last executing test programs: 25m11.673407295s ago: executing program 32 (id=275): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) r0 = add_key$user(&(0x7f0000002100), 0x0, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) r1 = add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r0}, &(0x7f0000000280)=""/190, 0xbe, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 20m33.500367353s ago: executing program 33 (id=1303): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) shutdown(r0, 0x1) 16m5.588148585s ago: executing program 34 (id=1933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ftruncate(r0, 0x10001) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000180)=0x0) r4 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setresgid(0x0, 0x0, r5) r6 = fcntl$dupfd(r4, 0x406, r4) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) fchown(0xffffffffffffffff, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 12m17.099251614s ago: executing program 35 (id=2260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ftruncate(r1, 0x10001) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000180)=0x0) r5 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setresgid(0x0, 0x0, r6) r7 = fcntl$dupfd(r5, 0x406, r5) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) fchown(0xffffffffffffffff, 0x0, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 11m43.93341502s ago: executing program 36 (id=2327): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x0, 0xa}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 11m40.753345717s ago: executing program 37 (id=2330): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) connect$can_bcm(r0, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 5m1.377246165s ago: executing program 38 (id=2795): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181243, 0x1bd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r5], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x0) epoll_pwait(r4, 0x0, 0x0, 0xff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) 5m0.592457079s ago: executing program 39 (id=2797): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB], 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = dup(r0) write$usbip_server(r1, &(0x7f00000007c0)=@ret_submit={{0x3, 0x8e6, 0x0, 0x0, 0x81}, 0x186aa45c, 0x0, 0xb, 0x0, 0x3}, 0x30) 4m41.867878444s ago: executing program 40 (id=2803): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x1, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0xf}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4m31.455860385s ago: executing program 41 (id=2810): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x44, 0x10, 0x1, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0xc}}]}]}, 0x44}}, 0x0) 4m15.576645704s ago: executing program 42 (id=2824): close(0xffffffffffffffff) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40) 4m14.837037194s ago: executing program 43 (id=2826): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x1e, 0x4, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 3m27.931807007s ago: executing program 2 (id=3010): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800"/126], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 3m27.696023324s ago: executing program 2 (id=3013): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)={0x0, 0x2, 0xbe}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x32b, @time={0x6, 0x7}, 0xff, {0x0, 0x7f}, 0x0, 0x2}) 3m26.602103104s ago: executing program 2 (id=3015): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000200000000000000000808"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x49}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x3000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) 3m26.351171367s ago: executing program 2 (id=3018): syz_open_dev$vim2m(&(0x7f0000000080), 0x40003, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x173600, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x16, r1, {0x9}}, './file0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x408d0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r7, &(0x7f0000001dc0)=""/4096, 0x1000) lseek(r7, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @val=@perf_event={0xc00000000000000}}, 0x18) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0xfe01, 0x401}]}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, 0x0, 0x4) 3m25.08716402s ago: executing program 2 (id=3023): ioprio_set$pid(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x3, 0x0, 0x1, 0x5000, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4, 0xe}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x3e, 0x2, 0x2, 0x47, @dev={0xfe, 0x80, '\x00', 0xc}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x700, 0x80, 0x8, 0xad}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x2, 0x0, r0, 0xbf, '\x00', r1, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000500)='\r', 0x1}], 0x1, 0x1, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xfc, r4, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xa24}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000844}, 0x4801) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000640)=[@in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e23, 0x6, @loopback, 0x9}, @in6={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x90c3}], 0x58) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0xfeff, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 3m23.183241205s ago: executing program 2 (id=3037): socket(0x1d, 0x2, 0x6) socket$inet6(0xa, 0xa, 0x40003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x122, 0x0, &(0x7f0000002380)="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", 0x0, 0xf0, 0x0, 0x0, 0xeb, &(0x7f0000000000), &(0x7f0000002140)="5f74c28a48769cc60317c7e777e00d83407d739208bbcb479d9440eb6480840e87018719c864e32974d317611915ac2d242b26f7ad01296e7ea31cff4cbe3f40be663c67bcf3c523707d940ef9d7afebf29a84341d57116e265a9517769a75bd2648704ed23a303127cc482fe849b4030926b429c11e80ed88538cd5283f4ed7c9425c88d259b8c0e3225f480678f634365f03e9ec948527519d972240d895cf72cedbf6b6233f29258cbef55c548d1aa040c832abe1b6f09b1ceb9a8a046e901fd549a825c0a1ac42dbfabd592a04ec6ba7076e4ff67aae3bd1cd481cf3ec913cdccf97d509c6e869cd33"}, 0x50) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x4009, 0x9, 0x0) 3m8.029508895s ago: executing program 44 (id=3037): socket(0x1d, 0x2, 0x6) socket$inet6(0xa, 0xa, 0x40003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x122, 0x0, &(0x7f0000002380)="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", 0x0, 0xf0, 0x0, 0x0, 0xeb, &(0x7f0000000000), &(0x7f0000002140)="5f74c28a48769cc60317c7e777e00d83407d739208bbcb479d9440eb6480840e87018719c864e32974d317611915ac2d242b26f7ad01296e7ea31cff4cbe3f40be663c67bcf3c523707d940ef9d7afebf29a84341d57116e265a9517769a75bd2648704ed23a303127cc482fe849b4030926b429c11e80ed88538cd5283f4ed7c9425c88d259b8c0e3225f480678f634365f03e9ec948527519d972240d895cf72cedbf6b6233f29258cbef55c548d1aa040c832abe1b6f09b1ceb9a8a046e901fd549a825c0a1ac42dbfabd592a04ec6ba7076e4ff67aae3bd1cd481cf3ec913cdccf97d509c6e869cd33"}, 0x50) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x4009, 0x9, 0x0) 2m7.420705886s ago: executing program 7 (id=3375): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000004) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='cdg', 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r2, &(0x7f0000000400)="89b70020040000e81403caa94cbe4d523c80fa81a9c0af", 0x17, 0x40890, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m6.604532541s ago: executing program 1 (id=3380): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, 0x0, 0x7) 2m4.488556692s ago: executing program 7 (id=3388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x14, 0x1, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) 2m4.416847332s ago: executing program 7 (id=3389): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x6c}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1d3c2, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 2m4.335886488s ago: executing program 7 (id=3390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 2m3.805988478s ago: executing program 3 (id=3393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}}, 0x0) 2m3.64889652s ago: executing program 3 (id=3395): socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x2000c010) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c09102f28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m3.630412477s ago: executing program 7 (id=3396): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaab84fbdff8a2086dd60ff00f700240600fe800000000000000000000000000034090000000000000000000000000000aa00024e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="904f000090"], 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000100)=0xb, 0x4) writev(r0, &(0x7f0000000040), 0x0) 2m3.503656644s ago: executing program 0 (id=3397): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000001c40)={@local, @multicast, @val={@val={0x88a8, 0x1, 0x1, 0x1}, {0x8100, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001900", 0x30, 0x3a, 0x0, @local, @local, {[], @dest_unreach={0x1, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x8, 0x0, 0x1, @private1, @mcast2}}}}}}}, 0x0) 2m3.503326348s ago: executing program 3 (id=3398): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x2, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/17, 0x11}, 0x4}], 0x1, 0x1822b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) 2m3.310163322s ago: executing program 7 (id=3399): setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x7, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x6, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0xd, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0xc9, 0xc, 0x65e1, 0x10001, 0xc, 0x48001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9da, 0x9, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000000)="d9", 0x1, 0xc000, &(0x7f00000001c0)={0x11, 0x4, r4, 0x1, 0x9, 0x6, @local}, 0x14) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000190) syz_open_dev$sg(0x0, 0x0, 0x8002) syz_emit_ethernet(0x0, 0x0, 0x0) 2m3.291387026s ago: executing program 1 (id=3400): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001000010828bd7000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000420040008001b000000000024002b8008000100", @ANYBLOB="0800030019"], 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x20004004) 2m2.648228513s ago: executing program 1 (id=3401): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$netlink(0x10, 0x3, 0xc) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, "66f51e", 0x28, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x80, 0x4, 0x0, 0x4, {[@md5sig={0x13, 0x12, "0681440e908315ac0cb825524e64a502"}]}}}}}}}}, 0x0) 2m2.426826535s ago: executing program 1 (id=3402): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x49}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x3000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) 2m2.381427513s ago: executing program 0 (id=3403): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602b", 0x78}]) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 2m2.311915858s ago: executing program 3 (id=3404): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x10) write$9p(r1, &(0x7f0000000640)="d5", 0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) 2m2.233841334s ago: executing program 3 (id=3405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}}, 0x0) 2m2.082095252s ago: executing program 3 (id=3406): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x7f) 2m2.041395092s ago: executing program 0 (id=3407): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0503", 0x2, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1}, 0x14) 2m1.959685901s ago: executing program 1 (id=3408): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaab84fbdff8a2086dd60ff00f700240600fe800000000000000000000000000034090000000000000000000000000000aa00024e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="904f000090"], 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000100)=0xb, 0x4) writev(r0, &(0x7f0000000040), 0x0) 2m1.871422084s ago: executing program 0 (id=3409): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="410404"], 0x7) 2m1.824868526s ago: executing program 1 (id=3410): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001000010828bd7000feffffff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0800030019"], 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x20004004) 2m1.595697817s ago: executing program 0 (id=3411): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000001d80)=0x7, 0x4) 2m1.443770592s ago: executing program 0 (id=3412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x4071bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) 1m48.020214512s ago: executing program 45 (id=3399): setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x7, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x6, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0xd, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0xc9, 0xc, 0x65e1, 0x10001, 0xc, 0x48001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9da, 0x9, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000000)="d9", 0x1, 0xc000, &(0x7f00000001c0)={0x11, 0x4, r4, 0x1, 0x9, 0x6, @local}, 0x14) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000190) syz_open_dev$sg(0x0, 0x0, 0x8002) syz_emit_ethernet(0x0, 0x0, 0x0) 1m47.033591803s ago: executing program 46 (id=3406): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x7f) 1m46.53213789s ago: executing program 47 (id=3410): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001000010828bd7000feffffff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0800030019"], 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x20004004) 1m46.004200847s ago: executing program 48 (id=3412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x4071bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) 27.252959752s ago: executing program 4 (id=3608): socket$netlink(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8810) 26.497634741s ago: executing program 4 (id=3609): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000c00), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c40)=ANY=[@ANYRES16=r2, @ANYBLOB="0100e5c45371ba22013c02"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 26.412746637s ago: executing program 4 (id=3610): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 26.353324319s ago: executing program 4 (id=3611): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 26.298983199s ago: executing program 4 (id=3612): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f0000000440), &(0x7f0000000480)=r6}, 0x20) sendmmsg$inet6(r2, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) 25.208687629s ago: executing program 4 (id=3620): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x20004801) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x2, 0x2, "a9a8"}, 0xa) 24.280799177s ago: executing program 49 (id=3620): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x20004801) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x2, 0x2, "a9a8"}, 0xa) 8.935020403s ago: executing program 5 (id=3683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000070000800900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f2c00128028000180090001006c617374000000001800028008000140ffffff430c000240fffffffffffffffb0800"], 0xb8}}, 0x20050800) 8.932855766s ago: executing program 9 (id=3684): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x25, 0x0, @val=@netkit}, 0x1c) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x1, 0xfffffffc, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x25, 0xff, {0x0, 0x4}, 0x0, 0x0, 0x4b}) 8.762606805s ago: executing program 9 (id=3685): set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r0}, 0x38) 8.575753651s ago: executing program 9 (id=3686): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x8, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x8}}}}}}, 0x0) 8.516997091s ago: executing program 5 (id=3687): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r3, 0x5}, &(0x7f0000000240)=0x8) 8.48810837s ago: executing program 5 (id=3688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40e0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c0003000000000000000c9208000240000000"], 0xfea1}}, 0x800) 8.3300161s ago: executing program 5 (id=3689): syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') preadv(r3, 0x0, 0x0, 0x33, 0x0) syz_open_dev$mouse(&(0x7f0000000040), 0x7fffffffffffffff, 0x14000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x23}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 5.871341509s ago: executing program 5 (id=3691): syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x5, &(0x7f00000004c0)={0x5, 0xf, 0x5}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20c40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0xc000) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r3, 0x4b52, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x4, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1, '\x00', 0x5, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.342205598s ago: executing program 9 (id=3695): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.167234701s ago: executing program 6 (id=3696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000070000800900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f2c00128028000180090001006c617374000000001800028008000140ffffff430c000240fffffffffffffffb0800"], 0xb8}}, 0x20050800) 5.028786101s ago: executing program 6 (id=3697): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r3, 0x5}, &(0x7f0000000240)=0x8) 4.987418791s ago: executing program 6 (id=3698): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000a00)='./debug\x00', 0x1b9) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/dynamic_debug/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000f00)='file snps_udc_core.c +p', 0x17) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='0000:00:02.0', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='amd5536udc-pci', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/amd5536udc-pci/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='0000:00:02.0', 0xc) 4.823761815s ago: executing program 6 (id=3699): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 4.432267934s ago: executing program 9 (id=3702): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 4.310279939s ago: executing program 8 (id=3703): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000"], 0x8c}}, 0x0) 4.26597523s ago: executing program 9 (id=3704): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x103}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.737232829s ago: executing program 8 (id=3705): chown(&(0x7f00000003c0)='./cfg/usb_gadget/g1/os_desc/use\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./cfg/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) 1.947722257s ago: executing program 8 (id=3706): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 447.654493ms ago: executing program 6 (id=3707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000070000800900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f2c00128028000180090001006c617374000000001800028008000140ffffff430c000240fffffffffffffffb0800"], 0xb8}}, 0x20050800) 361.774683ms ago: executing program 8 (id=3708): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000440)=0x8, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f00000000c0)) 339.033503ms ago: executing program 5 (id=3709): timer_create(0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101202) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket(0x10, 0x803, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, 0x0, 0xcfa870241e0b6801) socket$xdp(0x2c, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) dup(r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYBLOB='\a'], 0x0) 263.912029ms ago: executing program 8 (id=3710): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) bpf$MAP_CREATE(0x0, 0x0, 0x0) futex(&(0x7f0000000040)=0x2, 0xc, 0x1, 0x0, &(0x7f0000000140)=0x1, 0x2) 40.716526ms ago: executing program 6 (id=3711): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/configs/c.1/mass_storage.