last executing test programs: 5m36.675542571s ago: executing program 2 (id=671): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1000000000000", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r3, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x90, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'skcipher\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x90}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff050003ff800000000500030080ffffff0500030080ffffff0800020003"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5m35.878739129s ago: executing program 2 (id=673): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m33.131237531s ago: executing program 2 (id=678): r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000580)={0x0, 0xd, 0x4, "b5f06dff"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 5m31.728800398s ago: executing program 2 (id=685): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d", 0xf}, {&(0x7f0000000e80)}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0xffffffffffffff99, 0x10008095, 0x0, 0x0) 5m29.927890749s ago: executing program 2 (id=688): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x60101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r4 = dup(r3) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x4, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 5m27.864111601s ago: executing program 2 (id=692): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x62, 0x0, &(0x7f0000000280)) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, &(0x7f0000000640)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x8970, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x10, 0x80, 0x1000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x1, 0x6000000}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000580)=""/90) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, &(0x7f0000000480)) r7 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0x8, 0x0, 0x8, {0x8, 0xffffffff}, 0xfc, 0x9}}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xa, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1a) mount$tmpfs(0x0, 0x0, &(0x7f0000000280), 0x3000c11, &(0x7f00000000c0)) 5m12.708594537s ago: executing program 32 (id=692): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x62, 0x0, &(0x7f0000000280)) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, &(0x7f0000000640)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x8970, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x10, 0x80, 0x1000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x1, 0x6000000}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000580)=""/90) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, &(0x7f0000000480)) r7 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0x8, 0x0, 0x8, {0x8, 0xffffffff}, 0xfc, 0x9}}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xa, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1a) mount$tmpfs(0x0, 0x0, &(0x7f0000000280), 0x3000c11, &(0x7f00000000c0)) 3m18.103822901s ago: executing program 5 (id=1161): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000014c0)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m15.229361765s ago: executing program 0 (id=1173): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) openat2$dir(0xffffff9c, 0x0, &(0x7f0000000100)={0x100, 0x20, 0x4}, 0x18) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 3m13.538655657s ago: executing program 5 (id=1176): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x62, 0x0, &(0x7f0000000280)) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, &(0x7f0000000640)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x8970, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x10, 0x80, 0x1000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x1, 0x6000000}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000580)=""/90) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, &(0x7f0000000480)) r7 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0x8, 0x0, 0x8, {0x8, 0xffffffff}, 0xfc, 0x9}}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, 0x0, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1a) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x3000c11, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x33, 0x4e, 0x3a, 0x36, 0x2f, 0x34]}}}, 0x4e}]}) 3m10.891656485s ago: executing program 0 (id=1180): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1000000000000", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r3, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x88, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'skcipher\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x88}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff050003ff800000000500030080ffffff0500030080ffffff0800020003"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m10.508435604s ago: executing program 0 (id=1184): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket(0x1e, 0x1, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 3m10.227720855s ago: executing program 0 (id=1188): socket$nl_generic(0x10, 0x3, 0x10) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000001) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r0, 0x0, 0x8e14, 0x8ffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_elf64(r1, 0x0, 0x78) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 3m9.898249717s ago: executing program 0 (id=1193): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) 3m9.565477777s ago: executing program 0 (id=1199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00008c71ef288563"], 0xffdd) 3m8.662376725s ago: executing program 1 (id=1213): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x3, 0x0, 0xfec00000, 0x1000, &(0x7f000055e000/0x1000)=nil}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=[@uexit={0x0, 0x18}, @nested_create_vm={0x12d, 0x18, 0x2}, @uexit={0x0, 0x18}, @wrmsr={0x65, 0x20, {0x9af, 0x1000}}, @wrmsr={0x65, 0x20, {0x26d, 0x1}}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18}, @nested_create_vm={0x12d, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x32, 0x6b, 0x100000001, 0x5}}, @uexit={0x0, 0x18}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0x2}}, @wr_crn={0x67, 0x20, {0x4, 0x81}}, @set_irq_handler={0xc8, 0x20, {0xa1, 0x1}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @enable_nested={0x12c, 0x18}], 0x1e0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x9, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m8.395071197s ago: executing program 5 (id=1216): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600"], 0x48) 3m8.156768552s ago: executing program 1 (id=1221): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x200008}, [@generic={0x91, 0x1, 0x1, 0x22}]}, &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ff9}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xea, 0x440, 0x0, 0x32}, 0x9c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.freeze\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m8.094242524s ago: executing program 5 (id=1222): setuid(0xee01) setfsgid(0xee00) 3m7.910197281s ago: executing program 5 (id=1226): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, 0x0) 3m7.889399381s ago: executing program 1 (id=1228): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/83, 0x795}) io_setup(0x9, &(0x7f0000000000)=0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x8517e, 0x8b) io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000040)='\x00', 0x1, 0x400, 0x0, 0x0, r1}]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000068d000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x2ccb, &(0x7f0000000040)={0x0, 0x88a1, 0xc801, 0x3, 0x289}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x48, 0x0, 0x944, 0x7, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x67, 0x0, 0xe, 0x2f, 0x0, @local, @private=0xa010100}}}}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in=@loopback, @in=@empty, 0x4e23, 0x7, 0x4e20, 0x0, 0xa, 0x10, 0x0, 0x84, r3, 0xffffffffffffffff}, {0x1, 0x7, 0x5, 0xa, 0x6, 0x1, 0x4, 0x3}, {0x5, 0x3, 0x4, 0x5}, 0x200, 0x6e6bbc, 0x0, 0x1}, {{@in6=@local, 0x4d2, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3502, 0x2, 0x0, 0x2, 0x40, 0x1, 0x4}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m7.547476659s ago: executing program 5 (id=1234): socket$netlink(0x10, 0x3, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 3m7.486315318s ago: executing program 1 (id=1235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x5, 0x6, 0x1}, {0x8000000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x7, 0x3, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xeeef0000, 0xd5dd0000, 0x10, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x152002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x44, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m7.062561776s ago: executing program 1 (id=1245): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000801000000000000006210000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}, 0x14000800) 3m6.882620459s ago: executing program 1 (id=1249): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001400)=ANY=[@ANYBLOB="380000002e000100000000000000002408000000", @ANYRES32, @ANYBLOB="0c00008008000200fdffffff1400018010002700d847b0d44ca7ba9b542be6ce"], 0x38}], 0x1}, 0x4) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f00000000c0)={0x1, 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000714000428bd7000fedbdf2508004400", @ANYRES32=r4, @ANYBLOB="0800012bfbf2847b74ae286e512a8956222fec57e1015c3d27676fd5b60ee9e828f50220a900a2c9b3cf51996b7d251421c8bf55faa0c105d08954244eb2bff971eee1ae4e97985bfa003abda39267dc224cbfc66888cf2764f7d3631eaef924855104bf410b0ae35dca07f4e7e5d69bac72d670cbdb4b31d1e6f3e01103b2306006d89eb4e673bb3b451a7b5f64c6c46179f777a47f12f49be8fb47fd1de0776fb371c474fb3164ae258ef573267b0f4043c1de79e02ea2f811203702c4605242e24a3dffc2c29db452c2c299770c0bacaef28ec740d0ec0e4436f71647b2c9074e8116e45f083dedb4b6ad1e10f2b2683620e60afc0229"], 0x20}, 0x1, 0x0, 0x0, 0x40844}, 0x20000011) unshare(0x2c020400) syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0xf5cc, 0x2, 0x4}, 0x0, 0x0) 2m54.505883829s ago: executing program 33 (id=1199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00008c71ef288563"], 0xffdd) 2m52.501822708s ago: executing program 34 (id=1234): socket$netlink(0x10, 0x3, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 2m51.828650853s ago: executing program 35 (id=1249): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001400)=ANY=[@ANYBLOB="380000002e000100000000000000002408000000", @ANYRES32, @ANYBLOB="0c00008008000200fdffffff1400018010002700d847b0d44ca7ba9b542be6ce"], 0x38}], 0x1}, 0x4) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f00000000c0)={0x1, 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000714000428bd7000fedbdf2508004400", @ANYRES32=r4, @ANYBLOB="0800012bfbf2847b74ae286e512a8956222fec57e1015c3d27676fd5b60ee9e828f50220a900a2c9b3cf51996b7d251421c8bf55faa0c105d08954244eb2bff971eee1ae4e97985bfa003abda39267dc224cbfc66888cf2764f7d3631eaef924855104bf410b0ae35dca07f4e7e5d69bac72d670cbdb4b31d1e6f3e01103b2306006d89eb4e673bb3b451a7b5f64c6c46179f777a47f12f49be8fb47fd1de0776fb371c474fb3164ae258ef573267b0f4043c1de79e02ea2f811203702c4605242e24a3dffc2c29db452c2c299770c0bacaef28ec740d0ec0e4436f71647b2c9074e8116e45f083dedb4b6ad1e10f2b2683620e60afc0229"], 0x20}, 0x1, 0x0, 0x0, 0x40844}, 0x20000011) unshare(0x2c020400) syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0xf5cc, 0x2, 0x4}, 0x0, 0x0) 1m52.552486514s ago: executing program 4 (id=2440): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1000000000000", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r3, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x90, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'skcipher\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x90}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff050003ff8000000005000300"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010001, 0x0) 1m52.145361236s ago: executing program 4 (id=2442): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r2}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYRES64=0xffffffffffffffff, @ANYRESHEX, @ANYRESOCT=r0], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b32125}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYRESDEC=r1, @ANYRESOCT=r4, @ANYRESOCT=r1, @ANYRESOCT=r3, @ANYRESOCT=0x0, @ANYRESHEX=r1], 0x20) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) clock_gettime(0x3, &(0x7f0000000180)) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000000c0)={r5}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r8, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 1m51.949780491s ago: executing program 4 (id=2444): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24", 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0xffffffffffffff99, 0x10008095, 0x0, 0x0) 1m49.630690252s ago: executing program 4 (id=2448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x130, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0x1c0}}, 0x0) 1m45.923715216s ago: executing program 4 (id=2449): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1}, 0x24008004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000180)) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) keyctl$join(0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 1m45.522139271s ago: executing program 4 (id=2452): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1}, 0x24008004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000180)) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) keyctl$join(0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 1m28.127700412s ago: executing program 8 (id=2488): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 1m24.336311728s ago: executing program 8 (id=2491): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1000000000000", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r3, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x88, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'skcipher\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x88}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff050003ff800000000500030080ffffff0500030080ffffff0800020003"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m23.169451974s ago: executing program 8 (id=2494): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 1m21.50489113s ago: executing program 8 (id=2500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r1, &(0x7f0000001580)=[{&(0x7f00000004c0)=""/72, 0x48}], 0x1, 0xbf, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x10, "bb30868eaf222e44f9be1a94e5f939b9"}, &(0x7f0000000040)=0x18) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'vlan0\x00', @random='\x00\a\x00'}) 1m19.728008581s ago: executing program 8 (id=2503): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1000000000000", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r3, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x88, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'skcipher\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x88}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff050003ff800000000500030080ffffff0500030080ffffff0800020003"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m8.09801679s ago: executing program 8 (id=2519): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)={0x14, r1, 0x301, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80b40, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f0000000340)={0x81, 0x0, 0x3}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0xfd}, @in=@rand_addr=0x64010102, 0x4e22, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@multicast2, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f00000000c0)={0x7000, 0xdddd1000, 0x9, 0x0, 0xb}) r9 = openat$cgroup_procs(r4, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000380), 0x12) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r11, 0x0, {0x2, 0x1, 0x1}, 0xfd}, 0x18) write$cgroup_pid(r9, &(0x7f00000000c0), 0x12) 57.080544986s ago: executing program 7 (id=2548): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a4973"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r3, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x88, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'skcipher\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x88}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff050003ff800000000500030080ffffff0500030080ffffff0800020003"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 57.065627935s ago: executing program 3 (id=2550): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 56.737701431s ago: executing program 3 (id=2551): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120fa426c8419ed8f469cc66015002e7ddba20cb33ffeefed6907effffff2a7d0102f6010902121401040240020906117f004d1d025b"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000040), 0xc, 0x4100) socket$caif_seqpacket(0x25, 0x5, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_evm(r0, &(0x7f0000000dc0), 0x0, 0x0, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000100)={@remote, @dev, @broadcast}, &(0x7f0000000140)=0xc) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 54.175415853s ago: executing program 7 (id=2553): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a4973"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1000000000000", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r3, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x88, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'skcipher\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x88}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff050003ff800000000500030080ffffff0500030080ffffff0800020003"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 53.907114029s ago: executing program 7 (id=2554): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x10f}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c84422184", 0x1a}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f", 0x9f}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420", 0x32}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 52.753032887s ago: executing program 36 (id=2519): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)={0x14, r1, 0x301, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80b40, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f0000000340)={0x81, 0x0, 0x3}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0xfd}, @in=@rand_addr=0x64010102, 