last executing test programs: 19m49.234247027s ago: executing program 4 (id=5): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000007fc0)}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 19m33.098734038s ago: executing program 32 (id=5): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000007fc0)}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 19m27.742608334s ago: executing program 3 (id=48): socket$packet(0x11, 0xa, 0x300) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f4047050102641101020301090212000100"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$I2C_RDWR(r0, 0x707, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(0x0, 0x7) 19m22.258757s ago: executing program 3 (id=52): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000003c0)={0x17, 0x0, @ioapic={0x0, 0x2, 0x3, 0xeffffdff, 0x0, [{0x0, 0x80, 0x3}, {0x4, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0x9}, {0x4}, {0x0, 0x85, 0xbe}, {0x0, 0x5, 0x3, '\x00', 0xfc}, {0x1, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x42}, {0x0, 0x2}, {0x0, 0x50}, {0x4, 0x0, 0x24, '\x00', 0x3}, {0x58, 0x4e}, {0x2, 0x2, 0x4}, {0x0, 0x3}, {0x1, 0x0, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x4, '\x00', 0xfd}, {0x1, 0x4, 0x7, '\x00', 0x3}, {0x81, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x17}, {0x0, 0xfd, 0x0, '\x00', 0x70}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0x10, 0x5, 0xe}]}}) 19m20.14285909s ago: executing program 3 (id=55): add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x1, 0x803) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000500)={0x4, "328c59d81b2daf54bfa1ec894fac5cf43da29f6590f83db6fe329a15538fbd107ccbf16888a951d2a37e2a3a5764b748110437f8ecf3d644ec044de8c10473b0"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) 19m12.090729451s ago: executing program 33 (id=45): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000200), 0x2, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 19m4.136946792s ago: executing program 34 (id=55): add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = syz_open_dev$hidraw(&(0x7f0000000280), 0x1, 0x803) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000500)={0x4, "328c59d81b2daf54bfa1ec894fac5cf43da29f6590f83db6fe329a15538fbd107ccbf16888a951d2a37e2a3a5764b748110437f8ecf3d644ec044de8c10473b0"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) 15m16.755168858s ago: executing program 35 (id=272): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000e37000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000d84000/0x4000)=nil) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) mmap(&(0x7f00007fc000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r1, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x72041, 0x0) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0608630002560e2be2c64c", 0xd, 0xfffffffffffffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)=ANY=[@ANYBLOB, @ANYRES16=r6], 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) close(r8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000600)={0x404011f, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vlan1\x00'}) 14m30.3745329s ago: executing program 36 (id=287): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x1, 0x803) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd\xb4\xd9\x1b\xb1&\t^\xb6\xb7\xc2\xc1\xf7\x83\xad\xab?\xc2\r\f@&\xf1\xcci[5{\xc5\x17t\xd2w\x00\xac\x12\x0f\x8bM\x8eJ\x1fk\xd8\xe8\xa3\x0e\xda9\x82!Y\xd4\xbeP\xcaB\x8d\xd5/6\x81\xad\xfb+&\x87\x1b\x9f\x8bcsj@\xfc&0{L\x1f\xc8iszj\x84\xac\xc2VI\x16\xb5\xd6\x13\xae\xff\xad\xa5u\xd3Dy\xa1\x00\xa0\xd7\xfd\x8d\xd0\x85k\x19u&l5\xd2*ss\x1b\x12\x8cc|\xc6\xb52e\\\xeaB#w\x9b=\xfdF\xcb\xdbr\xfe\xfa\xb3\xad\x94J\"&\x17P\xf7=\x88Lf\xe5\\\x9agq\x9e\x17\x15L\xc7\xdco\xf4\xa4K\xb5\x06w\xa5\xe6\x9e%\xe5\xdc\xc8\xc9\xb8\xa9#\xe6\xcc\x9e\xb4\xc1\x9b\xeb\xf3\x1e\xa6?\x9f\xb5U\xae\xb3\x84\xf7\x05!z\x88\xc54-A\x10A\x8af\xc8\x82\xc9:0V\x89\xcb\xfag\xbe\xcaO[\xa9\xeb`\x026}\xff;\xe4:\'\xc1\x18\xbf\x03B\xc4N\xa0\xfd\xdbk\xa9p\xb9\x04\xfa\xa0\x13\xe5+\x95\xf5\xb1\xdc\x8b\xd2\xcbf\x84\xc6\xde!\x974\xe3\xc6\xa3Sa\x1eP\xf4\x9dd\x18gH\xf5E\xfb_\xdc0\x1d{iT\xf0o\x94') 13m23.65331734s ago: executing program 37 (id=292): openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1000007f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) shutdown(r3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d9, 0xfdd47f52e080468b}, 0xa, @in=@remote, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x2, 0x200000}}, 0xe4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000040)={r4, @in6={{0xa, 0x4e25, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x74}}}, &(0x7f0000000280)=0x84) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)=0x3) 13m1.403084539s ago: executing program 38 (id=309): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x0, [0x61, 0x10000, 0x9c9, 0xf, 0x4, 0x3]}, &(0x7f00000001c0)=0x50) mount$9p_virtio(&(0x7f0000000340), &(0x7f00000001c0)='.\x00', &(0x7f0000000040), 0x40, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) 12m18.816671706s ago: executing program 39 (id=343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001180)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xa5bf485f, 0x4, 0xfffffc01, 0x10001}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x5dc}], 0x1}, 0x4) 12m17.854382922s ago: executing program 40 (id=341): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r2, 0x3, 0x5004) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(r2, 0xf, &(0x7f0000000280)={0x8, 0xb564}, &(0x7f0000000340)) r6 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000140)={[0x670dab3e, 0x747d, 0x5, 0x1, 0x7fffffff, 0x1, 0x71, 0x401, 0x3, 0xffffffffffffffff, 0x7, 0xd88a, 0xff, 0x800, 0x7, 0x2], 0xffff1000, 0x1400}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x17, 0x0, @ioapic={0x0, 0x2, 0x3, 0xeffffdff, 0x0, [{0x0, 0x80, 0x3}, {0x4, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0x9}, {0x4}, {0x0, 0x85, 0xbe}, {0x0, 0x5, 0x3, '\x00', 0xfc}, {0x1, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x42}, {0x0, 0x2}, {0x0, 0x50}, {0x4, 0x0, 0x24, '\x00', 0x3}, {0x58, 0x4e}, {0x2, 0x2, 0x4}, {0x0, 0x3}, {0x1, 0x0, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x4, '\x00', 0xfd}, {0x1, 0x4, 0x7, '\x00', 0x3}, {0x81, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x17}, {0x0, 0xfd, 0x0, '\x00', 0x70}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0x10, 0x5, 0xe}]}}) socket$inet6(0x10, 0x3, 0x0) 12m15.955686587s ago: executing program 41 (id=344): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="ff", 0x1, 0xfffffffffffffffe) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000"], 0x0, 0x56}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)={0x24, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}, [@nested={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x12b, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @uid}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x20000000) 11m21.272512891s ago: executing program 3 (id=345): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0xc) 11m20.377871814s ago: executing program 3 (id=348): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 11m19.003574901s ago: executing program 3 (id=350): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setitimer(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000003d00010325bd7000fcffffff06000000ea7c6676a8ad02c3c8d8ffc555300ec6c04ca7eb7518ffdc520d0faa118b9bcd2b8db3b070b5e782b65402a35c0decda9ff91f18c3282c3cdf9d0ac98e92e4d1345cc0d3697f7335e79f6bde4a5e4fae76fe086aa917c765b3681e107811e1141687b3c662879f6435d70878f876a21564990c6d84ae6cb679af0f56f63ea4275e84c11af62bcde28fccecc05106148acad432f0053cf1f78ba17f81bbc352b900e3fba0dec900005d41f3035cc7b68beebd486cddf5b588fccbd06c577e1e576c01158105481880efd40bdca81ec56847f4dbcad51a98123834b83614e74163e1c0a86487f9ed9ec151651cc42b88cbe4ec045b1ba83f4e8869b10b6e81ab1c8f8665ecd5ea591d1147ca31abd55852ac41c43be7274dc40aaf243795de0565228edecae75770c226536ca8b236e8c76d3e730a45294251d6dcb92dc8a19f8b53c095fa64bda2dbdee0c6af8f8f064154d2f0732814b5595517ee7ee4b3d36891b47ce470497e75813737adfaf352905f3dcc2943bcbb72c83d9de6883b32921da426c0e914553e058e7ee1d9561f3389aa58d9b47d37b29591324c6e1002cf7056c95795de46cdddd0ffbbbd0f626885636a64f2c55c62bf285d08c7d66fe39c10cc6729f8d8bfabc10135c6377bef1e44f7af"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000003c0)={0x1, {{0xa, 0x4e23, 0x8caa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000140)) open$dir(&(0x7f0000000300)='./file0\x00', 0x20800, 0xf8) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000000)={0x1, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) openat$adsp1(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r5, 0x4) 11m3.518624128s ago: executing program 42 (id=350): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setitimer(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000003c0)={0x1, {{0xa, 0x4e23, 0x8caa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000140)) open$dir(&(0x7f0000000300)='./file0\x00', 0x20800, 0xf8) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000000)={0x1, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) openat$adsp1(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r5, 0x4) 10m30.877521933s ago: executing program 0 (id=399): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xc, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0xc) 10m30.085198565s ago: executing program 0 (id=400): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_test', 0x8a881, 0xbb) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4000000000000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x8]}}) 10m29.435046288s ago: executing program 0 (id=401): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) creat(&(0x7f00000002c0)='./file0\x00', 0x1) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000140)=[0x100000000003ff, 0x4, 0xfff], &(0x7f0000000180)=[0x1], 0x6, 0x3, 0x1}}, 0x3c) r4 = socket(0x28, 0x10d0b7414593f74b, 0x2) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)=""/241, 0xf1}], 0x1, 0xd9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10m27.480568234s ago: executing program 