T6045] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 278.904296][ T6045] usb 3-1: USB disconnect, device number 17 [ 279.012670][ T7038] 9pnet_fd: Insufficient options for proto=fd [ 279.126658][ T6796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.149348][ T6796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.177142][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.680583][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.806164][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.810386][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.814783][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.838644][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.840079][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.006703][ T7050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.122575][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.332711][ T6796] team0: Port device team_slave_0 added [ 280.438492][ T7056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.269'. [ 280.438514][ T7056] netlink: 44 bytes leftover after parsing attributes in process `syz.4.269'. [ 281.568423][ C0] vkms_vblank_simulate: vblank timer overrun [ 281.624631][ C0] vkms_vblank_simulate: vblank timer overrun [ 281.929572][ T5827] Bluetooth: hci4: command tx timeout [ 282.247781][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.369315][ T7069] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 282.405497][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.659973][ T7075] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 282.671371][ T6796] team0: Port device team_slave_1 added [ 283.187872][ T7084] FAULT_INJECTION: forcing a failure. [ 283.187872][ T7084] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 283.187938][ T7084] CPU: 0 UID: 0 PID: 7084 Comm: syz.2.272 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 283.187958][ T7084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 283.187969][ T7084] Call Trace: [ 283.187976][ T7084] [ 283.187985][ T7084] dump_stack_lvl+0x189/0x250 [ 283.188013][ T7084] ? __pfx____ratelimit+0x10/0x10 [ 283.188035][ T7084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.188058][ T7084] ? __pfx__printk+0x10/0x10 [ 283.188090][ T7084] should_fail_ex+0x46c/0x600 [ 283.188118][ T7084] prepare_alloc_pages+0x213/0x670 [ 283.188151][ T7084] __alloc_frozen_pages_noprof+0x123/0x370 [ 283.188179][ T7084] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 283.188213][ T7084] ? rcu_read_unlock_special+0x35b/0x470 [ 283.188238][ T7084] alloc_pages_mpol+0xd1/0x380 [ 283.188265][ T7084] alloc_pages_noprof+0xcf/0x1e0 [ 283.188290][ T7084] get_free_pages_noprof+0xf/0x80 [ 283.188314][ T7084] kasan_populate_vmalloc+0x38/0x270 [ 283.188337][ T7084] ? rt_spin_unlock+0x161/0x200 [ 283.188357][ T7084] alloc_vmap_area+0xd7a/0x14c0 [ 283.188394][ T7084] ? __pfx_alloc_vmap_area+0x10/0x10 [ 283.188413][ T7084] ? __kasan_kmalloc+0x93/0xb0 [ 283.188435][ T7084] ? __kmalloc_cache_node_noprof+0x2a9/0x700 [ 283.188458][ T7084] ? __get_vm_area_node+0x172/0x350 [ 283.188478][ T7084] ? bpf_prog_alloc_no_stats+0x4a/0x530 [ 283.188508][ T7084] __get_vm_area_node+0x227/0x350 [ 283.188535][ T7084] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 283.188557][ T7084] ? bpf_prog_alloc_no_stats+0x4a/0x530 [ 283.188602][ T7084] ? preempt_schedule_irq+0xde/0x150 [ 283.188625][ T7084] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 283.188650][ T7084] ? irqentry_exit+0x74/0x90 [ 283.188670][ T7084] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.188693][ T7084] ? bpf_prog_alloc_no_stats+0x4a/0x530 [ 283.188714][ T7084] __vmalloc_noprof+0xb1/0xf0 [ 283.188734][ T7084] ? bpf_prog_alloc_no_stats+0x4a/0x530 [ 283.188759][ T7084] bpf_prog_alloc_no_stats+0x4a/0x530 [ 283.188786][ T7084] bpf_prog_alloc+0x3c/0x1a0 [ 283.188810][ T7084] bpf_prog_load+0x735/0x19e0 [ 283.188845][ T7084] ? __pfx_bpf_prog_load+0x10/0x10 [ 283.188889][ T7084] ? bpf_lsm_bpf+0x9/0x20 [ 283.188905][ T7084] ? security_bpf+0x7e/0x300 [ 283.188926][ T7084] __sys_bpf+0x507/0x860 [ 283.188950][ T7084] ? __pfx___sys_bpf+0x10/0x10 [ 283.189002][ T7084] __x64_sys_bpf+0x7c/0x90 [ 283.189023][ T7084] do_syscall_64+0xfa/0xfa0 [ 283.189045][ T7084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.189061][ T7084] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 283.189077][ T7084] ? clear_bhb_loop+0x60/0xb0 [ 283.189098][ T7084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.189115][ T7084] RIP: 0033:0x7fd1865cefc9 [ 283.189131][ T7084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.189144][ T7084] RSP: 002b:00007fd1847f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 283.189164][ T7084] RAX: ffffffffffffffda RBX: 00007fd186826180 RCX: 00007fd1865cefc9 [ 283.189176][ T7084] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 283.189187][ T7084] RBP: 00007fd1847f4090 R08: 0000000000000000 R09: 0000000000000000 [ 283.189198][ T7084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.189208][ T7084] R13: 00007fd186826218 R14: 00007fd186826180 R15: 00007ffc7b97c058 [ 283.189239][ T7084] [ 283.189522][ T7084] syz.2.272: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 283.192693][ T7084] CPU: 0 UID: 0 PID: 7084 Comm: syz.2.272 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 283.192715][ T7084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 283.192724][ T7084] Call Trace: [ 283.192733][ T7084] [ 283.192741][ T7084] dump_stack_lvl+0x189/0x250 [ 283.192769][ T7084] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 283.192792][ T7084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.192816][ T7084] ? __pfx__printk+0x10/0x10 [ 283.192837][ T7084] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 283.192857][ T7084] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 283.192884][ T7084] warn_alloc+0x22e/0x3b0 [ 283.192908][ T7084] ? kasan_quarantine_put+0xdd/0x220 [ 283.192928][ T7084] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.192953][ T7084] ? __pfx_warn_alloc+0x10/0x10 [ 283.192976][ T7084] ? __get_vm_area_node+0x240/0x350 [ 283.192995][ T7084] ? __get_vm_area_node+0x172/0x350 [ 283.193015][ T7084] ? bpf_prog_alloc_no_stats+0x4a/0x530 [ 283.193040][ T7084] ? __get_vm_area_node+0x240/0x350 [ 283.193068][ T7084] __vmalloc_node_range_noprof+0x331/0x12d0 [ 283.193114][ T7084] ? preempt_schedule_irq+0xde/0x150 [ 283.193138][ T7084] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 283.193163][ T7084] ? irqentry_exit+0x74/0x90 [ 283.193182][ T7084] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.193206][ T7084] ? bpf_prog_alloc_no_stats+0x4a/0x530 [ 283.193226][ T7084] __vmalloc_noprof+0xb1/0xf0 [ 283.193246][ T7084] ? bpf_prog_alloc_no_stats+0x4a/0x530 [ 283.193271][ T7084] bpf_prog_alloc_no_stats+0x4a/0x530 [ 283.193298][ T7084] bpf_prog_alloc+0x3c/0x1a0 [ 283.193323][ T7084] bpf_prog_load+0x735/0x19e0 [ 283.193358][ T7084] ? __pfx_bpf_prog_load+0x10/0x10 [ 283.193404][ T7084] ? bpf_lsm_bpf+0x9/0x20 [ 283.193419][ T7084] ? security_bpf+0x7e/0x300 [ 283.193440][ T7084] __sys_bpf+0x507/0x860 [ 283.193465][ T7084] ? __pfx___sys_bpf+0x10/0x10 [ 283.193526][ T7084] __x64_sys_bpf+0x7c/0x90 [ 283.193547][ T7084] do_syscall_64+0xfa/0xfa0 [ 283.193569][ T7084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.193585][ T7084] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 283.193601][ T7084] ? clear_bhb_loop+0x60/0xb0 [ 283.193622][ T7084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.193639][ T7084] RIP: 0033:0x7fd1865cefc9 [ 283.193655][ T7084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.193669][ T7084] RSP: 002b:00007fd1847f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 283.193686][ T7084] RAX: ffffffffffffffda RBX: 00007fd186826180 RCX: 00007fd1865cefc9 [ 283.193699][ T7084] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 283.193710][ T7084] RBP: 00007fd1847f4090 R08: 0000000000000000 R09: 0000000000000000 [ 283.193720][ T7084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.193730][ T7084] R13: 00007fd186826218 R14: 00007fd186826180 R15: 00007ffc7b97c058 [ 283.193761][ T7084] [ 283.193791][ T7084] Mem-Info: [ 283.193846][ T7084] active_anon:265 inactive_anon:43928 isolated_anon:0 [ 283.193846][ T7084] active_file:15485 inactive_file:38939 isolated_file:0 [ 283.193846][ T7084] unevictable:768 dirty:136 writeback:0 [ 283.193846][ T7084] slab_reclaimable:11707 slab_unreclaimable:102591 [ 283.193846][ T7084] mapped:42557 shmem:38733 pagetables:1513 [ 283.193846][ T7084] sec_pagetables:0 bounce:0 [ 283.193846][ T7084] kernel_misc_reclaimable:0 [ 283.193846][ T7084] free:1277224 free_pcp:9351 free_cma:0 [ 283.193917][ T7084] Node 0 active_anon:1060kB inactive_anon:175712kB active_file:61740kB inactive_file:155756kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:170228kB dirty:544kB writeback:0kB shmem:153396kB kernel_stack:14156kB pagetables:5936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 283.193981][ T7084] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 283.194042][ T7084] Node 0 DMA free:15356kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.194139][ T7084] lowmem_reserve[]: 0 2515 2517 2517 2517 [ 283.194305][ T7084] Node 0 DMA32 free:1188068kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1060kB inactive_anon:175712kB active_file:61740kB inactive_file:155756kB unevictable:1536kB writepending:544kB zspages:0kB present:3129332kB managed:2576096kB mlocked:0kB bounce:0kB free_pcp:37084kB local_pcp:26240kB free_cma:0kB [ 283.194405][ T7084] lowmem_reserve[]: 0 0 1 1 1 [ 283.194576][ T7084] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.194671][ T7084] lowmem_reserve[]: 0 0 0 0 0 [ 283.194858][ T7084] Node 1 Normal free:3905472kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:320kB local_pcp:0kB free_cma:0kB [ 283.194956][ T7084] lowmem_reserve[]: 0 0 0 0 0 [ 283.195143][ T7084] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 283.195853][ T7084] Node 0 DMA32: 23*4kB (UE) 87*8kB (UME) 23*16kB (UM) 493*32kB (UM) 501*64kB (UE) 253*128kB (UME) 111*256kB (U) 30*512kB (UME) 12*1024kB (UME) 1*2048kB (U) 256*4096kB (UM) = 1188068kB [ 283.196601][ T7084] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 283.197026][ T7084] Node 1 Normal: 212*4kB (UM) 58*8kB (UME) 36*16kB (UME) 218*32kB (UME) 95*64kB (UME) 37*128kB (UME) 11*256kB (UM) 6*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3905504kB [ 283.197753][ T7084] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.197790][ T7084] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.197827][ T7084] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.197864][ T7084] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.197900][ T7084] 93153 total pagecache pages [ 283.197929][ T7084] 0 pages in swap cache [ 283.197958][ T7084] Free swap = 124996kB [ 283.197987][ T7084] Total swap = 124996kB [ 283.198016][ T7084] 2097051 pages RAM [ 283.198044][ T7084] 0 pages HighMem/MovableOnly [ 283.198073][ T7084] 421001 pages reserved [ 283.198101][ T7084] 0 pages cma reserved [ 283.208713][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.006274][ T5827] Bluetooth: hci4: command tx timeout [ 285.002984][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.591375][ T6796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.591390][ T6796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.591412][ T6796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.593852][ T6796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.593866][ T6796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.593890][ T6796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.002566][ T7104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.279'. [ 286.086183][ T5827] Bluetooth: hci4: command tx timeout [ 286.433052][ T6796] hsr_slave_0: entered promiscuous mode [ 286.434442][ T6796] hsr_slave_1: entered promiscuous mode [ 286.435537][ T6796] debugfs: 'hsr0' already exists in 'hsr' [ 286.435560][ T6796] Cannot create hsr debugfs directory [ 291.283309][ T5827] Bluetooth: hci4: command tx timeout [ 293.536177][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 294.728741][ T7140] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 298.007421][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'. [ 298.137973][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 299.798064][ T7046] chnl_net:caif_netlink_parms(): no params data found [ 299.902686][ T7199] FAULT_INJECTION: forcing a failure. [ 299.902686][ T7199] name failslab, interval 1, probability 0, space 0, times 0 [ 299.902708][ T7199] CPU: 1 UID: 0 PID: 7199 Comm: syz.4.298 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 299.902720][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 299.902726][ T7199] Call Trace: [ 299.902730][ T7199] [ 299.902735][ T7199] dump_stack_lvl+0x189/0x250 [ 299.902754][ T7199] ? __pfx____ratelimit+0x10/0x10 [ 299.902766][ T7199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.902779][ T7199] ? __pfx__printk+0x10/0x10 [ 299.902793][ T7199] ? __pfx___might_resched+0x10/0x10 [ 299.902803][ T7199] ? fs_reclaim_acquire+0x7d/0x100 [ 299.902819][ T7199] should_fail_ex+0x46c/0x600 [ 299.902834][ T7199] ? __pmd_alloc+0xa4/0x530 [ 299.902846][ T7199] should_failslab+0xa8/0x100 [ 299.902867][ T7199] ? __pmd_alloc+0xa4/0x530 [ 299.902877][ T7199] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 299.902893][ T7199] __pmd_alloc+0xa4/0x530 [ 299.902908][ T7199] handle_mm_fault+0x21bc/0x3400 [ 299.902920][ T7199] ? mt_find+0x15c/0x5e0 [ 299.902932][ T7199] ? __pfx_mt_find+0x10/0x10 [ 299.902945][ T7199] ? handle_mm_fault+0xdb/0x3400 [ 299.902961][ T7199] ? __pfx_handle_mm_fault+0x10/0x10 [ 299.902983][ T7199] ? lock_mm_and_find_vma+0x9c/0x300 [ 299.902999][ T7199] do_user_addr_fault+0x764/0x1380 [ 299.903019][ T7199] exc_page_fault+0x82/0x100 [ 299.903032][ T7199] asm_exc_page_fault+0x26/0x30 [ 299.903042][ T7199] RIP: 0010:__put_user_8+0xd/0x20 [ 299.903054][ T7199] Code: 89 01 31 c9 0f 01 ca e9 01 42 04 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca e9 d6 41 04 00 90 90 90 90 90 90 90 90 90 [ 299.903062][ T7199] RSP: 0018:ffffc90003fcfd18 EFLAGS: 00050202 [ 299.903072][ T7199] RAX: 0000000032ea8e06 RBX: 0000000000000000 RCX: 0000200000000180 [ 299.903079][ T7199] RDX: 0000000000000000 RSI: ffffffff8cf62f13 RDI: ffffffff8b3ddbe0 [ 299.903085][ T7199] RBP: ffffc90003fcfe10 R08: 0000000000000000 R09: ffffffff82094ea0 [ 299.903091][ T7199] R10: dffffc0000000000 R11: fffffbfff1dac52f R12: ffff8880346fbc00 [ 299.903098][ T7199] R13: 0000200000000180 R14: ffff888143ec04a0 R15: 0000000000000000 [ 299.903108][ T7199] ? __might_fault+0xb0/0x130 [ 299.903125][ T7199] sched_core_share_pid+0x2e4/0x7b0 [ 299.903138][ T7199] ? cap_task_prctl+0x1de/0xaa0 [ 299.903149][ T7199] ? __pfx_sched_core_share_pid+0x10/0x10 [ 299.903158][ T7199] ? static_key_count+0x41/0x70 [ 299.903168][ T7199] ? security_task_prctl+0x163/0x190 [ 299.903183][ T7199] __se_sys_prctl+0x223/0x1830 [ 299.903195][ T7199] ? __pfx___se_sys_prctl+0x10/0x10 [ 299.903206][ T7199] ? do_syscall_64+0xbe/0xfa0 [ 299.903216][ T7199] ? __x64_sys_prctl+0x20/0xc0 [ 299.903226][ T7199] do_syscall_64+0xfa/0xfa0 [ 299.903237][ T7199] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.903247][ T7199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.903256][ T7199] ? clear_bhb_loop+0x60/0xb0 [ 299.903268][ T7199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.903277][ T7199] RIP: 0033:0x7f8cf184efc9 [ 299.903285][ T7199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.903293][ T7199] RSP: 002b:00007f8cefab6038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 299.903302][ T7199] RAX: ffffffffffffffda RBX: 00007f8cf1aa5fa0 RCX: 00007f8cf184efc9 [ 299.903309][ T7199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000003e [ 299.903314][ T7199] RBP: 00007f8cefab6090 R08: 0000200000000180 R09: 0000000000000000 [ 299.903320][ T7199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.903325][ T7199] R13: 00007f8cf1aa6038 R14: 00007f8cf1aa5fa0 R15: 00007ffd26a099a8 [ 299.903341][ T7199] [ 300.348691][ T7203] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 301.633381][ T7231] netlink: 'syz.4.303': attribute type 23 has an invalid length. [ 301.633402][ T7231] netlink: 'syz.4.303': attribute type 6 has an invalid length. [ 301.633420][ T7231] IPv6: NLM_F_CREATE should be specified when creating new route [ 301.916215][ T5826] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 302.081051][ T5826] usb 5-1: config 1 has an invalid descriptor of length 82, skipping remainder of the config [ 302.081077][ T5826] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.111419][ T5826] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 302.111444][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 302.111462][ T5826] usb 5-1: SerialNumber: syz [ 302.161324][ T7046] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.161439][ T7046] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.161611][ T7046] bridge_slave_0: entered allmulticast mode [ 302.165635][ T7046] bridge_slave_0: entered promiscuous mode [ 302.215224][ T7046] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.215347][ T7046] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.215600][ T7046] bridge_slave_1: entered allmulticast mode [ 302.236714][ T7046] bridge_slave_1: entered promiscuous mode [ 302.388282][ T7240] netlink: 104 bytes leftover after parsing attributes in process `syz.1.304'. [ 302.502465][ T43] bridge_slave_1: left allmulticast mode [ 302.502494][ T43] bridge_slave_1: left promiscuous mode [ 302.502850][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.630588][ T43] bridge_slave_0: left allmulticast mode [ 302.630616][ T43] bridge_slave_0: left promiscuous mode [ 302.630907][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.717067][ T43] bridge_slave_1: left allmulticast mode [ 302.717095][ T43] bridge_slave_1: left promiscuous mode [ 302.717335][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.807915][ T43] bridge_slave_0: left allmulticast mode [ 302.807944][ T43] bridge_slave_0: left promiscuous mode [ 302.808186][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.538756][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.697091][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.856503][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.991275][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.280493][ T43] bond0 (unregistering): Released all slaves [ 305.451705][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.940907][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.717930][ T5826] usb 5-1: 0:2 : does not exist [ 307.825875][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.896392][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.833602][ T7290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.833970][ T7290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.613148][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.698393][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.760431][ T43] bond0 (unregistering): Released all slaves [ 315.847153][ T7294] syz.2.318 (7294) used greatest stack depth: 18840 bytes left [ 316.144091][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.160325][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.163417][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.164726][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.165642][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.468829][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.598965][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.685438][ T43] bond0 (unregistering): Released all slaves [ 317.340482][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.341809][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.239112][ T7046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.259614][ T5827] Bluetooth: hci5: command tx timeout [ 318.574996][ T5826] usb 5-1: USB disconnect, device number 13 [ 318.722539][ T7319] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 319.466224][ T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 319.517475][ T7046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.666149][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 319.666195][ T9] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.666215][ T9] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 319.666238][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 319.666269][ T9] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 319.666288][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.671696][ T9] usb 2-1: config 0 descriptor?? [ 319.775460][ T7315] syz.2.321 (7315) used greatest stack depth: 17008 bytes left [ 320.208857][ T7322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.257488][ T7322] netlink: 134788 bytes leftover after parsing attributes in process `syz.4.323'. [ 320.326258][ T5827] Bluetooth: hci5: command tx timeout [ 320.788812][ T5910] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 321.063584][ T5910] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 321.063665][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.212247][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 321.212369][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 321.292092][ T5910] usb 5-1: config 0 descriptor?? [ 321.292838][ T9] usb 2-1: USB disconnect, device number 10 [ 321.316114][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.430569][ T5910] gspca_main: spca508-2.14.0 probing 8086:0110 [ 321.516158][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.703562][ T5910] gspca_spca508: reg_read err -32 [ 321.717213][ T5910] gspca_spca508: reg_read err -32 [ 321.874331][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.279316][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.008540][ T5827] Bluetooth: hci5: command tx timeout [ 323.011590][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.040006][ T5910] gspca_spca508: reg_read err -110 [ 323.044509][ T5910] gspca_spca508: reg_read err -32 [ 323.070871][ T5910] gspca_spca508: reg write: error -32 [ 323.070962][ T5910] spca508 5-1:0.0: probe with driver spca508 failed with error -32 [ 323.531971][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.958484][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.933965][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.438808][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.927632][ T5827] Bluetooth: hci5: command tx timeout [ 325.930280][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.996138][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.108849][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.323'. [ 326.118633][ T7046] team0: Port device team_slave_0 added [ 326.206465][ T5881] usb 5-1: USB disconnect, device number 14 [ 326.340675][ T7347] syz.2.329 uses obsolete (PF_INET,SOCK_PACKET) [ 326.765353][ T7046] team0: Port device team_slave_1 added [ 327.185871][ T5910] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 327.556386][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 327.558673][ T5910] usb 2-1: config 0 has an invalid interface number: 169 but max is 0 [ 327.558697][ T5910] usb 2-1: config 0 has no interface number 0 [ 327.562012][ T5910] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 327.562039][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.562057][ T5910] usb 2-1: Product: syz [ 327.562069][ T5910] usb 2-1: Manufacturer: syz [ 327.562082][ T5910] usb 2-1: SerialNumber: syz [ 327.632281][ T5910] usb 2-1: config 0 descriptor?? [ 327.744220][ T7360] FAULT_INJECTION: forcing a failure. [ 327.744220][ T7360] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 