0x4e22, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@multicast2, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f00000000c0)={0x7000, 0xdddd1000, 0x9, 0x0, 0xb}) r9 = openat$cgroup_procs(r4, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000380), 0x12) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r11, 0x0, {0x2, 0x1, 0x1}, 0xfd}, 0x18) write$cgroup_pid(r9, &(0x7f00000000c0), 0x12) 52.708317019s ago: executing program 3 (id=2557): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a4973"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1000000000000", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r3, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff050003ff800000000500030080ffffff0500030080ffffff08"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 52.708027031s ago: executing program 7 (id=2558): unshare(0x6020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c00000004000000040000000600000000000000", @ANYRES32=r0, @ANYBLOB="66f00d127c6a13826a920ea5cefc0000000000251fb6a63fd738985a8000"/46, @ANYRES16=r0, @ANYRESOCT=r0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r1, @ANYBLOB="000008000000b942640000000000000000401008", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={0x0, 0xa5fc}, &(0x7f00000002c0)=0x8) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = userfaultfd(0x801) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 49.650532171s ago: executing program 3 (id=2559): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2a882) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0x6, 0x2e}) 49.163430872s ago: executing program 7 (id=2561): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x1}, {0x20}, {0x6, 0xfd, 0x0, 0x7ffffcb6}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r2 = socket(0x2a, 0x80002, 0x913) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_emit_ethernet(0x330, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x19, 0x527d88dd03d0199c, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a8008000280", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 49.076951608s ago: executing program 3 (id=2562): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$FUSE(r0, &(0x7f0000003200)={0x2020}, 0x2020) epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000080), &(0x7f0000000100)={[0x6]}, 0x8) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x800) readv(r2, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x79}], 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x7800, 0x80, 0x80000000, 0x98a1, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x65, 0x0, 0x6d, 0x29, 0x0, @private=0xa010100, @empty}}}}) 47.819633685s ago: executing program 3 (id=2564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040054}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) unshare(0x40020000) 47.81905766s ago: executing program 7 (id=2565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040054}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) unshare(0x40020000) 31.560967777s ago: executing program 37 (id=2565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040054}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) unshare(0x40020000) 30.844458781s ago: executing program 38 (id=2564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040054}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) unshare(0x40020000) 22.779495304s ago: executing program 6 (id=2582): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a4973"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r3, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x88, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'skcipher\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x88}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff050003ff800000000500030080ffffff0500030080ffffff0800020003"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 19.947579286s ago: executing program 6 (id=2583): creat(&(0x7f00000000c0)='./file0\x00', 0x2) r0 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000003500), 0x80000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)="06", 0x1, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000440)=@keyring={'key_or_keyring:', r4}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x408000, 0x44, 0x18}, 0x18) 17.97705278s ago: executing program 6 (id=2584): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 17.42631917s ago: executing program 6 (id=2585): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe7}}}}}}, 0x0) (fail_nth: 1) 16.87385135s ago: executing program 6 (id=2586): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket(0x66, 0xa, 0xc) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0x3}, 0x8) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000080)={0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000040)='/dev/kvm\x00', 0x0, r4) prctl$PR_SET_NAME(0x4, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r7, 0x0, 0x0, 0x19, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0xeeee0000, 0x2000, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16.453308235s ago: executing program 6 (id=2587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x101400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r3 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000000)={r2, 0x0, {0x2a12, 0x80010000, 0x0, 0x6, 0x100004, 0x0, 0x0, 0xe, 0x5, "fee8a2ab78fc179fd1f809000100aca7ca44c6a4b3e00d9683dda1af01000000c0ff12001000000000000000000300", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102006000000e444000017123c00", [0xe0, 0x40000000]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) 0s ago: executing program 39 (id=2587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x101400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r3 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000000)={r2, 0x0, {0x2a12, 0x80010000, 0x0, 0x6, 0x100004, 0x0, 0x0, 0xe, 0x5, "fee8a2ab78fc179fd1f809000100aca7ca44c6a4b3e00d9683dda1af01000000c0ff12001000000000000000000300", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102006000000e444000017123c00", [0xe0, 0x40000000]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) kernel console output (not intermixed with test programs): ribute type 1 has an invalid length. [ 369.265818][ T7845] netlink: 'syz.2.517': attribute type 1 has an invalid length. [ 369.702657][ T7853] netlink: 'syz.2.520': attribute type 10 has an invalid length. [ 369.748234][ T7853] bond0: (slave dummy0): Releasing backup interface [ 369.765070][ T7857] netlink: 'syz.2.520': attribute type 10 has an invalid length. [ 369.816242][ T7858] netlink: 20 bytes leftover after parsing attributes in process `syz.3.523'. [ 369.842635][ T7853] team0: Port device dummy0 added [ 369.970577][ T7857] team0: Port device dummy0 removed [ 369.974652][ T7857] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 373.166274][ T7881] syzkaller0: entered promiscuous mode [ 373.166295][ T7881] syzkaller0: entered allmulticast mode [ 375.955511][ T7903] netlink: 56 bytes leftover after parsing attributes in process `syz.3.534'. [ 379.406697][ T5977] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 379.422244][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.431125][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.612486][ T7929] netlink: 20 bytes leftover after parsing attributes in process `syz.0.542'. [ 379.629453][ T5977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.629569][ T5977] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 379.629594][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.692948][ T5977] usb 4-1: config 0 descriptor?? [ 379.717767][ T5977] pwc: Askey VC010 type 2 USB webcam detected. [ 383.054698][ T5977] pwc: recv_control_msg error -71 req 02 val 2b00 [ 383.055234][ T5977] pwc: recv_control_msg error -71 req 02 val 2700 [ 383.055665][ T5977] pwc: recv_control_msg error -71 req 02 val 2c00 [ 383.057297][ T5977] pwc: recv_control_msg error -71 req 04 val 1000 [ 383.057673][ T5977] pwc: recv_control_msg error -71 req 04 val 1300 [ 383.058024][ T5977] pwc: recv_control_msg error -71 req 04 val 1400 [ 383.058431][ T5977] pwc: recv_control_msg error -71 req 02 val 2000 [ 383.058781][ T5977] pwc: recv_control_msg error -71 req 02 val 2100 [ 383.059130][ T5977] pwc: recv_control_msg error -71 req 04 val 1500 [ 383.059538][ T5977] pwc: recv_control_msg error -71 req 02 val 2500 [ 383.059910][ T5977] pwc: recv_control_msg error -71 req 02 val 2400 [ 383.061870][ T5977] pwc: recv_control_msg error -71 req 02 val 2600 [ 383.062763][ T5977] pwc: recv_control_msg error -71 req 02 val 2900 [ 383.063118][ T5977] pwc: recv_control_msg error -71 req 02 val 2800 [ 383.063794][ T5977] pwc: recv_control_msg error -71 req 04 val 1100 [ 383.064866][ T5977] pwc: recv_control_msg error -71 req 04 val 1200 [ 383.079276][ T5977] pwc: Registered as video103. [ 383.083023][ T5977] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 383.554998][ T5977] usb 4-1: USB disconnect, device number 3 [ 387.259284][ T7994] netlink: 44 bytes leftover after parsing attributes in process `syz.4.559'. [ 387.470083][ T37] audit: type=1326 audit(1773898691.500:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7989 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4b92c799 code=0x7ffc0000 [ 387.470140][ T37] audit: type=1326 audit(1773898691.550:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7989 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d4b92c799 code=0x7ffc0000 [ 387.523049][ T37] audit: type=1326 audit(1773898691.560:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7989 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4b92c799 code=0x7ffc0000 [ 387.523107][ T37] audit: type=1326 audit(1773898691.560:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7989 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4b92c799 code=0x7ffc0000 [ 387.523154][ T37] audit: type=1326 audit(1773898691.550:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7989 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4b92c799 code=0x7ffc0000 [ 387.523201][ T37] audit: type=1326 audit(1773898691.590:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7989 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4b92c799 code=0x7ffc0000 [ 387.577081][ T37] audit: type=1326 audit(1773898691.630:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7989 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4b92c799 code=0x7ffc0000 [ 387.577241][ T37] audit: type=1326 audit(1773898691.660:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7989 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4b92c799 code=0x7ffc0000 [ 387.577358][ T37] audit: type=1326 audit(1773898691.660:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7989 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4b92c799 code=0x7ffc0000 [ 387.603893][ T37] audit: type=1326 audit(1773898691.660:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7989 comm="syz.3.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4b92c799 code=0x7ffc0000 [ 387.862474][ T8001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.561'. [ 389.976585][ T8018] binder: 8010:8018 ioctl c0306201 0 returned -14 [ 392.174065][ T8040] netlink: 44 bytes leftover after parsing attributes in process `syz.4.572'. [ 396.693757][ T8058] netlink: 'syz.0.580': attribute type 72 has an invalid length. [ 397.837965][ T8073] netlink: 44 bytes leftover after parsing attributes in process `syz.0.585'. [ 398.290358][ T8075] netlink: 260 bytes leftover after parsing attributes in process `syz.3.586'. [ 399.745496][ T8094] ALSA: mixer_oss: invalid OSS volume 'C' [ 400.612865][ T8093] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.594'. [ 401.451263][ T8095] ALSA: mixer_oss: invalid OSS volume 'C' [ 403.181129][ T8112] netlink: 'syz.3.599': attribute type 10 has an invalid length. [ 403.225124][ T8112] bond0: (slave dummy0): Releasing backup interface [ 403.241458][ T8116] netlink: 'syz.3.599': attribute type 10 has an invalid length. [ 403.801334][ T8112] team0: Port device dummy0 added [ 404.012050][ T8116] team0: Port device dummy0 removed [ 404.085079][ T8116] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 404.158643][ T8121] syzkaller0: entered promiscuous mode [ 404.158662][ T8121] syzkaller0: entered allmulticast mode [ 404.210883][ T8126] netlink: 'syz.1.603': attribute type 10 has an invalid length. [ 405.565265][ T8135] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.606'. [ 406.646747][ T8155] syzkaller0: entered promiscuous mode [ 406.646777][ T8155] syzkaller0: entered allmulticast mode [ 407.704628][ T8172] syz.1.618 uses obsolete (PF_INET,SOCK_PACKET) [ 407.824534][ T8173] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.619'. [ 412.089609][ T8201] netlink: 'syz.0.631': attribute type 10 has an invalid length. [ 412.140600][ T8201] bond0: (slave dummy0): Releasing backup interface [ 412.140786][ T8203] netlink: 'syz.0.631': attribute type 10 has an invalid length. [ 412.757924][ T8201] team0: Port device dummy0 added [ 412.992406][ T8203] team0: Port device dummy0 removed [ 413.225813][ T8203] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 415.115895][ T5787] libceph: connect (1)[c::]:6789 error -101 [ 415.116539][ T5787] libceph: mon0 (1)[c::]:6789 connect error [ 415.196350][ T8234] ceph: No mds server is up or the cluster is laggy [ 415.368023][ T5787] libceph: connect (1)[c::]:6789 error -101 [ 415.734763][ T5787] libceph: mon0 (1)[c::]:6789 connect error [ 416.017618][ T5787] libceph: connect (1)[c::]:6789 error -101 [ 416.019203][ T5787] libceph: mon0 (1)[c::]:6789 connect error [ 419.289488][ T8273] syzkaller0: entered promiscuous mode [ 419.289517][ T8273] syzkaller0: entered allmulticast mode [ 419.608254][ T37] kauditd_printk_skb: 46 callbacks suppressed [ 419.608274][ T37] audit: type=1326 audit(1773898723.690:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8280 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82ecac799 code=0x7ffc0000 [ 419.608322][ T37] audit: type=1326 audit(1773898723.690:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8280 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82ecac799 code=0x7ffc0000 [ 419.608553][ T37] audit: type=1326 audit(1773898723.690:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8280 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82ecac799 code=0x7ffc0000 [ 419.608930][ T37] audit: type=1326 audit(1773898723.690:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8280 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82ecac799 code=0x7ffc0000 [ 419.609204][ T37] audit: type=1326 audit(1773898723.690:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8280 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa82ecac799 code=0x7ffc0000 [ 419.670256][ T37] audit: type=1326 audit(1773898723.740:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8280 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82ecac799 code=0x7ffc0000 [ 419.670401][ T37] audit: type=1326 audit(1773898723.750:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8280 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82ecac799 code=0x7ffc0000 [ 419.670516][ T37] audit: type=1326 audit(1773898723.750:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8280 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82ecac799 code=0x7ffc0000 [ 419.683618][ T37] audit: type=1326 audit(1773898723.760:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8280 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa82ecac42b code=0x7ffc0000 [ 419.683671][ T37] audit: type=1326 audit(1773898723.760:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8280 comm="syz.0.