0 (id=403): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x5, {0x3, 0x1000, 0x1, 0x870}}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0aca6020"], 0xd) 10m26.830733376s ago: executing program 0 (id=405): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200080a5}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x15, 0x0, &(0x7f0000000000)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r4, 0x5407, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80, 0x0) write$UHID_INPUT(r4, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x40, 0x5, 0xf0, {0xf0, 0x7, "bc773c60d348496a917720b44e2883a030c7b2ab2d66db3a0bf8927208292286d393b7b87cbff265f841184ffaedb4a90d637d01a7536f0b1acfded7be8dfe0da731c2f70fd5c37cf3434e58220e23a078960a6a154107ee86cb5f59430d7fc408eba7c970a8d5d06d110d366a53fee579f9a8d86a3be66ba99f23161c83e2fa9f49196ff714418ab2df85896140dc38351b3014420ff4abd06efb2a7dd3836237d10a3bca87fa1f000e15e073b02d464f153721a82ed28ecf678f376b2cf4c361854513447b2c0295ed72eea2aeeece32a386ac9024a6a34be7f0f094ef2ee245bdb887540dd3c9610bc126d9ab"}}, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="050f1c00ffbf100b05000000889bff1f3cba81784a0b6b714e498c0e000000000000"], &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1, 0x4, 0x5, "e22a32d1", "e7b51920"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0x4a, 0x6, 0x5, 0x1}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4800) socket$l2tp6(0xa, 0x2, 0x73) socket$phonet(0x23, 0x2, 0x1) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$can_j1939(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10m24.912712145s ago: executing program 0 (id=407): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048084) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r0, &(0x7f0000000000)=@ieee802154={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) getgid() dup2(r4, r4) setresuid(0xee01, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x8, 0x0) prlimit64(r5, 0x6, 0x0, 0x0) 10m9.266150772s ago: executing program 43 (id=407): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048084) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r0, &(0x7f0000000000)=@ieee802154={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) getgid() dup2(r4, r4) setresuid(0xee01, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x8, 0x0) prlimit64(r5, 0x6, 0x0, 0x0) 8m55.645759311s ago: executing program 44 (id=444): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c1000000000000000", 0x56}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/226}, {&(0x7f0000000300)=""/33, 0x1b}, {&(0x7f0000000480)=""/185}, {&(0x7f00000005c0)=""/83}], 0x0, &(0x7f0000000640)=""/79}, 0x7fb7}, {{&(0x7f0000000700)=@l2={0x1f, 0x0, @fixed}, 0x0, &(0x7f0000000800)=[{&(0x7f0000000780)=""/87}, {&(0x7f0000000900)=""/194}, {&(0x7f0000000a00)=""/76}, {&(0x7f0000000b00)=""/245}, {&(0x7f0000000c00)=""/67}, {&(0x7f0000000c80)=""/87}], 0x0, &(0x7f0000000d00)=""/152}, 0x3}, {{&(0x7f0000000dc0)=@in={0x2, 0x0, @private}, 0x0, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/135}, {&(0x7f0000000a80)=""/60}, {&(0x7f0000000f80)=""/221}, {&(0x7f0000000f00)=""/34}, {&(0x7f0000001080)=""/236}]}, 0xeaff}, {{&(0x7f00000011c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x0, &(0x7f0000001240)}, 0xfd32}], 0x80000f7, 0x122, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="02c9000c000800050007850400050000d5b8c8708689127800"], 0x11) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000001300)=ANY=[@ANYBLOB="550a000000000000611118000000000018000000000000008200000040000000950000000000000043ed9756bc874345e2b39f02ddf0c4e18111f1df579af2576a1861fb6d74f84d87013ae4d6e44b4d73375b090019b6011533c862ac8ad068caaf0f3c81dc3ab7eba7bab7ca40c1d30221ec245ebe6db81d92fce9a23b0306fcba9aa0dc4d41959a2c78e7a74a33205d938266e9efdccd4bd757a297ab44c3df88880e7ec1dcf100"/182], &(0x7f0000000000)='GPL\x00'}, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500082f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000883e"], 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000580)=0xbc2, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0x1, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2800}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x87, &(0x7f0000000100)=0x71, 0x4) 8m18.722912971s ago: executing program 4 (id=300): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000100)=0xc, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) cachestat(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) 8m17.01485542s ago: executing program 4 (id=446): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket(0x23, 0x4, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000004200"], 0x14}}, 0x44014) r5 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 8m1.373582045s ago: executing program 9 (id=449): mkdir(&(0x7f0000000400)='./file0\x00', 0x45) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000400)='.log\x00', 0x80, 0x2b) ioctl$TCFLSH(r0, 0x540b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 8m0.330746532s ago: executing program 45 (id=446): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket(0x23, 0x4, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000004200"], 0x14}}, 0x44014) r5 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 7m56.344316653s ago: executing program 9 (id=451): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 7m50.886148618s ago: executing program 9 (id=452): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000100)=0xc, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) cachestat(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) 7m49.580320966s ago: executing program 9 (id=453): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) futex(&(0x7f0000000040)=0x4, 0x6, 0x1000002, &(0x7f0000000180), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240048d4}, 0x40800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x5, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000084}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$can_bcm(0x1d, 0x2, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$snapshot(0xffffff9c, 0x0, 0x20900, 0x0) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4008890) lseek(0xffffffffffffffff, 0x851, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap$panthor(&(0x7f00009e4000/0x2000)=nil, 0x2000, 0x6, 0x80010, r3, 0xffff) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 7m42.372081204s ago: executing program 9 (id=454): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) kexec_load(0x8, 0x0, 0x0, 0x160000) 7m41.917181716s ago: executing program 9 (id=455): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)="b3185d7b"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x71096000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) openat$sysctl(0xffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x6f, 0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10c}}, 0x28040800) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000005a00000227bd7000ffe1df250000ef005874a83c4b893504c7c58eb6461ac5dd6e4de53b1b1630129165b1dd3d176562aef289b4756f2530e8f51b03a231f4a2ecda05297d4652d85cb4fe95295dad71d7747789be9c5d8a993ae566f7f664b6169368c70b064e45c28ca3"], 0x14}}, 0x40440b0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000900)={0x667, 0x7d, 0x0, {{0x500, 0x2b5, 0x0, 0x0, {0x4}, 0x0, 0x0, 0xffffffff, 0x0, 0x2e, '\x04nodZ=\xbfd\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x9beq,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1', 0x9a, 'p\x02\x00}\xfag>\xff\xeb\t\xb55\x1f\x9e\xde\x05J\x00\x00\x00\x00\x18{\x82\xd9\xb5i(\xfb\xbf\v\x00\x00+Y_\xcb\x14\xa8\xf3\x0e&\xe5&\xab\xc1\x80jB\xdez\xdc\x81\x06\xb4\x94\xe1\x8d\xb5\x7f\xc1\xac\x8d\x06\x85\x95\xf0\x1c\x1c\xbe\x05\xc2v\x16/\x81\xb4\a\xe5\r\xb6\x939g!\xf3\xed\x9c\xe2\x01\x9e\xe6\xa9F\xe3\xa5Z\x1b@\xee\xb9:\xc2\x9f7[Z\xfd\xf1\xdf\x11,\x9a\xaf\xd3i\x94\xe1e\xb3:\xf7\x86\xc54\x05\x87]7\xa0E\"\x17\x8b7P\x9es\xc7\x02_\xc4\x13\xc7\xd1*\x80\x86?p#hf\x8d', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\"(9\xe4F\x1a\xb6*\xeb\x84\x1f \x83~\x01\b\xe2\xe7HP\x1cQH', 0x185, '\xf8\xf6i\xfbqm\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00\x87\x0fFB\xe4\xc5\xde\x87\x14\xa2\xb0\x84L#E\xd8\xdfI\xd7\x00\xef\xc4R\xaf\xb5F\x9e\xaa\xd2\xc8\x85z5$F\xae+N\xa7\b\xfa\"\xc6\xdeH\x82\xe3FAQ\xdfC\xbeZ\'\x9a\x95\xf2\xa9\x00\x17D\xa9tSXF\xe1>-\f\xb4\x9eJ\x0f\xa1u3C\xb8\xa3\xc0\xaf\xca\xe6,\xc4)\xc0\xec}dT\x00\x00B\x8dX\x9du\x9fa~\xa1\x95\"\xc6/\x19$\x80\x11\x9b(\x01\xc9\xc1\x04\x14\x05`\xf2\r8Y\n\x81\x98*\x94\x90\xb3\x95\xe9\x00t\v\xdc\x1a\xb08w&A\x9b\xff\xd5\xc7s}L*\x17\xb9/\x18\xed\xc9\x9c\x10\x99\xe4\x0f\x13\xd8(\x04\x9f<[:\x7f\xe00\xd9\xc7\x8a\xea\x99\x03\xaf\x14#U\xf5I\xab\xb3\xf7\xb4\v\xb0\x10\"+O\xed\xec\xd3\x0e\xa3\x9e\xc49fG\"a\xb0\xd5\xabe\x14Cj\xc3\xb9pn\x01\xeb\xfe^\v\xb34w\xd1\xcfx\xe0l\\\xd5\x83\xa4\x9b3jV\xba\xb25\x90\xba\x87\x0f\xc2Et\xbf\xf1\x8c\xb5\x81\x92\xdet%>\xde\xab\xcc\n\x02\xcd\xc7\xd4>\xc4\x84\x88\x0e\xa7\xfb\xc4\x80e\"\xc7\x8e\x1f\xa7\x06\xda\x87\b\xeaQ~\\\x8b_*\x10w\xf6\xf6\xf3\xdd`\xfd\xf9B\"\xe9\xa2g/\x80:'}, 0x39d, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11\xe5\x9d\xfb\xd8\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xed\x8e<\xea\v^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xae-[\\\x99\xf7\x17\xf0\xa0wI#\x9b]\b\xf8\xc5\xc0\xadyQ\xe0\xa7\xc7\xf3\xdb\x8d\xfd?\x86W%\x8al\x04\xf3-W\xad(s\xdeE\xfa\x98\xb0\xf8&y\x17\xff\x9b\xbe\x9c\rt\xa5\xac\xa2\x06\xfe)\xe0\xc1\x03\x9f\"U<\'GB]\x83\x100x.\xe7\x8f\x8b\xa3]\xe3\x18\xc5?\tO\x92\\\xc9x.\x94\xb6\xc8p\xa4\x87g\x8b\xfa\xe7E\xdf\xf2h\xbd\xa7\xfd\xec\x87<\xe4\xfbK\x8d\xcb\xa0A\x9b0D\x9a\xdf\xefrAb\xbf\xb1\n\xaf\xcf\xeaH\xa6\x7f\xaew3\xcc:\x7f\x1e\xef\x91\xbeR\x85!