327.744253][ T7360] CPU: 1 UID: 0 PID: 7360 Comm: syz.4.332 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 327.744272][ T7360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 327.744282][ T7360] Call Trace: [ 327.744289][ T7360] [ 327.744296][ T7360] dump_stack_lvl+0x189/0x250 [ 327.744324][ T7360] ? __pfx____ratelimit+0x10/0x10 [ 327.744345][ T7360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.744366][ T7360] ? __pfx__printk+0x10/0x10 [ 327.744385][ T7360] ? __might_fault+0xb0/0x130 [ 327.744414][ T7360] should_fail_ex+0x46c/0x600 [ 327.744442][ T7360] _copy_from_iter+0x1de/0x1790 [ 327.744481][ T7360] ? __pfx__copy_from_iter+0x10/0x10 [ 327.744504][ T7360] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 327.744529][ T7360] ? skb_put+0x11b/0x210 [ 327.744550][ T7360] hci_sock_sendmsg+0x422/0xef0 [ 327.744578][ T7360] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 327.744604][ T7360] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 327.744626][ T7360] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 327.744647][ T7360] __sock_sendmsg+0x21c/0x270 [ 327.744670][ T7360] sock_write_iter+0x27f/0x370 [ 327.744693][ T7360] ? __pfx_sock_write_iter+0x10/0x10 [ 327.744730][ T7360] vfs_write+0x5d5/0xb40 [ 327.744754][ T7360] ? __pfx_sock_write_iter+0x10/0x10 [ 327.744776][ T7360] ? __pfx_vfs_write+0x10/0x10 [ 327.744804][ T7360] ? __fget_files+0x2a/0x420 [ 327.744835][ T7360] ksys_write+0x14b/0x260 [ 327.744856][ T7360] ? __pfx_ksys_write+0x10/0x10 [ 327.744879][ T7360] ? do_syscall_64+0xbe/0xfa0 [ 327.744902][ T7360] do_syscall_64+0xfa/0xfa0 [ 327.744920][ T7360] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.744940][ T7360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.744955][ T7360] ? clear_bhb_loop+0x60/0xb0 [ 327.744975][ T7360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.744991][ T7360] RIP: 0033:0x7f8cf184efc9 [ 327.745006][ T7360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.745020][ T7360] RSP: 002b:00007f8cefab6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 327.745039][ T7360] RAX: ffffffffffffffda RBX: 00007f8cf1aa5fa0 RCX: 00007f8cf184efc9 [ 327.745052][ T7360] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000013 [ 327.745062][ T7360] RBP: 00007f8cefab6090 R08: 0000000000000000 R09: 0000000000000000 [ 327.745073][ T7360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.745083][ T7360] R13: 00007f8cf1aa6038 R14: 00007f8cf1aa5fa0 R15: 00007ffd26a099a8 [ 327.745112][ T7360] [ 328.012397][ T7362] devpts: Bad value for 'max' [ 328.108538][ T5910] gspca_main: se401-2.14.0 probing 047d:5003 [ 328.636482][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 328.765180][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.766485][ T7046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.766499][ T7046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.766523][ T7046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.805889][ T7046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.805904][ T7046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.805927][ T7046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.876167][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 328.877091][ T9] usb 5-1: too many configurations: 15, using maximum allowed: 8 [ 328.882147][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 328.882184][ T9] usb 5-1: can't read configurations, error -61 [ 328.960508][ T5910] gspca_se401: read req failed req 0x06 error -19 [ 328.985435][ T5910] usb 2-1: USB disconnect, device number 11 [ 329.100924][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.116251][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 329.266359][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.286196][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 329.287083][ T9] usb 5-1: too many configurations: 15, using maximum allowed: 8 [ 329.290440][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 329.290474][ T9] usb 5-1: can't read configurations, error -61 [ 329.335105][ T9] usb usb5-port1: attempt power cycle [ 329.615618][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.726226][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 329.747031][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 329.747892][ T9] usb 5-1: too many configurations: 15, using maximum allowed: 8 [ 329.749990][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 329.750021][ T9] usb 5-1: can't read configurations, error -61 [ 329.876192][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 329.897151][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 329.897969][ T9] usb 5-1: too many configurations: 15, using maximum allowed: 8 [ 329.899990][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 329.900020][ T9] usb 5-1: can't read configurations, error -61 [ 329.900408][ T9] usb usb5-port1: unable to enumerate USB device [ 329.933046][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.050922][ T43] hsr_slave_0: left promiscuous mode [ 330.106956][ T43] hsr_slave_1: left promiscuous mode [ 330.107960][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.107984][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.167356][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.167382][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.346058][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.516170][ T43] hsr_slave_0: left promiscuous mode [ 330.801968][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.824397][ T43] hsr_slave_1: left promiscuous mode [ 330.825373][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.272839][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.705528][ T7367] mmap: syz.4.334 (7367): VmData 37400576 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 331.719232][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.725707][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.907977][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.025692][ T43] veth1_macvtap: left promiscuous mode [ 332.025800][ T43] veth0_macvtap: left promiscuous mode [ 332.028409][ T43] veth1_vlan: left promiscuous mode [ 332.028592][ T43] veth0_vlan: left promiscuous mode [ 332.301608][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.336148][ T7390] netlink: 52 bytes leftover after parsing attributes in process `syz.4.342'. [ 333.984715][ T7399] FAULT_INJECTION: forcing a failure. [ 333.984715][ T7399] name failslab, interval 1, probability 0, space 0, times 0 [ 333.984805][ T7399] CPU: 0 UID: 0 PID: 7399 Comm: syz.1.344 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 333.984825][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 333.984835][ T7399] Call Trace: [ 333.984842][ T7399] [ 333.984850][ T7399] dump_stack_lvl+0x189/0x250 [ 333.984877][ T7399] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.984899][ T7399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.984921][ T7399] ? __pfx__printk+0x10/0x10 [ 333.984953][ T7399] should_fail_ex+0x46c/0x600 [ 333.984979][ T7399] should_failslab+0xa8/0x100 [ 333.985002][ T7399] __kmalloc_cache_noprof+0x6f/0x6c0 [ 333.985025][ T7399] ? alloc_pipe_info+0xe9/0x4e0 [ 333.985050][ T7399] alloc_pipe_info+0xe9/0x4e0 [ 333.985073][ T7399] splice_direct_to_actor+0xa6e/0xcd0 [ 333.985096][ T7399] ? preempt_schedule_irq+0xde/0x150 [ 333.985116][ T7399] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 333.985145][ T7399] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.985169][ T7399] ? __pfx_direct_splice_actor+0x10/0x10 [ 333.985196][ T7399] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 333.985221][ T7399] ? do_splice_direct+0x164/0x270 [ 333.985247][ T7399] do_splice_direct+0x187/0x270 [ 333.985271][ T7399] ? __pfx_do_splice_direct+0x10/0x10 [ 333.985293][ T7399] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 333.985319][ T7399] ? do_sendfile+0x4c7/0x7f0 [ 333.985349][ T7399] do_sendfile+0x4ec/0x7f0 [ 333.985381][ T7399] ? __pfx_do_sendfile+0x10/0x10 [ 333.985411][ T7399] ? __pfx___schedule+0x10/0x10 [ 333.985433][ T7399] __se_sys_sendfile64+0x13e/0x190 [ 333.985456][ T7399] ? irqentry_exit+0x74/0x90 [ 333.985477][ T7399] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 333.985504][ T7399] ? do_syscall_64+0xbe/0xfa0 [ 333.985528][ T7399] do_syscall_64+0xfa/0xfa0 [ 333.985549][ T7399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.985565][ T7399] ? asm_sysvec_call_function_single+0x1a/0x20 [ 333.985583][ T7399] ? clear_bhb_loop+0x60/0xb0 [ 333.985603][ T7399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.985620][ T7399] RIP: 0033:0x7f42c60fefc9 [ 333.985635][ T7399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.985651][ T7399] RSP: 002b:00007f42c433d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 333.985670][ T7399] RAX: ffffffffffffffda RBX: 00007f42c6356090 RCX: 00007f42c60fefc9 [ 333.985683][ T7399] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 333.985694][ T7399] RBP: 00007f42c433d090 R08: 0000000000000000 R09: 0000000000000000 [ 333.985705][ T7399] R10: 000000008000fb00 R11: 0000000000000246 R12: 0000000000000001 [ 333.985716][ T7399] R13: 00007f42c6356128 R14: 00007f42c6356090 R15: 00007ffeea97a758 [ 333.985747][ T7399] [ 336.752978][ T43] team0 (unregistering): Port device team_slave_1 removed [ 337.069916][ T43] team0 (unregistering): Port device team_slave_0 removed [ 337.097065][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 337.114117][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.125859][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.127210][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.131540][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.132328][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.266210][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 337.268243][ T9] usb 2-1: config 0 has an invalid interface number: 149 but max is 0 [ 337.268267][ T9] usb 2-1: config 0 has an invalid descriptor of length 146, skipping remainder of the config [ 337.268285][ T9] usb 2-1: config 0 has no interface number 0 [ 337.268330][ T9] usb 2-1: config 0 interface 149 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.270999][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 337.271026][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.271043][ T9] usb 2-1: Product: syz [ 337.271053][ T9] usb 2-1: Manufacturer: syz [ 337.271060][ T9] usb 2-1: SerialNumber: syz [ 337.274779][ T9] usb 2-1: config 0 descriptor?? [ 337.517989][ T9] usb 2-1: probing VID:PID(0424:012C) [ 337.521612][ T9] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 337.521677][ T9] vub300 2-1:0.149: probe with driver vub300 failed with error -22 [ 337.524590][ T9] usb 2-1: USB disconnect, device number 12 [ 338.284520][ T7425] netlink: 16 bytes leftover after parsing attributes in process `syz.1.353'. [ 339.206279][ T5827] Bluetooth: hci1: command tx timeout [ 340.077064][ T43] team0 (unregistering): Port device team_slave_1 removed [ 340.216812][ T43] team0 (unregistering): Port device team_slave_0 removed [ 340.768040][ T7046] hsr_slave_0: entered promiscuous mode [ 340.769436][ T7046] hsr_slave_1: entered promiscuous mode [ 340.770389][ T7046] debugfs: 'hsr0' already exists in 'hsr' [ 340.770412][ T7046] Cannot create hsr debugfs directory [ 341.294212][ T5827] Bluetooth: hci1: command tx timeout [ 342.824666][ T7450] tmpfs: Bad value for 'mpol' [ 343.947474][ T5827] Bluetooth: hci1: command tx timeout [ 345.455605][ T7304] chnl_net:caif_netlink_parms(): no params data found [ 345.626883][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 345.806288][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 345.808911][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 345.808931][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 345.808942][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 