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa82ecac42b code=0x7ffc0000 [ 424.737122][ T8329] netlink: 'syz.3.672': attribute type 10 has an invalid length. [ 424.820005][ T8331] netlink: 'syz.3.672': attribute type 10 has an invalid length. [ 424.820588][ T8329] bond0: (slave dummy0): Releasing backup interface [ 424.924564][ T8329] team0: Port device dummy0 added [ 426.102599][ T8331] team0: Port device dummy0 removed [ 426.107729][ T8331] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 427.784419][ T8347] sctp: [Deprecated]: syz.0.677 (pid 8347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 427.784419][ T8347] Use struct sctp_sack_info instead [ 428.213624][ T1248] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 428.735946][ T1248] usb 1-1: Using ep0 maxpacket: 32 [ 428.774025][ T1248] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 428.774057][ T1248] usb 1-1: config 0 has no interface number 0 [ 428.823869][ T1248] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 428.823892][ T1248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.823909][ T1248] usb 1-1: Product: syz [ 428.823920][ T1248] usb 1-1: Manufacturer: syz [ 428.823940][ T1248] usb 1-1: SerialNumber: syz [ 428.869708][ T1248] usb 1-1: config 0 descriptor?? [ 429.483696][ T5879] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 429.673752][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 429.689683][ T5879] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 429.689710][ T5879] usb 5-1: config 0 has no interface number 0 [ 429.694722][ T5879] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 429.694753][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.694774][ T5879] usb 5-1: Product: syz [ 429.694789][ T5879] usb 5-1: Manufacturer: syz [ 429.694805][ T5879] usb 5-1: SerialNumber: syz [ 429.773311][ T1248] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 429.773343][ T1248] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 429.877030][ T5879] usb 5-1: config 0 descriptor?? [ 430.035623][ T1248] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 430.039584][ T1248] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 430.297657][ T1248] usb 1-1: USB disconnect, device number 4 [ 430.326128][ T5879] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 430.326160][ T5879] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 430.555385][ T5879] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 430.555707][ T5879] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 431.261640][ T1248] usb 5-1: USB disconnect, device number 3 [ 432.819392][ T8387] ALSA: mixer_oss: invalid OSS volume 'C' [ 433.659952][ T8389] netlink: 'syz.4.694': attribute type 10 has an invalid length. [ 433.703871][ T8396] netlink: 'syz.4.694': attribute type 10 has an invalid length. [ 433.736015][ T8389] bond0: (slave dummy0): Releasing backup interface [ 434.374805][ T8389] team0: Port device dummy0 added [ 434.460226][ T8396] team0: Port device dummy0 removed [ 434.490190][ T8396] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 440.269150][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.269225][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.058795][ T8431] binder: 8428:8431 ioctl c0306201 0 returned -14 [ 441.800699][ T8440] ALSA: mixer_oss: invalid OSS volume 'C' [ 444.105780][ T5977] libceph: connect (1)[c::]:6789 error -101 [ 444.107293][ T5977] libceph: mon0 (1)[c::]:6789 connect error [ 444.109081][ T5977] libceph: connect (1)[c::]:6789 error -101 [ 444.111603][ T5977] libceph: mon0 (1)[c::]:6789 connect error [ 444.111853][ T8448] ceph: No mds server is up or the cluster is laggy [ 444.365127][ T5787] libceph: connect (1)[c::]:6789 error -101 [ 444.369121][ T5787] libceph: mon0 (1)[c::]:6789 connect error [ 446.822411][ T5787] libceph: connect (1)[c::]:6789 error -101 [ 446.822561][ T5787] libceph: mon0 (1)[c::]:6789 connect error [ 448.705894][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 448.710956][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 448.712161][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 448.713348][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 448.747438][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 450.813817][ T5809] Bluetooth: hci5: command tx timeout [ 452.194965][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.896530][ T5809] Bluetooth: hci5: command tx timeout [ 453.217626][ T8534] ALSA: mixer_oss: invalid OSS volume 'C' [ 453.725843][ T5866] libceph: connect (1)[c::]:6789 error -101 [ 453.726079][ T5866] libceph: mon0 (1)[c::]:6789 connect error [ 453.755540][ T8550] ceph: No mds server is up or the cluster is laggy [ 454.075594][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.352043][ T8487] chnl_net:caif_netlink_parms(): no params data found [ 454.788745][ T8581] binder: 8577:8581 ioctl c0306201 0 returned -14 [ 454.965818][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.981322][ T5809] Bluetooth: hci5: command tx timeout [ 455.912066][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.053720][ T5809] Bluetooth: hci5: command tx timeout [ 459.936388][ T8487] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.936659][ T8487] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.936912][ T8487] bridge_slave_0: entered allmulticast mode [ 459.944543][ T8487] bridge_slave_0: entered promiscuous mode [ 460.017969][ T8487] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.018071][ T8487] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.018260][ T8487] bridge_slave_1: entered allmulticast mode [ 460.039318][ T8487] bridge_slave_1: entered promiscuous mode [ 461.322295][ T8487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.359496][ T8487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.478435][ T12] bridge_slave_1: left allmulticast mode [ 461.478619][ T12] bridge_slave_1: left promiscuous mode [ 461.479367][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.677939][ T12] bridge_slave_0: left allmulticast mode [ 462.677962][ T12] bridge_slave_0: left promiscuous mode [ 462.678412][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.384370][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.534949][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.634184][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 465.680082][ T12] bond0 (unregistering): Released all slaves [ 465.759308][ T12] bond1 (unregistering): Released all slaves [ 465.963799][ T8487] team0: Port device team_slave_0 added [ 465.984141][ T8487] team0: Port device team_slave_1 added [ 468.413324][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.413343][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.413384][ T8487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.574823][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.574855][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.574901][ T8487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.394439][ T8487] hsr_slave_0: entered promiscuous mode [ 469.431208][ T8487] hsr_slave_1: entered promiscuous mode [ 469.434233][ T8487] debugfs: 'hsr0' already exists in 'hsr' [ 469.434261][ T8487] Cannot create hsr debugfs directory [ 470.794059][ T12] hsr_slave_0: left promiscuous mode [ 470.836063][ T12] hsr_slave_1: left promiscuous mode [ 470.850158][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.956933][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.957092][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.055569][ T12] veth1_macvtap: left promiscuous mode [ 471.055750][ T12] veth0_macvtap: left promiscuous mode [ 471.055944][ T12] veth1_vlan: left promiscuous mode [ 471.056106][ T12] veth0_vlan: left promiscuous mode [ 473.254679][ T12] team0 (unregistering): Port device team_slave_1 removed [ 473.365110][ T12] team0 (unregistering): Port device team_slave_0 removed [ 475.866078][ T8875] ALSA: mixer_oss: invalid OSS volume '' [ 476.757613][ T8487] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 477.788122][ T8487] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 477.882785][ T8892] netlink: 'syz.4.879': attribute type 10 has an invalid length. [ 477.936663][ T8893] netlink: 'syz.4.879': attribute type 10 has an invalid length. [ 478.023740][ T8892] bond0: (slave dummy0): Releasing backup interface [ 478.166855][ T8892] team0: Port device dummy0 added [ 478.167144][ T8487] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 478.368533][ T8893] team0: Port device dummy0 removed [ 478.424313][ T8893] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 478.430195][ T8487] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 479.233184][ T8487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.683384][ T8930] ALSA: mixer_oss: invalid OSS volume 'LI' [ 480.455578][ T8487] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.540158][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.540296][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.542751][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.542895][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.041079][ T8487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.171982][ T8487] veth0_vlan: entered promiscuous mode [ 485.180918][ T8487] veth1_vlan: entered promiscuous mode [ 485.185222][ T8999] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 485.575585][ T8487] veth0_macvtap: entered promiscuous mode [ 485.604862][ T8487] veth1_macvtap: entered promiscuous mode [ 485.778834][ T8487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.835877][ T8487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.863620][ T1038] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.863861][ T1038] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.865668][ T1038] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.865881][ T1038] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.859116][ T5889] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 486.863778][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.863799][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.090677][ T5889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.090706][ T5889] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 487.090747][ T5889] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 487.090772][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.157510][ T5889] usb 2-1: config 0 descriptor?? [ 487.231853][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.231871][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.863764][ T5787] usb 2-1: USB disconnect, device number 3 [ 490.077589][ T37] kauditd_printk_skb: 49 callbacks suppressed [ 490.077609][ T37] audit: type=1326 audit(1773898794.160:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9102 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fdf4c799 code=0x7ffc0000 [ 490.116192][ T37] audit: type=1326 audit(1773898794.190:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9102 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fdf4c799 code=0x7ffc0000 [ 490.116254][ T37] audit: type=1326 audit(1773898794.200:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9102 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fdf4c799 code=0x7ffc0000 [ 490.116296][ T37] audit: type=1326 audit(1773898794.200:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9102 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fdf4c799 code=0x7ffc0000 [ 490.116340][ T37] audit: type=1326 audit(1773898794.200:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9102 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5fdf4c799 code=0x7ffc0000 [ 490.166912][ T37] audit: type=1326 audit(1773898794.250:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9102 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fdf4c799 code=0x7ffc0000 [ 490.167000][ T37] audit: type=1326 audit(1773898794.250:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9102 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fdf4c799 code=0x7ffc0000 [ 490.167167][ T37] audit: type=1326 audit(1773898794.250:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9102 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fdf4c799 code=0x7ffc0000 [ 490.193662][ T37] audit: type=1326 audit(1773898794.270:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9102 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5fdf4c42b code=0x7ffc0000 [ 490.193814][ T37] audit: type=1326 audit(1773898794.270:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9102 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5fdf4c42b code=0x7ffc0000 [ 492.618552][ T9126] netlink: 312 bytes leftover after parsing attributes in process `syz.4.938'. [ 494.193709][ T9139] netlink: 'syz.5.942': attribute type 10 has an invalid length. [ 494.244988][ T9142] netlink: 'syz.5.942': attribute type 10 has an invalid length. [ 495.173894][ T9139] team0: Port device dummy0 added [ 495.263988][ T9142] team0: Port device dummy0 removed [ 495.309907][ T9142] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 495.640189][ T9167] netlink: 'syz.1.953': attribute type 10 has an invalid length. [ 495.705268][ T9168] netlink: 'syz.1.953': attribute type 10 has an invalid length. [ 495.739326][ T9167] bond0: (slave dummy0): Releasing backup interface [ 496.746650][ T9167] team0: Port device dummy0 added [ 497.136253][ T9168] team0: Port device dummy0 removed [ 497.148232][ T9168] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 498.110386][ T9189] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 498.391709][ T9197] netlink: 'syz.4.960': attribute type 10 has an invalid length. [ 498.448146][ T9200] netlink: 'syz.4.960': attribute type 10 has an invalid length. [ 498.493162][ T9197] bond0: (slave dummy0): Releasing backup interface [ 498.577091][ T9197] team0: Port device dummy0 added [ 498.691258][ T9200] team0: Port device dummy0 removed [ 498.705746][ T9200] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 500.724216][ T9251] fuse: Unknown parameter '00000000000000000000' [ 501.360301][ T9262] random: crng reseeded on system resumption [ 501.699306][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.699380][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.509530][ T9320] fuse: Unknown parameter '00000000000000000000' [ 516.966134][ T9342] ALSA: mixer_oss: invalid OSS volume 'MON' [ 518.666718][ T9354] ALSA: mixer_oss: invalid OSS volume 'C' [ 518.970309][ T9363] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1014'. [ 519.067859][ T9366] fuse: Unknown parameter '00000000000000000000' [ 520.487487][ T9381] ALSA: mixer_oss: invalid OSS volume 'MON' [ 525.565107][ T9432] ALSA: mixer_oss: invalid OSS volume '' [ 526.567518][ T9440] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1032'. [ 530.869474][ T9488] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1049'. [ 533.557974][ T9527] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 538.913658][ T9588] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 549.489744][ T9627] ALSA: mixer_oss: invalid OSS volume '' [ 550.743585][ T5879] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 550.896273][ T5879] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.896331][ T5879] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 550.896355][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.942269][ T5879] usb 6-1: config 0 descriptor?? [ 551.002191][ T5879] pwc: Askey VC010 type 2 USB webcam detected. [ 551.356247][ T5879] pwc: recv_control_msg error -32 req 02 val 2b00 [ 551.356936][ T5879] pwc: recv_control_msg error -32 req 02 val 2700 [ 551.358589][ T5879] pwc: recv_control_msg error -32 req 02 val 2c00 [ 551.359266][ T5879] pwc: recv_control_msg error -32 req 04 val 1000 [ 551.555708][ T5879] pwc: recv_control_msg error -32 req 04 val 1300 [ 551.830592][ T5879] pwc: recv_control_msg error -32 req 04 val 1400 [ 551.902460][ T5879] pwc: recv_control_msg error -32 req 02 val 2000 [ 551.904030][ T5879] pwc: recv_control_msg error -32 req 02 val 2100 [ 551.905121][ T5879] pwc: recv_control_msg error -32 req 04 val 1500 [ 551.906004][ T5879] pwc: recv_control_msg error -32 req 02 val 2500 [ 551.908447][ T5879] pwc: recv_control_msg error -32 req 02 val 2400 [ 551.908929][ T5879] pwc: recv_control_msg error -71 req 02 val 2600 [ 551.909405][ T5879] pwc: recv_control_msg error -71 req 02 val 2900 [ 551.909868][ T5879] pwc: recv_control_msg error -71 req 02 val 2800 [ 551.910544][ T5879] pwc: recv_control_msg error -71 req 04 val 1100 [ 551.911022][ T5879] pwc: recv_control_msg error -71 req 04 val 1200 [ 551.915973][ T5879] pwc: Registered as video103. [ 551.919674][ T5879] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input13 [ 551.986688][ T5879] usb 6-1: USB disconnect, device number 2 [ 559.652386][ T9771] netlink: 'syz.4.1144': attribute type 10 has an invalid length. [ 563.152988][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.153061][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.543603][ T6049] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 563.696432][ T6049] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.696490][ T6049] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 563.696516][ T6049] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.745691][ T6049] usb 6-1: config 0 descriptor?? [ 563.775133][ T6049] pwc: Askey VC010 type 2 USB webcam detected. [ 564.265678][ T9844] ALSA: mixer_oss: invalid OSS volume 'C' [ 564.889593][ T9848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1171'. [ 565.031946][ T6049] pwc: recv_control_msg error -32 req 02 val 2b00 [ 565.041283][ T6049] pwc: recv_control_msg error -32 req 02 val 2700 [ 565.042144][ T6049] pwc: recv_control_msg error -32 req 02 val 2c00 [ 565.042839][ T6049] pwc: recv_control_msg error -32 req 04 val 1000 [ 565.043848][ T6049] pwc: recv_control_msg error -32 req 04 val 1300 [ 565.046611][ T6049] pwc: recv_control_msg error -32 req 04 val 1400 [ 565.052947][ T6049] pwc: recv_control_msg error -32 req 02 val 2000 [ 565.057063][ T6049] pwc: recv_control_msg error -32 req 02 val 2100 [ 565.058073][ T6049] pwc: recv_control_msg error -32 req 04 val 1500 [ 565.287364][ T6049] pwc: recv_control_msg error -71 req 02 val 2400 [ 565.287750][ T6049] pwc: recv_control_msg error -71 req 02 val 2600 [ 565.288515][ T6049] pwc: recv_control_msg error -71 req 02 val 2900 [ 565.291955][ T6049] pwc: recv_control_msg error -71 req 02 val 2800 [ 565.292555][ T6049] pwc: recv_control_msg error -71 req 04 val 1100 [ 565.292921][ T6049] pwc: recv_control_msg error -71 req 04 val 1200 [ 565.315278][ T6049] pwc: Registered as video103. [ 565.342633][ T6049] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input14 [ 565.373076][ T9852] netlink: 'syz.4.1172': attribute type 10 has an invalid length. [ 565.423696][ T6049] usb 6-1: USB disconnect, device number 3 [ 572.135166][ T9926] syzkaller0: entered promiscuous mode [ 572.135196][ T9926] syzkaller0: entered allmulticast mode [ 573.257876][T10002] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 573.724406][T10030] netlink: 'syz.1.1249': attribute type 1 has an invalid length. [ 573.724424][T10030] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1249'. [ 575.453940][T10013] Bluetooth: hci5: command 0x0406 tx timeout [ 586.425936][T10013] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 586.450532][T10013] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 586.463811][T10013] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 586.468536][T10013] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 586.469859][T10013] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 588.389957][T10013] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 588.407505][T10013] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 588.424539][T10013] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 588.425731][T10013] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 588.426754][T10013] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 588.573761][ T5809] Bluetooth: hci3: command tx timeout [ 588.844505][ T9999] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1234'. [ 589.036785][T10013] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 589.039889][T10013] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 589.042355][T10013] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 589.044712][T10013] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 589.046680][T10013] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 590.493665][ T5809] Bluetooth: hci6: command tx timeout [ 590.653780][ T5809] Bluetooth: hci3: command tx timeout [ 591.048074][ T1430] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.133865][ T5809] Bluetooth: hci7: command tx timeout [ 591.668044][ T1430] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.048197][ T1430] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.412329][ T1430] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.573691][ T5809] Bluetooth: hci6: command tx timeout [ 592.733635][ T5809] Bluetooth: hci3: command tx timeout [ 593.213645][ T5809] Bluetooth: hci7: command tx timeout [ 593.396510][ T1430] bridge_slave_1: left allmulticast mode [ 593.396546][ T1430] bridge_slave_1: left promiscuous mode [ 593.396795][ T1430] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.511453][ T1430] bridge_slave_0: left allmulticast mode [ 593.511478][ T1430] bridge_slave_0: left promiscuous mode [ 593.511667][ T1430] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.653652][ T5809] Bluetooth: hci6: command tx timeout [ 594.656653][ T1430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.751197][ T1430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.813646][ T5809] Bluetooth: hci3: command tx timeout [ 594.830436][ T1430] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 594.881192][ T1430] bond0 (unregistering): Released all slaves [ 594.953286][T10778] chnl_net:caif_netlink_parms(): no params data found [ 595.104019][ T1430] tipc: Left network mode [ 595.293632][ T5809] Bluetooth: hci7: command tx timeout [ 595.691313][T10684] chnl_net:caif_netlink_parms(): no params data found [ 595.789150][T10799] chnl_net:caif_netlink_parms(): no params data found [ 596.320234][T10778] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.320358][T10778] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.320608][T10778] bridge_slave_0: entered allmulticast mode [ 596.337428][T10778] bridge_slave_0: entered promiscuous mode [ 596.471707][T10778] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.471810][T10778] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.471972][T10778] bridge_slave_1: entered allmulticast mode [ 596.484435][T10778] bridge_slave_1: entered promiscuous mode [ 596.733579][ T5809] Bluetooth: hci6: command tx timeout [ 597.065562][ T1430] hsr_slave_0: left promiscuous mode [ 597.106456][ T1430] hsr_slave_1: left promiscuous mode [ 597.107788][ T1430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.107816][ T1430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.166149][ T1430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.166178][ T1430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.245542][ T1430] veth1_macvtap: left promiscuous mode [ 597.245655][ T1430] veth0_macvtap: left promiscuous mode [ 597.245908][ T1430] veth1_vlan: left promiscuous mode [ 597.246082][ T1430] veth0_vlan: left promiscuous mode [ 597.373581][ T5809] Bluetooth: hci7: command tx timeout [ 598.444298][ T1430] team0 (unregistering): Port device team_slave_1 removed [ 598.504575][ T1430] team0 (unregistering): Port device team_slave_0 removed [ 598.877319][T10778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.020113][ T10] infiniband syz0: ib_query_port failed (-19) [ 599.058581][T10778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.183721][T10684] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.183875][T10684] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.184128][T10684] bridge_slave_0: entered allmulticast mode [ 599.186980][T10684] bridge_slave_0: entered promiscuous mode [ 599.245018][T10799] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.245147][T10799] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.245385][T10799] bridge_slave_0: entered allmulticast mode [ 599.248862][T10799] bridge_slave_0: entered promiscuous mode [ 599.281374][T10684] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.281522][T10684] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.281736][T10684] bridge_slave_1: entered allmulticast mode [ 599.289242][T10684] bridge_slave_1: entered promiscuous mode [ 599.314345][T10778] team0: Port device team_slave_0 added [ 599.314833][T10799] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.314959][T10799] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.315164][T10799] bridge_slave_1: entered allmulticast mode [ 599.317870][T10799] bridge_slave_1: entered promiscuous mode [ 599.381462][T10778] team0: Port device team_slave_1 added [ 599.565477][T10684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.570478][T10799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.612129][T10684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.631980][T10799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.633250][T10778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.633265][T10778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.633294][T10778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.757205][T10778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.757224][T10778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.757254][T10778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.997896][T10684] team0: Port device team_slave_0 added [ 600.021773][T10799] team0: Port device team_slave_0 added [ 600.031853][T10684] team0: Port device team_slave_1 added [ 600.042183][T10799] team0: Port device team_slave_1 added [ 600.784819][T10684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.784838][T10684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.784867][T10684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.847947][T10778] hsr_slave_0: entered promiscuous mode [ 600.849382][T10778] hsr_slave_1: entered promiscuous mode [ 600.850369][T10778] debugfs: 'hsr0' already exists in 'hsr' [ 600.850394][T10778] Cannot create hsr debugfs directory [ 600.851384][T10799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.851397][T10799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.851425][T10799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.925673][T10684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.925690][T10684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.925719][T10684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.932616][T10799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.932634][T10799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.932663][T10799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.483130][T10799] hsr_slave_0: entered promiscuous mode [ 601.491050][T10799] hsr_slave_1: entered promiscuous mode [ 601.491988][T10799] debugfs: 'hsr0' already exists in 'hsr' [ 601.492012][T10799] Cannot create hsr debugfs directory [ 601.566752][T10684] hsr_slave_0: entered promiscuous mode [ 601.568254][T10684] hsr_slave_1: entered promiscuous mode [ 601.569284][T10684] debugfs: 'hsr0' already exists in 'hsr' [ 601.569309][T10684] Cannot create hsr debugfs directory [ 602.948074][ T1430] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.367987][ T1430] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.787820][ T1430] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.210890][ T1430] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.517872][T10778] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 604.604804][T10778] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 604.780793][T10778] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 604.904190][T10778] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 605.607830][ T1430] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.716633][T10684] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 605.821336][T10684] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 605.863724][T10684] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 606.082918][ T1430] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.177364][T10684] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 606.482033][ T1430] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.841059][ T1430] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.886626][T10799] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 606.968358][T10799] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 607.012688][T10799] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 607.076744][T10799] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 607.626295][ T1430] bridge_slave_1: left allmulticast mode [ 607.626326][ T1430] bridge_slave_1: left promiscuous mode [ 607.627360][ T1430] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.727571][ T1430] bridge_slave_0: left allmulticast mode [ 607.727603][ T1430] bridge_slave_0: left promiscuous mode [ 607.727873][ T1430] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.821600][ T1430] bridge_slave_1: left allmulticast mode [ 607.821632][ T1430] bridge_slave_1: left promiscuous mode [ 607.821874][ T1430] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.969619][ T1430] bridge_slave_0: left allmulticast mode [ 607.969651][ T1430] bridge_slave_0: left promiscuous mode [ 607.969899][ T1430] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.364326][ T1430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.445668][ T1430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.525678][ T1430] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 609.567323][ T1430] bond0 (unregistering): Released all slaves [ 609.594559][ T1430] bond1 (unregistering): Released all slaves [ 610.282783][ T1430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.355763][ T1430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.444752][ T1430] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 610.489670][ T1430] bond0 (unregistering): Released all slaves [ 610.548675][T10778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.767010][T10778] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.793043][ T1430] tipc: Left network mode [ 610.832752][ T3879] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.833000][ T3879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.877281][T10684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.911005][ T1298] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.911138][ T1298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.085700][T10684] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.583047][T10799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.590656][ T3879] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.602538][ T3879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.781299][ T3879] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.781439][ T3879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.218482][T10799] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.385591][ T1298] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.385754][ T1298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.432516][ T7155] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.455949][ T7155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.429250][T10778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.618084][ T1430] hsr_slave_0: left promiscuous mode [ 613.653713][ T1430] hsr_slave_1: left promiscuous mode [ 613.654951][ T1430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.706716][ T1430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.706747][ T1430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.924877][ T1430] hsr_slave_0: left promiscuous mode [ 613.963721][ T1430] hsr_slave_1: left promiscuous mode [ 613.964799][ T1430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.964825][ T1430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.034607][ T1430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.034636][ T1430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.116945][ T1430] veth1_macvtap: left promiscuous mode [ 614.119031][ T1430] veth0_macvtap: left promiscuous mode [ 614.119293][ T1430] veth1_vlan: left promiscuous mode [ 614.119471][ T1430] veth0_vlan: left promiscuous mode [ 614.306658][ T1430] veth1_macvtap: left promiscuous mode [ 614.306765][ T1430] veth0_macvtap: left promiscuous mode [ 614.307016][ T1430] veth1_vlan: left promiscuous mode [ 614.307204][ T1430] veth0_vlan: left promiscuous mode [ 615.766916][ T1430] team0 (unregistering): Port device team_slave_1 removed [ 615.846166][ T1430] team0 (unregistering): Port device team_slave_0 removed [ 616.815521][ T1430] team0 (unregistering): Port device team_slave_1 removed [ 616.878123][ T1430] team0 (unregistering): Port device team_slave_0 removed [ 617.716107][T10684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.041993][T10778] veth0_vlan: entered promiscuous mode [ 618.080899][T10778] veth1_vlan: entered promiscuous mode [ 618.233272][T10778] veth0_macvtap: entered promiscuous mode [ 618.341408][T10778] veth1_macvtap: entered promiscuous mode [ 618.510796][T10778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.544444][T10799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.562161][T10778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.612199][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.688661][ T1038] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.723642][ T1038] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.724380][ T1038] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.337973][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.337995][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.625475][T10684] veth0_vlan: entered promiscuous mode [ 619.663925][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.663947][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.695488][T10684] veth1_vlan: entered promiscuous mode [ 619.962628][T10684] veth0_macvtap: entered promiscuous mode [ 620.054100][T10684] veth1_macvtap: entered promiscuous mode [ 620.063795][T10799] veth0_vlan: entered promiscuous mode [ 620.148810][T10799] veth1_vlan: entered promiscuous mode [ 620.277138][T10684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.321589][T10684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.438324][ T70] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.494108][ T70] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.537118][ T70] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.560068][ T70] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.655644][T10799] veth0_macvtap: entered promiscuous mode [ 620.774594][T10799] veth1_macvtap: entered promiscuous mode [ 621.251222][T10799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.341761][T10799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.341977][ T7155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.341995][ T7155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.532448][ T988] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.540097][ T988] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.540971][ T988] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.542906][ T988] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.671028][ T988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.671045][ T988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.366542][ T1298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.366565][ T1298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.614710][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.614732][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.585482][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.334666][T10013] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 625.368878][T10013] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 625.406231][T10013] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 625.451606][T10013] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 625.501530][T10013] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 627.172995][T12311] chnl_net:caif_netlink_parms(): no params data found [ 627.613601][ T5809] Bluetooth: hci0: command tx timeout [ 627.910102][ T3879] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.258499][ T3879] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.360206][T12311] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.360441][T12311] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.360678][T12311] bridge_slave_0: entered allmulticast mode [ 628.384455][T12311] bridge_slave_0: entered promiscuous mode [ 628.388683][T12311] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.388840][T12311] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.389039][T12311] bridge_slave_1: entered allmulticast mode [ 628.392178][T12311] bridge_slave_1: entered promiscuous mode [ 628.590033][ T3879] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.871300][ T3879] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.927587][T12311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.932384][T12311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.010714][T12311] team0: Port device team_slave_0 added [ 629.028528][T12311] team0: Port device team_slave_1 added [ 629.089560][T12311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.089578][T12311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.089608][T12311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.091904][T12311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.091919][T12311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.091947][T12311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.285864][T12311] hsr_slave_0: entered promiscuous mode [ 629.286980][T12311] hsr_slave_1: entered promiscuous mode [ 629.619037][ T3879] bridge_slave_1: left allmulticast mode [ 629.619068][ T3879] bridge_slave_1: left promiscuous mode [ 629.619309][ T3879] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.713531][ T5809] Bluetooth: hci0: command tx timeout [ 629.716882][T12329] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 629.740625][ T3879] bridge_slave_0: left allmulticast mode [ 629.740654][ T3879] bridge_slave_0: left promiscuous mode [ 629.741076][ T3879] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.773617][ T5809] Bluetooth: hci0: command tx timeout [ 632.364308][ T3879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.457653][ T3879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.545638][ T3879] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 632.587810][ T3879] bond0 (unregistering): Released all slaves [ 632.933357][ T3879] tipc: Left network mode [ 633.855512][ T5809] Bluetooth: hci0: command tx timeout [ 635.308695][ T3879] hsr_slave_0: left promiscuous mode [ 635.359554][ T3879] hsr_slave_1: left promiscuous mode [ 635.360588][ T3879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.360615][ T3879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.451207][ T3879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.451236][ T3879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.573138][ T3879] veth1_macvtap: left promiscuous mode [ 635.573212][ T3879] veth0_macvtap: left promiscuous mode [ 635.583922][ T3879] veth1_vlan: left promiscuous mode [ 635.584486][ T3879] veth0_vlan: left