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000d00)='dummy_udc.0', 0xb) 0s ago: executing program 8 (id=3712): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r2}, 0x8) kernel console output (not intermixed with test programs): 17783] bridge_slave_0: entered promiscuous mode [ 1410.706099][T17783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.706240][T17783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.706401][T17783] bridge_slave_1: entered allmulticast mode [ 1410.709137][T17783] bridge_slave_1: entered promiscuous mode [ 1410.723027][T17770] team0: Port device team_slave_0 added [ 1410.742030][T17136] veth0_macvtap: entered promiscuous mode [ 1410.764439][T17770] team0: Port device team_slave_1 added [ 1410.826711][T17783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.826796][T17574] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1410.868233][T17574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1410.883031][T17136] veth1_macvtap: entered promiscuous mode [ 1410.887886][T17783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.895934][T17574] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1410.943028][T17574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1410.944052][T17770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.944061][T17770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.944074][T17770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.017078][T17574] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1411.052640][T17574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1411.054012][T17770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1411.054022][T17770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.054036][T17770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1411.403257][ T8613] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.466571][T17574] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1411.503846][T17574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1411.538090][T17783] team0: Port device team_slave_0 added [ 1411.554620][T17783] team0: Port device team_slave_1 added [ 1411.572794][T14444] Bluetooth: hci2: command tx timeout [ 1411.664579][T17783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1411.664594][T17783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.664608][T17783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.688381][T17770] hsr_slave_0: entered promiscuous mode [ 1411.689548][T17770] hsr_slave_1: entered promiscuous mode [ 1411.718513][T17770] debugfs: 'hsr0' already exists in 'hsr' [ 1411.718540][T17770] Cannot create hsr debugfs directory [ 1411.737732][T17136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1411.738862][T17783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1411.738871][T17783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.738883][T17783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1412.013347][ T8613] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.157203][T17305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1412.299275][T17783] hsr_slave_0: entered promiscuous mode [ 1412.304120][T17783] hsr_slave_1: entered promiscuous mode [ 1412.305049][T17783] debugfs: 'hsr0' already exists in 'hsr' [ 1412.305072][T17783] Cannot create hsr debugfs directory [ 1412.450077][T14444] Bluetooth: hci4: command tx timeout [ 1412.527106][ T8613] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.226348][T13368] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1413.236659][T13368] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1413.258516][T13368] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1413.272594][ T8613] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.294331][T13368] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1413.297616][T13368] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1413.651085][T13368] Bluetooth: hci2: command tx timeout [ 1414.427297][T17836] wlan0 speed is unknown, defaulting to 1000 [ 1414.477088][T17305] veth0_vlan: entered promiscuous mode [ 1414.531837][T13368] Bluetooth: hci4: command tx timeout [ 1414.732634][ T8613] bridge_slave_1: left allmulticast mode [ 1414.732667][ T8613] bridge_slave_1: left promiscuous mode [ 1414.732873][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.901743][ T8613] bridge_slave_0: left allmulticast mode [ 1414.901775][ T8613] bridge_slave_0: left promiscuous mode [ 1414.902001][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.333245][T13368] Bluetooth: hci0: command tx timeout [ 1415.940280][ T8613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1416.020240][ T8613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1416.043518][ T8613] bond0 (unregistering): Released all slaves [ 1416.049197][ T8613] bond1 (unregistering): Released all slaves [ 1416.127261][T17305] veth1_vlan: entered promiscuous mode [ 1416.187988][T17574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1417.266714][T17574] 8021q: adding VLAN 0 to HW filter on device team0 [ 1417.409793][T13368] Bluetooth: hci0: command tx timeout [ 1417.605098][ T8601] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.605231][ T8601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1417.729909][ T8613] hsr_slave_0: left promiscuous mode [ 1417.749745][ T8613] hsr_slave_1: left promiscuous mode [ 1417.750393][ T8613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1417.750408][ T8613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1417.790369][ T8613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1417.790393][ T8613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1417.859585][ T8613] veth1_macvtap: left promiscuous mode [ 1417.859721][ T8613] veth0_macvtap: left promiscuous mode [ 1417.859968][ T8613] veth1_vlan: left promiscuous mode [ 1417.860070][ T8613] veth0_vlan: left promiscuous mode [ 1418.512183][ T8613] team0 (unregistering): Port device team_slave_1 removed [ 1418.550407][ T8613] team0 (unregistering): Port device team_slave_0 removed [ 1418.737175][ T8601] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.737293][ T8601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1418.745648][T17305] veth0_macvtap: entered promiscuous mode [ 1418.776969][T17305] veth1_macvtap: entered promiscuous mode [ 1418.886664][T17305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1418.999305][T17305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1419.500692][T13368] Bluetooth: hci0: command tx timeout [ 1419.628602][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1419.655760][T17836] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.656051][T17836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.656207][T17836] bridge_slave_0: entered allmulticast mode [ 1419.657815][T17836] bridge_slave_0: entered promiscuous mode [ 1419.658899][ T66] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.672745][ T66] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.673333][T17836] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.673470][T17836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.673656][T17836] bridge_slave_1: entered allmulticast mode [ 1419.678069][T17836] bridge_slave_1: entered promiscuous mode [ 1419.688860][ T66] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.749311][ T66] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.925162][T17836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1420.001300][T17836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.545492][T17836] team0: Port device team_slave_0 added [ 1420.568983][T17836] team0: Port device team_slave_1 added [ 1421.044483][T17836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1421.044499][T17836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1421.044520][T17836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1421.048632][ T8613] IPVS: stop unused estimator thread 0... [ 1421.054053][T17836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1421.054066][T17836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1421.054087][T17836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1421.062385][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.062402][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.569911][T13368] Bluetooth: hci0: command tx timeout [ 1421.785986][T17836] hsr_slave_0: entered promiscuous mode [ 1421.786889][T17836] hsr_slave_1: entered promiscuous mode [ 1421.789425][T17836] debugfs: 'hsr0' already exists in 'hsr' [ 1421.789447][T17836] Cannot create hsr debugfs directory [ 1421.798127][T12071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.798142][T12071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.163977][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1422.220295][T17574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1422.802905][T17950] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1423.187497][T17770] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1423.224476][T17770] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1423.255728][T17770] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1423.383007][T17770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1423.426012][T17770] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1423.484521][T17770] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1424.130207][T17770] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1424.152400][T17770] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1424.155471][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1424.438493][T17783] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1424.474715][T17783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1424.491755][T17783] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1424.514701][T17783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1424.515141][T17574] veth0_vlan: entered promiscuous mode [ 1424.539494][T17783] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1424.634186][T17783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1424.902197][T14444] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1424.958274][T14444] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1424.979275][T14444] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1424.991875][T14444] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1425.015536][T14444] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1425.157669][T17783] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1425.187839][T17783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1425.312923][T17574] veth1_vlan: entered promiscuous mode [ 1425.566984][ T5261] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1425.750089][ T8613] bridge_slave_1: left allmulticast mode [ 1425.750122][ T8613] bridge_slave_1: left promiscuous mode [ 1425.750351][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.851166][ T8613] bridge_slave_0: left allmulticast mode [ 1425.851208][ T8613] bridge_slave_0: left promiscuous mode [ 1425.851374][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.630491][ T8613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1426.691128][ T8613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1426.732052][ T8613] bond0 (unregistering): Released all slaves [ 1427.169791][T13368] Bluetooth: hci3: command tx timeout [ 1427.370187][ T8613] hsr_slave_0: left promiscuous mode [ 1427.411511][ T8613] hsr_slave_1: left promiscuous mode [ 1427.413764][ T8613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1427.413787][ T8613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1427.470798][ T8613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1427.611356][ T8613] veth1_macvtap: left promiscuous mode [ 1427.611548][ T8613] veth0_macvtap: left promiscuous mode [ 1427.611801][ T8613] veth1_vlan: left promiscuous mode [ 1427.611996][ T8613] veth0_vlan: left promiscuous mode [ 1428.144340][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.144407][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.391622][ T8613] team0 (unregistering): Port device team_slave_1 removed [ 1428.430396][ T8613] team0 (unregistering): Port device team_slave_0 removed [ 1428.607993][T17574] veth0_macvtap: entered promiscuous mode [ 1428.631604][T17981] wlan0 speed is unknown, defaulting to 1000 [ 1428.674268][T17574] veth1_macvtap: entered promiscuous mode [ 1428.968695][T17770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1429.003649][T17574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1429.043783][T17574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1429.281151][T13368] Bluetooth: hci3: command tx timeout [ 1429.315898][T12072] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.320326][T17770] 8021q: adding VLAN 0 to HW filter on device team0 [ 1429.320627][T12072] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.353323][T12072] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.383675][T12072] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.642844][T12321] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.642966][T12321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1429.667900][T17783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1429.825007][T12321] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.825086][T12321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1430.307329][T17783] 8021q: adding VLAN 0 to HW filter on device team0 [ 1430.759978][ T8609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.760083][ T8609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1430.904565][ T8609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.904763][ T8609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1430.909244][ T8609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.909276][ T8609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.049553][T17981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.057367][T17981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.057541][T17981] bridge_slave_0: entered allmulticast mode [ 1431.076132][T17981] bridge_slave_0: entered promiscuous mode [ 1431.181218][T17981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.181338][T17981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.181522][T17981] bridge_slave_1: entered allmulticast mode [ 1431.186597][T17981] bridge_slave_1: entered promiscuous mode [ 1431.330853][T13368] Bluetooth: hci3: command tx timeout [ 1431.478760][T12072] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.586517][T17981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1431.604607][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.604621][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.681984][T17981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1431.877391][T17836] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1431.914714][T17836] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1432.357376][T18117] 9pnet_fd: Insufficient options for proto=fd [ 1432.358985][T18117] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1432.554763][ T5890] IPVS: starting estimator thread 0... [ 1432.732417][T18118] IPVS: using max 1 ests per chain, 2400 per kthread [ 1433.117352][T12072] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.247589][T17981] team0: Port device team_slave_0 added [ 