^\xabA\xf6', 0xffffffffffffffff}}, 0x667) 7m25.970097579s ago: executing program 46 (id=455): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)="b3185d7b"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x71096000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) openat$sysctl(0xffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x6f, 0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10c}}, 0x28040800) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000005a00000227bd7000ffe1df250000ef005874a83c4b893504c7c58eb6461ac5dd6e4de53b1b1630129165b1dd3d176562aef289b4756f2530e8f51b03a231f4a2ecda05297d4652d85cb4fe95295dad71d7747789be9c5d8a993ae566f7f664b6169368c70b064e45c28ca3"], 0x14}}, 0x40440b0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000900)={0x667, 0x7d, 0x0, {{0x500, 0x2b5, 0x0, 0x0, {0x4}, 0x0, 0x0, 0xffffffff, 0x0, 0x2e, '\x04nodZ=\xbfd\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x9beq,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1', 0x9a, 'p\x02\x00}\xfag>\xff\xeb\t\xb55\x1f\x9e\xde\x05J\x00\x00\x00\x00\x18{\x82\xd9\xb5i(\xfb\xbf\v\x00\x00+Y_\xcb\x14\xa8\xf3\x0e&\xe5&\xab\xc1\x80jB\xdez\xdc\x81\x06\xb4\x94\xe1\x8d\xb5\x7f\xc1\xac\x8d\x06\x85\x95\xf0\x1c\x1c\xbe\x05\xc2v\x16/\x81\xb4\a\xe5\r\xb6\x939g!\xf3\xed\x9c\xe2\x01\x9e\xe6\xa9F\xe3\xa5Z\x1b@\xee\xb9:\xc2\x9f7[Z\xfd\xf1\xdf\x11,\x9a\xaf\xd3i\x94\xe1e\xb3:\xf7\x86\xc54\x05\x87]7\xa0E\"\x17\x8b7P\x9es\xc7\x02_\xc4\x13\xc7\xd1*\x80\x86?p#hf\x8d', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\"(9\xe4F\x1a\xb6*\xeb\x84\x1f \x83~\x01\b\xe2\xe7HP\x1cQH', 0x185, '\xf8\xf6i\xfbqm\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00\x87\x0fFB\xe4\xc5\xde\x87\x14\xa2\xb0\x84L#E\xd8\xdfI\xd7\x00\xef\xc4R\xaf\xb5F\x9e\xaa\xd2\xc8\x85z5$F\xae+N\xa7\b\xfa\"\xc6\xdeH\x82\xe3FAQ\xdfC\xbeZ\'\x9a\x95\xf2\xa9\x00\x17D\xa9tSXF\xe1>-\f\xb4\x9eJ\x0f\xa1u3C\xb8\xa3\xc0\xaf\xca\xe6,\xc4)\xc0\xec}dT\x00\x00B\x8dX\x9du\x9fa~\xa1\x95\"\xc6/\x19$\x80\x11\x9b(\x01\xc9\xc1\x04\x14\x05`\xf2\r8Y\n\x81\x98*\x94\x90\xb3\x95\xe9\x00t\v\xdc\x1a\xb08w&A\x9b\xff\xd5\xc7s}L*\x17\xb9/\x18\xed\xc9\x9c\x10\x99\xe4\x0f\x13\xd8(\x04\x9f<[:\x7f\xe00\xd9\xc7\x8a\xea\x99\x03\xaf\x14#U\xf5I\xab\xb3\xf7\xb4\v\xb0\x10\"+O\xed\xec\xd3\x0e\xa3\x9e\xc49fG\"a\xb0\xd5\xabe\x14Cj\xc3\xb9pn\x01\xeb\xfe^\v\xb34w\xd1\xcfx\xe0l\\\xd5\x83\xa4\x9b3jV\xba\xb25\x90\xba\x87\x0f\xc2Et\xbf\xf1\x8c\xb5\x81\x92\xdet%>\xde\xab\xcc\n\x02\xcd\xc7\xd4>\xc4\x84\x88\x0e\xa7\xfb\xc4\x80e\"\xc7\x8e\x1f\xa7\x06\xda\x87\b\xeaQ~\\\x8b_*\x10w\xf6\xf6\xf3\xdd`\xfd\xf9B\"\xe9\xa2g/\x80:'}, 0x39d, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11\xe5\x9d\xfb\xd8\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xed\x8e<\xea\v^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xae-[\\\x99\xf7\x17\xf0\xa0wI#\x9b]\b\xf8\xc5\xc0\xadyQ\xe0\xa7\xc7\xf3\xdb\x8d\xfd?\x86W%\x8al\x04\xf3-W\xad(s\xdeE\xfa\x98\xb0\xf8&y\x17\xff\x9b\xbe\x9c\rt\xa5\xac\xa2\x06\xfe)\xe0\xc1\x03\x9f\"U<\'GB]\x83\x100x.\xe7\x8f\x8b\xa3]\xe3\x18\xc5?\tO\x92\\\xc9x.\x94\xb6\xc8p\xa4\x87g\x8b\xfa\xe7E\xdf\xf2h\xbd\xa7\xfd\xec\x87<\xe4\xfbK\x8d\xcb\xa0A\x9b0D\x9a\xdf\xefrAb\xbf\xb1\n\xaf\xcf\xeaH\xa6\x7f\xaew3\xcc:\x7f\x1e\xef\x91\xbeR\x85!^\xabA\xf6', 0xffffffffffffffff}}, 0x667) 6m9.434670247s ago: executing program 7 (id=462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, 0x0, 0xc114) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) kexec_load(0x2, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="4c2a9e5fdbbd6e10d17cae3b91d35d734a99bc6074fb67a79fbdcb93ec0c7a03c7d6f538e40ee641013705c91365cb8a8e2da00766d6417883cab2493185e9a69c488747e20a6c377387c3223f906091c88dca43d7a411499dd0a227a1cd89882e9ac2206832b884c8684edc1d19693da78b49aa82d1749b89889d8bbc950d8ba4ef9d694141a5f2aa8a8c3ebe9f0d434ee5ec3354d99ff87422614e48c8d1b9f78f63e6203ad18ea2bb0721b3084e3dcd6ce355313c00", 0xb7, 0x3, 0x2}], 0x80000) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) 6m1.278045994s ago: executing program 7 (id=466): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0xf5b, 0xc2, 0x4}) syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) socket(0x11, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) accept4$alg(r3, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 5m57.507292381s ago: executing program 7 (id=468): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x62, 0x0, 0x0) syz_usb_disconnect(r1) 5m52.963708834s ago: executing program 7 (id=472): mkdir(&(0x7f0000000400)='./file0\x00', 0x45) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000400)='.log\x00', 0x80, 0x2b) ioctl$TCFLSH(r0, 0x540b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 5m48.233863738s ago: executing program 7 (id=476): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0xf5b, 0xc2, 0x4}) syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) socket(0x11, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) accept4$alg(r3, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 5m43.085994235s ago: executing program 7 (id=478): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 5m32.187820928s ago: executing program 47 (id=475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, 0x0, 0xc114) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 5m26.865415323s ago: executing program 48 (id=478): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 4m31.471070791s ago: executing program 5 (id=512): mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0xc044) syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') socket$inet_sctp(0x2, 0x5, 0x84) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket(0xa, 0x3, 0x3a) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000040)={{@local, 0x28}, @hyper, 0xc, 0x7, 0x8889, 0x2, 0x0, 0x8000, 0x80000000}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m30.185921595s ago: executing program 5 (id=513): r0 = syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x7f3d, 0xc00, 0x6, 0x42f6}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x10}) io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0) 4m29.185358033s ago: executing program 5 (id=514): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0xf5b, 0xc2, 0x4}) syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) socket(0x11, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) accept4$alg(r3, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 4m27.720184139s ago: executing program 5 (id=515): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setrlimit(0x7, &(0x7f0000000400)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 4m27.148475785s ago: executing program 5 (id=516): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x42400) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700ff"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) 4m26.220905786s ago: executing program 5 (id=517): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, 0x0, 0xc114) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) kexec_load(0x2, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="4c2a9e5fdbbd6e10d17cae3b91d35d734a99bc6074fb67a79fbdcb93ec0c7a03c7d6f538e40ee641013705c91365cb8a8e2da00766d6417883cab2493185e9a69c488747e20a6c377387c3223f906091c88dca43d7a411499dd0a227a1cd89882e9ac2206832b884c8684edc1d19693da78b49aa82d1749b89889d8bbc950d8ba4ef9d694141a5f2aa8a8c3ebe9f0d434ee5ec3354d99ff87422614e48c8d1b9f78f63e6203ad18ea2bb0721b3084e3dcd6ce355313c00", 0xb7, 0x3, 0x2}], 0x80000) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) 4m10.731137463s ago: executing program 49 (id=517): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, 0x0, 0xc114) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) kexec_load(0x2, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="4c2a9e5fdbbd6e10d17cae3b91d35d734a99bc6074fb67a79fbdcb93ec0c7a03c7d6f538e40ee641013705c91365cb8a8e2da00766d6417883cab2493185e9a69c488747e20a6c377387c3223f906091c88dca43d7a411499dd0a227a1cd89882e9ac2206832b884c8684edc1d19693da78b49aa82d1749b89889d8bbc950d8ba4ef9d694141a5f2aa8a8c3ebe9f0d434ee5ec3354d99ff87422614e48c8d1b9f78f63e6203ad18ea2bb0721b3084e3dcd6ce355313c00", 0xb7, 0x3, 0x2}], 0x80000) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) 3m58.672831737s ago: executing program 6 (id=450): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x3, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000000)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xd2, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x404) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x3e4, 0xffffffff, 0xe4, 0x0, 0x254, 0xfeffffff, 0xffffffff, 0x31c, 0x31c, 0x31c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'rose0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x130, 0x170, 0x0, {}, [@common=@srh1={{0x8c}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, @local, [0xff000000, 0xff000000, 0x0, 0x100], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x440) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) listen(r6, 0x3) 3m57.657163535s ago: executing program 6 (id=519): mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0xc044) syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') socket$inet_sctp(0x2, 0x5, 0x84) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket(0xa, 0x3, 0x3a) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000040)={{@local, 0x28}, @hyper, 0xc, 0x7, 0x8889, 0x2, 0x0, 0x8000, 0x80000000}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m54.989165463s ago: executing program 6 (id=520): r0 = syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x7f3d, 0xc00, 0x6, 0x42f6}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x10}) io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0) 3m54.516872917s ago: executing program 6 (id=521): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0xf5b, 0xc2, 0x4}) syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) socket(0x11, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) accept4$alg(r3, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 3m53.287570593s ago: executing program 6 (id=522): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setrlimit(0x7, &(0x7f0000000400)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 3m52.738341217s ago: executing program 6 (id=524): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x4, 0x400}, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0005e6858f0c2a116e0000000000000000000000520aec604265471f68d4a48f46cd44a36721d9cf690910b25275010ed95cc17c09ed73b0065d4fad6e08f6f6e3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) unshare(0x2c020400) fsmount(r6, 0x0, 0x0) dup(0xffffffffffffffff) 3m35.88089806s ago: executing program 50 (id=524): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x4, 