345.808953][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 345.808974][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 345.808985][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.812122][ T9] usb 5-1: config 0 descriptor?? [ 346.007197][ T5827] Bluetooth: hci1: command tx timeout [ 346.057055][ T9] usb 5-1: USB disconnect, device number 19 [ 347.123605][ T7304] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.123741][ T7304] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.123989][ T7304] bridge_slave_0: entered allmulticast mode [ 347.125822][ T7304] bridge_slave_0: entered promiscuous mode [ 347.185559][ T7304] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.185661][ T7304] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.185790][ T7304] bridge_slave_1: entered allmulticast mode [ 347.187603][ T7304] bridge_slave_1: entered promiscuous mode [ 348.086414][ T5827] Bluetooth: hci1: command tx timeout [ 348.174937][ T7304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.129250][ T7304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.530392][ T7516] netlink: 112 bytes leftover after parsing attributes in process `syz.4.369'. [ 349.653820][ T7304] team0: Port device team_slave_0 added [ 349.655489][ T7418] chnl_net:caif_netlink_parms(): no params data found [ 349.692363][ T7304] team0: Port device team_slave_1 added [ 354.016465][ T7565] netlink: 72 bytes leftover after parsing attributes in process `syz.1.383'. [ 354.079473][ T7304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.079498][ T7304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.079523][ T7304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.262898][ T7304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.262914][ T7304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.262940][ T7304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.533062][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 354.533699][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 354.541156][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 354.541360][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 354.543328][ T7578] ceph: No mds server is up or the cluster is laggy [ 355.259639][ T7418] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.259769][ T7418] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.259981][ T7418] bridge_slave_0: entered allmulticast mode [ 355.262781][ T7418] bridge_slave_0: entered promiscuous mode [ 355.282557][ T7304] hsr_slave_0: entered promiscuous mode [ 355.284096][ T7304] hsr_slave_1: entered promiscuous mode [ 355.285202][ T7304] debugfs: 'hsr0' already exists in 'hsr' [ 355.285225][ T7304] Cannot create hsr debugfs directory [ 355.285615][ T7418] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.285748][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.286759][ T7418] bridge_slave_1: entered allmulticast mode [ 355.289353][ T7418] bridge_slave_1: entered promiscuous mode [ 355.366201][ T44] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 355.536423][ T44] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 355.536451][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.536469][ T44] usb 3-1: Product: syz [ 355.536481][ T44] usb 3-1: Manufacturer: syz [ 355.536493][ T44] usb 3-1: SerialNumber: syz [ 355.552857][ T44] usb 3-1: config 0 descriptor?? [ 355.883395][ T7418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.045819][ T7598] autofs4:pid:7598:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.8074), cmd(0xc018937e) [ 356.045869][ T7598] autofs4:pid:7598:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 356.046814][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.900835][ T44] usb 3-1: Firmware version (0.0) predates our first public release. [ 356.900859][ T44] usb 3-1: Please update to version 0.2 or newer [ 356.995181][ T7418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.554460][ T5826] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 357.785515][ T5826] usb 2-1: Using ep0 maxpacket: 32 [ 357.892511][ T5826] usb 2-1: config 0 has an invalid interface number: 149 but max is 0 [ 357.892666][ T5826] usb 2-1: config 0 has an invalid descriptor of length 146, skipping remainder of the config [ 357.892741][ T5826] usb 2-1: config 0 has no interface number 0 [ 357.893763][ T5826] usb 2-1: config 0 interface 149 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.143458][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.207964][ T5826] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 358.207992][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.208009][ T5826] usb 2-1: Product: syz [ 358.208022][ T5826] usb 2-1: Manufacturer: syz [ 358.208034][ T5826] usb 2-1: SerialNumber: syz [ 358.257899][ T5826] usb 2-1: config 0 descriptor?? [ 358.390707][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.467477][ T43] bridge_slave_1: left allmulticast mode [ 358.467505][ T43] bridge_slave_1: left promiscuous mode [ 358.467769][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.470616][ T5826] usb 2-1: probing VID:PID(0424:012C) [ 358.471982][ T5826] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 358.472043][ T5826] vub300 2-1:0.149: probe with driver vub300 failed with error -22 [ 358.473765][ T5826] usb 2-1: USB disconnect, device number 13 [ 359.420528][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.488935][ T43] bridge_slave_0: left allmulticast mode [ 359.489416][ T43] bridge_slave_0: left promiscuous mode [ 359.490575][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.555717][ T7615] netlink: 'syz.4.395': attribute type 39 has an invalid length. [ 359.582835][ T43] bridge_slave_1: left allmulticast mode [ 359.582855][ T43] bridge_slave_1: left promiscuous mode [ 359.583016][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.655531][ T43] bridge_slave_0: left allmulticast mode [ 359.655560][ T43] bridge_slave_0: left promiscuous mode [ 359.655807][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.748550][ T43] bridge_slave_1: left allmulticast mode [ 359.748578][ T43] bridge_slave_1: left promiscuous mode [ 359.748801][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.824677][ T43] bridge_slave_0: left allmulticast mode [ 359.824701][ T43] bridge_slave_0: left promiscuous mode [ 359.824867][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.902710][ T5812] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 362.392843][ T5812] usb 2-1: Using ep0 maxpacket: 8 [ 362.396519][ T5812] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.396578][ T5812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 362.396603][ T5812] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 362.396643][ T5812] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 362.396665][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.470662][ T5812] usb 2-1: config 0 descriptor?? [ 364.500701][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.691438][ T6149] usb 2-1: USB disconnect, device number 14 [ 367.080919][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.952524][ T43] bond0 (unregistering): Released all slaves [ 368.946299][ T7656] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 369.259446][ T988] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 369.505841][ T988] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 369.506092][ T988] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.506161][ T988] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 369.506208][ T988] usb 2-1: config 0 interface 0 has no altsetting 0 [ 369.506386][ T988] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 369.506430][ T988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.785144][ T988] usb 2-1: config 0 descriptor?? [ 371.625308][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.688719][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.721416][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.753189][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.804292][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.840969][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.915332][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.947771][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.968119][ T988] usbhid 2-1:0.0: can't add hid device: -71 [ 371.968240][ T988] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 371.998780][ T988] usb 2-1: USB disconnect, device number 15 [ 372.042782][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.407'. [ 372.284938][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d768800: rx timeout, send abort [ 372.862318][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.862384][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d768800: abort rx timeout. Force session deactivation [ 372.866281][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d768000: rx timeout, send abort [ 372.880533][ T7665] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 373.366125][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d768000: abort rx timeout. Force session deactivation [ 374.955996][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.066387][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.269803][ T7671] netlink: 'syz.2.411': attribute type 39 has an invalid length. [ 376.514592][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.543469][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.612982][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.642194][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.748600][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 376.776783][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 376.778249][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 376.779679][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 376.781803][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.014808][ T5827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 377.038353][ T5827] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 377.054451][ T5827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 377.069587][ T5827] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 377.070748][ T5827] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 377.482797][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.837968][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.986274][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.360814][ T43] bond0 (unregistering): Released all slaves [ 378.723875][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.723974][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.874288][ T5827] Bluetooth: hci4: command tx timeout [ 379.010828][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.114175][ T5827] Bluetooth: hci6: command tx timeout [ 379.887098][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.920516][ C1] vkms_vblank_simulate: vblank timer overrun [ 380.003910][ C1] vkms_vblank_simulate: vblank timer overrun [ 380.088464][ C1] vkms_vblank_simulate: vblank timer overrun [ 380.953175][ T5827] Bluetooth: hci4: command tx timeout [ 381.193135][ T5827] Bluetooth: hci6: command tx timeout [ 383.032591][ T5827] Bluetooth: hci4: command tx timeout [ 383.272312][ T5827] Bluetooth: hci6: command tx timeout [ 385.111188][ T5827] Bluetooth: hci4: command tx timeout [ 385.351064][ T5827] Bluetooth: hci6: command tx timeout [ 386.800612][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.326582][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.106204][ T5821] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 388.125246][ T5821] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 388.126477][ T5821] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 388.127628][ T5821] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 388.128806][ T5821] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 388.494006][ T43] bond0 (unregistering): Released all slaves [ 390.228613][ T5821] Bluetooth: hci7: command tx timeout [ 390.586347][ T44] usb 3-1: USB disconnect, device number 18 [ 392.312202][ T5821] Bluetooth: hci7: command tx timeout [ 392.841737][ T5827] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 392.859886][ T5827] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 392.861322][ T5827] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 392.862580][ T5827] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 392.863369][ T5827] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 394.387345][ T5821] Bluetooth: hci7: command tx timeout [ 394.483759][ T7658] vti0: entered promiscuous mode [ 394.483784][ T7658] vti0: entered allmulticast mode [ 395.036258][ T5821] Bluetooth: hci8: command tx timeout [ 396.468346][ T5821] Bluetooth: hci7: command tx timeout [ 397.105791][ T5821] Bluetooth: hci8: command tx timeout [ 397.528841][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 397.558737][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 397.560059][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 397.561295][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 397.562141][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 399.184839][ T5821] Bluetooth: hci8: command tx timeout [ 399.239523][ T7418] team0: Port device team_slave_0 added [ 399.584027][ T5821] Bluetooth: hci5: command tx timeout [ 401.262995][ T5821] Bluetooth: hci8: command tx timeout [ 401.664926][ T5821] Bluetooth: hci5: command tx timeout [ 403.741748][ T5821] Bluetooth: hci5: command tx timeout [ 405.820764][ T5821] Bluetooth: hci5: command tx timeout [ 407.573177][ T7674] chnl_net:caif_netlink_parms(): no params data found [ 407.626351][ T7677] chnl_net:caif_netlink_parms(): no params data found [ 407.850146][ T7672] chnl_net:caif_netlink_parms(): no params data found [ 409.134527][ T7683] chnl_net:caif_netlink_parms(): no params data found [ 409.172806][ T7680] chnl_net:caif_netlink_parms(): no params data found [ 414.865906][ T7674] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.866031][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.866490][ T7674] bridge_slave_0: entered allmulticast mode [ 414.869297][ T7674] bridge_slave_0: entered promiscuous mode [ 414.909838][ T7677] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.910238][ T7677] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.910817][ T7677] bridge_slave_0: entered allmulticast mode [ 414.913701][ T7677] bridge_slave_0: entered promiscuous mode [ 415.248031][ T7674] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.248190][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.248423][ T7674] bridge_slave_1: entered allmulticast mode [ 415.251557][ T7674] bridge_slave_1: entered promiscuous mode [ 415.312461][ T7677] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.312592][ T7677] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.312853][ T7677] bridge_slave_1: entered allmulticast mode [ 415.315709][ T7677] bridge_slave_1: entered promiscuous mode [ 417.868040][ T7672] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.868173][ T7672] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.868408][ T7672] bridge_slave_0: entered allmulticast mode [ 417.871319][ T7672] bridge_slave_0: entered promiscuous mode [ 420.723504][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.723634][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.723874][ T7672] bridge_slave_1: entered allmulticast mode [ 420.726732][ T7672] bridge_slave_1: entered promiscuous mode [ 420.736104][ T7674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.108358][ T7677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.524359][ T7674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.524597][ T7683] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.524733][ T7683] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.524919][ T7683] bridge_slave_0: entered allmulticast mode [ 422.528010][ T7683] bridge_slave_0: entered promiscuous mode [ 422.530717][ T7680] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.530848][ T7680] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.531050][ T7680] bridge_slave_0: entered allmulticast mode [ 422.537588][ T7680] bridge_slave_0: entered promiscuous mode [ 422.545757][ T7677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.851503][ T7683] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.851905][ T7683] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.852147][ T7683] bridge_slave_1: entered allmulticast mode [ 423.854742][ T7683] bridge_slave_1: entered promiscuous mode [ 423.856859][ T7680] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.856976][ T7680] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.857172][ T7680] bridge_slave_1: entered allmulticast mode [ 423.860075][ T7680] bridge_slave_1: entered promiscuous mode [ 424.648288][ T7672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.592851][ T7672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.344044][ T7674] team0: Port device team_slave_0 added [ 429.106503][ T43] hsr_slave_0: left promiscuous mode [ 429.501131][ T43] hsr_slave_1: left promiscuous mode [ 429.537155][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.612221][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.446955][ T43] hsr_slave_0: left promiscuous mode [ 430.870979][ T43] hsr_slave_1: left promiscuous mode [ 430.892830][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.653132][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.921697][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.091348][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.761918][ T43] team0 (unregistering): Port device team_slave_1 removed [ 434.104983][ T43] team0 (unregistering): Port device team_slave_0 removed [ 437.943958][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 438.071248][ T5838] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 438.089460][ T5838] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 438.090992][ T5838] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 438.092162][ T5838] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 438.092946][ T5838] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 438.172729][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 438.173918][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 438.192716][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 438.203608][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 440.129883][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.129957][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.203765][ T5821] Bluetooth: hci9: command tx timeout [ 440.283889][ T5821] Bluetooth: hci1: command tx timeout [ 441.939641][ T43] team0 (unregistering): Port device team_slave_1 removed [ 442.282596][ T5821] Bluetooth: hci9: command tx timeout [ 442.362538][ T5821] Bluetooth: hci1: command tx timeout [ 442.437414][ T43] team0 (unregistering): Port device team_slave_0 removed [ 444.361638][ T5821] Bluetooth: hci9: command tx timeout [ 444.441390][ T5821] Bluetooth: hci1: command tx timeout [ 446.271207][ T43] team0 (unregistering): Port device team_slave_1 removed [ 446.444384][ T5821] Bluetooth: hci9: command tx timeout [ 446.520959][ T5821] Bluetooth: hci1: command tx timeout [ 446.756924][ T43] team0 (unregistering): Port device team_slave_0 removed [ 448.716923][ T5827] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 448.728039][ T5827] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 448.737802][ T5827] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 448.750945][ T5827] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 448.751664][ T5827] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 448.891729][ T7677] team0: Port device team_slave_0 added [ 449.671997][ T7674] team0: Port device team_slave_1 added [ 449.715293][ T7683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.742987][ T7680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.810410][ T7683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.814213][ T7680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.775686][ T5827] Bluetooth: hci10: command tx timeout [ 452.837231][ T5827] Bluetooth: hci10: command tx timeout [ 453.082908][ T5821] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 453.085575][ T5821] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 453.086726][ T5821] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 453.114169][ T5821] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 453.114935][ T5821] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 454.916311][ T5827] Bluetooth: hci10: command tx timeout [ 455.156281][ T5827] Bluetooth: hci7: command tx timeout [ 456.995475][ T5827] Bluetooth: hci10: command tx timeout [ 457.235210][ T5827] Bluetooth: hci7: command tx timeout [ 458.019931][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 458.038824][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 458.052092][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 458.111674][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 458.112574][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 458.847578][ T7683] team0: Port device team_slave_0 added [ 459.314258][ T5821] Bluetooth: hci7: command tx timeout [ 460.194139][ T5821] Bluetooth: hci4: command tx timeout [ 461.393041][ T5821] Bluetooth: hci7: command tx timeout [ 462.273024][ T5821] Bluetooth: hci4: command tx timeout [ 464.351985][ T5821] Bluetooth: hci4: command tx timeout [ 465.828391][ T7719] chnl_net:caif_netlink_parms(): no params data found [ 465.896461][ T7722] chnl_net:caif_netlink_parms(): no params data found [ 466.432385][ T5821] Bluetooth: hci4: command tx timeout [ 467.878672][ T7728] chnl_net:caif_netlink_parms(): no params data found [ 467.934063][ T7725] chnl_net:caif_netlink_parms(): no params data found [ 467.950551][ T7717] chnl_net:caif_netlink_parms(): no params data found [ 475.150057][ T7719] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.150198][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.150448][ T7719] bridge_slave_0: entered allmulticast mode [ 475.154823][ T7719] bridge_slave_0: entered promiscuous mode [ 476.023929][ T7719] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.024063][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.024341][ T7719] bridge_slave_1: entered allmulticast mode [ 476.069195][ T7719] bridge_slave_1: entered promiscuous mode [ 476.137361][ T7722] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.137493][ T7722] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.137765][ T7722] bridge_slave_0: entered allmulticast mode [ 476.140710][ T7722] bridge_slave_0: entered promiscuous mode [ 477.084685][ T7722] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.084864][ T7722] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.101878][ T7722] bridge_slave_1: entered allmulticast mode [ 477.113584][ T7722] bridge_slave_1: entered promiscuous mode [ 480.962553][ T7719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.894518][ T7728] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.894669][ T7728] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.894905][ T7728] bridge_slave_0: entered allmulticast mode [ 482.898962][ T7728] bridge_slave_0: entered promiscuous mode [ 482.931784][ T7719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.956798][ T7725] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.956958][ T7725] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.957251][ T7725] bridge_slave_0: entered allmulticast mode [ 482.960102][ T7725] bridge_slave_0: entered promiscuous mode [ 482.993163][ T7717] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.993316][ T7717] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.993560][ T7717] bridge_slave_0: entered allmulticast mode [ 482.996652][ T7717] bridge_slave_0: entered promiscuous mode [ 483.037548][ T7722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.037828][ T7728] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.037977][ T7728] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.038452][ T7728] bridge_slave_1: entered allmulticast mode [ 483.041290][ T7728] bridge_slave_1: entered promiscuous mode [ 484.007921][ T7725] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.008055][ T7725] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.008285][ T7725] bridge_slave_1: entered allmulticast mode [ 484.035996][ T7725] bridge_slave_1: entered promiscuous mode [ 484.054294][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.054453][ T7717] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.054743][ T7717] bridge_slave_1: entered allmulticast mode [ 484.057712][ T7717] bridge_slave_1: entered promiscuous mode [ 484.090666][ T7722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.207185][ T7719] team0: Port device team_slave_0 added [ 488.963834][ T7719] team0: Port device team_slave_1 added [ 488.997245][ T7728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.014679][ T7725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.038865][ T7717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.053300][ T7722] team0: Port device team_slave_0 added [ 489.814036][ T7728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.817717][ T7725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.847831][ T7717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.870182][ T7722] team0: Port device team_slave_1 added [ 493.231684][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.231701][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.231727][ T7719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.586845][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.586862][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.586889][ T7719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.837797][ T7725] team0: Port device team_slave_0 added [ 496.842037][ T7728] team0: Port device team_slave_0 added [ 496.873307][ T7717] team0: Port device team_slave_0 added [ 496.874495][ T7722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.874509][ T7722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.874533][ T7722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.928450][ T7725] team0: Port device team_slave_1 added [ 496.940162][ T7728] team0: Port device team_slave_1 added [ 496.959475][ T7717] team0: Port device team_slave_1 added [ 496.960742][ T7722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.960757][ T7722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.960784][ T7722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.634857][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 499.657161][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 499.659723][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 499.661440][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 499.662270][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 499.806054][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 499.828338][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 499.829740][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 499.832796][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 499.857305][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 501.547628][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.547701][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.775058][ T5821] Bluetooth: hci2: command tx timeout [ 501.933211][ T5821] Bluetooth: hci5: command tx timeout [ 502.313697][ T7728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.313713][ T7728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.313738][ T7728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.851715][ T5821] Bluetooth: hci2: command tx timeout [ 504.011910][ T5821] Bluetooth: hci5: command tx timeout [ 504.473105][ T7728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.473122][ T7728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.473148][ T7728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.477233][ T7725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.477248][ T7725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.477272][ T7725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.931070][ T5821] Bluetooth: hci2: command tx timeout [ 506.090839][ T5821] Bluetooth: hci5: command tx timeout [ 507.460871][ T7725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.460888][ T7725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.460913][ T7725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.009632][ T5821] Bluetooth: hci2: command tx timeout [ 508.123407][ T7722] hsr_slave_0: entered promiscuous mode [ 508.126950][ T7722] hsr_slave_1: entered promiscuous mode [ 508.141909][ T7722] debugfs: 'hsr0' already exists in 'hsr' [ 508.141936][ T7722] Cannot create hsr debugfs directory [ 508.172567][ T5821] Bluetooth: hci5: command tx timeout [ 509.107869][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 509.127194][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 509.128485][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 509.147446][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 509.148806][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 509.811241][ T7728] hsr_slave_0: entered promiscuous mode [ 509.820057][ T7728] hsr_slave_1: entered promiscuous mode [ 509.844385][ T7728] debugfs: 'hsr0' already exists in 'hsr' [ 509.844416][ T7728] Cannot create hsr debugfs directory [ 510.850378][ T7725] hsr_slave_0: entered promiscuous mode [ 510.852123][ T7725] hsr_slave_1: entered promiscuous mode [ 510.853746][ T7725] debugfs: 'hsr0' already exists in 'hsr' [ 510.853772][ T7725] Cannot create hsr debugfs directory [ 511.208128][ T5827] Bluetooth: hci1: command tx timeout [ 513.135645][ T5821] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 513.156368][ T5821] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 513.165465][ T5821] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 513.166611][ T5821] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 513.196622][ T5821] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 513.287582][ T5821] Bluetooth: hci1: command tx timeout [ 515.305630][ T5821] Bluetooth: hci6: command tx timeout [ 515.366052][ T5821] Bluetooth: hci1: command tx timeout [ 517.364910][ T5821] Bluetooth: hci6: command tx timeout [ 517.444942][ T5821] Bluetooth: hci1: command tx timeout [ 518.656763][ T5827] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 518.681009][ T5827] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 518.682309][ T5827] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 518.683571][ T5827] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 518.708089][ T5827] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 519.443965][ T5827] Bluetooth: hci6: command tx timeout [ 520.024003][ T7764] chnl_net:caif_netlink_parms(): no params data found [ 520.803292][ T5827] Bluetooth: hci7: command tx timeout [ 521.522828][ T5827] Bluetooth: hci6: command tx timeout [ 521.741727][ T7762] chnl_net:caif_netlink_parms(): no params data found [ 521.860889][ T7767] chnl_net:caif_netlink_parms(): no params data found [ 522.882801][ T5827] Bluetooth: hci7: command tx timeout [ 524.961435][ T5827] Bluetooth: hci7: command tx timeout [ 527.042077][ T5827] Bluetooth: hci7: command tx timeout [ 527.893889][ T7764] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.894026][ T7764] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.894349][ T7764] bridge_slave_0: entered allmulticast mode [ 527.898148][ T7764] bridge_slave_0: entered promiscuous mode [ 527.966513][ T7770] chnl_net:caif_netlink_parms(): no params data found [ 527.990885][ T7764] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.991090][ T7764] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.991423][ T7764] bridge_slave_1: entered allmulticast mode [ 527.994764][ T7764] bridge_slave_1: entered promiscuous mode [ 531.987918][ T7762] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.988083][ T7762] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.988361][ T7762] bridge_slave_0: entered allmulticast mode [ 531.992767][ T7762] bridge_slave_0: entered promiscuous mode [ 533.641641][ T7764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.641898][ T7762] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.643281][ T7762] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.643564][ T7762] bridge_slave_1: entered allmulticast mode [ 533.646569][ T7762] bridge_slave_1: entered promiscuous mode [ 533.683849][ T7767] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.683982][ T7767] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.684294][ T7767] bridge_slave_0: entered allmulticast mode [ 533.712998][ T7767] bridge_slave_0: entered promiscuous mode [ 533.782913][ T7764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.289325][ T7767] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.289501][ T7767] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.289828][ T7767] bridge_slave_1: entered allmulticast mode [ 535.316803][ T7767] bridge_slave_1: entered promiscuous mode [ 539.268954][ T7762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.765716][ T7764] team0: Port device team_slave_0 added [ 539.789088][ T7767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.816120][ T7762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.875712][ T7764] team0: Port device team_slave_1 added [ 540.427387][ T7767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.666332][ T7770] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.666511][ T7770] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.666850][ T7770] bridge_slave_0: entered allmulticast mode [ 541.669843][ T7770] bridge_slave_0: entered promiscuous mode [ 544.163378][ T7770] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.163526][ T7770] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.163857][ T7770] bridge_slave_1: entered allmulticast mode [ 544.168144][ T7770] bridge_slave_1: entered promiscuous mode [ 545.287845][ T7762] team0: Port device team_slave_0 added [ 545.289581][ T7764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.289595][ T7764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.289620][ T7764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.290568][ T7775] chnl_net:caif_netlink_parms(): no params data found [ 545.965187][ T7767] team0: Port device team_slave_0 added [ 545.967037][ T7764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.967054][ T7764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.967079][ T7764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.026655][ T7762] team0: Port device team_slave_1 added [ 547.336780][ T7767] team0: Port device team_slave_1 added [ 547.777780][ T7770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.034019][ T7770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.385292][ T7762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.385310][ T7762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.385335][ T7762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.338982][ T7762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.338998][ T7762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.339025][ T7762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.868018][ T7767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.868037][ T7767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.868061][ T7767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.522035][ T7767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.522052][ T7767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.522079][ T7767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.084618][ T7770] team0: Port device team_slave_0 added [ 553.107431][ T7764] hsr_slave_0: entered promiscuous mode [ 553.109193][ T7764] hsr_slave_1: entered promiscuous mode [ 553.114405][ T7764] debugfs: 'hsr0' already exists in 'hsr' [ 553.114432][ T7764] Cannot create hsr debugfs directory [ 554.290133][ T7770] team0: Port device team_slave_1 added [ 557.675453][ T7775] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.675586][ T7775] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.675879][ T7775] bridge_slave_0: entered allmulticast mode [ 557.679074][ T7775] bridge_slave_0: entered promiscuous mode [ 560.527097][ T7762] hsr_slave_0: entered promiscuous mode [ 560.529512][ T7762] hsr_slave_1: entered promiscuous mode [ 560.530607][ T7762] debugfs: 'hsr0' already exists in 'hsr' [ 560.530632][ T7762] Cannot create hsr debugfs directory [ 560.533472][ T7775] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.533609][ T7775] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.533924][ T7775] bridge_slave_1: entered allmulticast mode [ 560.547029][ T7775] bridge_slave_1: entered promiscuous mode [ 560.936095][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 560.955086][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 560.956359][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 560.957568][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 560.958399][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 561.022838][ T5827] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 561.058567][ T5827] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 561.061115][ T5827] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 561.062358][ T5827] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 561.067364][ T5827] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 562.324251][ T7770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.324269][ T7770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.324296][ T7770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.949350][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.949446][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.022307][ T5821] Bluetooth: hci4: command tx timeout [ 563.102186][ T5821] Bluetooth: hci8: command tx timeout [ 563.175111][ T7767] hsr_slave_0: entered promiscuous mode [ 563.176847][ T7767] hsr_slave_1: entered promiscuous mode [ 563.178063][ T7767] debugfs: 'hsr0' already exists in 'hsr' [ 563.178088][ T7767] Cannot create hsr debugfs directory [ 563.179248][ T7770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.179260][ T7770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.179287][ T7770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.101764][ T5821] Bluetooth: hci4: command tx timeout [ 565.181400][ T5821] Bluetooth: hci8: command tx timeout [ 565.535907][ T7775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.180342][ T5821] Bluetooth: hci4: command tx timeout [ 567.278243][ T5821] Bluetooth: hci8: command tx timeout [ 567.717477][ T7775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.238077][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 569.251737][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 569.254776][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 569.255991][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 569.256815][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 569.285394][ T5821] Bluetooth: hci4: command tx timeout [ 569.345577][ T5827] Bluetooth: hci8: command tx timeout [ 571.338220][ T5827] Bluetooth: hci2: command tx timeout [ 572.831322][ T7775] team0: Port device team_slave_0 added [ 572.875985][ T7775] team0: Port device team_slave_1 added [ 573.417916][ T5827] Bluetooth: hci2: command tx timeout [ 573.681073][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 573.706936][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 573.709335][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 573.710507][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 573.711288][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 575.496145][ T5821] Bluetooth: hci2: command tx timeout [ 575.815714][ T5821] Bluetooth: hci1: command tx timeout [ 577.575440][ T5821] Bluetooth: hci2: command tx timeout [ 577.895325][ T5821] Bluetooth: hci1: command tx timeout [ 579.623437][ T7775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.623454][ T7775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.623479][ T7775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.983567][ T5821] Bluetooth: hci1: command tx timeout [ 580.103854][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 580.128926][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 580.131204][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 580.132775][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 580.160343][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 581.794276][ T7809] chnl_net:caif_netlink_parms(): no params data found [ 581.830877][ T7807] chnl_net:caif_netlink_parms(): no params data found [ 582.054186][ T5827] Bluetooth: hci1: command tx timeout [ 582.214089][ T5827] Bluetooth: hci5: command tx timeout [ 584.291596][ T5827] Bluetooth: hci5: command tx timeout [ 586.370465][ T5827] Bluetooth: hci5: command tx timeout [ 586.975813][ T7809] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.976011][ T7809] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.976367][ T7809] bridge_slave_0: entered allmulticast mode [ 586.979346][ T7809] bridge_slave_0: entered promiscuous mode [ 587.020969][ T7807] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.021121][ T7807] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.021477][ T7807] bridge_slave_0: entered allmulticast mode [ 587.025818][ T7807] bridge_slave_0: entered promiscuous mode [ 587.098067][ T7809] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.098222][ T7809] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.098593][ T7809] bridge_slave_1: entered allmulticast mode [ 587.121950][ T7809] bridge_slave_1: entered promiscuous mode [ 587.138034][ T7807] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.138171][ T7807] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.138861][ T7807] bridge_slave_1: entered allmulticast mode [ 587.165141][ T7807] bridge_slave_1: entered promiscuous mode [ 588.449326][ T5827] Bluetooth: hci5: command tx timeout [ 588.499748][ T7809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.504428][ T7807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.547865][ T7809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.561981][ T7807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.206880][ T7807] team0: Port device team_slave_0 added [ 591.216074][ T7809] team0: Port device team_slave_0 added [ 591.243624][ T7815] chnl_net:caif_netlink_parms(): no params data found [ 591.268834][ T7812] chnl_net:caif_netlink_parms(): no params data found [ 591.315064][ T7809] team0: Port device team_slave_1 added [ 591.325511][ T7807] team0: Port device team_slave_1 added [ 594.110588][ T7820] chnl_net:caif_netlink_parms(): no params data found [ 595.902210][ T7809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.902227][ T7809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.902251][ T7809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.905276][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.905291][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.905315][ T7807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.080985][ T7809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.081002][ T7809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.081028][ T7809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.082938][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.082953][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.082977][ T7807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.541761][ T7815] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.541959][ T7815] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.542304][ T7815] bridge_slave_0: entered allmulticast mode [ 599.568598][ T7815] bridge_slave_0: entered promiscuous mode [ 601.816158][ T7812] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.816311][ T7812] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.816678][ T7812] bridge_slave_0: entered allmulticast mode [ 601.843099][ T7812] bridge_slave_0: entered promiscuous mode [ 602.546502][ T7815] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.546635][ T7815] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.546925][ T7815] bridge_slave_1: entered allmulticast mode [ 602.550245][ T7815] bridge_slave_1: entered promiscuous mode [ 602.598127][ T7809] hsr_slave_0: entered promiscuous mode [ 602.599946][ T7809] hsr_slave_1: entered promiscuous mode [ 602.601269][ T7809] debugfs: 'hsr0' already exists in 'hsr' [ 602.601296][ T7809] Cannot create hsr debugfs directory [ 602.601853][ T7812] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.601980][ T7812] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.639543][ T7812] bridge_slave_1: entered allmulticast mode [ 602.654147][ T7812] bridge_slave_1: entered promiscuous mode [ 602.676181][ T7807] hsr_slave_0: entered promiscuous mode [ 602.678141][ T7807] hsr_slave_1: entered promiscuous mode [ 602.679342][ T7807] debugfs: 'hsr0' already exists in 'hsr' [ 602.679367][ T7807] Cannot create hsr debugfs directory [ 604.463279][ T7820] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.463414][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.463716][ T7820] bridge_slave_0: entered allmulticast mode [ 604.466692][ T7820] bridge_slave_0: entered promiscuous mode [ 605.420626][ T7820] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.428158][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.428542][ T7820] bridge_slave_1: entered allmulticast mode [ 605.446010][ T7820] bridge_slave_1: entered promiscuous mode [ 605.464744][ T7815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.167731][ T7812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.175353][ T7815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.058776][ T7812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.693157][ T7820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.581309][ T7820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.583979][ T7815] team0: Port device team_slave_0 added [ 611.631788][ T7812] team0: Port device team_slave_0 added [ 612.803528][ T7815] team0: Port device team_slave_1 added [ 612.827117][ T7812] team0: Port device team_slave_1 added [ 612.837514][ T38] INFO: task syz.2.411:7671 blocked for more than 143 seconds. [ 612.837535][ T38] Not tainted syzkaller #0 [ 612.837544][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 612.837551][ T38] task:syz.2.411 state:D stack:23112 pid:7671 tgid:7669 ppid:5818 task_flags:0x400140 flags:0x00080003 [ 612.837607][ T38] Call Trace: [ 612.837618][ T38] [ 612.837631][ T38] __schedule+0x16f3/0x4c20 [ 612.837671][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 612.837706][ T38] ? __pfx___schedule+0x10/0x10 [ 612.837742][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 612.837766][ T38] rt_mutex_schedule+0x77/0xf0 [ 612.837784][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 612.837800][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 612.837832][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 612.837852][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 612.837870][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 612.837913][ T38] ? rcu_barrier+0x4c/0x570 [ 612.837930][ T38] mutex_lock_nested+0x16a/0x1d0 [ 612.837953][ T38] rcu_barrier+0x4c/0x570 [ 612.837970][ T38] ? wg_destruct+0x219/0x2f0 [ 612.837994][ T38] ? kfree+0x197/0x950 [ 612.838012][ T38] ? wg_destruct+0x219/0x2f0 [ 612.838039][ T38] wg_destruct+0x21e/0x2f0 [ 612.838062][ T38] ? __pfx_wg_destruct+0x10/0x10 [ 612.838085][ T38] netdev_run_todo+0xcd7/0xea0 [ 612.838113][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 612.838131][ T38] ? unregister_netdevice_queue+0x1b3/0x380 [ 612.838150][ T38] ? ___sys_sendmsg+0x21f/0x2a0 [ 612.838170][ T38] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 612.838194][ T38] ? mutex_lock_nested+0x16a/0x1d0 [ 612.838216][ T38] rtnl_dellink+0x5aa/0x700 [ 612.838243][ T38] ? __pfx_rtnl_dellink+0x10/0x10 [ 612.838270][ T38] ? __local_bh_enable+0x27b/0x410 [ 612.838295][ T38] ? __local_bh_enable+0x28c/0x410 [ 612.838313][ T38] ? reacquire_held_locks+0x127/0x1d0 [ 612.838339][ T38] ? __pfx___local_bh_enable+0x10/0x10 [ 612.838433][ T38] ? __pfx_rtnl_dellink+0x10/0x10 [ 612.838456][ T38] rtnetlink_rcv_msg+0x7cf/0xb70 [ 612.838491][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 612.838514][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 612.838535][ T38] ? ref_tracker_free+0x61e/0x7c0 [ 612.838558][ T38] ? __asan_memcpy+0x40/0x70 [ 612.838577][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 612.838597][ T38] ? __skb_clone+0x63/0x7a0 [ 612.838626][ T38] netlink_rcv_skb+0x208/0x470 [ 612.838645][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 612.838670][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 612.838699][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 612.838724][ T38] netlink_unicast+0x846/0xa10 [ 612.838756][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 612.838780][ T38] ? netlink_sendmsg+0x642/0xb30 [ 612.838796][ T38] ? skb_put+0x11b/0x210 [ 612.838816][ T38] netlink_sendmsg+0x805/0xb30 [ 612.838844][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 612.838869][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 612.838890][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 612.838909][ T38] __sock_sendmsg+0x21c/0x270 [ 612.838935][ T38] ____sys_sendmsg+0x508/0x820 [ 612.838960][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 612.838989][ T38] ? import_iovec+0x74/0xa0 [ 612.839011][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 612.839033][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 612.839089][ T38] ? __fget_files+0x2a/0x420 [ 612.839110][ T38] ? __fget_files+0x3a6/0x420 [ 612.839142][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 612.839164][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 612.839193][ T38] ? do_user_addr_fault+0xc85/0x1380 [ 612.839218][ T38] ? do_syscall_64+0xbe/0xfa0 [ 612.839242][ T38] do_syscall_64+0xfa/0xfa0 [ 612.839261][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 612.839281][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.839299][ T38] ? clear_bhb_loop+0x60/0xb0 [ 612.839320][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.839337][ T38] RIP: 0033:0x7fd1865cefc9 [ 612.839352][ T38] RSP: 002b:00007fd184815038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 612.839371][ T38] RAX: ffffffffffffffda RBX: 00007fd186826090 RCX: 00007fd1865cefc9 [ 612.839384][ T38] RDX: 0000000000048000 RSI: 0000200000000000 RDI: 0000000000000005 [ 612.839396][ T38] RBP: 00007fd186651f91 R08: 0000000000000000 R09: 0000000000000000 [ 612.839407][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.839418][ T38] R13: 00007fd186826128 R14: 00007fd186826090 R15: 00007ffc7b97c058 [ 612.839450][ T38] [ 612.839533][ T38] [ 612.839533][ T38] Showing all locks held in the system: [ 612.839546][ T38] 4 locks held by pr/legacy/17: [ 612.839559][ T38] 4 locks held by rcuc/1/28: [ 612.839569][ T38] 1 lock held by khungtaskd/38: [ 612.839578][ T38] #0: ffffffff8d5aa4c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 612.839624][ T38] 5 locks held by kworker/u8:2/43: [ 612.839634][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 612.839677][ T38] #1: ffffc90000b47ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 612.839719][ T38] #2: ffffffff8e855fa0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 612.839758][ T38] #3: ffff8880310617b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x2f0 [ 612.839803][ T38] #4: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 612.839855][ T38] 3 locks held by kworker/u8:9/1490: [ 612.839866][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 612.839913][ T38] #1: ffffc90005c37ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 612.839954][ T38] #2: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 612.840014][ T38] 2 locks held by getty/5579: [ 612.840024][ T38] #0: ffff88823bf348a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 612.840067][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 612.840118][ T38] 2 locks held by syz.4.395/7615: [ 612.840129][ T38] #0: ffff88803b77d7b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x2f0 [ 612.840172][ T38] #1: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 612.840212][ T38] 1 lock held by syz.1.407/7660: [ 612.840221][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 612.840259][ T38] 2 locks held by syz.2.411/7671: [ 612.840269][ T38] #0: ffff8880358797b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x2f0 [ 612.840313][ T38] #1: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 612.840355][ T38] 1 lock held by syz-executor/7717: [ 612.840365][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 612.840404][ T38] 1 lock held by syz-executor/7719: [ 612.840414][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 612.840452][ T38] 1 lock held by syz-executor/7722: [ 612.840468][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 612.840507][ T38] 1 lock held by syz-executor/7725: [ 612.840516][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 612.840557][ T38] 1 lock held by syz-executor/7728: [ 612.840566][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 612.840608][ T38] 1 lock held by syz-executor/7762: [ 612.840618][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 612.840665][ T38] 1 lock held by syz-executor/7764: [ 612.840675][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 612.840714][ T38] 1 lock held by syz-executor/7767: [ 612.840724][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 612.840764][ T38] 1 lock held by syz-executor/7770: [ 612.840773][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 612.840814][ T38] 1 lock held by syz-executor/7775: [ 612.840823][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 612.840865][ T38] 2 locks held by syz-executor/7807: [ 612.840874][ T38] #0: ffffffff8dfc6e40 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 612.840918][ T38] #1: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 612.840962][ T38] 2 locks held by syz-executor/7809: [ 612.840973][ T38] 2 locks held by syz-executor/7812: [ 612.840982][ T38] #0: ffffffff8dfecfa0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 612.841026][ T38] #1: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 612.841071][ T38] 2 locks held by syz-executor/7815: [ 612.841080][ T38] #0: ffffffff8dfecfa0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 612.841123][ T38] #1: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 612.841167][ T38] 2 locks held by syz-executor/7820: [ 612.841177][ T38] #0: ffffffff8dfecfa0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 612.841220][ T38] #1: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 612.841267][ T38] [ 612.841271][ T38] ============================================= [ 612.841271][ T38] [ 612.841293][ T38] NMI backtrace for cpu 1 [ 612.841313][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 612.841332][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 612.841341][ T38] Call Trace: [ 612.841348][ T38] [ 612.841355][ T38] dump_stack_lvl+0x189/0x250 [ 612.841381][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 612.841404][ T38] ? __pfx__printk+0x10/0x10 [ 612.841434][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 612.841454][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 612.841479][ T38] ? __pfx__printk+0x10/0x10 [ 612.841502][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 612.841523][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 612.841542][ T38] watchdog+0xf60/0xfa0 [ 612.841570][ T38] ? watchdog+0x1e2/0xfa0 [ 612.841596][ T38] kthread+0x711/0x8a0 [ 612.841621][ T38] ? __pfx_watchdog+0x10/0x10 [ 612.841641][ T38] ? __pfx_kthread+0x10/0x10 [ 612.841660][ T38] ? rt_spin_unlock+0x150/0x200 [ 612.841681][ T38] ? rt_spin_unlock+0x161/0x200 [ 612.841696][ T38] ? __pfx_kthread+0x10/0x10 [ 612.841718][ T38] ret_from_fork+0x4bc/0x870 [ 612.841740][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 612.841766][ T38] ? __switch_to_asm+0x39/0x70 [ 612.841781][ T38] ? __switch_to_asm+0x33/0x70 [ 612.841796][ T38] ? __pfx_kthread+0x10/0x10 [ 612.841819][ T38] ret_from_fork_asm+0x1a/0x30 [ 612.841851][ T38] [ 612.841857][ T38] Sending NMI from CPU 1 to CPUs 0: [ 612.841884][ C0] NMI backtrace for cpu 0 [ 612.841898][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 612.841917][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 612.841926][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 612.841951][ C0] Code: e8 ee 0d ba fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 6f c5 1b fd 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 8a 4f bf 05 cc 44 89 f9 80 e1 07 [ 612.841966][ C0] RSP: 0018:ffffc90000167870 EFLAGS: 00000202 [ 612.841981][ C0] RAX: 1ffffffff31d1700 RBX: 00000000000003fd RCX: 0000000000000000 [ 612.841993][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 612.842004][ C0] RBP: ffffffff98e8c0f0 R08: 0000000000000000 R09: 0000000000000000 [ 612.842015][ C0] R10: dffffc0000000000 R11: ffffffff8504af50 R12: dffffc0000000000 [ 612.842028][ C0] R13: 0000000000000000 R14: ffffffff98e8be60 R15: 0000000000000000 [ 612.842040][ C0] FS: 0000000000000000(0000) GS:ffff888126dfc000(0000) knlGS:0000000000000000 [ 612.842054][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 612.842066][ C0] CR2: 00007f02b74fe6b0 CR3: 000000006d030000 CR4: 00000000003526f0 [ 612.842082][ C0] Call Trace: [ 612.842089][ C0] [ 612.842097][ C0] wait_for_lsr+0x1aa/0x2f0 [ 612.842124][ C0] serial8250_console_write+0x1341/0x1b40 [ 612.842153][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 612.842174][ C0] ? console_flush_all+0x13a/0xb40 [ 612.842195][ C0] ? console_flush_all+0x476/0xb40 [ 612.842215][ C0] console_flush_all+0x666/0xb40 [ 612.842234][ C0] ? console_flush_all+0x13a/0xb40 [ 612.842255][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 612.842281][ C0] __console_flush_and_unlock+0x9b/0x160 [ 612.842299][ C0] ? legacy_kthread_func+0x136/0x1a0 [ 612.842320][ C0] ? __pfx___console_flush_and_unlock+0x10/0x10 [ 612.842337][ C0] ? schedule+0x91/0x360 [ 612.842360][ C0] legacy_kthread_func+0x13b/0x1a0 [ 612.842380][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 612.842400][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 612.842421][ C0] ? __kthread_parkme+0x7b/0x200 [ 612.842441][ C0] ? __kthread_parkme+0x1a1/0x200 [ 612.842464][ C0] kthread+0x711/0x8a0 [ 612.842488][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 612.842508][ C0] ? __pfx_kthread+0x10/0x10 [ 612.842528][ C0] ? rt_spin_unlock+0x150/0x200 [ 612.842547][ C0] ? rt_spin_unlock+0x161/0x200 [ 612.842562][ C0] ? __pfx_kthread+0x10/0x10 [ 612.842584][ C0] ret_from_fork+0x4bc/0x870 [ 612.842604][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 612.842626][ C0] ? __switch_to_asm+0x39/0x70 [ 612.842642][ C0] ? __switch_to_asm+0x33/0x70 [ 612.842658][ C0] ? __pfx_kthread+0x10/0x10 [ 612.842681][ C0] ret_from_fork_asm+0x1a/0x30 [ 612.842705][ C0]