1433.355659][T17836] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1433.405719][T17836] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1433.419759][T13368] Bluetooth: hci3: command tx timeout [ 1433.509511][T17981] team0: Port device team_slave_1 added [ 1433.513491][T17836] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1433.603722][T17836] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1433.683081][T17836] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1433.716098][T17836] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1434.015653][T12072] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.100899][T17981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1434.100915][T17981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1434.100936][T17981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1434.110843][T17981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1434.110856][T17981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1434.110877][T17981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1434.284842][T17981] hsr_slave_0: entered promiscuous mode [ 1434.286066][T17981] hsr_slave_1: entered promiscuous mode [ 1434.286909][T17981] debugfs: 'hsr0' already exists in 'hsr' [ 1434.286928][T17981] Cannot create hsr debugfs directory [ 1434.886174][T12072] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.976749][T14444] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1435.042030][T14444] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1435.048971][T14444] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1435.073158][T14444] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1435.077574][T14444] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1435.697825][T17770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1437.135603][T17836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1437.249860][T13368] Bluetooth: hci1: command tx timeout [ 1437.509976][T12072] bridge_slave_1: left allmulticast mode [ 1437.509999][T12072] bridge_slave_1: left promiscuous mode [ 1437.514517][T12072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.641442][T12072] bridge_slave_0: left allmulticast mode [ 1437.641467][T12072] bridge_slave_0: left promiscuous mode [ 1437.642226][T12072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.490196][T12072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1438.570504][T12072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1438.594398][T12072] bond0 (unregistering): Released all slaves [ 1438.629990][T18167] wlan0 speed is unknown, defaulting to 1000 [ 1438.634336][T17783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1439.339944][T13368] Bluetooth: hci1: command tx timeout [ 1439.694336][T17836] 8021q: adding VLAN 0 to HW filter on device team0 [ 1440.181065][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.181162][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1440.222879][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.222964][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1440.747212][T17770] veth0_vlan: entered promiscuous mode [ 1441.120179][T12072] hsr_slave_0: left promiscuous mode [ 1441.163067][T12072] hsr_slave_1: left promiscuous mode [ 1441.163997][T12072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1441.164018][T12072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1441.200913][T12072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1441.200938][T12072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1441.291836][T12072] veth1_macvtap: left promiscuous mode [ 1441.291948][T12072] veth0_macvtap: left promiscuous mode [ 1441.292192][T12072] veth1_vlan: left promiscuous mode [ 1441.292372][T12072] veth0_vlan: left promiscuous mode [ 1441.409824][T13368] Bluetooth: hci1: command tx timeout [ 1442.280445][T12072] team0 (unregistering): Port device team_slave_1 removed [ 1442.321702][T12072] team0 (unregistering): Port device team_slave_0 removed [ 1442.544469][T17770] veth1_vlan: entered promiscuous mode [ 1442.618908][T17783] veth0_vlan: entered promiscuous mode [ 1442.747777][T17981] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1442.774865][T17981] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1442.789552][T17981] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1442.855921][T17981] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1442.918631][T17783] veth1_vlan: entered promiscuous mode [ 1442.921950][T17981] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1442.957651][T17981] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1443.033824][T17981] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1443.094539][T17981] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1443.246173][T18167] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.246290][T18167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.246511][T18167] bridge_slave_0: entered allmulticast mode [ 1443.249248][T18167] bridge_slave_0: entered promiscuous mode [ 1443.274401][T18167] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.274521][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.274710][T18167] bridge_slave_1: entered allmulticast mode [ 1443.284778][T18167] bridge_slave_1: entered promiscuous mode [ 1443.489903][T13368] Bluetooth: hci1: command tx timeout [ 1443.564114][T17770] veth0_macvtap: entered promiscuous mode [ 1443.594806][T18167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1443.633879][T18167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1443.709018][T17770] veth1_macvtap: entered promiscuous mode [ 1443.747968][T17783] veth0_macvtap: entered promiscuous mode [ 1443.868769][T18167] team0: Port device team_slave_0 added [ 1443.893943][T18167] team0: Port device team_slave_1 added [ 1443.895608][T17783] veth1_macvtap: entered promiscuous mode [ 1444.106861][T18167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1444.106877][T18167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1444.106898][T18167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1444.125477][T18167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1444.125491][T18167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1444.125512][T18167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1444.128246][T17770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1444.207615][T17770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1444.458029][T17783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1444.468371][T12074] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.496025][T18167] hsr_slave_0: entered promiscuous mode [ 1444.497342][T18167] hsr_slave_1: entered promiscuous mode [ 1444.498219][T18167] debugfs: 'hsr0' already exists in 'hsr' [ 1444.498241][T18167] Cannot create hsr debugfs directory [ 1444.505970][T12074] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.543081][T12074] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.568552][T12074] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.575895][T17783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1444.878890][T12072] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.077705][ T8609] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.102848][T17836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1445.103006][ T8609] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.128372][ T8609] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.507009][T12072] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.540003][ T8609] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.033768][T12072] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.092681][T17981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1446.354022][ T8609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1446.354042][ T8609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1446.749145][T12072] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.220717][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1447.258175][T17981] 8021q: adding VLAN 0 to HW filter on device team0 [ 1447.274499][ T8601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1447.274515][ T8601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1447.286838][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.287024][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1447.345393][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.345510][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1447.692837][ T8609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1447.692854][ T8609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1447.797401][T17836] veth0_vlan: entered promiscuous mode [ 1448.480493][T17836] veth1_vlan: entered promiscuous mode [ 1448.487598][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1448.488180][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.488194][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.010041][T12072] bridge_slave_1: left allmulticast mode [ 1449.010065][T12072] bridge_slave_1: left promiscuous mode [ 1449.010229][T12072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.151454][T12072] bridge_slave_0: left allmulticast mode [ 1449.151475][T12072] bridge_slave_0: left promiscuous mode [ 1449.153658][T12072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.000487][T12072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1450.080391][T12072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1450.101521][T12072] bond0 (unregistering): Released all slaves [ 1450.937385][T14444] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1451.051994][T14444] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1451.056197][T14444] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1451.081527][T14444] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1451.088087][T14444] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1451.357965][T17836] veth0_macvtap: entered promiscuous mode [ 1451.428279][T17836] veth1_macvtap: entered promiscuous mode [ 1451.670793][T17836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1451.703755][T17836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1451.835316][T13368] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1451.889225][T13368] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1451.917341][T13368] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1451.918430][T13368] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1451.919094][T13368] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1452.476368][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.487014][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.500842][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.533240][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.734905][ T5261] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1452.899870][T12072] hsr_slave_0: left promiscuous mode [ 1452.939960][T12072] hsr_slave_1: left promiscuous mode [ 1452.940622][T12072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1452.940638][T12072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1453.000572][T12072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1453.000598][T12072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1453.071235][T12072] veth1_macvtap: left promiscuous mode [ 1453.075140][T12072] veth0_macvtap: left promiscuous mode [ 1453.075318][T12072] veth1_vlan: left promiscuous mode [ 1453.075424][T12072] veth0_vlan: left promiscuous mode [ 1453.330075][T13368] Bluetooth: hci2: command tx timeout [ 1453.752832][T12072] team0 (unregistering): Port device team_slave_1 removed [ 1453.780281][T12072] team0 (unregistering): Port device team_slave_0 removed [ 1454.130127][T13368] Bluetooth: hci4: command tx timeout [ 1454.206268][T18440] wlan0 speed is unknown, defaulting to 1000 [ 1454.355557][T17981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1454.636363][T18167] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1454.672736][T18167] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1454.674523][T18453] wlan0 speed is unknown, defaulting to 1000 [ 1454.683900][T18167] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1454.723289][T18167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1454.725056][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.725072][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.755146][T18167] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1454.807907][T18167] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1454.821594][T18167] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1454.898908][T18167] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1455.075181][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1455.075200][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1455.414431][T13368] Bluetooth: hci2: command tx timeout [ 1455.583027][T17981] veth0_vlan: entered promiscuous mode [ 1455.852313][T12072] IPVS: stop unused estimator thread 0... [ 1456.034055][T17981] veth1_vlan: entered promiscuous mode [ 1456.210066][T13368] Bluetooth: hci4: command tx timeout [ 1456.363161][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1456.687574][T12072] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.851047][T18440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.851165][T18440] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.851361][T18440] bridge_slave_0: entered allmulticast mode [ 1456.858170][T18440] bridge_slave_0: entered promiscuous mode [ 1456.910622][T18440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.910830][T18440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.911022][T18440] bridge_slave_1: entered allmulticast mode [ 1456.914183][T18440] bridge_slave_1: entered promiscuous mode [ 1457.074178][T18524] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2829'. [ 1457.165276][T12072] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.233787][T18440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1457.261967][T18440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1457.387339][T18453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.387519][T18453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.387676][T18453] bridge_slave_0: entered allmulticast mode [ 1457.391590][T18453] bridge_slave_0: entered promiscuous mode [ 1457.396667][T18440] team0: Port device team_slave_0 added [ 1457.490143][T13368] Bluetooth: hci2: command tx timeout [ 1457.514983][T18532] sg_write: data in/out 327644/136 bytes for SCSI command 0x0-- guessing data in; [ 1457.514983][T18532] program syz.7.2832 not setting count and/or reply_len properly [ 1457.548407][T18453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.548525][T18453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.548686][T18453] bridge_slave_1: entered allmulticast mode [ 1457.573696][T18453] bridge_slave_1: entered promiscuous mode [ 1457.578180][T18440] team0: Port device team_slave_1 added [ 1457.768387][T12072] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.840417][T17981] veth0_macvtap: entered promiscuous mode [ 1457.957160][T18453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1457.959177][T18440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1457.959201][T18440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1457.959223][T18440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1458.020552][T18453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1458.021771][T18440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1458.021780][T18440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.021809][T18440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1458.024445][T17981] veth1_macvtap: entered promiscuous mode [ 1458.209299][T18541] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2836'. [ 1458.300467][T13368] Bluetooth: hci4: command tx timeout [ 1458.362919][T12072] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.387220][T18453] team0: Port device team_slave_0 added [ 1458.393174][T18167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1458.404254][T18453] team0: Port device team_slave_1 added [ 1458.557160][T18440] hsr_slave_0: entered promiscuous mode [ 1458.557979][T18440] hsr_slave_1: entered promiscuous mode [ 1458.558943][T18440] debugfs: 'hsr0' already exists in 'hsr' [ 1458.558958][T18440] Cannot create hsr debugfs directory [ 1458.588429][T18453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1458.588443][T18453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.588460][T18453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1458.601954][T18453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1458.601968][T18453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.601989][T18453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1458.766861][T18547] sg_write: data in/out 327644/136 bytes for SCSI command 0x0-- guessing data in; [ 1458.766861][T18547] program syz.7.2839 not setting count and/or reply_len properly [ 1458.825337][T17981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1459.038386][T18553] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2841'. [ 1459.124406][T18167] 8021q: adding VLAN 0 to HW filter on device team0 [ 1459.127792][T17981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1459.235824][T18453] hsr_slave_0: entered promiscuous mode [ 1459.237171][T18453] hsr_slave_1: entered promiscuous mode [ 1459.238123][T18453] debugfs: 'hsr0' already exists in 'hsr' [ 1459.238145][T18453] Cannot create hsr debugfs directory [ 1459.409117][T12074] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.452034][T12075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.452183][T12075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1459.564868][T12074] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.570078][T13368] Bluetooth: hci2: command tx timeout [ 1459.612754][T12074] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.705689][T12074] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.780468][ T8613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.780595][ T8613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1460.373973][T13368] Bluetooth: hci4: command tx timeout [ 1460.949434][T12072] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.586597][T12072] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.656893][T12074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.656918][T12074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1462.150407][T12072] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.254250][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1462.254269][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1462.983266][T12072] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.042124][T18598] syzkaller1: entered promiscuous mode [ 1463.042154][T18598] syzkaller1: entered allmulticast mode [ 1465.448456][T18634] netlink: 388 bytes leftover after parsing attributes in process `syz.7.2862'. [ 1465.589147][T18632] netlink: 'syz.0.2863': attribute type 25 has an invalid length. [ 1465.589167][T18632] netlink: 'syz.0.2863': attribute type 25 has an invalid length. [ 1465.589179][T18632] netlink: 'syz.0.2863': attribute type 3 has an invalid length. [ 1466.023749][T18453] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.698693][T18453] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.768430][T18658] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2871'. [ 1466.826213][T18167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1467.070167][T12072] bridge_slave_1: left allmulticast mode [ 1467.070198][T12072] bridge_slave_1: left promiscuous mode [ 1467.070452][T12072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.220705][T12072] bridge_slave_0: left allmulticast mode [ 1467.220727][T12072] bridge_slave_0: left promiscuous mode [ 1467.220887][T12072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1467.440145][T12072] bridge_slave_1: left allmulticast mode [ 1467.440168][T12072] bridge_slave_1: left promiscuous mode [ 1467.440371][T12072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.540731][T12072] bridge_slave_0: left allmulticast mode [ 1467.540756][T12072] bridge_slave_0: left promiscuous mode [ 1467.540903][T12072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.266054][T18675] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2879'. [ 1468.446583][T18683] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2883'. [ 1468.560385][T12072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1468.620329][T12072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1468.661590][T12072] bond0 (unregistering): Released all slaves [ 1469.160241][T12072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1469.220873][T12072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1469.241843][T12072] bond0 (unregistering): Released all slaves [ 1469.698799][T18699] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2891'. [ 1469.776511][T18453] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.076764][T18701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2892'. [ 1470.103545][T18167] veth0_vlan: entered promiscuous mode [ 1470.145622][T18705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2892'. [ 1470.579379][T18453] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.156687][T18743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2900'. [ 1471.355703][T18167] veth1_vlan: entered promiscuous mode [ 1471.885332][T18167] veth0_macvtap: entered promiscuous mode [ 1471.939993][T18167] veth1_macvtap: entered promiscuous mode [ 1472.047871][T18167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1472.117345][T18167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1472.198439][T18774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2908'. [ 1472.855298][ T66] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.866891][ T66] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.869308][ T66] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.884249][ T66] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.319724][T18802] ip6gretap1: entered allmulticast mode [ 1473.543634][T18812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2917'. [ 1474.254585][T18440] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1474.382734][T18440] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1474.404547][T18440] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1474.530586][T18440] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1474.719035][T18440] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1474.839405][T18440] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1474.858489][T18440] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1474.893432][T18440] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1475.223935][T12072] hsr_slave_0: left promiscuous mode [ 1475.262390][T12072] hsr_slave_1: left promiscuous mode [ 1475.263455][T12072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1475.263476][T12072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1475.321198][T12072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1475.321223][T12072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1475.531381][T12072] hsr_slave_0: left promiscuous mode [ 1475.570277][T12072] hsr_slave_1: left promiscuous mode [ 1475.572292][T12072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1475.572315][T12072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1475.624749][T12072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1475.624774][T12072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1475.924492][T12072] veth1_macvtap: left promiscuous mode [ 1475.924556][T12072] veth0_macvtap: left promiscuous mode [ 1475.924694][T12072] veth1_vlan: left promiscuous mode [ 1475.924794][T12072] veth0_vlan: left promiscuous mode [ 1476.101162][T12072] veth1_macvtap: left promiscuous mode [ 1476.101264][T12072] veth0_macvtap: left promiscuous mode [ 1476.101522][T12072] veth1_vlan: left promiscuous mode [ 1476.101703][T12072] veth0_vlan: left promiscuous mode [ 1477.391314][T12072] team0 (unregistering): Port device team_slave_1 removed [ 1477.430348][T12072] team0 (unregistering): Port device team_slave_0 removed [ 1478.060216][T12072] team0 (unregistering): Port device team_slave_1 removed [ 1478.101431][T12072] team0 (unregistering): Port device team_slave_0 removed [ 1478.309979][T12075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.309999][T12075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.847079][T18453] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1478.976795][T18453] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1478.980941][ T8601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.980958][ T8601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1479.023077][T18453] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1479.118474][T18453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1479.135427][T18453] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1479.178435][T18453] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1479.194208][T18453] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1479.234141][T18453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1479.976170][T18440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1480.064686][T18440] 8021q: adding VLAN 0 to HW filter on device team0 [ 1481.340336][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.340452][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1481.387476][T18453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1481.413519][T12074] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.413638][T12074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1481.804388][T18453] 8021q: adding VLAN 0 to HW filter on device team0 [ 1481.878902][T12075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.879099][T12075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1481.918199][T12075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.927450][T12075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1485.803109][T18440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1486.160385][T18453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1486.346141][T18453] veth0_vlan: entered promiscuous mode [ 1486.372632][T18453] veth1_vlan: entered promiscuous mode [ 1486.451580][T18453] veth0_macvtap: entered promiscuous mode [ 1486.473694][T18453] veth1_macvtap: entered promiscuous mode [ 1486.516184][T18453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1486.720842][T18453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1486.793383][ T8602] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.795471][ T8602] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.797162][ T8602] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.834473][ T8602] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.578537][T18440] veth0_vlan: entered promiscuous mode [ 1488.594242][ T8613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1488.594259][ T8613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1488.776789][T18440] veth1_vlan: entered promiscuous mode [ 1488.963465][T12075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1488.963484][T12075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1489.173319][T18440] veth0_macvtap: entered promiscuous mode [ 1489.205643][T18440] veth1_macvtap: entered promiscuous mode [ 1489.320288][T18440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1489.583541][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.583608][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.343872][T18440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1490.400896][ T66] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.400994][ T66] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.401029][ T66] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.401060][ T66] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.877852][T19102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.537026][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1491.537045][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1491.767594][T19121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2976'. [ 1491.767623][T19121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2976'. [ 1491.767636][T19121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2976'. [ 1491.790290][T19121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2976'. [ 1491.790317][T19121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2976'. [ 1491.790329][T19121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2976'. [ 1491.876615][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1491.876633][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1493.843954][T19153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2986'. [ 1493.843982][T19153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2986'. [ 1493.850238][T19153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2986'. [ 1493.850263][T19153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2986'. [ 1496.338167][T19155] syz.0.2984 (19155) used greatest stack depth: 16192 bytes left [ 1497.609054][T19200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2998'. [ 1497.609082][T19200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2998'. [ 1497.616995][T19200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2998'. [ 1497.617021][T19200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2998'. [ 1498.474674][T19235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3010'. [ 1498.474703][T19235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3010'. [ 1498.501397][T19235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3010'. [ 1498.501426][T19235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3010'. [ 1502.769040][T19303] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3030'. [ 1502.873440][ T37] audit: type=1800 audit(1784930378.832:31): pid=19283 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3023" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1502.876986][T19283] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1502.877023][T19283] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1502.877041][T19283] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1505.604144][T19346] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3046'. [ 1505.868178][T19360] program syz.1.3048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1505.898123][T19359] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3049'. [ 1505.913485][T19359] syzkaller1: entered promiscuous mode [ 1505.913507][T19359] syzkaller1: entered allmulticast mode [ 1508.610056][T19399] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3060'. [ 1511.087906][T19445] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3072'. [ 1515.179881][ T5619] IPVS: starting estimator thread 0... [ 1515.302139][T19510] IPVS: using max 9 ests per chain, 21600 per kthread [ 1515.514357][T19522] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3090'. [ 1515.518684][T19522] syzkaller1: entered promiscuous mode [ 1515.518706][T19522] syzkaller1: entered allmulticast mode [ 1515.748556][T19528] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1516.187218][T19541] 9pnet_fd: Insufficient options for proto=fd [ 1516.188822][T19541] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1518.887134][T19578] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1519.075615][T14444] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1519.136928][T14444] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1519.210773][T14444] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1519.258686][T14444] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1519.259446][T14444] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1519.521207][T19593] 9pnet_fd: Insufficient options for proto=fd [ 1519.522701][T19593] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1519.996141][ T5619] IPVS: starting estimator thread 0... [ 1520.040298][T19589] Can't find ip_set type hash:net,ne [ 1520.099804][T19594] IPVS: using max 7 ests per chain, 16800 per kthread [ 1520.373330][T19602] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3110'. [ 1520.830230][T19604] syzkaller1: entered promiscuous mode [ 1520.830256][T19604] syzkaller1: entered allmulticast mode [ 1521.675256][T19635] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1522.050187][T13368] Bluetooth: hci5: command tx timeout [ 1522.434667][T19649] 9pnet_fd: Insufficient options for proto=fd [ 1522.436262][T19649] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1523.125833][T19640] Can't find ip_set type hash:net,ne [ 1523.828013][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.130051][T13368] Bluetooth: hci5: command tx timeout [ 1524.403871][T19581] wlan0 speed is unknown, defaulting to 1000 [ 1524.536219][T19687] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3126'. [ 1524.700526][T19690] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1525.239798][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.459941][T19703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3130'. [ 1525.688408][T19712] 9pnet_fd: Insufficient options for proto=fd [ 1525.690103][T19712] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1526.209926][T13368] Bluetooth: hci5: command tx timeout [ 1526.290295][ T5619] IPVS: starting estimator thread 0... [ 1526.399819][T19713] IPVS: using max 10 ests per chain, 24000 per kthread [ 1526.519228][T19717] program syz.7.3134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1527.424588][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.290191][T13368] Bluetooth: hci5: command tx timeout [ 1528.762430][T19761] 9pnet_fd: Insufficient options for proto=fd [ 1528.764096][T19761] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1529.379415][T19764] program syz.0.3146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1529.604179][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.457534][T19801] program syz.7.3156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1531.038950][T19816] 9pnet_fd: Insufficient options for proto=fd [ 1531.040744][T19816] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1531.560153][T12089] IPVS: starting estimator thread 0... [ 1531.659931][T19817] IPVS: using max 8 ests per chain, 19200 per kthread [ 1532.527907][T19846] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3167'. [ 1533.038908][T19823] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3163'. [ 1533.038937][T19823] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3163'. [ 1533.711533][T19846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1533.970315][T19846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1534.752245][T19581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.752372][T19581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1534.752575][T19581] bridge_slave_0: entered allmulticast mode [ 1534.753499][T19884] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3177'. [ 1534.795771][T19581] bridge_slave_0: entered promiscuous mode [ 1534.803807][T19581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.803916][T19581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1534.804089][T19581] bridge_slave_1: entered allmulticast mode [ 1534.815964][T19581] bridge_slave_1: entered promiscuous mode [ 1535.052952][T19581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1535.090332][T19581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1535.376590][ T56] bridge_slave_1: left allmulticast mode [ 1535.376624][ T56] bridge_slave_1: left promiscuous