0x400}, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0005e6858f0c2a116e0000000000000000000000520aec604265471f68d4a48f46cd44a36721d9cf690910b25275010ed95cc17c09ed73b0065d4fad6e08f6f6e3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) unshare(0x2c020400) fsmount(r6, 0x0, 0x0) dup(0xffffffffffffffff) 1m50.193857697s ago: executing program 8 (id=592): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000000000105804135000000000000109022400010000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) futex_waitv(&(0x7f0000001e40)=[{0x1edf, &(0x7f0000000440)=0x7, 0x2}], 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) 1m45.207286792s ago: executing program 8 (id=593): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000000)={0x4c58, 0x8001, 0x200}) tkill(r0, 0x7) 1m44.366481781s ago: executing program 8 (id=594): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{0x100000, 0xf000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x5, 0x6, 0x1}, {0x8000000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x5, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x7, 0x4, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xeeef0000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x5, 0x9}, {0x100002, 0x3000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0x12, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x12, 0x44, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m43.523654541s ago: executing program 8 (id=595): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setrlimit(0x7, &(0x7f0000000400)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 1m42.629607234s ago: executing program 8 (id=596): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x7f3d, 0xc00, 0x6, 0x42f6}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x10}) io_uring_enter(r1, 0x742f, 0x77ae, 0x1, 0x0, 0x0) 1m41.889764242s ago: executing program 8 (id=597): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f000004ca80)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x1, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r1, &(0x7f00000004c0)=""/170, 0xaa, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000001040)}], 0x1, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 1m26.520121156s ago: executing program 51 (id=597): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f000004ca80)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x1, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r1, &(0x7f00000004c0)=""/170, 0xaa, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000001040)}], 0x1, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 1m12.235347695s ago: executing program 1 (id=602): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setrlimit(0x7, &(0x7f0000000400)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 1m11.635801145s ago: executing program 1 (id=603): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x7f3d, 0xc00, 0x6, 0x42f6}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x10}) io_uring_enter(r1, 0x742f, 0x77ae, 0x1, 0x0, 0x0) 1m11.086288148s ago: executing program 1 (id=604): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000001c140)=@newtfilter={0x3c, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xdd}]}}]}, 0x3c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1m10.264947589s ago: executing program 1 (id=605): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x4f27, 0x5, 0x1, 0x0, 0x100067, 0xcc7, 0x3, 0x7, 0xa, 0x4, 0x1002, 0x5, 0x8, 0x1, 0x6, 0x140000, 0x2000001, 0x1a44b, 0x5, 0x40100003, 0x89, 0x2, 0xf27, 0x20001e58, 0x6, 0xe69, 0x191fa504, 0x8, 0x5, 0x3, 0xfffffff8]}) 1m8.627732308s ago: executing program 1 (id=606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, 0x0, 0x24000840) 1m8.064390397s ago: executing program 1 (id=607): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000200), 0x2, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 52.514184395s ago: executing program 52 (id=607): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000200), 0x2, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 5.09958758s ago: executing program 2 (id=612): openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x4f27, 0x5, 0x1, 0x0, 0x100067, 0xcc7, 0x3, 0x7, 0xa, 0x4, 0x1002, 0x5, 0x8, 0x1, 0x6, 0x140000, 0x2000001, 0x1a44b, 0x5, 0x40100003, 0x89, 0x2, 0xf27, 0x20001e58, 0x6, 0xe69, 0x191fa504, 0x8, 0x5, 0x3, 0xfffffff8]}) 4.76328557s ago: executing program 2 (id=613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 4.385167817s ago: executing program 2 (id=614): recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1}, 0x5}], 0x1, 0x40010000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0x5, 0x1fc, 0x0, 0x5, 0x7, 0xe2, 0x7, 0x4]}}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f00000003c0)={0x3, 0x0, 0x0, &(0x7f0000000200), &(0x7f00000002c0), 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.846029273s ago: executing program 2 (id=615): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read(r1, &(0x7f0000000880)=""/4096, 0x1000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a3100"], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r7 = socket$inet6(0xa, 0x2, 0x3a) getsockopt$inet6_int(r7, 0x29, 0x18, 0x0, &(0x7f0000000280)) readahead(r0, 0xc09, 0x2) 344.383272ms ago: executing program 2 (id=616): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) writev(r1, &(0x7f0000001b40)=[{&(0x7f0000000480)="9586a26e2862e86c8e4f12d8f826203e05e85cc88a2bd69ed105eca14baab508dcccd166038ec1c384e8040b4aa73f0e07daea625167eee8783e6cad631f591d8c77b66f89c008d832f67bc76848d4571520aab4d7bc344489cc57411bfabf92f76265ec1f460bff333c36d20572ab6cac379300ce9660381b7d", 0x7a}, {0x0}], 0x2) 0s ago: executing program 2 (id=617): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000001c0)={0x4, 0xb, 0x2, {0x2, @pix={0x2, 0x0, 0x34325842, 0x8, 0x8, 0x2, 0x7, 0xdfc, 0x1, 0x4, 0x0, 0x2}}, 0x7c}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ad", 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0xa1, 0x301, 0x270bd24, 0x25dfdbfd}, 0x14}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x4, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x88, 0x1, 0x1, 0x0, 0x8, 0x1, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): th0_vlan: left promiscuous mode [ 1191.229814][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1191.287914][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1191.402904][ T5780] Bluetooth: hci0: command tx timeout [ 1192.030857][T11469] team0: Port device team_slave_0 added [ 1192.146351][T11355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1192.187062][T11469] team0: Port device team_slave_1 added [ 1192.416097][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1192.423070][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1192.588112][T11469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1192.610888][T11469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1192.680500][T11469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1192.717256][T11469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1192.726723][T11469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1192.754633][T11469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1192.793671][ T7888] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.804083][ T7888] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.980764][ T5923] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.159034][ T7853] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.480748][ T5780] Bluetooth: hci0: command tx timeout [ 1193.704256][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.797874][T11469] hsr_slave_0: entered promiscuous mode [ 1193.808841][T11469] hsr_slave_1: entered promiscuous mode [ 1193.823167][T11469] debugfs: 'hsr0' already exists in 'hsr' [ 1193.829116][T11469] Cannot create hsr debugfs directory [ 1194.052741][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.457429][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.560717][T11521] chnl_net:caif_netlink_parms(): no params data found [ 1194.702067][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.094698][T11437] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1195.177963][T11437] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1195.260631][ T7888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.269454][ T7888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.380472][T11437] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1195.568004][ T5780] Bluetooth: hci0: command tx timeout [ 1195.678444][T11437] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1196.389530][ T7888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1196.406477][ T7888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1196.526934][T11521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.543513][T11521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.561478][T11521] bridge_slave_0: entered allmulticast mode [ 1196.572907][T11521] bridge_slave_0: entered promiscuous mode [ 1196.700707][T11521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.731266][T11521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.739184][T11521] bridge_slave_1: entered allmulticast mode [ 1196.780915][T11521] bridge_slave_1: entered promiscuous mode [ 1197.975993][ T12] bond0 (unregistering): Released all slaves [ 1198.243707][T11521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1198.571984][T11521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1198.921199][ T29] audit: type=1326 audit(1775640111.548:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11629 comm="syz.6.519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 1198.976249][T11521] team0: Port device team_slave_0 added [ 1199.068251][ T29] audit: type=1326 audit(1775640111.698:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11629 comm="syz.6.519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 1199.118753][ T29] audit: type=1326 audit(1775640111.738:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11629 comm="syz.6.519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f6c code=0x7ffc0000 [ 1199.258474][T11521] team0: Port device team_slave_1 added [ 1199.490752][T11521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1199.498168][T11521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1199.528731][T11521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1199.559874][ T12] hsr_slave_0: left promiscuous mode [ 1199.568137][ T12] hsr_slave_1: left promiscuous mode [ 1199.589664][ T12] veth1_macvtap: left promiscuous mode [ 1199.595719][ T12] veth0_macvtap: left promiscuous mode [ 1199.602171][ T12] veth1_vlan: left promiscuous mode [ 1199.607945][ T12] veth0_vlan: left promiscuous mode [ 1200.519622][T11521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.540975][T11521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.626334][T11521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1200.835779][ T5923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1200.860532][ T5923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.296919][T11521] hsr_slave_0: entered promiscuous mode [ 1201.306191][T11521] hsr_slave_1: entered promiscuous mode [ 1201.315953][T11521] debugfs: 'hsr0' already exists in 'hsr' [ 1201.322570][T11521] Cannot create hsr debugfs directory [ 1201.687237][ T6039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.727593][ T6039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.775109][T11469] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1201.814089][T11469] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1201.916716][T11469] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1201.969298][T11469] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1202.879088][T11437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1203.346225][T11437] 8021q: adding VLAN 0 to HW filter on device team0 [ 1203.722183][ T7865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.729884][ T7865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1203.778519][ T7865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.786405][ T7865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1205.187908][T11658] warning: `syz.8.525' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1206.409594][T11469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1206.744196][T11521] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1206.975503][T11521] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1207.132456][T11521] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1207.377682][T11469] 8021q: adding VLAN 0 to HW filter on device team0 [ 1207.414235][T11521] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1207.728097][ T6216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.735999][ T6216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1208.033665][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.041571][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1210.356498][ T29] audit: type=1326 audit(1775640122.988:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.8.526" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 1210.578024][ T29] audit: type=1326 audit(1775640122.988:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.8.526" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54f6c code=0x7ffc0000 [ 1210.632395][T11437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1211.789004][T11521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1212.343613][T11521] 8021q: adding VLAN 0 to HW filter on device team0 [ 1212.665387][ T6216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.673100][ T6216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1212.763130][ T7785] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1212.979651][ T7785] usb 9-1: Using ep0 maxpacket: 8 [ 1213.069307][ T7785] usb 9-1: config 0 has no interfaces? [ 1213.151461][ T7785] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1213.176506][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.184231][ T6039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1213.230491][ T7785] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.279798][ T7785] usb 9-1: Product: syz [ 1213.308296][ T7785] usb 9-1: Manufacturer: syz [ 1213.368348][ T7785] usb 9-1: SerialNumber: syz [ 1213.443550][ T7785] usb 9-1: config 0 descriptor?? [ 1213.799730][T11437] veth0_vlan: entered promiscuous mode [ 1214.498902][T11437] veth1_vlan: entered promiscuous mode [ 1215.008163][T11469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1215.277601][ T7785] usb 9-1: USB disconnect, device number 4 [ 1216.619901][T11437] veth0_macvtap: entered promiscuous mode [ 1217.020896][T11437] veth1_macvtap: entered promiscuous mode [ 1217.215446][T11469] veth0_vlan: entered promiscuous mode [ 1217.798028][T11437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1217.905485][T11469] veth1_vlan: entered promiscuous mode [ 1218.406045][T11437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1218.744941][ T7853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.796718][ T7853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.858765][ T7853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.871611][ T7853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.083700][T11469] veth0_macvtap: entered promiscuous mode [ 1219.629218][T11469] veth1_macvtap: entered promiscuous mode [ 1220.344095][T11521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1220.503315][T11469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1220.705204][T11469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1221.302647][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1221.312891][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1221.324490][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1221.344479][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1221.356936][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1222.614042][T11719] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1223.016630][ T7865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.140604][ T7865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.329468][ T7865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.391018][ T7865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.551366][ T49] Bluetooth: hci4: command tx timeout [ 1225.460993][ T7785] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1225.561502][ T49] Bluetooth: hci4: command tx timeout [ 1225.568043][T11521] veth0_vlan: entered promiscuous mode [ 1225.660343][ T7785] usb 9-1: Using ep0 maxpacket: 32 [ 1225.693984][ T7785] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1225.731277][ T7785] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1225.751743][ T7785] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1225.792696][ T7785] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1225.864387][ T7785] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1225.910375][ T7785] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1225.966947][ T7785] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1226.022975][ T7785] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.082025][ T7785] usb 9-1: config 0 descriptor?? [ 1226.418384][ T7888] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.471566][ T7785] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1226.561665][ T7785] usb 9-1: USB disconnect, device number 5 [ 1226.586952][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1226.618141][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1226.634967][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1226.645017][ T7785] usblp0: removed [ 1226.696654][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1226.713317][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1226.897678][ T7888] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.037445][T11521] veth1_vlan: entered promiscuous mode [ 1227.135390][ T7785] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1227.229748][ T7888] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.350948][ T7785] usb 9-1: Using ep0 maxpacket: 32 [ 1227.394472][ T7785] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1227.426672][ T7785] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1227.448414][ T7785] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1227.461808][ T7785] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1227.492761][ T7785] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1227.523957][ T7785] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1227.555890][ T7888] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.575586][ T7785] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1227.586565][ T7785] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.605336][ T7785] usb 9-1: config 0 descriptor?? [ 1227.639069][T11714] chnl_net:caif_netlink_parms(): no params data found [ 1227.652593][ T49] Bluetooth: hci4: command tx timeout [ 1227.839770][ T7785] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1228.079672][ T7785] usb 9-1: USB disconnect, device number 6 [ 1228.145490][ T7785] usblp0: removed [ 1228.763161][ T49] Bluetooth: hci1: command tx timeout [ 1229.436985][ T7888] bridge_slave_1: left allmulticast mode [ 1229.472202][ T7888] bridge_slave_1: left promiscuous mode [ 1229.479002][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.575438][ T7888] bridge_slave_0: left allmulticast mode [ 1229.602166][ T7888] bridge_slave_0: left promiscuous mode [ 1229.609080][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.724011][ T49] Bluetooth: hci4: command tx timeout [ 1230.846999][ T49] Bluetooth: hci1: command tx timeout [ 1231.116092][ T5780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1231.151231][ T5780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1231.171839][ T5780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1231.203349][ T5780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1231.218708][ T5780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1231.350773][ T7888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1231.420904][ T7888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1231.492070][ T7888] bond0 (unregistering): Released all slaves [ 1231.828491][T11521] veth0_macvtap: entered promiscuous mode [ 