promiscuous mode [ 637.407736][ T3879] team0 (unregistering): Port device team_slave_1 removed [ 637.483955][ T3879] team0 (unregistering): Port device team_slave_0 removed [ 638.410602][T12630] fuse: Unknown parameter '00000000000000000000' [ 640.682527][T12311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 642.269801][T12311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 642.599447][T12311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 642.701082][T12311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 643.398441][T12311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.522457][T12311] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.589473][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.589612][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.646714][ T988] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.646868][ T988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.063643][ T5889] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 644.375771][ T5889] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.375828][ T5889] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 644.375851][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.435561][ T5889] usb 7-1: config 0 descriptor?? [ 645.402780][ T5889] pwc: Askey VC010 type 2 USB webcam detected. [ 645.746221][ T5889] pwc: recv_control_msg error -32 req 02 val 2b00 [ 645.747006][ T5889] pwc: recv_control_msg error -32 req 02 val 2700 [ 645.747728][ T5889] pwc: recv_control_msg error -32 req 02 val 2c00 [ 645.748816][ T5889] pwc: recv_control_msg error -32 req 04 val 1000 [ 645.838409][ T5889] pwc: recv_control_msg error -32 req 04 val 1300 [ 645.874726][ T5889] pwc: recv_control_msg error -32 req 04 val 1400 [ 645.910663][ T5889] pwc: recv_control_msg error -32 req 02 val 2000 [ 645.927814][ T5889] pwc: recv_control_msg error -32 req 02 val 2100 [ 645.948530][ T5889] pwc: recv_control_msg error -32 req 04 val 1500 [ 645.993634][ T5889] pwc: recv_control_msg error -32 req 02 val 2500 [ 646.003705][ T5889] pwc: recv_control_msg error -32 req 02 val 2400 [ 646.011154][ T5889] pwc: recv_control_msg error -71 req 02 val 2600 [ 646.018229][ T5889] pwc: recv_control_msg error -71 req 02 val 2900 [ 646.056102][ T5889] pwc: recv_control_msg error -71 req 02 val 2800 [ 646.085521][ T5889] pwc: recv_control_msg error -71 req 04 val 1100 [ 646.097862][ T5889] pwc: recv_control_msg error -71 req 04 val 1200 [ 646.162397][ T5889] pwc: Registered as video103. [ 646.176055][ T5889] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input15 [ 646.275433][ T5889] usb 7-1: USB disconnect, device number 2 [ 646.849684][T12311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.969194][T12311] veth0_vlan: entered promiscuous mode [ 648.033244][T12311] veth1_vlan: entered promiscuous mode [ 648.182327][T12311] veth0_macvtap: entered promiscuous mode [ 648.237753][T12311] veth1_macvtap: entered promiscuous mode [ 648.296738][T12311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.329116][T12311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.356374][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.377221][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.380950][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.381372][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.717809][ T7155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.717835][ T7155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.822882][T12777] netlink: 'syz.8.2451': attribute type 10 has an invalid length. [ 654.933335][T12777] team0: Port device dummy0 added [ 654.957370][ T9127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.957387][ T9127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.566899][T10013] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 656.591658][T10013] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 656.608995][T10013] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 656.621982][T10013] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 656.635357][T10013] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 658.733620][ T5809] Bluetooth: hci1: command tx timeout [ 660.841681][ T5809] Bluetooth: hci1: command tx timeout [ 661.374600][ T57] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.323517][ T5889] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 662.497151][ T57] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.602051][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.602135][ T5889] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 662.602160][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.779821][ T5889] usb 4-1: config 0 descriptor?? [ 662.799183][ T5889] pwc: Askey VC010 type 2 USB webcam detected. [ 662.893521][ T5809] Bluetooth: hci1: command tx timeout [ 663.529143][ T5889] pwc: recv_control_msg error -32 req 02 val 2b00 [ 663.569732][ T5889] pwc: recv_control_msg error -32 req 02 val 2700 [ 663.687863][ T5889] pwc: recv_control_msg error -32 req 02 val 2c00 [ 663.689827][ T5889] pwc: recv_control_msg error -32 req 04 val 1000 [ 663.692904][ T5889] pwc: recv_control_msg error -32 req 04 val 1300 [ 663.718382][ T5889] pwc: recv_control_msg error -32 req 04 val 1400 [ 663.721728][ T5889] pwc: recv_control_msg error -32 req 02 val 2000 [ 663.762486][ T5889] pwc: recv_control_msg error -32 req 02 val 2100 [ 663.874342][ T57] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.001419][ T5889] pwc: recv_control_msg error -71 req 02 val 2500 [ 664.001904][ T5889] pwc: recv_control_msg error -71 req 02 val 2400 [ 664.002405][ T5889] pwc: recv_control_msg error -71 req 02 val 2600 [ 664.002891][ T5889] pwc: recv_control_msg error -71 req 02 val 2900 [ 664.003563][ T5889] pwc: recv_control_msg error -71 req 02 val 2800 [ 664.008808][ T5889] pwc: recv_control_msg error -71 req 04 val 1100 [ 664.044124][ T5889] pwc: recv_control_msg error -71 req 04 val 1200 [ 664.075966][ T5889] pwc: Registered as video103. [ 664.105090][ T5889] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 664.133827][ T5889] usb 4-1: USB disconnect, device number 4 [ 664.266801][ T57] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.352931][T12803] chnl_net:caif_netlink_parms(): no params data found [ 664.423593][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 664.574087][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 664.581561][ T10] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 664.581590][ T10] usb 8-1: config 0 has no interface number 0 [ 664.625834][ T10] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 664.625866][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.625888][ T10] usb 8-1: Product: syz [ 664.625903][ T10] usb 8-1: Manufacturer: syz [ 664.625919][ T10] usb 8-1: SerialNumber: syz [ 664.705719][ T10] usb 8-1: config 0 descriptor?? [ 664.973494][ T5809] Bluetooth: hci1: command tx timeout [ 665.527125][ T10] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 665.527159][ T10] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 665.733646][ T10] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 665.733865][ T10] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -61 [ 665.741844][T12803] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.741930][T12803] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.742090][T12803] bridge_slave_0: entered allmulticast mode [ 665.747925][T12803] bridge_slave_0: entered promiscuous mode [ 665.826074][T12803] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.826214][T12803] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.826443][T12803] bridge_slave_1: entered allmulticast mode [ 665.829208][T12803] bridge_slave_1: entered promiscuous mode [ 669.432260][ T10] usb 8-1: USB disconnect, device number 2 [ 669.619578][T12803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.757659][T12803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.999664][T12803] team0: Port device team_slave_0 added [ 670.016860][T12803] team0: Port device team_slave_1 added [ 670.140128][ T57] bridge_slave_1: left allmulticast mode [ 670.140160][ T57] bridge_slave_1: left promiscuous mode [ 670.140419][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.280529][T12928] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2484'. [ 670.347078][T12930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.417994][ T57] bridge_slave_0: left allmulticast mode [ 670.418024][ T57] bridge_slave_0: left promiscuous mode [ 670.418302][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.533629][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 670.763630][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 670.766244][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 670.769810][ T10] usb 7-1: config 164 has an invalid interface number: 28 but max is 0 [ 670.769840][ T10] usb 7-1: config 164 has no interface number 0 [ 670.769872][ T10] usb 7-1: config 164 interface 28 has no altsetting 0 [ 670.772231][ T10] usb 7-1: New USB device found, idVendor=a772, idProduct=72b8, bcdDevice=30.cc [ 670.772260][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.772287][ T10] usb 7-1: Product: syz [ 670.772298][ T10] usb 7-1: Manufacturer: syz [ 670.772308][ T10] usb 7-1: SerialNumber: syz [ 671.493115][ T10] usb 7-1: USB disconnect, device number 3 [ 672.773519][T12187] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 672.834286][ T57] bond1 (unregistering): (slave gretap1): Releasing active interface [ 672.963585][T12187] usb 9-1: Using ep0 maxpacket: 32 [ 672.966288][T12187] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 672.966318][T12187] usb 9-1: config 0 has no interface number 0 [ 672.970074][T12187] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 672.970114][T12187] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.970136][T12187] usb 9-1: Product: syz [ 672.970151][T12187] usb 9-1: Manufacturer: syz [ 672.970166][T12187] usb 9-1: SerialNumber: syz [ 673.055361][T12187] usb 9-1: config 0 descriptor?? [ 673.192229][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.250814][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.314896][ T57] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 673.357590][ T57] bond0 (unregistering): Released all slaves [ 673.385200][ T57] bond1 (unregistering): Released all slaves [ 673.473720][T12187] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 673.473753][T12187] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 673.677483][T12187] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 673.677769][T12187] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -32 [ 673.718083][T12930] netlink: 136 bytes leftover after parsing attributes in process `syz.7.2483'. [ 673.718108][T12930] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 673.757905][T12803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.757918][T12803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.757939][T12803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.790358][T12803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.790418][T12803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.790532][T12803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.949548][ T5977] usb 9-1: USB disconnect, device number 2 [ 677.582646][T12978] FAULT_INJECTION: forcing a failure. [ 677.582646][T12978] name failslab, interval 1, probability 0, space 0, times 1 [ 677.582702][T12978] CPU: 0 UID: 0 PID: 12978 Comm: syz.6.2496 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 677.582728][T12978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 677.582763][T12978] Call Trace: [ 677.582772][T12978] [ 677.582783][T12978] dump_stack_lvl+0xe8/0x150 [ 677.582943][T12978] should_fail_ex+0x46b/0x600 [ 677.583018][T12978] should_failslab+0xa8/0x100 [ 677.583099][T12978] __kmalloc_noprof+0xdf/0x7b0 [ 677.583187][T12978] ? kfree+0x4d/0x6c0 [ 677.583240][T12978] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 677.583300][T12978] tomoyo_realpath_from_path+0xe3/0x5d0 [ 677.583339][T12978] ? tomoyo_path_number_perm+0x219/0x630 [ 677.583398][T12978] tomoyo_path_number_perm+0x246/0x630 [ 677.583437][T12978] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 677.583475][T12978] ? __lock_acquire+0x6b5/0x2cf0 [ 677.583562][T12978] ? __fget_files+0x2a/0x420 [ 677.583659][T12978] ? __fget_files+0x2a/0x420 [ 677.583688][T12978] ? __fget_files+0x3a6/0x420 [ 677.583715][T12978] ? __fget_files+0x2a/0x420 [ 677.583748][T12978] security_file_ioctl+0xc3/0x2a0 [ 677.583805][T12978] __se_sys_ioctl+0x47/0x170 [ 677.583890][T12978] do_syscall_64+0x14d/0xf80 [ 677.583985][T12978] ? trace_irq_disable+0x3b/0x150 [ 677.584034][T12978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.584079][T12978] ? clear_bhb_loop+0x40/0x90 [ 677.584108][T12978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.584132][T12978] RIP: 0033:0x7f2163a3c799 [ 677.584190][T12978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.584210][T12978] RSP: 002b:00007f2161c8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 677.584269][T12978] RAX: ffffffffffffffda RBX: 00007f2163cb5fa0 RCX: 00007f2163a3c799 [ 677.584286][T12978] RDX: 00002000000000c0 RSI: 00000000400454d9 RDI: 0000000000000003 [ 677.584301][T12978] RBP: 00007f2161c8e090 R08: 0000000000000000 R09: 0000000000000000 [ 677.584315][T12978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.584329][T12978] R13: 00007f2163cb6038 R14: 00007f2163cb5fa0 R15: 00007ffc49d72e48 [ 677.584364][T12978] [ 677.600689][T12978] ERROR: Out of memory at tomoyo_realpath_from_path. [ 677.991393][T12803] hsr_slave_0: entered promiscuous mode [ 677.992949][T12803] hsr_slave_1: entered promiscuous mode [ 677.995182][T12803] debugfs: 'hsr0' already exists in 'hsr' [ 677.995211][T12803] Cannot create hsr debugfs directory [ 679.160253][T12989] FAULT_INJECTION: forcing a failure. [ 679.160253][T12989] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 679.160291][T12989] CPU: 1 UID: 0 PID: 12989 Comm: syz.7.2499 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 679.160317][T12989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 679.160331][T12989] Call Trace: [ 679.160339][T12989] [ 679.160348][T12989] dump_stack_lvl+0xe8/0x150 [ 679.160387][T12989] should_fail_ex+0x46b/0x600 [ 679.160421][T12989] _copy_from_user+0x2d/0xb0 [ 679.160545][T12989] __sys_bpf+0x229/0x950 [ 679.160589][T12989] ? __pfx___sys_bpf+0x10/0x10 [ 679.160615][T12989] ? rt_mutex_slowunlock+0x1cb/0x300 [ 679.160712][T12989] ? ksys_write+0x248/0x270 [ 679.160792][T12989] ? __pfx_ksys_write+0x10/0x10 [ 679.160833][T12989] __x64_sys_bpf+0x7c/0x90 [ 679.160859][T12989] do_syscall_64+0x14d/0xf80 [ 679.160892][T12989] ? trace_irq_disable+0x3b/0x150 [ 679.160919][T12989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.160944][T12989] ? clear_bhb_loop+0x40/0x90 [ 679.160971][T12989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.160994][T12989] RIP: 0033:0x7f0cb8f1c799 [ 679.161017][T12989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.161036][T12989] RSP: 002b:00007f0cb7176028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 679.161059][T12989] RAX: ffffffffffffffda RBX: 00007f0cb9195fa0 RCX: 00007f0cb8f1c799 [ 679.161075][T12989] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 679.161096][T12989] RBP: 00007f0cb7176090 R08: 0000000000000000 R09: 0000000000000000 [ 679.161110][T12989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.161124][T12989] R13: 00007f0cb9196038 R14: 00007f0cb9195fa0 R15: 00007ffc50ec96e8 [ 679.161160][T12989] [ 679.683628][ T6049] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 680.008170][ T6049] usb 4-1: Using ep0 maxpacket: 8 [ 680.018363][ T6049] usb 4-1: config 3 has an invalid interface number: 22 but max is 1 [ 680.018394][ T6049] usb 4-1: config 3 has an invalid interface number: 88 but max is 1 [ 680.018415][ T6049] usb 4-1: config 3 has no interface number 0 [ 680.018431][ T6049] usb 4-1: config 3 has no interface number 1 [ 680.018559][ T6049] usb 4-1: config 3 interface 22 has no altsetting 0 [ 680.018633][ T6049] usb 4-1: config 3 interface 88 has no altsetting 0 [ 680.168506][ T6049] usb 4-1: New USB device found, idVendor=0711, idProduct=0918, bcdDevice=66.84 [ 680.168576][ T6049] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.168640][ T6049] usb 4-1: Product: syz [ 680.168693][ T6049] usb 4-1: Manufacturer: syz [ 680.168747][ T6049] usb 4-1: SerialNumber: syz [ 680.809255][ T6049] sisusb 4-1:3.22: Invalid USB2VGA device [ 680.809295][ T6049] sisusb 4-1:3.22: probe with driver sisusb failed with error -22 [ 680.856531][ T6049] sisusb 4-1:3.88: Invalid USB2VGA device [ 680.856567][ T6049] sisusb 4-1:3.88: probe with driver sisusb failed with error -22 [ 680.860738][ T6049] usb 4-1: USB disconnect, device number 5 [ 681.229380][ T57] hsr_slave_0: left promiscuous mode [ 681.269231][ T57] hsr_slave_1: left promiscuous mode [ 681.270072][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.304833][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.304855][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.398563][ T57] veth1_macvtap: left promiscuous mode [ 681.398637][ T57] veth0_macvtap: left promiscuous mode [ 681.402901][ T57] veth1_vlan: left promiscuous mode [ 681.403037][ T57] veth0_vlan: left promiscuous mode [ 682.753627][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 683.106525][ T10] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 683.106556][ T10] usb 4-1: config 1 has no interface number 0 [ 683.106601][ T10] usb 4-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 683.106624][ T10] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 683.106650][ T10] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x5 has an invalid bInterval 32, changing to 9 [ 683.167208][ T10] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 683.167249][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.167270][ T10] usb 4-1: Product: syz [ 683.167285][ T10] usb 4-1: Manufacturer: syz [ 683.167299][ T10] usb 4-1: SerialNumber: syz [ 683.303252][T13034] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 683.312539][T13034] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 683.580829][ T10] usb 4-1: Expected 3 endpoints, found: 2 [ 684.573652][ T6049] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 684.723510][ T6049] usb 8-1: Using ep0 maxpacket: 16 [ 684.727920][ T6049] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 684.727984][ T6049] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.728013][ T6049] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.728037][ T6049] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 684.728084][ T6049] usb 8-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 684.728108][ T6049] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.832941][ T6049] usb 8-1: config 0 descriptor?? [ 685.346945][ T6049] input: HID 0458:5013 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5013.0001/input/input17 [ 685.530510][T13047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.597726][ T6049] input: HID 0458:5013 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5013.0001/input/input18 [ 685.952283][ T6049] kye 0003:0458:5013.0001: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.7-1/input0 [ 686.026001][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.540397][ T6049] usb 4-1: USB disconnect, device number 6 [ 687.264109][T12250] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 688.143546][T12250] usb 8-1: device descriptor read/64, error -32 [ 688.449164][T12250] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 688.963121][T12250] usb 8-1: device descriptor read/64, error -32 [ 689.214067][T12250] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 689.238724][T12250] usb 8-1: device descriptor read/8, error -32 [ 689.603553][T12250] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 689.624683][T12250] usb 8-1: device descriptor read/8, error -32 [ 689.733829][T12250] raw-gadget.1 gadget.7: failed to queue suspend event [ 690.380224][T12252] usb 8-1: USB disconnect, device number 3 [ 691.302473][ T57] team0 (unregistering): Port device team_slave_1 removed [ 691.706384][T12252] raw-gadget.1 gadget.7: failed to queue reset event [ 691.776120][ T57] team0 (unregistering): Port device team_slave_0 removed [ 691.783999][T12252] raw-gadget.1 gadget.7: failed to queue resume event [ 691.853543][T12252] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 691.853808][ C0] raw-gadget.1 gadget.7: ignoring, device is not running [ 691.854002][T12252] raw-gadget.1 gadget.7: failed to queue reset event [ 691.929066][T12252] raw-gadget.1 gadget.7: failed to queue resume event [ 692.023507][T12252] usb 8-1: device descriptor read/64, error -32 [ 692.144051][T12252] raw-gadget.1 gadget.7: failed to queue suspend event [ 692.147046][T12252] raw-gadget.1 gadget.7: failed to queue reset event [ 692.236147][T12252] raw-gadget.1 gadget.7: failed to queue resume event [ 692.343494][T12252] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 692.350294][ C0] raw-gadget.1 gadget.7: ignoring, device is not running [ 692.361897][T12252] raw-gadget.1 gadget.7: failed to queue reset event [ 692.455012][T12252] raw-gadget.1 gadget.7: failed to queue resume event [ 692.523517][T12252] usb 8-1: device descriptor read/64, error -32 [ 692.633639][T12252] raw-gadget.1 gadget.7: failed to queue suspend event [ 692.642401][T12252] usb usb8-port1: attempt power cycle [ 692.654581][T12252] raw-gadget.1 gadget.7: failed to queue disconnect event [ 692.669009][T12252] raw-gadget.1 gadget.7: failed to queue reset event [ 692.744771][T12252] raw-gadget.1 gadget.7: failed to queue resume event [ 692.754224][T12252] raw-gadget.1 gadget.7: failed to queue reset event [ 692.918459][T13043] veth3: entered promiscuous mode [ 693.009875][T13043] raw-gadget.1 gadget.7: failed to queue disconnect event [ 693.027255][T13043] syz.7.2513 (13043) used greatest stack depth: 18496 bytes left [ 694.625237][T13076] veth1: entered promiscuous mode [ 694.625264][T13076] veth1: entered allmulticast mode [ 697.515362][T13110] FAULT_INJECTION: forcing a failure. [ 697.515362][T13110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 697.515400][T13110] CPU: 1 UID: 0 PID: 13110 Comm: syz.3.2530 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 697.515426][T13110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 697.515440][T13110] Call Trace: [ 697.515449][T13110] [ 697.515459][T13110] dump_stack_lvl+0xe8/0x150 [ 697.515537][T13110] should_fail_ex+0x46b/0x600 [ 697.515577][T13110] _copy_from_user+0x2d/0xb0 [ 697.515611][T13110] ___sys_sendmsg+0x1c6/0x360 [ 697.515703][T13110] ? __pfx____sys_sendmsg+0x10/0x10 [ 697.515772][T13110] ? __fget_files+0x2a/0x420 [ 697.515821][T13110] ? __fget_files+0x3a6/0x420 [ 697.515860][T13110] __x64_sys_sendmsg+0x1c3/0x2a0 [ 697.515886][T13110] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 697.515919][T13110] ? __pfx_ksys_write+0x10/0x10 [ 697.515970][T13110] do_syscall_64+0x14d/0xf80 [ 697.516003][T13110] ? trace_irq_disable+0x3b/0x150 [ 697.516048][T13110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.516087][T13110] ? clear_bhb_loop+0x40/0x90 [ 697.516115][T13110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.516139][T13110] RIP: 0033:0x7f98aa55c799 [ 697.516165][T13110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.516185][T13110] RSP: 002b:00007f98a87b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 697.516209][T13110] RAX: ffffffffffffffda RBX: 00007f98aa7d5fa0 RCX: 00007f98aa55c799 [ 697.516226][T13110] RDX: 0000000000000094 RSI: 0000200000000980 RDI: 0000000000000003 [ 697.516242][T13110] RBP: 00007f98a87b6090 R08: 0000000000000000 R09: 0000000000000000 [ 697.516256][T13110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.516270][T13110] R13: 00007f98aa7d6038 R14: 00007f98aa7d5fa0 R15: 00007ffd242269c8 [ 697.516306][T13110] [ 698.633567][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 698.662231][T13122] IPv6: addrconf: prefix option has invalid lifetime [ 698.863485][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 698.866015][ T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 698.866054][ T10] usb 4-1: config 0 has no interface number 0 [ 698.866105][ T10] usb 4-1: config 0 interface 184 has no altsetting 0 [ 699.141632][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 699.141667][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.141688][ T10] usb 4-1: Product: syz [ 699.141704][ T10] usb 4-1: Manufacturer: syz [ 699.141721][ T10] usb 4-1: SerialNumber: syz [ 699.197675][ T10] usb 4-1: config 0 descriptor?? [ 699.343902][T13133] FAULT_INJECTION: forcing a failure. [ 699.343902][T13133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.343941][T13133] CPU: 1 UID: 0 PID: 13133 Comm: syz.6.2535 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 699.343967][T13133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 699.343990][T13133] Call Trace: [ 699.343999][T13133] [ 699.344008][T13133] dump_stack_lvl+0xe8/0x150 [ 699.344052][T13133] should_fail_ex+0x46b/0x600 [ 699.344086][T13133] _copy_from_user+0x2d/0xb0 [ 699.344120][T13133] __sys_bpf+0x229/0x950 [ 699.344169][T13133] ? __pfx___sys_bpf+0x10/0x10 [ 699.344194][T13133] ? rt_mutex_slowunlock+0x1cb/0x300 [ 699.344241][T13133] ? ksys_write+0x248/0x270 [ 699.344278][T13133] ? __pfx_ksys_write+0x10/0x10 [ 699.344320][T13133] __x64_sys_bpf+0x7c/0x90 [ 699.344346][T13133] do_syscall_64+0x14d/0xf80 [ 699.344380][T13133] ? trace_irq_disable+0x3b/0x150 [ 699.344407][T13133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.344431][T13133] ? clear_bhb_loop+0x40/0x90 [ 699.344459][T13133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.344482][T13133] RIP: 0033:0x7f2163a3c799 [ 699.344504][T13133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.344523][T13133] RSP: 002b:00007f2161c8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 699.344547][T13133] RAX: ffffffffffffffda RBX: 00007f2163cb5fa0 RCX: 00007f2163a3c799 [ 699.344564][T13133] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 699.344579][T13133] RBP: 00007f2161c8e090 R08: 0000000000000000 R09: 0000000000000000 [ 699.344593][T13133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.344607][T13133] R13: 00007f2163cb6038 R14: 00007f2163cb5fa0 R15: 00007ffc49d72e48 [ 699.344643][T13133] [ 699.799104][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 699.799395][ T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 699.874469][T13139] FAULT_INJECTION: forcing a failure. [ 699.874469][T13139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.874508][T13139] CPU: 1 UID: 0 PID: 13139 Comm: syz.6.2537 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 699.874533][T13139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 699.874547][T13139] Call Trace: [ 699.874555][T13139] [ 699.874565][T13139] dump_stack_lvl+0xe8/0x150 [ 699.874604][T13139] should_fail_ex+0x46b/0x600 [ 699.874639][T13139] _copy_from_user+0x2d/0xb0 [ 699.874672][T13139] ___sys_sendmsg+0x1c6/0x360 [ 699.874702][T13139] ? __pfx____sys_sendmsg+0x10/0x10 [ 699.874762][T13139] ? __fget_files+0x2a/0x420 [ 699.874790][T13139] ? __fget_files+0x3a6/0x420 [ 699.874829][T13139] __x64_sys_sendmsg+0x1c3/0x2a0 [ 699.874856][T13139] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 699.874889][T13139] ? __pfx_ksys_write+0x10/0x10 [ 699.874934][T13139] do_syscall_64+0x14d/0xf80 [ 699.874966][T13139] ? trace_irq_disable+0x3b/0x150 [ 699.874992][T13139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.875015][T13139] ? clear_bhb_loop+0x40/0x90 [ 699.875043][T13139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.875065][T13139] RIP: 0033:0x7f2163a3c799 [ 699.875095][T13139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.875115][T13139] RSP: 002b:00007f2161c8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 699.875140][T13139] RAX: ffffffffffffffda RBX: 00007f2163cb5fa0 RCX: 00007f2163a3c799 [ 699.875157][T13139] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000003 [ 699.875171][T13139] RBP: 00007f2161c8e090 R08: 0000000000000000 R09: 0000000000000000 [ 699.875185][T13139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.875198][T13139] R13: 00007f2163cb6038 R14: 00007f2163cb5fa0 R15: 00007ffc49d72e48 [ 699.875231][T13139] [ 700.232139][ T10] usb 4-1: USB disconnect, device number 7 [ 701.651479][T13163] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2544'. [ 701.651765][T13163] bridge_slave_0: default FDB implementation only supports local addresses [ 701.685296][T13163] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2544'. [ 701.685346][T13163] bridge_slave_0: default FDB implementation only supports local addresses [ 702.322264][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2546'. [ 702.322309][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2546'. [ 704.903509][ T5866] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 705.034334][ T5866] usb 4-1: device descriptor read/64, error -71 [ 705.303600][ T5866] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 705.453770][ T5866] usb 4-1: device descriptor read/64, error -71 [ 705.567015][ T5866] usb usb4-port1: attempt power cycle [ 705.933908][ T5866] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 705.974742][ T5866] usb 4-1: device descriptor read/8, error -71 [ 706.223504][ T5866] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 706.244394][ T5866] usb 4-1: device descriptor read/8, error -71 [ 706.374142][ T5866] usb usb4-port1: unable to enumerate USB device [ 711.879796][T13246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 711.882916][T13239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 711.917473][T13239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 711.920853][T13239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 711.921668][T13239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 714.002723][T13259] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 714.013505][T13240] Bluetooth: hci2: command tx timeout [ 714.382878][T13240] Bluetooth: hci7: command 0x0406 tx timeout [ 714.382922][T13240] Bluetooth: hci3: command 0x0406 tx timeout [ 714.382951][T13240] Bluetooth: hci6: command 0x0406 tx timeout [ 715.282327][T13264] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 716.103552][T13239] Bluetooth: hci2: command tx timeout [ 718.173518][ T5817] Bluetooth: hci2: command tx timeout [ 718.593131][T13272] sit0: entered promiscuous mode [ 718.706439][T13272] netlink: 'syz.6.2566': attribute type 1 has an invalid length. [ 718.706475][T13272] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2566'. [ 719.272721][T10013] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 719.292920][T10013] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 719.338625][T10013] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 719.368782][T10013] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 719.381179][T10013] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 720.263100][ T5817] Bluetooth: hci2: command tx timeout [ 721.013814][T13245] chnl_net:caif_netlink_parms(): no params data found [ 721.477060][ T5817] Bluetooth: hci4: command tx timeout [ 723.533521][ T5817] Bluetooth: hci4: command tx timeout [ 723.750102][T13245] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.750250][T13245] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.750492][T13245] bridge_slave_0: entered allmulticast mode [ 723.813537][T13245] bridge_slave_0: entered promiscuous mode [ 723.948083][T13245] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.948226][T13245] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.948497][T13245] bridge_slave_1: entered allmulticast mode [ 723.951442][T13245] bridge_slave_1: entered promiscuous mode [ 725.298536][T13245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.317747][T13245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.331343][T13275] chnl_net:caif_netlink_parms(): no params data found [ 725.613608][ T5817] Bluetooth: hci4: command tx timeout [ 725.837335][T13245] team0: Port device team_slave_0 added [ 727.693515][ T5817] Bluetooth: hci4: command tx timeout [ 728.690522][T13245] team0: Port device team_slave_1 added [ 730.344411][T13245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 730.344430][T13245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.344460][T13245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.346922][T13245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 730.346937][T13245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.346961][T13245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.291954][T10013] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 731.558098][T10013] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 731.560166][T10013] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 731.561809][T10013] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 731.566953][T10013] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 731.967477][ T5817] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 731.986302][ T5817] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 731.987999][ T5817] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 731.989243][ T5817] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 731.990439][ T5817] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 732.728113][T13245] hsr_slave_0: entered promiscuous mode [ 732.765653][T13245] hsr_slave_1: entered promiscuous mode [ 732.766719][T13245] debugfs: 'hsr0' already exists in 'hsr' [ 732.766746][T13245] Cannot create hsr debugfs directory [ 732.822867][T13275] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.823013][T13275] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.823215][T13275] bridge_slave_0: entered allmulticast mode [ 732.829159][T13275] bridge_slave_0: entered promiscuous mode [ 732.846459][T13275] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.846609][T13275] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.846951][T13275] bridge_slave_1: entered allmulticast mode [ 733.013797][T13275] bridge_slave_1: entered promiscuous mode [ 733.609624][T13332] FAULT_INJECTION: forcing a failure. [ 733.609624][T13332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.609666][T13332] CPU: 1 UID: 0 PID: 13332 Comm: syz.6.2577 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 733.609713][T13332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 733.609739][T13332] Call Trace: [ 733.609748][T13332] [ 733.609757][T13332] dump_stack_lvl+0xe8/0x150 [ 733.609797][T13332] should_fail_ex+0x46b/0x600 [ 733.609848][T13332] _copy_from_user+0x2d/0xb0 [ 733.609881][T13332] ___sys_sendmsg+0x1c6/0x360 [ 733.609911][T13332] ? __pfx____sys_sendmsg+0x10/0x10 [ 733.609972][T13332] ? __fget_files+0x2a/0x420 [ 733.610000][T13332] ? __fget_files+0x3a6/0x420 [ 733.610041][T13332] __x64_sys_sendmsg+0x1c3/0x2a0 [ 733.610067][T13332] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 733.610100][T13332] ? __pfx_ksys_write+0x10/0x10 [ 733.610146][T13332] do_syscall_64+0x14d/0xf80 [ 733.610179][T13332] ? trace_irq_disable+0x3b/0x150 [ 733.610206][T13332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.610230][T13332] ? clear_bhb_loop+0x40/0x90 [ 733.610258][T13332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.610281][T13332] RIP: 0033:0x7f2163a3c799 [ 733.610303][T13332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.610434][T13332] RSP: 002b:00007f2161c8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.610458][T13332] RAX: ffffffffffffffda RBX: 00007f2163cb5fa0 RCX: 00007f2163a3c799 [ 733.610483][T13332] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 733.610497][T13332] RBP: 00007f2161c8e090 R08: 0000000000000000 R09: 0000000000000000 [ 733.610510][T13332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.610523][T13332] R13: 00007f2163cb6038 R14: 00007f2163cb5fa0 R15: 00007ffc49d72e48 [ 733.610559][T13332] [ 733.723755][T10013] Bluetooth: hci5: command tx timeout [ 734.099730][T10013] Bluetooth: hci8: command tx timeout [ 734.239863][T13275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.265075][T13335] FAULT_INJECTION: forcing a failure. [ 734.265075][T13335] name failslab, interval 1, probability 0, space 0, times 0 [ 734.265113][T13335] CPU: 1 UID: 0 PID: 13335 Comm: syz.6.2578 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 734.265138][T13335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 734.265152][T13335] Call Trace: [ 734.265160][T13335] [ 734.265170][T13335] dump_stack_lvl+0xe8/0x150 [ 734.265206][T13335] should_fail_ex+0x46b/0x600 [ 734.265241][T13335] should_failslab+0xa8/0x100 [ 734.265282][T13335] kmem_cache_alloc_noprof+0x87/0x680 [ 734.265322][T13335] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 734.265350][T13335] ? do_getname+0x2e/0x250 [ 734.265450][T13335] do_getname+0x2e/0x250 [ 