mode [ 1535.376879][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.472612][T19907] 9pnet_fd: Insufficient options for proto=fd [ 1535.473841][T19907] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1536.390696][ T56] bridge_slave_0: left allmulticast mode [ 1536.390720][ T56] bridge_slave_0: left promiscuous mode [ 1536.390883][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.288637][T19920] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3189'. [ 1537.680796][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1537.761219][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1537.801803][ T56] bond0 (unregistering): Released all slaves [ 1537.863743][T19895] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1537.885823][T19895] batman_adv: batadv0: Adding interface: gretap1 [ 1537.885840][T19895] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1537.885883][T19895] batman_adv: batadv0: Interface activated: gretap1 [ 1538.198566][T19581] team0: Port device team_slave_0 added [ 1538.206589][T19581] team0: Port device team_slave_1 added [ 1538.289879][T13368] Bluetooth: hci0: command 0x0406 tx timeout [ 1538.329959][T19581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1538.329974][T19581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1538.329998][T19581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1538.332168][T19581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1538.332181][T19581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1538.332202][T19581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1539.019224][T19581] hsr_slave_0: entered promiscuous mode [ 1539.027850][T19581] hsr_slave_1: entered promiscuous mode [ 1539.029280][T19581] debugfs: 'hsr0' already exists in 'hsr' [ 1539.029304][T19581] Cannot create hsr debugfs directory [ 1539.730000][T19973] tipc: Started in network mode [ 1539.730029][T19973] tipc: Node identity 6677415d3d6c, cluster identity 4711 [ 1539.943242][T19973] tipc: Enabled bearer , priority 0 [ 1540.110908][T19985] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3202'. [ 1540.492201][T19964] tipc: Resetting bearer [ 1540.612279][T19963] tipc: Disabling bearer [ 1540.743303][T19988] syzkaller1: entered promiscuous mode [ 1540.743328][T19988] syzkaller1: entered allmulticast mode [ 1541.314016][T20010] program syz.7.3205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1543.492250][T20056] tipc: Started in network mode [ 1543.492278][T20056] tipc: Node identity 86bcf5137d9a, cluster identity 4711 [ 1543.492460][T20056] tipc: Enabled bearer , priority 0 [ 1543.493801][T20053] syzkaller0: entered promiscuous mode [ 1543.493821][T20053] syzkaller0: entered allmulticast mode [ 1543.672534][T20043] tipc: Resetting bearer [ 1543.785330][T20042] tipc: Resetting bearer [ 1543.931662][T20042] tipc: Disabling bearer [ 1544.602605][ T56] hsr_slave_0: left promiscuous mode [ 1544.629824][ T56] hsr_slave_1: left promiscuous mode [ 1544.633046][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1544.633071][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1544.686549][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1544.686566][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1545.054286][ T56] veth1_macvtap: left promiscuous mode [ 1545.054391][ T56] veth0_macvtap: left promiscuous mode [ 1545.054629][ T56] veth1_vlan: left promiscuous mode [ 1545.054803][ T56] veth0_vlan: left promiscuous mode [ 1546.691484][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1546.750250][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1547.041925][ T37] audit: type=1800 audit(1784930422.992:32): pid=20117 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.3228" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1547.042343][T20117] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1547.042377][T20117] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1547.042394][T20117] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1547.881075][T20176] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3241'. [ 1548.047138][T14444] Bluetooth: hci3: command 0x0406 tx timeout [ 1549.117483][T20186] netlink: 'syz.3.3245': attribute type 5 has an invalid length. [ 1549.117496][T20186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3245'. [ 1550.315162][ T37] audit: type=1800 audit(1784930426.292:33): pid=20196 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.3249" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 1550.533420][T20196] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 1550.533460][T20196] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 1550.533485][T20196] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 1550.861117][T20210] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3252'. [ 1551.175877][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.175943][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.070454][T20243] netlink: 'syz.3.3260': attribute type 5 has an invalid length. [ 1552.070473][T20243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3260'. [ 1552.429912][T20239] tipc: Enabled bearer , priority 0 [ 1552.435667][T20236] syzkaller0: entered promiscuous mode [ 1552.435690][T20236] syzkaller0: entered allmulticast mode [ 1552.595425][T20223] tipc: Resetting bearer [ 1553.014068][T20223] tipc: Disabling bearer [ 1553.119215][T20272] 9pnet_fd: Insufficient options for proto=fd [ 1553.120880][T20272] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1553.909359][T15608] tipc: Node number set to 1528512861 [ 1553.936009][T20271] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1553.936045][T20271] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1553.936061][T20271] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1554.418132][T20298] netlink: 'syz.3.3272': attribute type 5 has an invalid length. [ 1554.418151][T20298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3272'. [ 1555.501366][T20327] 9pnet_fd: Insufficient options for proto=fd [ 1555.503082][T20327] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1556.615469][T20326] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1556.615508][T20326] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1556.615525][T20326] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1556.724057][T20338] tipc: Started in network mode [ 1556.724084][T20338] tipc: Node identity 2aa2671944aa, cluster identity 4711 [ 1556.724237][T20338] tipc: Enabled bearer , priority 0 [ 1556.726594][T20334] syzkaller0: entered promiscuous mode [ 1556.726614][T20334] syzkaller0: entered allmulticast mode [ 1557.986037][ T5890] tipc: Node number set to 1846044441 [ 1559.201885][T20348] tipc: Resetting bearer [ 1559.656497][T20348] tipc: Disabling bearer [ 1564.099075][T19581] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1564.157276][T19581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1564.182796][T20448] tipc: Enabled bearer , priority 0 [ 1564.208153][T20448] tipc: Resetting bearer [ 1564.208347][T19581] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1564.377502][T19581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1564.378687][T20457] syzkaller0: entered promiscuous mode [ 1564.378710][T20457] syzkaller0: entered allmulticast mode [ 1564.430020][T20447] tipc: Resetting bearer [ 1564.664481][T20447] tipc: Disabling bearer [ 1565.231150][T19581] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1565.303013][T19581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1565.305147][ T5261] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1565.337295][T19581] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1565.422427][T19581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1568.950869][T19581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1569.174021][T19581] 8021q: adding VLAN 0 to HW filter on device team0 [ 1569.943427][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1569.943564][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1570.143112][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.143209][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1570.176229][T13620] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1570.245308][T13620] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1570.491392][T20572] fido_id[20572]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1571.677416][ T5261] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1573.569969][T13368] Bluetooth: hci2: command 0x0406 tx timeout [ 1574.408879][ T5261] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1576.262198][T19581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1578.707235][T14444] Bluetooth: hci4: command 0x0406 tx timeout [ 1579.160295][T20746] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3378'. [ 1579.270615][T14444] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1579.333491][T14444] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1579.358088][T14444] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1579.392368][T14444] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1579.407569][T14444] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1580.227240][T20741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.228387][T20741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.661618][T20741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1581.083916][T20805] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3387'. [ 1581.730556][T13368] Bluetooth: hci1: command tx timeout [ 1582.037239][T12074] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.037328][T20805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3387'. [ 1582.037792][T20805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1582.312720][T12074] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.324782][T12074] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.511780][T12074] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.778749][T20761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1583.115166][T20857] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3400'. [ 1583.570887][T20857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3400'. [ 1583.571329][T20857] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1583.759846][T20860] syzkaller0: entered promiscuous mode [ 1583.759873][T20860] syzkaller0: entered allmulticast mode [ 1583.810106][T13368] Bluetooth: hci1: command tx timeout [ 1584.539211][T20909] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3410'. [ 1585.895222][T13368] Bluetooth: hci1: command tx timeout [ 1587.971604][T13368] Bluetooth: hci1: command tx timeout [ 1598.472240][T14444] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1598.477517][T14444] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1598.478674][T14444] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1598.549417][T14444] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1598.579557][T14444] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1599.472665][T14444] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1599.477005][T14444] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1599.478184][T14444] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1599.522120][T14444] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1599.534349][T14444] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1599.940844][T14444] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1599.993170][T14444] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1599.997221][T14444] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1600.059051][T14444] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1600.067054][T14444] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1600.448891][T13368] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1600.490947][T13368] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1600.494859][T13368] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1600.495804][T13368] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1600.496441][T13368] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1600.770621][T14444] Bluetooth: hci5: command tx timeout [ 1601.290075][T20749] wlan0 speed is unknown, defaulting to 1000 [ 1601.729921][T14444] Bluetooth: hci6: command tx timeout [ 1602.231270][T14444] Bluetooth: hci7: command tx timeout [ 1602.689970][T14444] Bluetooth: hci8: command tx timeout [ 1602.850595][T14444] Bluetooth: hci5: command tx timeout [ 1603.810024][T13368] Bluetooth: hci6: command tx timeout [ 1603.956336][T20935] wlan0 speed is unknown, defaulting to 1000 [ 1604.002821][T20924] wlan0 speed is unknown, defaulting to 1000 [ 1604.033504][T20941] wlan0 speed is unknown, defaulting to 1000 [ 1604.058583][T20930] wlan0 speed is unknown, defaulting to 1000 [ 1604.291435][T13368] Bluetooth: hci7: command tx timeout [ 1604.770322][ T1028] bridge_slave_1: left allmulticast mode [ 1604.770345][ T1028] bridge_slave_1: left promiscuous mode [ 1604.770525][ T1028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1604.780162][T13368] Bluetooth: hci8: command tx timeout [ 1604.890990][ T1028] bridge_slave_0: left allmulticast mode [ 1604.891014][ T1028] bridge_slave_0: left promiscuous mode [ 1604.891201][ T1028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1604.939818][T13368] Bluetooth: hci5: command tx timeout [ 1605.690691][ T1028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1605.750374][ T1028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1605.771591][ T1028] bond0 (unregistering): Released all slaves [ 1605.899786][T13368] Bluetooth: hci6: command tx timeout [ 1606.252402][T20749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1606.252532][T20749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.252745][T20749] bridge_slave_0: entered allmulticast mode [ 1606.255402][T20749] bridge_slave_0: entered promiscuous mode [ 1606.279926][T20749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.280039][T20749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.280573][T20749] bridge_slave_1: entered allmulticast mode [ 1606.283150][T20749] bridge_slave_1: entered promiscuous mode [ 1606.380556][T13368] Bluetooth: hci7: command tx timeout [ 1606.519774][ T1028] hsr_slave_0: left promiscuous mode [ 1606.559777][ T1028] hsr_slave_1: left promiscuous mode [ 1606.560482][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1606.583463][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1606.849793][T13368] Bluetooth: hci8: command tx timeout [ 1607.009846][T13368] Bluetooth: hci5: command tx timeout [ 1607.080496][ T1028] team0 (unregistering): Port device team_slave_1 removed [ 1607.120240][ T1028] team0 (unregistering): Port device team_slave_0 removed [ 1607.372244][T20749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1607.442963][T20749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1607.618322][T20749] team0: Port device team_slave_0 added [ 1607.769554][T20749] team0: Port device team_slave_1 added [ 1607.770135][T20935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.770242][T20935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.770412][T20935] bridge_slave_0: entered allmulticast mode [ 1607.772872][T20935] bridge_slave_0: entered promiscuous mode [ 1607.775679][T20924] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.775795][T20924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.775976][T20924] bridge_slave_0: entered allmulticast mode [ 1607.780942][T20924] bridge_slave_0: entered promiscuous mode [ 1607.845638][T20935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1607.845751][T20935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.845928][T20935] bridge_slave_1: entered allmulticast mode [ 1607.848376][T20935] bridge_slave_1: entered promiscuous mode [ 1607.867548][T20924] bridge0: port 2(bridge_slave_1) entered blocking state [ 1607.867679][T20924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.867851][T20924] bridge_slave_1: entered allmulticast mode [ 1607.875566][T20924] bridge_slave_1: entered promiscuous mode [ 1607.970254][T13368] Bluetooth: hci6: command tx timeout [ 1608.005463][T20749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1608.005477][T20749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1608.005500][T20749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1608.078444][T20935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1608.079118][T20749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1608.079128][T20749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1608.079144][T20749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1608.095544][T20924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1608.097337][T20941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1608.097489][T20941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1608.097973][T20941] bridge_slave_0: entered allmulticast mode [ 1608.101952][T20941] bridge_slave_0: entered promiscuous mode [ 1608.144596][T20924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1608.148485][T20935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1608.148911][T20941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1608.149042][T20941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1608.149256][T20941] bridge_slave_1: entered allmulticast mode [ 1608.153078][T20941] bridge_slave_1: entered promiscuous mode [ 1608.165841][T20930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1608.165950][T20930] bridge0: port 1(bridge_slave_0) entered disabled state [ 1608.166130][T20930] bridge_slave_0: entered allmulticast mode [ 1608.169217][T20930] bridge_slave_0: entered promiscuous mode [ 1608.236171][T20930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1608.236282][T20930] bridge0: port 2(bridge_slave_1) entered disabled state [ 1608.236449][T20930] bridge_slave_1: entered allmulticast mode [ 1608.238944][T20930] bridge_slave_1: entered promiscuous mode [ 1608.403387][T20935] team0: Port device team_slave_0 added [ 1608.443014][T20924] team0: Port device team_slave_0 added [ 1608.454003][T13368] Bluetooth: hci7: command tx timeout [ 1608.457218][T20941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1608.461302][T20935] team0: Port device team_slave_1 added [ 1608.471855][T20749] hsr_slave_0: entered promiscuous mode [ 1608.473062][T20749] hsr_slave_1: entered promiscuous mode [ 1608.474022][T20749] debugfs: 'hsr0' already exists in 'hsr' [ 1608.474042][T20749] Cannot create hsr debugfs directory [ 1608.478271][T20930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1608.482997][T20924] team0: Port device team_slave_1 added [ 1608.929905][T13368] Bluetooth: hci8: command tx timeout [ 1609.032408][T20941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1609.049105][T20930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1609.133248][T20935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1609.133259][T20935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1609.133272][T20935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1609.148970][T20924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1609.148984][T20924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1609.149005][T20924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1609.153758][T20941] team0: Port device team_slave_0 added [ 1609.165905][T20935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1609.165919][T20935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1609.165940][T20935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1609.171567][T20930] team0: Port device team_slave_0 added [ 1609.172400][T20924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1609.172418][T20924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1609.172443][T20924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1609.177731][T20941] team0: Port device team_slave_1 added [ 1609.232357][T20930] team0: Port device team_slave_1 added [ 1609.385999][T20941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1609.386011][T20941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1609.386023][T20941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1609.395020][T20930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1609.395034][T20930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1609.395056][T20930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1609.443699][T20941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1609.443713][T20941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1609.443735][T20941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1609.457261][T20930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1609.457274][T20930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1609.457295][T20930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1609.488002][T20935] hsr_slave_0: entered promiscuous mode [ 1609.489275][T20935] hsr_slave_1: entered promiscuous mode [ 1609.491144][T20935] debugfs: 'hsr0' already exists in 'hsr' [ 1609.491167][T20935] Cannot create hsr debugfs directory [ 1609.610784][T20924] hsr_slave_0: entered promiscuous mode [ 1609.611608][T20924] hsr_slave_1: entered promiscuous mode [ 1609.612131][T20924] debugfs: 'hsr0' already exists in 'hsr' [ 1609.612146][T20924] Cannot create hsr debugfs directory [ 1610.019125][ T1028] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.146159][T20941] hsr_slave_0: entered promiscuous mode [ 1610.147486][T20941] hsr_slave_1: entered promiscuous mode [ 1610.148411][T20941] debugfs: 'hsr0' already exists in 'hsr' [ 1610.148432][T20941] Cannot create hsr debugfs directory [ 1610.190181][T20930] hsr_slave_0: entered promiscuous mode [ 1610.191470][T20930] hsr_slave_1: entered promiscuous mode [ 1610.192476][T20930] debugfs: 'hsr0' already exists in 'hsr' [ 1610.192498][T20930] Cannot create hsr debugfs directory [ 1610.484355][ T1028] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.926386][ T1028] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.347613][ T1028] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.457095][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.457136][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.701350][ T1028] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.255244][ T1028] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.303976][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1613.647368][ T1028] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.882505][ T5261] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1614.123289][ T1028] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.334167][ T5261] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1615.174878][ T5261] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1615.767120][ T5261] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1616.343764][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1619.097189][ T1028] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.547905][ T1028] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.218584][ T1028] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.867166][ T1028] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.235728][ T5261] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1622.030069][ T1028] bridge_slave_1: left allmulticast mode [ 1622.030093][ T1028] bridge_slave_1: left promiscuous mode [ 1622.030258][ T1028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.150656][ T1028] bridge_slave_0: left allmulticast mode [ 1622.150679][ T1028] bridge_slave_0: left promiscuous mode [ 1622.150844][ T1028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.350028][ T1028] bridge_slave_1: left allmulticast mode [ 1622.350052][ T1028] bridge_slave_1: left promiscuous mode [ 1622.350201][ T1028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.470650][ T1028] bridge_slave_0: left allmulticast mode [ 1622.470674][ T1028] bridge_slave_0: left promiscuous mode [ 1622.470821][ T1028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.669990][ T1028] bridge_slave_1: left allmulticast mode [ 1622.670015][ T1028] bridge_slave_1: left promiscuous mode [ 1622.670176][ T1028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.780774][ T1028] bridge_slave_0: left allmulticast mode [ 1622.780795][ T1028] bridge_slave_0: left promiscuous mode [ 1622.780952][ T1028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.980437][ T1028] bridge_slave_1: left allmulticast mode [ 1622.980460][ T1028] bridge_slave_1: left promiscuous mode [ 1622.980628][ T1028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.080636][ T1028] bridge_slave_0: left allmulticast mode [ 1623.080659][ T1028] bridge_slave_0: left promiscuous mode [ 1623.080820][ T1028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.186393][ T1028] batman_adv: batadv0: Interface deactivated: gretap1 [ 1623.892968][ T1028] batman_adv: batadv0: Removing interface: gretap1 [ 1624.120290][ T1028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1624.200996][ T1028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1624.222107][ T1028] bond0 (unregistering): Released all slaves [ 1624.720769][ T1028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1624.800480][ T1028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1624.821774][ T1028] bond0 (unregistering): Released all slaves [ 1625.370523][ T1028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1625.430498][ T1028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1625.450600][ T1028] bond0 (unregistering): Released all slaves [ 1625.950288][ T1028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1626.030838][ T1028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1626.071746][ T1028] bond0 (unregistering): Released all slaves [ 1626.532271][T20749] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1626.581323][T20749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1626.583618][T20749] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1626.627451][T20749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1626.628224][ T1028] tipc: Left network mode [ 1626.641468][T20749] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1626.714792][T20749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1626.744645][T20749] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1626.859079][T20749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1627.011998][ T1028] tipc: Left network mode [ 1627.296408][ T1028] tipc: Left network mode [ 1627.365943][ T5261] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1627.728014][T20935] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1627.859374][T20935] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1627.864287][T20749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1627.872362][T20935] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1627.943956][T20935] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1627.960943][T20935] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1628.055122][T20935] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1628.188320][ T5261] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1628.188756][T20935] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1628.244267][T20935] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1628.356372][T20749] 8021q: adding VLAN 0 to HW filter on device team0 [ 1629.019097][ T5261] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1629.111872][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.112000][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1629.194891][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1629.194963][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1629.537960][ T5261] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1629.556715][T20924] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1629.621671][T20924] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1629.679415][T20924] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1629.764326][T20924] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1629.769506][T20924] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1629.838582][T20924] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1629.857621][T20924] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1629.902315][T20924] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1630.628729][T20941] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1630.671348][T20941] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1631.000271][T20941] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1631.047072][T20941] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1631.077330][T20941] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1631.104725][T20941] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1631.193051][T20941] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1631.233906][T20941] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1631.914697][T20935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1632.311285][T20930] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1632.364054][T20930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1632.368213][T20930] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1632.415329][T20930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1632.427790][T20935] 8021q: adding VLAN 0 to HW filter on device team0 [ 1632.449287][T20930] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1632.520876][T20930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1632.778494][T20930] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1632.816048][T20930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1632.980860][T20749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1632.984750][T12071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.984937][T12071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1633.059151][T12074] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.059288][T12074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1633.103170][T20924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1633.666409][T20941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1633.677771][T20924] 8021q: adding VLAN 0 to HW filter on device team0 [ 1633.777180][T12321] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.777366][T12321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1633.844182][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.845774][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1634.021419][ T1028] hsr_slave_0: left promiscuous mode [ 1634.061907][ T1028] hsr_slave_1: left promiscuous mode [ 1634.062554][ T1028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1634.062570][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1634.120754][ T1028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1634.120780][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1634.260044][ T1028] hsr_slave_0: left promiscuous mode [ 1634.281702][ T1028] hsr_slave_1: left promiscuous mode [ 1634.282834][ T1028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1634.282850][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1634.330508][ T1028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1634.330534][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1634.489899][ T1028] hsr_slave_0: left promiscuous mode [ 1634.510854][ T1028] hsr_slave_1: left promiscuous mode [ 1634.511590][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1634.690135][ T1028] hsr_slave_0: left promiscuous mode [ 1634.709770][ T1028] hsr_slave_1: left promiscuous mode [ 1634.710417][ T1028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1634.710432][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1634.760807][ T1028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1634.760833][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1634.864642][ T1028] veth1_macvtap: left promiscuous mode [ 1634.864714][ T1028] veth0_macvtap: left promiscuous mode [ 1634.864889][ T1028] veth1_vlan: left promiscuous mode [ 1634.864989][ T1028] veth0_vlan: left promiscuous mode [ 1634.981608][ T1028] veth1_macvtap: left promiscuous mode [ 1634.981709][ T1028] veth0_macvtap: left promiscuous mode [ 1634.981907][ T1028] veth1_vlan: left promiscuous mode [ 1634.982008][ T1028] veth0_vlan: left promiscuous mode [ 1635.099997][ T1028] veth1_macvtap: left promiscuous mode [ 1635.100056][ T1028] veth0_macvtap: left promiscuous mode [ 1635.100201][ T1028] veth1_vlan: left promiscuous mode [ 1635.100301][ T1028] veth0_vlan: left promiscuous mode [ 1635.991570][ T1028] team0 (unregistering): Port device team_slave_1 removed [ 1636.030949][ T1028] team0 (unregistering): Port device team_slave_0 removed [ 1636.580261][ T1028] team0 (unregistering): Port device team_slave_1 removed [ 1636.622815][ T1028] team0 (unregistering): Port device team_slave_0 removed [ 1637.231413][ T1028] team0 (unregistering): Port device team_slave_1 removed [ 1637.288519][ T1028] team0 (unregistering): Port device team_slave_0 removed [ 1637.860769][ T1028] team0 (unregistering): Port device team_slave_1 removed [ 1637.903181][ T1028] team0 (unregistering): Port device team_slave_0 removed [ 1638.130920][T20941] 8021q: adding VLAN 0 to HW filter on device team0 [ 1638.235599][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.235805][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1638.267586][T12321] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.267791][T12321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1638.532498][T20749] veth0_vlan: entered promiscuous mode [ 1638.576572][T20930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1638.650222][T20749] veth1_vlan: entered promiscuous mode [ 1638.716968][T20930] 8021q: adding VLAN 0 to HW filter on device team0 [ 1638.842901][ T8613] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.843064][ T8613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1638.884037][T12071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.884193][T12071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1639.089036][T20749] veth0_macvtap: entered promiscuous mode [ 1639.115940][T20749] veth1_macvtap: entered promiscuous mode [ 1639.337751][T20749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1640.090445][T20935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1640.185123][T14444] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1640.211611][T14444] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1640.250936][T14444] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1640.348238][T14444] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1640.395841][T14444] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1641.417403][ T5261] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1641.473791][T20924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1641.929122][T20941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1642.237266][T20935] veth0_vlan: entered promiscuous mode [ 1642.287250][T20935] veth1_vlan: entered promiscuous mode [ 1642.363598][T20930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1642.482464][T21509] wlan0 speed is unknown, defaulting to 1000 [ 1642.546614][T14444] Bluetooth: hci0: command tx timeout [ 1642.703643][T20935] veth0_macvtap: entered promiscuous mode [ 1642.792654][T20935] veth1_macvtap: entered promiscuous mode [ 1642.975583][T20935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1643.125956][T20935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1643.177240][T20924] veth0_vlan: entered promiscuous mode [ 