1232.512103][T11521] veth1_macvtap: entered promiscuous mode [ 1232.836059][T11714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.880912][T11714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.888860][T11714] bridge_slave_0: entered allmulticast mode [ 1232.920383][ T49] Bluetooth: hci1: command tx timeout [ 1232.934365][T11714] bridge_slave_0: entered promiscuous mode [ 1233.210409][T11714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.293551][T11714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.327171][T11714] bridge_slave_1: entered allmulticast mode [ 1233.333214][ T49] Bluetooth: hci5: command tx timeout [ 1233.377113][T11714] bridge_slave_1: entered promiscuous mode [ 1233.842053][ T7888] hsr_slave_0: left promiscuous mode [ 1233.861668][ T7888] hsr_slave_1: left promiscuous mode [ 1233.888482][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1233.920318][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1233.986031][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1234.025914][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1234.155466][ T7888] veth1_macvtap: left promiscuous mode [ 1234.170701][ T7888] veth0_macvtap: left promiscuous mode [ 1234.176676][ T7888] veth1_vlan: left promiscuous mode [ 1234.230826][ T7888] veth0_vlan: left promiscuous mode [ 1235.015401][ T5780] Bluetooth: hci1: command tx timeout [ 1235.400513][ T5780] Bluetooth: hci5: command tx timeout [ 1236.171891][ T7888] team0 (unregistering): Port device team_slave_1 removed [ 1236.274801][ T7888] team0 (unregistering): Port device team_slave_0 removed [ 1237.298108][T11714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.440935][T11743] chnl_net:caif_netlink_parms(): no params data found [ 1237.480953][ T5780] Bluetooth: hci5: command tx timeout [ 1237.588988][T11714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.686852][T11810] vivid-002: disconnect [ 1237.713362][T11808] vivid-002: reconnect [ 1238.279068][T11521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1238.326544][T11714] team0: Port device team_slave_0 added [ 1238.387383][T11714] team0: Port device team_slave_1 added [ 1238.773212][T11714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1238.800273][T11714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1238.907080][T11714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1238.966872][T11521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1239.005617][T11714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.019311][T11714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1239.056937][T11714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.433529][ T7888] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.525295][ T6216] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.545499][ T6216] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.567840][ T5780] Bluetooth: hci5: command tx timeout [ 1239.736519][ T7888] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.791041][ T6216] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.016192][ T7888] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.064837][ T6216] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.341005][T11714] hsr_slave_0: entered promiscuous mode [ 1240.372215][T11714] hsr_slave_1: entered promiscuous mode [ 1240.487865][ T7888] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.513519][T11743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.523638][T11743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.532725][T11743] bridge_slave_0: entered allmulticast mode [ 1240.558177][T11743] bridge_slave_0: entered promiscuous mode [ 1240.630622][T10744] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1240.639225][T11743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.665820][T11743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.693051][T11743] bridge_slave_1: entered allmulticast mode [ 1240.720757][T11743] bridge_slave_1: entered promiscuous mode [ 1240.820355][T10744] usb 9-1: Using ep0 maxpacket: 32 [ 1240.848208][T10744] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1240.876639][T10744] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1240.887308][T10744] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1240.915294][T10744] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1240.928897][T10744] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1240.940662][T10744] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1240.966076][T10744] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1240.986965][T10744] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.009346][T10744] usb 9-1: config 0 descriptor?? [ 1241.295412][T10744] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1241.368028][T10744] usb 9-1: USB disconnect, device number 7 [ 1241.395031][T10744] usblp0: removed [ 1241.587676][T11743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1241.759373][T11778] chnl_net:caif_netlink_parms(): no params data found [ 1241.845438][T11743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1241.855617][T10744] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1242.010695][T10744] usb 9-1: Using ep0 maxpacket: 32 [ 1242.053925][T10744] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1242.080578][T10744] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1242.089577][T10744] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1242.104698][T10744] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1242.117015][T10744] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1242.153975][T10744] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1242.201338][T10744] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1242.237100][T10744] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.284853][T10744] usb 9-1: config 0 descriptor?? [ 1242.484456][T11743] team0: Port device team_slave_0 added [ 1242.557519][T10744] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1242.741138][ T7785] usb 9-1: USB disconnect, device number 8 [ 1242.777253][ T7785] usblp0: removed [ 1242.893363][T11743] team0: Port device team_slave_1 added [ 1243.386020][ T7888] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.569194][T11743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1243.578310][T11743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.606776][T11743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1243.813063][ T7888] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.943342][T11743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1243.963349][T11743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1244.030415][T11743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1244.426511][ T7888] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.715221][T11778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.743291][T11778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.761079][T11778] bridge_slave_0: entered allmulticast mode [ 1244.778243][T11778] bridge_slave_0: entered promiscuous mode [ 1244.893144][ T7888] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.063713][T11778] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.100459][T11778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.108423][T11778] bridge_slave_1: entered allmulticast mode [ 1245.144609][T11778] bridge_slave_1: entered promiscuous mode [ 1246.261849][T11778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1246.343847][T11778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1246.499002][T11743] hsr_slave_0: entered promiscuous mode [ 1246.635799][T11743] hsr_slave_1: entered promiscuous mode [ 1246.661092][T11896] vivid-002: disconnect [ 1246.683215][T11743] debugfs: 'hsr0' already exists in 'hsr' [ 1246.700219][T11743] Cannot create hsr debugfs directory [ 1246.753434][T11894] vivid-002: reconnect [ 1247.366593][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1247.382091][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1247.391984][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1247.441502][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1247.475291][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1247.544248][T11778] team0: Port device team_slave_0 added [ 1247.634807][T11778] team0: Port device team_slave_1 added [ 1248.098492][ T7888] bridge_slave_1: left allmulticast mode [ 1248.111722][ T7888] bridge_slave_1: left promiscuous mode [ 1248.118515][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.150311][ T7888] bridge_slave_0: left allmulticast mode [ 1248.156210][ T7888] bridge_slave_0: left promiscuous mode [ 1248.181577][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.197131][T11904] loop6: detected capacity change from 0 to 2640 [ 1248.212328][T11904] Buffer I/O error on dev loop6, logical block 0, async page read [ 1248.228712][T11904] Buffer I/O error on dev loop6, logical block 0, async page read [ 1248.232233][ T7888] bridge_slave_1: left allmulticast mode [ 1248.239072][T11904] Buffer I/O error on dev loop6, logical block 0, async page read [ 1248.243648][ T7888] bridge_slave_1: left promiscuous mode [ 1248.253194][T11904] Buffer I/O error on dev loop6, logical block 0, async page read [ 1248.266526][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.290545][T11904] Buffer I/O error on dev loop6, logical block 0, async page read [ 1248.311080][ T7888] bridge_slave_0: left allmulticast mode [ 1248.317057][ T7888] bridge_slave_0: left promiscuous mode [ 1248.324063][T11904] Buffer I/O error on dev loop6, logical block 0, async page read [ 1248.341950][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.374247][T11904] Buffer I/O error on dev loop6, logical block 0, async page read [ 1248.420464][T11904] Buffer I/O error on dev loop6, logical block 0, async page read [ 1248.460462][T11904] ldm_validate_partition_table(): Disk read failed. [ 1248.488513][T11904] Buffer I/O error on dev loop6, logical block 0, async page read [ 1248.538176][T11904] Buffer I/O error on dev loop6, logical block 0, async page read [ 1248.576647][T11904] Dev loop6: unable to read RDB block 0 [ 1248.626392][T11904] loop6: unable to read partition table [ 