734.265472][T13335] ? user_path_at+0x1e/0x160 [ 734.265505][T13335] user_path_at+0x2a/0x160 [ 734.265538][T13335] __x64_sys_umount+0xf6/0x170 [ 734.265564][T13335] ? __pfx___x64_sys_umount+0x10/0x10 [ 734.265602][T13335] do_syscall_64+0x14d/0xf80 [ 734.265636][T13335] ? trace_irq_disable+0x3b/0x150 [ 734.265663][T13335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.265687][T13335] ? clear_bhb_loop+0x40/0x90 [ 734.265724][T13335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.265747][T13335] RIP: 0033:0x7f2163a3c799 [ 734.265769][T13335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.265789][T13335] RSP: 002b:00007f2161c8e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 734.265821][T13335] RAX: ffffffffffffffda RBX: 00007f2163cb5fa0 RCX: 00007f2163a3c799 [ 734.265838][T13335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 734.265853][T13335] RBP: 00007f2161c8e090 R08: 0000000000000000 R09: 0000000000000000 [ 734.265868][T13335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.265881][T13335] R13: 00007f2163cb6038 R14: 00007f2163cb5fa0 R15: 00007ffc49d72e48 [ 734.265918][T13335] [ 734.708103][T13275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.168335][T13339] FAULT_INJECTION: forcing a failure. [ 735.168335][T13339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.168374][T13339] CPU: 1 UID: 0 PID: 13339 Comm: syz.6.2579 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 735.168399][T13339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 735.168412][T13339] Call Trace: [ 735.168421][T13339] [ 735.168431][T13339] dump_stack_lvl+0xe8/0x150 [ 735.168470][T13339] should_fail_ex+0x46b/0x600 [ 735.168504][T13339] _copy_from_user+0x2d/0xb0 [ 735.168539][T13339] ___sys_sendmsg+0x1c6/0x360 [ 735.168569][T13339] ? __pfx____sys_sendmsg+0x10/0x10 [ 735.168630][T13339] ? __fget_files+0x2a/0x420 [ 735.168658][T13339] ? __fget_files+0x3a6/0x420 [ 735.168706][T13339] __x64_sys_sendmsg+0x1c3/0x2a0 [ 735.168740][T13339] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 735.168775][T13339] ? __pfx_ksys_write+0x10/0x10 [ 735.168822][T13339] do_syscall_64+0x14d/0xf80 [ 735.168855][T13339] ? trace_irq_disable+0x3b/0x150 [ 735.168882][T13339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.168906][T13339] ? clear_bhb_loop+0x40/0x90 [ 735.168934][T13339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.168958][T13339] RIP: 0033:0x7f2163a3c799 [ 735.168979][T13339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.168999][T13339] RSP: 002b:00007f2161c8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 735.169023][T13339] RAX: ffffffffffffffda RBX: 00007f2163cb5fa0 RCX: 00007f2163a3c799 [ 735.169040][T13339] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 735.169054][T13339] RBP: 00007f2161c8e090 R08: 0000000000000000 R09: 0000000000000000 [ 735.169067][T13339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.169080][T13339] R13: 00007f2163cb6038 R14: 00007f2163cb5fa0 R15: 00007ffc49d72e48 [ 735.169115][T13339] [ 735.773788][T10013] Bluetooth: hci5: command tx timeout [ 736.396205][T10013] Bluetooth: hci8: command tx timeout [ 737.517087][T13275] team0: Port device team_slave_0 added [ 737.689612][T13275] team0: Port device team_slave_1 added [ 737.853501][T10013] Bluetooth: hci5: command tx timeout [ 738.413511][T10013] Bluetooth: hci8: command tx timeout [ 739.933610][T10013] Bluetooth: hci5: command tx timeout [ 740.504148][T10013] Bluetooth: hci8: command tx timeout [ 742.588526][T13275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.588545][T13275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.588576][T13275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.012460][T13275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.012479][T13275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.012512][T13275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.782494][T13275] hsr_slave_0: entered promiscuous mode [ 746.794274][T13275] hsr_slave_1: entered promiscuous mode [ 746.795287][T13275] debugfs: 'hsr0' already exists in 'hsr' [ 746.795314][T13275] Cannot create hsr debugfs directory [ 747.615305][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.249542][T13318] chnl_net:caif_netlink_parms(): no params data found [ 752.827596][T13321] chnl_net:caif_netlink_parms(): no params data found [ 755.376258][T13318] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.376409][T13318] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.376693][T13318] bridge_slave_0: entered allmulticast mode [ 755.379892][T13318] bridge_slave_0: entered promiscuous mode [ 755.523661][T13318] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.523798][T13318] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.524098][T13318] bridge_slave_1: entered allmulticast mode [ 755.530878][T13318] bridge_slave_1: entered promiscuous mode [ 756.044341][T13321] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.044474][T13321] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.044745][T13321] bridge_slave_0: entered allmulticast mode [ 756.055607][T13321] bridge_slave_0: entered promiscuous mode [ 756.071997][T13318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.104254][T13318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.114022][T13321] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.114355][T13321] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.115111][T13321] bridge_slave_1: entered allmulticast mode [ 756.122470][T13321] bridge_slave_1: entered promiscuous mode [ 757.866293][T13318] team0: Port device team_slave_0 added [ 757.940415][T13321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.966989][T13318] team0: Port device team_slave_1 added [ 758.357549][T13321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.112693][T13318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.112713][T13318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.112745][T13318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.276846][T13318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.276866][T13318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.276898][T13318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.568592][T13321] team0: Port device team_slave_0 added [ 760.572326][T13321] team0: Port device team_slave_1 added [ 762.034537][T13321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.034555][T13321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.034587][T13321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.244220][T13318] hsr_slave_0: entered promiscuous mode [ 762.245748][T13318] hsr_slave_1: entered promiscuous mode [ 762.246771][T13318] debugfs: 'hsr0' already exists in 'hsr' [ 762.246797][T13318] Cannot create hsr debugfs directory [ 762.304798][T13321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.304819][T13321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.304851][T13321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.448992][T10013] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 764.925486][T10013] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 765.171945][T10013] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 765.204525][T10013] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 765.207641][T10013] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 766.561531][T13321] hsr_slave_0: entered promiscuous mode [ 766.563207][T13321] hsr_slave_1: entered promiscuous mode [ 766.603692][T13321] debugfs: 'hsr0' already exists in 'hsr' [ 766.603723][T13321] Cannot create hsr debugfs directory [ 767.693643][ T5817] Bluetooth: hci7: command tx timeout [ 768.161300][T10013] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 768.590930][T10013] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 768.618396][T10013] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 768.667972][T10013] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 768.695976][T10013] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 769.782278][ T5817] Bluetooth: hci7: command tx timeout [ 770.733517][ T5817] Bluetooth: hci9: command tx timeout [ 771.874554][ T5817] Bluetooth: hci7: command tx timeout [ 772.821499][ T5817] Bluetooth: hci9: command tx timeout [ 773.934025][ T5817] Bluetooth: hci7: command tx timeout [ 774.893454][ T5817] Bluetooth: hci9: command tx timeout [ 776.991705][ T5817] Bluetooth: hci9: command tx timeout [ 780.456934][ T5809] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 780.460919][ T5809] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 780.462468][ T5809] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 780.486440][ T5809] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 780.487233][ T5809] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 780.883495][ T5809] Bluetooth: hci1: command 0x0406 tx timeout [ 782.450737][T13405] chnl_net:caif_netlink_parms(): no params data found [ 782.484314][T13416] chnl_net:caif_netlink_parms(): no params data found [ 782.697110][ T5809] Bluetooth: hci10: command tx timeout [ 785.427715][ T5817] Bluetooth: hci10: command tx timeout [ 787.600302][ T5809] Bluetooth: hci10: command tx timeout [ 789.613710][ T5809] Bluetooth: hci10: command tx timeout [ 791.461204][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 791.482775][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 791.491590][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 791.509727][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 791.553788][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 792.054956][T13416] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.055091][T13416] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.055395][T13416] bridge_slave_0: entered allmulticast mode [ 792.058232][T13416] bridge_slave_0: entered promiscuous mode [ 792.349607][T13416] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.349735][T13416] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.349968][T13416] bridge_slave_1: entered allmulticast mode [ 792.380907][ T5809] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 792.404681][ T5809] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 792.405999][ T5809] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 792.411758][ T5809] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 792.412531][ T5809] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 792.484707][T13416] bridge_slave_1: entered promiscuous mode [ 792.754520][T13405] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.754647][T13405] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.754906][T13405] bridge_slave_0: entered allmulticast mode [ 792.757712][T13405] bridge_slave_0: entered promiscuous mode [ 793.423695][T13405] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.423829][T13405] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.424186][T13405] bridge_slave_1: entered allmulticast mode [ 793.427193][T13405] bridge_slave_1: entered promiscuous mode [ 793.695214][ T5809] Bluetooth: hci3: command tx timeout [ 793.972353][T13416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.639515][ T5809] Bluetooth: hci11: command tx timeout [ 794.667597][T13416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.777853][T13405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.027427][T13405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.773524][ T5809] Bluetooth: hci3: command tx timeout [ 796.145493][T13416] team0: Port device team_slave_0 added [ 796.670882][ T5809] Bluetooth: hci11: command tx timeout [ 796.671885][T13416] team0: Port device team_slave_1 added [ 796.822279][T13405] team0: Port device team_slave_0 added [ 798.284214][ T5809] Bluetooth: hci3: command tx timeout [ 798.743697][ T5809] Bluetooth: hci11: command tx timeout [ 800.343477][ T5809] Bluetooth: hci3: command tx timeout [ 800.813561][ T5809] Bluetooth: hci11: command tx timeout [ 805.457127][T13405] team0: Port device team_slave_1 added [ 806.977658][T13416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.977679][T13416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.977711][T13416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.702617][T13416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.702635][T13416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.702662][T13416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.814727][T13405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.814747][T13405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.814778][T13405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.943975][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.214436][T13405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.214455][T13405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.214487][T13405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.920104][T13416] hsr_slave_0: entered promiscuous mode [ 811.999461][T13416] hsr_slave_1: entered promiscuous mode [ 812.000654][T13416] debugfs: 'hsr0' already exists in 'hsr' [ 812.000682][T13416] Cannot create hsr debugfs directory [ 812.298273][T13441] chnl_net:caif_netlink_parms(): no params data found [ 813.142178][T13405] hsr_slave_0: entered promiscuous mode [ 813.174047][T13405] hsr_slave_1: entered promiscuous mode [ 813.189566][T13405] debugfs: 'hsr0' already exists in 'hsr' [ 813.189596][T13405] Cannot create hsr debugfs directory [ 818.767967][T13441] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.768120][T13441] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.768374][T13441] bridge_slave_0: entered allmulticast mode [ 818.771369][T13441] bridge_slave_0: entered promiscuous mode [ 819.546046][T13441] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.546186][T13441] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.546518][T13441] bridge_slave_1: entered allmulticast mode [ 819.549522][T13441] bridge_slave_1: entered promiscuous mode [ 819.564232][T13468] chnl_net:caif_netlink_parms(): no params data found [ 821.475682][T13475] chnl_net:caif_netlink_parms(): no params data found [ 821.558595][T13441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.970886][T13441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.971071][T10013] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 824.992579][T10013] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 825.003177][T10013] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 825.025578][ T5817] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 825.026408][ T5817] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 826.337477][T13441] team0: Port device team_slave_0 added [ 826.808942][T13441] team0: Port device team_slave_1 added [ 826.927226][T13468] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.927361][T13468] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.927698][T13468] bridge_slave_0: entered allmulticast mode [ 826.963799][T13468] bridge_slave_0: entered promiscuous mode [ 827.533497][ T5809] Bluetooth: hci12: command tx timeout [ 827.741829][T13468] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.741966][T13468] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.742348][T13468] bridge_slave_1: entered allmulticast mode [ 827.773640][T13468] bridge_slave_1: entered promiscuous mode [ 827.776728][T13441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.776747][T13441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.776777][T13441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.621883][T13441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.621900][T13441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.621924][T13441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.726792][T13475] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.262054][T13475] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.284949][T13475] bridge_slave_0: entered allmulticast mode [ 829.374677][T13475] bridge_slave_0: entered promiscuous mode [ 829.613575][ T5809] Bluetooth: hci12: command tx timeout [ 831.376666][ T5817] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 831.380101][ T5817] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 831.381359][ T5817] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 831.401075][ T5817] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 831.404243][ T5817] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 831.801017][ T5809] Bluetooth: hci12: command tx timeout [ 833.533813][ T5809] Bluetooth: hci7: command tx timeout [ 833.860030][ T5809] Bluetooth: hci12: command tx timeout [ 835.613533][T10013] Bluetooth: hci7: command tx timeout [ 836.573794][T10013] Bluetooth: hci2: command 0x0406 tx timeout [ 836.710474][T13475] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.712019][T13475] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.712606][T13475] bridge_slave_1: entered allmulticast mode [ 836.740054][T13475] bridge_slave_1: entered promiscuous mode [ 837.140086][T13468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.542986][T13468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.713411][ T5809] Bluetooth: hci7: command tx timeout [ 839.194963][T13475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.319461][T10013] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 839.351727][T10013] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 839.507713][T10013] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 839.509061][T10013] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 839.510279][T10013] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 839.842637][T10013] Bluetooth: hci7: command tx timeout [ 840.893391][T13475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.533495][ T5817] Bluetooth: hci13: command tx timeout [ 841.864316][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 842.286061][T13468] team0: Port device team_slave_0 added [ 842.638512][T13468] team0: Port device team_slave_1 added [ 843.139776][T13475] team0: Port device team_slave_0 added [ 843.613609][ T5809] Bluetooth: hci13: command tx timeout [ 843.757018][T13475] team0: Port device team_slave_1 added [ 845.672934][T13468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.672955][T13468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.672988][T13468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.708994][ T5809] Bluetooth: hci13: command tx timeout [ 847.993525][ T5809] Bluetooth: hci13: command tx timeout [ 