1643.206338][T12320] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.225395][T12320] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.232041][T12320] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.236142][T12320] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.236290][T20941] veth0_vlan: entered promiscuous mode [ 1643.263993][T20924] veth1_vlan: entered promiscuous mode [ 1643.431819][ T5261] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1643.571577][T20941] veth1_vlan: entered promiscuous mode [ 1644.289202][ T8609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1644.289235][ T8609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1644.383116][T20930] veth0_vlan: entered promiscuous mode [ 1644.458709][T21509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.458775][T21509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.458918][T21509] bridge_slave_0: entered allmulticast mode [ 1644.461912][T21509] bridge_slave_0: entered promiscuous mode [ 1644.509122][T21509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.509241][T21509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.511504][T21509] bridge_slave_1: entered allmulticast mode [ 1644.514017][T21509] bridge_slave_1: entered promiscuous mode [ 1644.526318][T20924] veth0_macvtap: entered promiscuous mode [ 1644.609275][T20930] veth1_vlan: entered promiscuous mode [ 1644.610993][T13368] Bluetooth: hci0: command tx timeout [ 1644.626502][T20941] veth0_macvtap: entered promiscuous mode [ 1644.629487][T20924] veth1_macvtap: entered promiscuous mode [ 1644.647284][T21509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1644.654150][ T8609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1644.654167][ T8609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1644.680497][T21509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1644.764933][T20941] veth1_macvtap: entered promiscuous mode [ 1644.826175][T21509] team0: Port device team_slave_0 added [ 1644.836746][T21509] team0: Port device team_slave_1 added [ 1644.882128][T21509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1644.882139][T21509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1644.882151][T21509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1644.884222][T20924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1644.894880][T21509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1644.894893][T21509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1644.894916][T21509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1645.085218][T20941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1645.087582][T20924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1645.126949][T20941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1645.179869][T12074] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.200940][T21509] hsr_slave_0: entered promiscuous mode [ 1645.202359][T21509] hsr_slave_1: entered promiscuous mode [ 1645.203441][T21509] debugfs: 'hsr0' already exists in 'hsr' [ 1645.203463][T21509] Cannot create hsr debugfs directory [ 1645.208520][T12074] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.248451][T12074] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.249032][T20930] veth0_macvtap: entered promiscuous mode [ 1645.283027][T12074] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.286584][T12074] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.315164][T12074] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.336511][T12074] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.349386][T20930] veth1_macvtap: entered promiscuous mode [ 1645.362441][ T8609] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.450611][ T1028] IPVS: stop unused estimator thread 0... [ 1645.451196][ T1028] IPVS: stop unused estimator thread 0... [ 1645.451812][ T1028] IPVS: stop unused estimator thread 0... [ 1645.455050][ T1028] IPVS: stop unused estimator thread 0... [ 1646.449293][T20930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1646.710344][T13368] Bluetooth: hci0: command tx timeout [ 1647.160675][T20930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1647.795936][ T8613] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1647.797993][ T8613] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1647.908147][T21626] 9pnet_fd: Insufficient options for proto=fd [ 1647.909737][T21626] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1648.201708][ T8613] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.398866][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1648.398910][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1648.502905][T12071] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.604588][T15580] IPVS: starting estimator thread 0... [ 1648.713747][T21627] IPVS: using max 11 ests per chain, 26400 per kthread [ 1648.769892][T13368] Bluetooth: hci0: command tx timeout [ 1648.909726][ T8609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1648.909746][ T8609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1649.724711][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1649.724728][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1649.814342][ T8609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1649.814360][ T8609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.739300][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.739318][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.824742][T21667] 9pnet_fd: Insufficient options for proto=fd [ 1650.826299][T21667] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1651.158446][ T5609] IPVS: starting estimator thread 0... [ 1651.579807][T21668] IPVS: using max 8 ests per chain, 19200 per kthread [ 1652.153249][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1652.153267][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1652.809182][T21700] 9pnet_fd: Insufficient options for proto=fd [ 1652.810762][T21700] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1653.923666][T21702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1653.925516][T21702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.249946][T21702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1654.255714][T21702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1654.755039][T21671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1655.266738][T12074] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.341195][T21734] 9pnet_fd: Insufficient options for proto=fd [ 1655.342791][T21734] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1655.408812][T12074] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.947841][ T8613] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.952634][ T8613] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.289932][ T1028] bridge_slave_1: left allmulticast mode [ 1656.289966][ T1028] bridge_slave_1: left promiscuous mode [ 1656.290227][ T1028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.305188][ T1028] bridge_slave_0: left allmulticast mode [ 1657.305221][ T1028] bridge_slave_0: left promiscuous mode [ 1657.305480][ T1028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.358351][ T37] audit: type=1326 audit(1784930533.332:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21757 comm="syz.8.3466" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f668248de99 code=0x0 [ 1658.082707][ T1028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1658.161433][ T1028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.186734][ T1028] bond0 (unregistering): Released all slaves [ 1658.591113][T21762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1658.591785][T21762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1659.545976][T21787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3477'. [ 1659.635844][ T37] audit: type=1326 audit(1784930535.612:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21790 comm="syz.4.3479" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff65cb9de99 code=0x0 [ 1659.764581][T21762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1659.769542][T21762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1660.715749][T21802] netlink: 188 bytes leftover after parsing attributes in process `syz.9.3483'. [ 1660.926351][T12321] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.927701][T12321] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.029557][T21812] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3487'. [ 1661.930959][ T1028] hsr_slave_0: left promiscuous mode [ 1661.970864][ T1028] hsr_slave_1: left promiscuous mode [ 1661.971866][ T1028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1661.971889][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1662.005332][ T37] audit: type=1326 audit(1784930537.982:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21818 comm="syz.4.3490" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff65cb9de99 code=0x0 [ 1662.060881][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1662.201653][ T1028] veth1_macvtap: left promiscuous mode [ 1662.201757][ T1028] veth0_macvtap: left promiscuous mode [ 1662.202029][ T1028] veth1_vlan: left promiscuous mode [ 1662.202210][ T1028] veth0_vlan: left promiscuous mode [ 1663.880302][ T1028] team0 (unregistering): Port device team_slave_1 removed [ 1663.910376][ T1028] team0 (unregistering): Port device team_slave_0 removed [ 1664.090218][T12321] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.097017][T21836] syzkaller0: entered promiscuous mode [ 1664.097038][T21836] syzkaller0: entered allmulticast mode [ 1664.121336][T12321] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.640156][ T37] audit: type=1326 audit(1784930540.622:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21878 comm="syz.8.3507" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f668248de99 code=0x0 [ 1665.835719][T15580] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1665.843903][T21922] syzkaller0: entered promiscuous mode [ 1665.843924][T21922] syzkaller0: entered allmulticast mode [ 1665.847384][T21922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3516'. [ 1665.847405][T21922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3516'. [ 1666.029963][T15580] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 1666.029990][T15580] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1666.030009][T15580] usb 10-1: config 220 has no interface number 2 [ 1666.030075][T15580] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1666.030101][T15580] usb 10-1: config 220 interface 0 has no altsetting 0 [ 1666.030117][T15580] usb 10-1: config 220 interface 76 has no altsetting 0 [ 1666.030132][T15580] usb 10-1: config 220 interface 1 has no altsetting 0 [ 1666.032428][T15580] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1666.032453][T15580] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.032469][T15580] usb 10-1: Product: syz [ 1666.032481][T15580] usb 10-1: Manufacturer: syz [ 1666.032498][T15580] usb 10-1: SerialNumber: syz [ 1666.957021][ T37] audit: type=1326 audit(1784930542.932:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21948 comm="syz.8.3523" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f668248de99 code=0x0 [ 1667.201120][T15580] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1667.201216][T15580] uvcvideo 10-1:220.0: No valid video chain found. [ 1667.201508][T15580] usb 10-1: selecting invalid altsetting 0 [ 1667.300985][T15580] usb 10-1: selecting invalid altsetting 0 [ 1667.301018][T15580] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 1667.386419][T15580] usb 10-1: USB disconnect, device number 2 [ 1668.216318][T21984] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1668.465909][T21962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.528322][T21962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1668.625670][ T37] audit: type=1800 audit(1784930544.602:39): pid=21997 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.3536" name="idVendor" dev="configfs" ino=75966 res=0 errno=0 [ 1668.723254][ T37] audit: type=1326 audit(1784930544.702:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22002 comm="syz.9.3538" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f328e81de99 code=0x0 [ 1669.026530][T21962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1669.045377][T21962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1670.907665][ T8601] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.934796][ T8601] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.936652][ T8601] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.936692][ T8601] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.287466][T21509] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1671.336561][T21509] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1671.337915][T21509] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1671.386587][ T37] audit: type=1326 audit(1784930547.362:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22050 comm="syz.8.3557" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f668248de99 code=0x0 [ 1671.428058][T21509] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1671.432387][T21509] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1671.479878][T21509] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1671.481860][T21509] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1671.534108][T21509] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1671.726504][T21509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1672.809296][T21509] 8021q: adding VLAN 0 to HW filter on device team0 [ 1672.845462][ T8602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.845660][ T8602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1672.890546][ T8602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.890670][ T8602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1673.895650][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1673.895715][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.517310][T22109] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3570'. [ 1674.579221][T22113] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1675.014960][T22130] netlink: 'syz.8.3573': attribute type 4 has an invalid length. [ 1675.218586][T21509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1676.013028][T21509] veth0_vlan: entered promiscuous mode [ 1676.029826][T21509] veth1_vlan: entered promiscuous mode [ 1677.124397][T21509] veth0_macvtap: entered promiscuous mode [ 1677.128517][T21509] veth1_macvtap: entered promiscuous mode [ 1677.148852][ T37] audit: type=1800 audit(1784930553.122:42): pid=22183 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.3586" name="host_addr" dev="configfs" ino=77315 res=0 errno=0 [ 1677.220221][T21509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1677.256115][T21509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1677.306206][T12320] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.306476][T12320] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.306511][T12320] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.306541][T12320] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.959383][ T37] audit: type=1800 audit(1784930553.932:43): pid=22208 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.3595" name="idVendor" dev="configfs" ino=76364 res=0 errno=0 [ 1677.983742][ T37] audit: type=1800 audit(1784930553.962:44): pid=22208 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.3595" name="idProduct" dev="configfs" ino=76365 res=0 errno=0 [ 1678.099124][T22185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.116469][T22185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1678.634940][T22185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1678.645258][T22185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1679.282125][T22250] 9pnet_fd: Insufficient options for proto=fd [ 1679.283813][T22250] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1679.796300][T21035] IPVS: starting estimator thread 0... [ 1679.879793][T22252] IPVS: using max 7 ests per chain, 16800 per kthread [ 1680.747148][ T13] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.920989][ T13] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.922186][ T13] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.923032][ T13] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.308399][ T8613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1681.308418][ T8613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1681.494101][T12321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1681.494132][T12321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1682.098714][T22289] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3623'. [ 1682.580091][T22299] 9pnet_fd: Insufficient options for proto=fd [ 1682.583578][T22299] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1683.493891][T22298] wlan0 speed is unknown, defaulting to 1000 [ 1683.610622][T21035] IPVS: starting estimator thread 0... [ 1683.759774][T22301] IPVS: using max 9 ests per chain, 21600 per kthread [ 1684.002071][T14444] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1684.052193][T14444] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1684.104171][T14444] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1684.111614][T14444] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1684.116532][T14444] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1684.665752][T22328] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3633'. [ 1684.917301][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1686.298619][T13368] Bluetooth: hci1: command tx timeout [ 1688.302648][T22350] 9pnet_fd: Insufficient options for proto=fd [ 1688.304285][T22350] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1688.380400][T13368] Bluetooth: hci1: command tx timeout [ 1689.514820][T22308] wlan0 speed is unknown, defaulting to 1000 [ 1690.204303][T22395] 