1248.651260][T11904] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³è) failed (rc=-5) [ 1249.292213][ T7888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1249.330937][ T7888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1249.357115][ T7888] bond0 (unregistering): Released all slaves [ 1249.561059][ T49] Bluetooth: hci2: command tx timeout [ 1249.777575][ T7888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1249.832364][ T7888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1249.859174][ T7888] bond0 (unregistering): Released all slaves [ 1250.319782][T11778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1250.327823][T11778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.357900][T11778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1250.480423][T10744] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1250.494378][T11778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1250.504729][T11778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.543060][T11778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1250.641649][T10744] usb 9-1: Using ep0 maxpacket: 32 [ 1250.686610][T10744] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1250.696534][T10744] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1250.720305][T10744] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1250.729584][T10744] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1250.741593][T10744] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1250.751831][T10744] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1250.774347][T10744] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1250.787168][T10744] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.803265][T10744] usb 9-1: config 0 descriptor?? [ 1250.986351][ T7888] hsr_slave_0: left promiscuous mode [ 1250.999021][ T7888] hsr_slave_1: left promiscuous mode [ 1251.013934][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1251.024863][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1251.059704][T10744] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1251.078843][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1251.087311][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1251.112719][T10744] usb 9-1: USB disconnect, device number 9 [ 1251.141799][T10744] usblp0: removed [ 1251.199387][ T7888] hsr_slave_0: left promiscuous mode [ 1251.209572][ T7888] hsr_slave_1: left promiscuous mode [ 1251.219640][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1251.236744][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1251.265604][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1251.284500][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1251.353836][ T7888] veth1_macvtap: left promiscuous mode [ 1251.359631][ T7888] veth0_macvtap: left promiscuous mode [ 1251.367420][ T7888] veth1_vlan: left promiscuous mode [ 1251.386781][ T7888] veth0_vlan: left promiscuous mode [ 1251.395804][ T7888] veth1_macvtap: left promiscuous mode [ 1251.408870][ T7888] veth0_macvtap: left promiscuous mode [ 1251.415501][ T7888] veth1_vlan: left promiscuous mode [ 1251.422868][ T7888] veth0_vlan: left promiscuous mode [ 1251.601251][T10744] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1251.643204][ T49] Bluetooth: hci2: command tx timeout [ 1251.771401][T10744] usb 9-1: Using ep0 maxpacket: 32 [ 1251.789612][T10744] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1251.803481][T10744] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1251.830650][T10744] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1251.850406][T10744] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1251.876309][T10744] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1251.911690][T10744] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1251.950896][T10744] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1251.970351][T10744] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.995553][T10744] usb 9-1: config 0 descriptor?? [ 1252.239483][T10744] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1252.450726][T10744] usb 9-1: USB disconnect, device number 10 [ 1252.494954][T10744] usblp0: removed [ 1252.846558][ T7888] team0 (unregistering): Port device team_slave_1 removed [ 1252.885037][ T7888] team0 (unregistering): Port device team_slave_0 removed [ 1253.720831][ T49] Bluetooth: hci2: command tx timeout [ 1253.831200][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1253.838188][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1254.288062][ T7888] team0 (unregistering): Port device team_slave_1 removed [ 1254.376707][ T7888] team0 (unregistering): Port device team_slave_0 removed [ 1255.269012][T11778] hsr_slave_0: entered promiscuous mode [ 1255.294443][T11778] hsr_slave_1: entered promiscuous mode [ 1255.306727][T11778] debugfs: 'hsr0' already exists in 'hsr' [ 1255.351299][T11778] Cannot create hsr debugfs directory [ 1255.804039][ T49] Bluetooth: hci2: command tx timeout [ 1255.834710][T11714] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1255.924576][T11714] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1256.168391][T11714] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1256.355055][T11714] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1257.938017][ T7888] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.238268][T11949] vivid-002: disconnect [ 1258.308592][T11946] vivid-002: reconnect [ 1258.337168][ T7888] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.639627][ T7888] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.943260][ T7888] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.309028][T11954] syzkaller0: entered promiscuous mode [ 1259.315804][T11954] syzkaller0: entered allmulticast mode [ 1259.523776][T11898] chnl_net:caif_netlink_parms(): no params data found [ 1259.697623][T11743] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1260.358488][T11743] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1260.604820][T11743] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1260.732020][T11743] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1261.009611][ T7888] bridge_slave_1: left allmulticast mode [ 1261.060434][ T7888] bridge_slave_1: left promiscuous mode [ 1261.067261][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.099268][ T7888] bridge_slave_0: left allmulticast mode [ 1261.109319][ T7888] bridge_slave_0: left promiscuous mode [ 1261.122318][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.828740][ T7888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1261.851049][ T7888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1261.865330][ T7888] bond0 (unregistering): Released all slaves [ 1262.019668][T11714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.295754][ T7888] hsr_slave_0: left promiscuous mode [ 1262.370422][ T7888] hsr_slave_1: left promiscuous mode [ 1262.379039][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1262.400229][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.426592][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1262.451161][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.519247][ T7888] veth1_macvtap: left promiscuous mode [ 1262.537054][ T7888] veth0_macvtap: left promiscuous mode [ 1262.556142][ T7888] veth1_vlan: left promiscuous mode [ 1262.568116][ T7888] veth0_vlan: left promiscuous mode [ 1264.181584][T11996] sd 0:0:1:0: PR command failed: 1026 [ 1264.199762][T11996] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1264.220695][T11996] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1264.736299][ T7888] team0 (unregistering): Port device team_slave_1 removed [ 1264.826005][ T7888] team0 (unregistering): Port device team_slave_0 removed [ 1265.761114][T11898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.768738][T11898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.791907][T11898] bridge_slave_0: entered allmulticast mode [ 1265.830589][T11898] bridge_slave_0: entered promiscuous mode [ 1265.929880][T11898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.939620][T11898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.958715][T11898] bridge_slave_1: entered allmulticast mode [ 1265.974358][T11898] bridge_slave_1: entered promiscuous mode [ 1266.015098][T11714] 8021q: adding VLAN 0 to HW filter on device team0 [ 1266.074251][T12012] vivid-002: disconnect [ 1266.113482][T12009] vivid-002: reconnect [ 1266.428468][T11898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1266.505159][T11898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1266.574728][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.582477][ T6039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.832645][ T7867] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.840494][ T7867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.870474][T11778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1266.983918][T11778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1267.056809][T12019] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 1267.101793][T11898] team0: Port device team_slave_0 added [ 1267.108255][T11778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1267.257564][T11898] team0: Port device team_slave_1 added [ 1267.452881][T11778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1267.743788][T11898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1267.760162][T11898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1267.830450][T11898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1267.968551][T11898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1267.987744][T11898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1268.051970][T11898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1268.573047][T11898] hsr_slave_0: entered promiscuous mode [ 1268.596579][T11898] hsr_slave_1: entered promiscuous mode [ 1268.609778][T11898] debugfs: 'hsr0' already exists in 'hsr' [ 1268.618116][T11898] Cannot create hsr debugfs directory [ 1270.834963][T11743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1271.250263][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 1271.383129][T11743] 8021q: adding VLAN 0 to HW filter on device team0 [ 