850.289883][T13468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.289904][T13468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.289935][T13468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.357781][T13475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.357800][T13475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.357832][T13475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.361929][T13475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.361947][T13475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.361978][T13475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.975469][ T5817] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 853.024898][ T5817] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 853.027454][ T5817] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 853.077154][ T5817] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 853.097990][ T5817] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 855.064715][T13240] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 855.085394][T13240] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 855.086759][T13240] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 855.096972][T13240] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 855.100273][T13240] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 855.373563][ T5809] Bluetooth: hci10: command tx timeout [ 857.133678][T13240] Bluetooth: hci5: command 0x0406 tx timeout [ 857.133716][T13240] Bluetooth: hci8: command 0x0406 tx timeout [ 857.543542][ T5809] Bluetooth: hci10: command tx timeout [ 857.773763][T13240] Bluetooth: hci14: command tx timeout [ 859.613663][ T5817] Bluetooth: hci10: command tx timeout [ 859.855492][T10013] Bluetooth: hci14: command tx timeout [ 861.693457][T10013] Bluetooth: hci10: command tx timeout [ 861.934620][T10013] Bluetooth: hci14: command tx timeout [ 864.013432][T10013] Bluetooth: hci14: command tx timeout [ 865.266816][T13502] chnl_net:caif_netlink_parms(): no params data found [ 870.354424][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.725571][T13511] chnl_net:caif_netlink_parms(): no params data found [ 878.464604][T13502] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.464825][T13502] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.465182][T13502] bridge_slave_0: entered allmulticast mode [ 878.474052][T13502] bridge_slave_0: entered promiscuous mode [ 878.683622][T13502] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.683756][T13502] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.684132][T13502] bridge_slave_1: entered allmulticast mode [ 878.697292][T13502] bridge_slave_1: entered promiscuous mode [ 879.706562][T13516] chnl_net:caif_netlink_parms(): no params data found [ 885.029777][T13511] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.029910][T13511] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.030279][T13511] bridge_slave_0: entered allmulticast mode [ 885.232919][T13511] bridge_slave_0: entered promiscuous mode [ 885.652652][T13511] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.652787][T13511] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.653143][T13511] bridge_slave_1: entered allmulticast mode [ 885.663682][T13511] bridge_slave_1: entered promiscuous mode [ 886.390920][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 886.418759][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 886.423982][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 886.425285][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 886.434465][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 888.395577][T13511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.623639][T10013] Bluetooth: hci3: command tx timeout [ 890.158103][T13511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.664415][T10013] Bluetooth: hci3: command tx timeout [ 890.665233][T13526] chnl_net:caif_netlink_parms(): no params data found [ 890.747016][T13516] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.747157][T13516] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.747532][T13516] bridge_slave_0: entered allmulticast mode [ 890.750476][T13516] bridge_slave_0: entered promiscuous mode [ 890.818469][ T38] INFO: task syz-executor:13245 blocked for more than 143 seconds. [ 890.818498][ T38] Not tainted syzkaller #0 [ 890.818511][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 890.818522][ T38] task:syz-executor state:D stack:19200 pid:13245 tgid:13245 ppid:1 task_flags:0x400140 flags:0x00080002 [ 890.818582][ T38] Call Trace: [ 890.818591][ T38] [ 890.818606][ T38] __schedule+0x1553/0x5240 [ 890.818665][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 890.818704][ T38] ? rt_mutex_adjust_prio_chain+0x21fd/0x23f0 [ 890.818735][ T38] ? __pfx___schedule+0x10/0x10 [ 890.818784][ T38] rt_mutex_schedule+0x76/0xf0 [ 890.818844][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 890.818887][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 890.818918][ T38] rt_mutex_slowlock+0x2dc/0x7b0 [ 890.818950][ T38] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 890.818980][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 890.819028][ T38] ? del_device_store+0xd7/0x370 [ 890.819153][ T38] ? del_device_store+0xd7/0x370 [ 890.819186][ T38] mutex_lock_nested+0x168/0x1d0 [ 890.819221][ T38] del_device_store+0xd7/0x370 [ 890.819255][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 890.819327][ T38] ? __pfx_del_device_store+0x10/0x10 [ 890.819363][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 890.819387][ T38] ? sysfs_kf_write+0x166/0x260 [ 890.819416][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 890.819439][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 890.819501][ T38] vfs_write+0x629/0xba0 [ 890.819546][ T38] ? __pfx_vfs_write+0x10/0x10 [ 890.819584][ T38] ? kmem_cache_free+0x185/0x6b0 [ 890.819606][ T38] ? do_sys_openat2+0x14c/0x200 [ 890.819651][ T38] ksys_write+0x156/0x270 [ 890.819687][ T38] ? __pfx_ksys_write+0x10/0x10 [ 890.819734][ T38] do_syscall_64+0x14d/0xf80 [ 890.819768][ T38] ? trace_irq_disable+0x3b/0x150 [ 890.819796][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.819822][ T38] ? clear_bhb_loop+0x40/0x90 [ 890.819851][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.819875][ T38] RIP: 0033:0x7fb3fc6fcfce [ 890.819897][ T38] RSP: 002b:00007ffde0c53df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 890.819921][ T38] RAX: ffffffffffffffda RBX: 00005555637f7500 RCX: 00007fb3fc6fcfce [ 890.819938][ T38] RDX: 0000000000000001 RSI: 00007ffde0c53e80 RDI: 0000000000000005 [ 890.819952][ T38] RBP: 00007fb3fc7d351c R08: 0000000000000000 R09: 0000000000000000 [ 890.819968][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.819982][ T38] R13: 00007ffde0c53e80 R14: 00007fb3fd4e4620 R15: 0000000000000003 [ 890.820019][ T38] [ 890.820090][ T38] [ 890.820090][ T38] Showing all locks held in the system: [ 890.820100][ T38] 5 locks held by ksoftirqd/0/15: [ 890.820116][ T38] 4 locks held by rcuc/0/20: [ 890.820130][ T38] 5 locks held by rcuc/1/28: [ 890.820143][ T38] 1 lock held by khungtaskd/38: [ 890.820155][ T38] #0: ffffffff8ddcb980 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 890.820235][ T38] 5 locks held by kworker/u8:3/57: [ 890.820247][ T38] #0: ffff88801aee1138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 890.820315][ T38] #1: ffffc9000123fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 890.820379][ T38] #2: ffffffff8f14c400 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 890.820498][ T38] #3: ffff88803a5ad7b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310 [ 890.820582][ T38] #4: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 890.820669][ T38] 2 locks held by udevd/5168: [ 890.820682][ T38] 2 locks held by dhcpcd/5462: [ 890.820695][ T38] #0: ffffffff8f13c0f8 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x644/0x7f0 [ 890.820753][ T38] #1: ffffffff8f15abb8 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630 [ 890.820814][ T38] 2 locks held by getty/5553: [ 890.820827][ T38] #0: ffff8880369ee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 890.820912][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 890.820969][ T38] 3 locks held by kworker/1:7/6049: [ 890.820982][ T38] #0: ffff888019c03938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 890.821050][ T38] #1: ffffc9000590fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 890.821112][ T38] #2: ffffffff8f15abb8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 890.821233][ T38] 3 locks held by kworker/u8:19/9127: [ 890.821246][ T38] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 890.821309][ T38] #1: ffffc900040cfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 890.821372][ T38] #2: ffffffff8f15abb8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 890.821454][ T38] 2 locks held by kworker/0:8/12252: [ 890.821470][ T38] 7 locks held by syz-executor/12803: [ 890.821482][ T38] #0: ffff888036fd4480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 890.821590][ T38] #1: ffff88804cf7d478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 890.821654][ T38] #2: ffff888026c83f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 890.821723][ T38] #3: ffffffff8e9c85f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 890.821787][ T38] #4: ffff88805fb340d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 890.821886][ T38] #5: ffff888024a4e300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 890.821946][ T38] #6: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 890.822004][ T38] 1 lock held by syz.8.2519/13063: [ 890.822017][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 890.822083][ T38] 4 locks held by syz-executor/13245: [ 890.822096][ T38] #0: ffff888036fd4480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 890.822163][ T38] #1: ffff88803e176878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 890.822225][ T38] #2: ffff888026c83f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 890.822294][ T38] #3: ffffffff8e9c85f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 890.822359][ T38] 2 locks held by syz.7.2565/13261: [ 890.822372][ T38] #0: ffffffff8f14c400 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 890.822431][ T38] #1: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 890.822490][ T38] 2 locks held by syz.3.2564/13266: [ 890.822503][ T38] #0: ffffffff8f14c400 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 890.822562][ T38] #1: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 890.822619][ T38] 4 locks held by syz-executor/13275: [ 890.822632][ T38] #0: ffff888036fd4480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 890.822698][ T38] #1: ffff888038df0878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 890.822760][ T38] #2: ffff888026c83f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 890.822828][ T38] #3: ffffffff8e9c85f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 890.822894][ T38] 4 locks held by syz-executor/13318: [ 890.822906][ T38] #0: ffff888036fd4480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 890.822972][ T38] #1: ffff8880601ac878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 890.823034][ T38] #2: ffff888026c83f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 890.823108][ T38] #3: ffffffff8e9c85f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 890.823171][ T38] 4 locks held by syz-executor/13321: [ 890.823184][ T38] #0: ffff888036fd4480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 890.823251][ T38] #1: ffff88803b62b078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 890.824473][ T38] #2: ffff888026c83f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 890.824685][ T38] #3: ffffffff8e9c85f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 890.824857][ T38] 1 lock held by syz.6.2587/13380: [ 890.824889][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 890.825094][ T38] 1 lock held by syz-executor/13405: [ 890.825126][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 890.825288][ T38] 4 locks held by syz-executor/13416: [ 890.825321][ T38] #0: ffff888036fd4480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 890.825491][ T38] #1: ffff88806f6eb878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 890.825643][ T38] #2: ffff888026c83f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 890.825811][ T38] #3: ffffffff8e9c85f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 890.825976][ T38] 1 lock held by syz-executor/13441: [ 890.826008][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 890.826165][ T38] 1 lock held by syz-executor/13468: [ 890.826197][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 890.826359][ T38] 1 lock held by syz-executor/13475: [ 890.826404][ T38] #0: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 890.826563][ T38] 2 locks held by syz-executor/13502: [ 890.826596][ T38] #0: ffff8880821a4f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 890.826820][ T38] #1: ffff8880821a40b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 890.826992][ T38] 1 lock held by syz-executor/13511: [ 890.827033][ T38] 1 lock held by syz-executor/13516: [ 890.827074][ T38] #0: ffffffff8f15abb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 890.827254][ T38] 2 locks held by syz-executor/13522: [ 890.827285][ T38] #0: ffffffff8f6a6668 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 890.827457][ T38] #1: ffffffff8f15abb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 890.827616][ T38] 2 locks held by syz-executor/13526: [ 890.827659][ T38] 2 locks held by syz-executor/13545: [ 890.827698][ T38] #0: ffffffff8f14c400 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 890.827887][ T38] #1: ffffffff8f15abb8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 890.828051][ T38] 3 locks held by syz-executor/13555: [ 890.828090][ T38] 1 lock held by udevd/13557: [ 890.828130][ T38] [ 890.828142][ T38] ============================================= [ 890.828142][ T38] [ 890.828173][ T38] NMI backtrace for cpu 1 [ 890.828215][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 890.828278][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 890.828318][ T38] Call Trace: [ 890.828340][ T38] [ 890.828369][ T38] dump_stack_lvl+0xe8/0x150 [ 890.828456][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 890.828568][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 890.828673][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 890.828749][ T38] sys_info+0x135/0x170 [ 890.828811][ T38] watchdog+0xfd9/0x1030 [ 890.828895][ T38] ? watchdog+0x21a/0x1030 [ 890.828980][ T38] kthread+0x388/0x470 [ 890.829050][ T38] ? __pfx_watchdog+0x10/0x10 [ 890.829128][ T38] ? __pfx_kthread+0x10/0x10 [ 890.829211][ T38] ret_from_fork+0x51e/0xb90 [ 890.829295][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 890.829375][ T38] ? __switch_to+0xc7d/0x1450 [ 890.829479][ T38] ? __pfx_kthread+0x10/0x10 [ 890.829544][ T38] ret_from_fork_asm+0x1a/0x30 [ 890.829635][ T38] [ 890.829656][ T38] Sending NMI from CPU 1 to CPUs 0: [ 890.829705][ C0] NMI backtrace for cpu 0 [ 890.829720][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 890.829741][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 890.829753][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 890.829827][ C0] Code: e8 7e 94 94 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 bf ab fa fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 890.829845][ C0] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202 [ 890.829861][ C0] RAX: 1ffffffff332a600 RBX: 00000000000003fd RCX: 0000000000000000 [ 890.829874][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 890.829886][ C0] RBP: ffffffff999537d0 R08: 0000000000000000 R09: 0000000000000000 [ 890.829898][ C0] R10: dffffc0000000000 R11: ffffffff852fe230 R12: dffffc0000000000 [ 890.829913][ C0] R13: 0000000000000000 R14: ffffffff99953540 R15: 0000000000000000 [ 890.829925][ C0] FS: 0000000000000000(0000) GS:ffff88812633c000(0000) knlGS:0000000000000000 [ 890.829941][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 890.829953][ C0] CR2: 0000559fd441e048 CR3: 00000000379a4000 CR4: 00000000003526f0 [ 890.829970][ C0] Call Trace: [ 890.829977][ C0] [ 890.829985][ C0] wait_for_lsr+0x1aa/0x2f0 [ 890.830031][ C0] serial8250_console_write+0x120d/0x1b90 [ 890.830067][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 890.830099][ C0] ? console_flush_one_record+0x48f/0xb90 [ 890.830135][ C0] console_flush_one_record+0x68b/0xb90 [ 890.830166][ C0] ? console_flush_one_record+0xfa/0xb90 [ 890.830197][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 890.830226][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 890.830257][ C0] legacy_kthread_func+0x1b6/0x250 [ 890.830286][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 890.830313][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 890.830342][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 890.830374][ C0] kthread+0x388/0x470 [ 890.830392][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 890.830418][ C0] ? __pfx_kthread+0x10/0x10 [ 890.830437][ C0] ret_from_fork+0x51e/0xb90 [ 890.830464][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 890.830488][ C0] ? __switch_to+0xc7d/0x1450 [ 890.830511][ C0] ? __pfx_kthread+0x10/0x10 [ 890.830530][ C0] ret_from_fork_asm+0x1a/0x30 [ 890.830563][ C0] [ 890.830739][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 890.830774][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 890.830838][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 890.830871][ T38] Call Trace: [ 890.830893][ T38] [ 890.830923][ T38] vpanic+0x56c/0xa60 [ 890.831017][ T38] ? __pfx_vpanic+0x10/0x10 [ 890.831132][ T38] panic+0xc5/0xd0 [ 890.831215][ T38] ? __pfx_panic+0x10/0x10 [ 890.831290][ T38] ? printk_trigger_flush+0x117/0x180 [ 890.831375][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 890.831480][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 890.831519][ T38] watchdog+0x1023/0x1030 [ 890.831549][ T38] ? watchdog+0x21a/0x1030 [ 890.831580][ T38] kthread+0x388/0x470 [ 890.831602][ T38] ? __pfx_watchdog+0x10/0x10 [ 890.831625][ T38] ? __pfx_kthread+0x10/0x10 [ 890.831650][ T38] ret_from_fork+0x51e/0xb90 [ 890.831682][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 890.831712][ T38] ? __switch_to+0xc7d/0x1450 [ 890.831740][ T38] ? __pfx_kthread+0x10/0x10 [ 890.831764][ T38] ret_from_fork_asm+0x1a/0x30 [ 890.831802][ T38] [ 890.832403][ T38] Kernel Offset: disabled