9pnet_fd: Insufficient options for proto=fd [ 1690.205940][T22395] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1690.813504][T22398] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 1690.927310][T13368] Bluetooth: hci1: command tx timeout [ 1691.635394][T22398] configfs-gadget.g1 gadget.32: HOST MAC 46:6d:d9:08:32:22 [ 1691.635416][T22398] configfs-gadget.g1 gadget.32: MAC 6a:61:ce:27:03:45 [ 1691.750511][T22398] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 1691.823751][ T5619] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1691.984011][ T5619] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1691.984115][ T5619] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1692.019519][ T5619] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1692.019545][ T5619] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.019563][ T5619] usb 9-1: Product: syz [ 1692.019575][ T5619] usb 9-1: Manufacturer: syz [ 1692.047188][ T5619] usb 9-1: SerialNumber: syz [ 1692.268091][T22398] udc usbip-vudc.0: failed to start g1: -19 [ 1692.519898][T22442] 9pnet_fd: Insufficient options for proto=fd [ 1692.521630][T22442] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1693.043402][T13368] Bluetooth: hci1: command tx timeout [ 1693.066910][ T5619] usb 9-1: 0:2 : does not exist [ 1693.067148][ T5619] usb 9-1: unit 9 not found! [ 1693.224575][T22398] UDC core: g1: couldn't find an available UDC or it's busy [ 1693.563575][T22452] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3660'. [ 1693.563894][T22308] bridge0: port 1(bridge_slave_0) entered blocking state [ 1693.564084][T22308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1693.564290][T22308] bridge_slave_0: entered allmulticast mode [ 1693.567900][T22308] bridge_slave_0: entered promiscuous mode [ 1693.592513][T22308] bridge0: port 2(bridge_slave_1) entered blocking state [ 1693.592639][T22308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1693.592836][T22308] bridge_slave_1: entered allmulticast mode [ 1693.595390][T22308] bridge_slave_1: entered promiscuous mode [ 1693.876871][ T5619] usb 9-1: USB disconnect, device number 2 [ 1694.226850][T22308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1694.483946][T22308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1694.662317][T22308] team0: Port device team_slave_0 added [ 1694.666945][T22308] team0: Port device team_slave_1 added [ 1694.718989][T22308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1694.719003][T22308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.719025][T22308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1694.765698][T22308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1694.765712][T22308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.765735][T22308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1694.967824][T22480] 9pnet_fd: Insufficient options for proto=fd [ 1694.969424][T22480] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1695.469891][T21035] IPVS: starting estimator thread 0... [ 1695.569897][T22481] IPVS: using max 7 ests per chain, 16800 per kthread [ 1695.744902][T22490] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3671'. [ 1695.786818][ T13] bridge_slave_1: left allmulticast mode [ 1695.786851][ T13] bridge_slave_1: left promiscuous mode [ 1695.787095][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.969452][ T13] bridge_slave_0: left allmulticast mode [ 1695.969484][ T13] bridge_slave_0: left promiscuous mode [ 1695.969938][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.569683][T22516] 9pnet_fd: Insufficient options for proto=fd [ 1696.571178][T22516] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 1697.922446][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1698.070440][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1698.130781][ T13] bond0 (unregistering): Released all slaves [ 1700.687765][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1700.817194][T22308] hsr_slave_0: entered promiscuous mode [ 1700.824056][T22308] hsr_slave_1: entered promiscuous mode [ 1700.826373][T22308] debugfs: 'hsr0' already exists in 'hsr' [ 1700.826394][T22308] Cannot create hsr debugfs directory [ 1701.241341][T22558] vlan2: entered promiscuous mode [ 1701.241363][T22558] bond0: entered promiscuous mode [ 1701.241375][T22558] bond_slave_0: entered promiscuous mode [ 1701.241619][T22558] bond_slave_1: entered promiscuous mode [ 1706.242590][T22608] input: syz1 as /devices/virtual/input/input9 [ 1706.261924][T22616] Mass Storage Function, version: 2009/09/11 [ 1706.261968][T22616] LUN: removable file: (no medium) [ 1706.299096][T22616] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 1706.299121][T22616] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 1706.299152][T22616] ================================================================== [ 1706.299161][T22616] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x3f/0x80 [ 1706.299227][T22616] Read of size 8 at addr ffff88803f7bf8f0 by task syz.6.3711/22616 [ 1706.299244][T22616] [ 1706.299262][T22616] CPU: 1 UID: 0 PID: 22616 Comm: syz.6.3711 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1706.299289][T22616] Tainted: [L]=SOFTLOCKUP [ 1706.299297][T22616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1706.299315][T22616] Call Trace: [ 1706.299323][T22616] [ 1706.299330][T22616] dump_stack_lvl+0xe8/0x150 [ 1706.299362][T22616] print_address_description+0x55/0x1e0 [ 1706.299395][T22616] ? dummy_free_request+0x3f/0x80 [ 1706.299426][T22616] print_report+0x58/0x70 [ 1706.299448][T22616] kasan_report+0x117/0x150 [ 1706.299472][T22616] ? dummy_free_request+0x3f/0x80 [ 1706.299496][T22616] dummy_free_request+0x3f/0x80 [ 1706.299517][T22616] uvc_function_bind+0xe5d/0x15a0 [ 1706.299548][T22616] usb_add_function+0x290/0x930 [ 1706.299568][T22616] configfs_composite_bind+0xde0/0x1410 [ 1706.299597][T22616] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1706.299616][T22616] gadget_bind_driver+0x2ca/0x9e0 [ 1706.299648][T22616] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1706.299672][T22616] really_probe+0x254/0xae0 [ 1706.299701][T22616] __driver_probe_device+0x1e8/0x360 [ 1706.299727][T22616] driver_probe_device+0x4f/0x240 [ 1706.299754][T22616] __driver_attach+0x339/0x600 [ 1706.299778][T22616] bus_for_each_dev+0x23e/0x2c0 [ 1706.299795][T22616] ? __pfx___driver_attach+0x10/0x10 [ 1706.299818][T22616] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1706.299838][T22616] ? rt_spin_unlock+0x163/0x200 [ 1706.299869][T22616] bus_add_driver+0x348/0x670 [ 1706.299891][T22616] driver_register+0x23a/0x320 [ 1706.299919][T22616] usb_gadget_register_driver_owner+0xf9/0x270 [ 1706.299948][T22616] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1706.299972][T22616] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 1706.299997][T22616] configfs_write_iter+0x33a/0x430 [ 1706.300019][T22616] vfs_write+0x61e/0xbb0 [ 1706.300046][T22616] ? __pfx_vfs_write+0x10/0x10 [ 1706.300069][T22616] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1706.300088][T22616] ? lockdep_hardirqs_on+0x7a/0x110 [ 1706.300108][T22616] ? mutex_lock_nested+0x152/0x1d0 [ 1706.300133][T22616] ? fdget_pos+0x252/0x320 [ 1706.300155][T22616] ksys_write+0x156/0x270 [ 1706.300178][T22616] ? __pfx_ksys_write+0x10/0x10 [ 1706.300205][T22616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.300225][T22616] do_syscall_64+0x174/0x580 [ 1706.300246][T22616] ? trace_irq_disable+0x3b/0x140 [ 1706.300265][T22616] ? clear_bhb_loop+0x40/0x90 [ 1706.300286][T22616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.300312][T22616] RIP: 0033:0x7f75681ede99 [ 1706.300332][T22616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1706.300351][T22616] RSP: 002b:00007f7566446028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1706.300378][T22616] RAX: ffffffffffffffda RBX: 00007f7568475fa0 RCX: 00007f75681ede99 [ 1706.300395][T22616] RDX: 000000000000000b RSI: 0000200000000d00 RDI: 0000000000000003 [ 1706.300418][T22616] RBP: 00007f7568283eaf R08: 0000000000000000 R09: 0000000000000000 [ 1706.300432][T22616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1706.300444][T22616] R13: 00007f7568476038 R14: 00007f7568475fa0 R15: 00007ffdcfc51c48 [ 1706.300465][T22616] [ 1706.300471][T22616] [ 1706.300479][T22616] Allocated by task 22398: [ 1706.300489][T22616] kasan_save_track+0x3e/0x80 [ 1706.300507][T22616] __kasan_kmalloc+0x93/0xb0 [ 1706.300524][T22616] __kmalloc_cache_noprof+0x3d2/0x6b0 [ 1706.300542][T22616] cdev_alloc+0x4c/0xc0 [ 1706.300565][T22616] __video_register_device+0x396e/0x4aa0 [ 1706.300587][T22616] uvc_register_video+0x296/0x370 [ 1706.300608][T22616] uvc_function_bind+0x108d/0x15a0 [ 1706.300630][T22616] usb_add_function+0x290/0x930 [ 1706.300646][T22616] configfs_composite_bind+0xde0/0x1410 [ 1706.300665][T22616] gadget_bind_driver+0x2ca/0x9e0 [ 1706.300689][T22616] really_probe+0x254/0xae0 [ 1706.300711][T22616] __driver_probe_device+0x1e8/0x360 [ 1706.300733][T22616] driver_probe_device+0x4f/0x240 [ 1706.300757][T22616] __driver_attach+0x339/0x600 [ 1706.300779][T22616] bus_for_each_dev+0x23e/0x2c0 [ 1706.300793][T22616] bus_add_driver+0x348/0x670 [ 1706.300806][T22616] driver_register+0x23a/0x320 [ 1706.300828][T22616] usb_gadget_register_driver_owner+0xf9/0x270 [ 1706.300861][T22616] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1706.300887][T22616] configfs_write_iter+0x33a/0x430 [ 1706.300905][T22616] vfs_write+0x61e/0xbb0 [ 1706.300926][T22616] ksys_write+0x156/0x270 [ 1706.300945][T22616] do_syscall_64+0x174/0x580 [ 1706.300964][T22616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.300980][T22616] [ 1706.300985][T22616] Freed by task 22398: [ 1706.300994][T22616] kasan_save_track+0x3e/0x80 [ 1706.301010][T22616] kasan_save_free_info+0x40/0x50 [ 1706.301032][T22616] __kasan_slab_free+0x5c/0x80 [ 1706.301050][T22616] kfree+0x1c5/0x6c0 [ 1706.301063][T22616] cdev_dynamic_release+0x1b1/0x1d0 [ 1706.301087][T22616] kobject_put+0x222/0x550 [ 1706.301108][T22616] v4l2_device_release+0x147/0x460 [ 1706.301128][T22616] device_release+0xc4/0x1f0 [ 1706.301149][T22616] kobject_put+0x222/0x550 [ 1706.301167][T22616] uvc_function_unbind+0x4a5/0xc20 [ 1706.301186][T22616] purge_configs_funcs+0x248/0x3d0 [ 1706.301202][T22616] configfs_composite_bind+0x106d/0x1410 [ 1706.301218][T22616] gadget_bind_driver+0x2ca/0x9e0 [ 1706.301238][T22616] really_probe+0x254/0xae0 [ 1706.301256][T22616] __driver_probe_device+0x1e8/0x360 [ 1706.301275][T22616] driver_probe_device+0x4f/0x240 [ 1706.301293][T22616] __driver_attach+0x339/0x600 [ 1706.301311][T22616] bus_for_each_dev+0x23e/0x2c0 [ 1706.301325][T22616] bus_add_driver+0x348/0x670 [ 1706.301339][T22616] driver_register+0x23a/0x320 [ 1706.301358][T22616] usb_gadget_register_driver_owner+0xf9/0x270 [ 1706.301378][T22616] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1706.301410][T22616] configfs_write_iter+0x33a/0x430 [ 1706.301428][T22616] vfs_write+0x61e/0xbb0 [ 1706.301446][T22616] ksys_write+0x156/0x270 [ 1706.301463][T22616] do_syscall_64+0x174/0x580 [ 1706.301480][T22616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.301496][T22616] [ 1706.301500][T22616] The buggy address belongs to the object at ffff88803f7bf800 [ 1706.301500][T22616] which belongs to the cache kmalloc-128 of size 128 [ 1706.301516][T22616] The buggy address is located 112 bytes to the right of [ 1706.301516][T22616] allocated 128-byte region [ffff88803f7bf800, ffff88803f7bf880) [ 1706.301535][T22616] [ 1706.301540][T22616] The buggy address belongs to the physical page: [ 1706.301556][T22616] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803f7bfa00 pfn:0x3f7bf [ 1706.301574][T22616] flags: 0x80000000000200(workingset|node=0|zone=1) [ 1706.301593][T22616] page_type: f5(slab) [ 1706.301609][T22616] raw: 0080000000000200 ffff88813ffb1a00 ffffea000177f990 ffffea00017bf190 [ 1706.301625][T22616] raw: ffff88803f7bfa00 000000080010000f 00000000f5000000 0000000000000000 [ 1706.301635][T22616] page dumped because: kasan: bad access detected [ 1706.301648][T22616] page_owner tracks the page as allocated [ 1706.301654][T22616] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6131, tgid 6128 (syz.3.115), ts 136592319187, free_ts 86630611667 [ 1706.301685][T22616] post_alloc_hook+0x1f9/0x250 [ 1706.301700][T22616] get_page_from_freelist+0x262a/0x26a0 [ 1706.301720][T22616] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1706.301738][T22616] allocate_slab+0x79/0x5e0 [ 1706.301758][T22616] refill_objects+0x2d8/0x350 [ 1706.301779][T22616] __pcs_replace_empty_main+0x330/0x690 [ 1706.301799][T22616] __kmalloc_noprof+0x544/0x780 [ 1706.301814][T22616] hash_netportnet6_resize+0xc9b/0x2050 [ 1706.301834][T22616] call_ad+0x3ea/0xa30 [ 1706.301848][T22616] ip_set_ad+0x82a/0x9d0 [ 1706.301861][T22616] nfnetlink_rcv_msg+0xcd6/0x12c0 [ 1706.301877][T22616] netlink_rcv_skb+0x226/0x4a0 [ 1706.301895][T22616] nfnetlink_rcv+0x2b9/0x28d0 [ 1706.301909][T22616] netlink_unicast+0x7f5/0x990 [ 1706.301923][T22616] netlink_sendmsg+0x813/0xb40 [ 1706.301941][T22616] sock_sendmsg_nosec+0x13a/0x180 [ 1706.301963][T22616] page last free pid 28 tgid 28 stack trace: [ 1706.301972][T22616] __free_frozen_pages+0x10e7/0x11c0 [ 1706.301988][T22616] rcu_cpu_kthread+0x950/0x1480 [ 1706.302006][T22616] smpboot_thread_fn+0x57c/0xa80 [ 1706.302026][T22616] kthread+0x388/0x470 [ 1706.302048][T22616] ret_from_fork+0x514/0xb70 [ 1706.302070][T22616] ret_from_fork_asm+0x1a/0x30 [ 1706.302085][T22616] [ 1706.302089][T22616] Memory state around the buggy address: [ 1706.302099][T22616] ffff88803f7bf780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1706.302110][T22616] ffff88803f7bf800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1706.302122][T22616] >ffff88803f7bf880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1706.302130][T22616] ^ [ 1706.302141][T22616] ffff88803f7bf900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1706.302153][T22616] ffff88803f7bf980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1706.302162][T22616] ================================================================== [ 1706.332348][T22616] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1706.332369][T22616] CPU: 1 UID: 0 PID: 22616 Comm: syz.6.3711 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1706.332402][T22616] Tainted: [L]=SOFTLOCKUP [ 1706.332409][T22616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1706.332420][T22616] Call Trace: [ 1706.332427][T22616] [ 1706.332434][T22616] vpanic+0x56c/0xa60 [ 1706.332459][T22616] ? __pfx_vpanic+0x10/0x10 [ 1706.332476][T22616] ? __pfx___schedule+0x10/0x10 [ 1706.332496][T22616] panic+0xc5/0xd0 [ 1706.332511][T22616] ? __pfx_panic+0x10/0x10 [ 1706.332526][T22616] ? preempt_schedule_thunk+0x16/0x40 [ 1706.332551][T22616] ? dummy_free_request+0x3f/0x80 [ 1706.332572][T22616] check_panic_on_warn+0x89/0xb0 [ 1706.332589][T22616] ? dummy_free_request+0x3f/0x80 [ 1706.332607][T22616] end_report+0x73/0x170 [ 1706.332626][T22616] ? dummy_free_request+0x3f/0x80 [ 1706.332645][T22616] kasan_report+0x128/0x150 [ 1706.332666][T22616] ? dummy_free_request+0x3f/0x80 [ 1706.332689][T22616] dummy_free_request+0x3f/0x80 [ 1706.332709][T22616] uvc_function_bind+0xe5d/0x15a0 [ 1706.332736][T22616] usb_add_function+0x290/0x930 [ 1706.332757][T22616] configfs_composite_bind+0xde0/0x1410 [ 1706.332781][T22616] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1706.332800][T22616] gadget_bind_driver+0x2ca/0x9e0 [ 1706.332827][T22616] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1706.332849][T22616] really_probe+0x254/0xae0 [ 1706.332873][T22616] __driver_probe_device+0x1e8/0x360 [ 1706.332897][T22616] driver_probe_device+0x4f/0x240 [ 1706.332923][T22616] __driver_attach+0x339/0x600 [ 1706.332945][T22616] bus_for_each_dev+0x23e/0x2c0 [ 1706.332962][T22616] ? __pfx___driver_attach+0x10/0x10 [ 1706.332983][T22616] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1706.333002][T22616] ? rt_spin_unlock+0x163/0x200 [ 1706.333025][T22616] bus_add_driver+0x348/0x670 [ 1706.333044][T22616] driver_register+0x23a/0x320 [ 1706.333067][T22616] usb_gadget_register_driver_owner+0xf9/0x270 [ 1706.333091][T22616] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1706.333115][T22616] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 1706.333142][T22616] configfs_write_iter+0x33a/0x430 [ 1706.333164][T22616] vfs_write+0x61e/0xbb0 [ 1706.333189][T22616] ? __pfx_vfs_write+0x10/0x10 [ 1706.333210][T22616] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1706.333229][T22616] ? lockdep_hardirqs_on+0x7a/0x110 [ 1706.333248][T22616] ? mutex_lock_nested+0x152/0x1d0 [ 1706.333270][T22616] ? fdget_pos+0x252/0x320 [ 1706.333292][T22616] ksys_write+0x156/0x270 [ 1706.333313][T22616] ? __pfx_ksys_write+0x10/0x10 [ 1706.333336][T22616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.333354][T22616] do_syscall_64+0x174/0x580 [ 1706.333373][T22616] ? trace_irq_disable+0x3b/0x140 [ 1706.333390][T22616] ? clear_bhb_loop+0x40/0x90 [ 1706.333417][T22616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.333433][T22616] RIP: 0033:0x7f75681ede99 [ 1706.333448][T22616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1706.333461][T22616] RSP: 002b:00007f7566446028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1706.333472][T22616] RAX: ffffffffffffffda RBX: 00007f7568475fa0 RCX: 00007f75681ede99 [ 1706.333480][T22616] RDX: 000000000000000b RSI: 0000200000000d00 RDI: 0000000000000003 [ 1706.333486][T22616] RBP: 00007f7568283eaf R08: 0000000000000000 R09: 0000000000000000 [ 1706.333492][T22616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1706.333498][T22616] R13: 00007f7568476038 R14: 00007f7568475fa0 R15: 00007ffdcfc51c48 [ 1706.333510][T22616] [ 1706.333789][T22616] Kernel Offset: disabled