1271.626159][ T7853] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.633733][ T7853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1271.699549][ T7853] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.707185][ T7853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1272.396481][T11714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1272.462516][T11778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1272.836565][T11898] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1273.013713][T11898] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1273.089863][T11898] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1273.244300][T11778] 8021q: adding VLAN 0 to HW filter on device team0 [ 1273.290261][T11898] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1273.556024][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.563776][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.812424][ T7865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.819893][ T7865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1276.084963][T11898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1276.329911][T11743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1276.568777][T11898] 8021q: adding VLAN 0 to HW filter on device team0 [ 1276.848137][ T6216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.856009][ T6216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1277.073757][T11714] veth0_vlan: entered promiscuous mode [ 1277.212148][ T7853] bridge0: port 2(bridge_slave_1) entered blocking state [ 1277.219762][ T7853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1277.692450][T11714] veth1_vlan: entered promiscuous mode [ 1277.943102][T11778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.058976][T11743] veth0_vlan: entered promiscuous mode [ 1279.210624][T11743] veth1_vlan: entered promiscuous mode [ 1279.695846][T11714] veth0_macvtap: entered promiscuous mode [ 1279.940362][T11743] veth0_macvtap: entered promiscuous mode [ 1280.062676][T11714] veth1_macvtap: entered promiscuous mode [ 1280.091576][T11743] veth1_macvtap: entered promiscuous mode [ 1280.703126][T11778] veth0_vlan: entered promiscuous mode [ 1280.782876][T11743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1281.532965][T11743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1281.639059][T11778] veth1_vlan: entered promiscuous mode [ 1282.004983][ T6039] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.040333][ T6039] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.318545][ T6039] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.366945][ T6039] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.441393][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1282.481968][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1282.509329][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1282.542280][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1282.560459][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1282.727627][T11898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1283.847921][T11778] veth0_macvtap: entered promiscuous mode [ 1284.230055][T11778] veth1_macvtap: entered promiscuous mode [ 1284.601672][ T49] Bluetooth: hci0: command tx timeout [ 1285.304414][T11778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1285.717498][T11778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1286.621966][T11898] veth0_vlan: entered promiscuous mode [ 1286.681765][ T49] Bluetooth: hci0: command tx timeout [ 1286.765464][ T5923] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.783549][ T5923] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.919091][ T7853] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.991943][ T7888] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.240453][T11898] veth1_vlan: entered promiscuous mode [ 1287.661098][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1287.673881][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1287.684210][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1287.713901][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1287.745413][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1287.957909][T12112] chnl_net:caif_netlink_parms(): no params data found [ 1288.763258][ T49] Bluetooth: hci0: command tx timeout [ 1288.866647][ T6039] bridge_slave_1: left allmulticast mode [ 1288.930358][ T6039] bridge_slave_1: left promiscuous mode [ 1288.937256][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.102470][ T6039] bridge_slave_0: left allmulticast mode [ 1289.108485][ T6039] bridge_slave_0: left promiscuous mode [ 1289.172854][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.802103][ T49] Bluetooth: hci4: command tx timeout [ 1290.484302][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1290.525566][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1290.571584][ T6039] bond0 (unregistering): Released all slaves [ 1290.840473][ T49] Bluetooth: hci0: command tx timeout [ 1291.442187][ T6039] hsr_slave_0: left promiscuous mode [ 1291.487506][ T6039] hsr_slave_1: left promiscuous mode [ 1291.514115][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1291.573442][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1291.660456][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1291.680734][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1291.697294][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1291.707077][ T6039] veth1_macvtap: left promiscuous mode [ 1291.729050][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1291.750592][ T6039] veth0_macvtap: left promiscuous mode [ 1291.757118][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1291.766186][ T6039] veth1_vlan: left promiscuous mode [ 1291.778253][T12170] vivid-002: disconnect [ 1291.783113][ T6039] veth0_vlan: left promiscuous mode [ 1291.847054][T12165] vivid-002: reconnect [ 1291.880374][ T49] Bluetooth: hci4: command tx timeout [ 1293.907684][ T49] Bluetooth: hci1: command tx timeout [ 1293.960260][ T49] Bluetooth: hci4: command tx timeout [ 1295.972204][ T49] Bluetooth: hci1: command tx timeout [ 1296.059335][ T49] Bluetooth: hci4: command tx timeout [ 1296.907377][ T6039] team0 (unregistering): Port device team_slave_1 removed [ 1296.945261][ T6039] team0 (unregistering): Port device team_slave_0 removed [ 1297.946763][T11898] veth0_macvtap: entered promiscuous mode [ 1298.050431][ T49] Bluetooth: hci1: command tx timeout [ 1298.467548][T12192] random: crng reseeded on system resumption [ 1299.563765][T12112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.590813][T12112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.598735][T12112] bridge_slave_0: entered allmulticast mode [ 1299.682192][T12112] bridge_slave_0: entered promiscuous mode [ 1299.791599][T11898] veth1_macvtap: entered promiscuous mode [ 1299.849503][T12112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.877855][T12112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.912274][T12112] bridge_slave_1: entered allmulticast mode [ 1299.939475][T12112] bridge_slave_1: entered promiscuous mode [ 1300.095739][T12200] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1300.120349][ T49] Bluetooth: hci1: command tx timeout [ 1300.476218][ T7888] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.613236][T12112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1301.620849][ T7888] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.686063][T12112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1302.043596][ T7888] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.147200][T11898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1302.379089][T12112] team0: Port device team_slave_0 added [ 1302.474736][T12112] team0: Port device team_slave_1 added [ 1302.654738][ T7888] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.858699][T11898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1302.880607][ T7763] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1302.944645][T12112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.954309][T12112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.988919][T12112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1303.060443][ T7763] usb 9-1: Using ep0 maxpacket: 8 [ 1303.078742][ T7763] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1303.088565][ T7763] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1303.130194][ T7763] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1303.150185][ T7763] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1303.162136][T12112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1303.169290][T12112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1303.172330][ T7763] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1303.209265][T12112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1303.240420][ T7763] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1303.260787][ T7763] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.270769][T12143] chnl_net:caif_netlink_parms(): no params data found [ 1303.542143][ T7763] usb 9-1: usb_control_msg returned -32 [ 1303.579331][ T7763] usbtmc 9-1:16.0: can't read capabilities [ 1303.594923][ T7844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.595259][ T7844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.595493][ T7844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.957424][ T7844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.319390][T12112] hsr_slave_0: entered promiscuous mode [ 1304.357206][T12112] hsr_slave_1: entered promiscuous mode [ 1305.205870][ T7888] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.515394][ T7888] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.554439][T12166] chnl_net:caif_netlink_parms(): no params data found [ 1305.709719][ T7763] usb 9-1: USB disconnect, device number 11 [ 1306.004050][ T7888] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.339318][T12253] vivid-002: disconnect [ 1306.354782][T12250] vivid-002: reconnect [ 1306.790585][T12143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.820314][T12143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.828685][T12143] bridge_slave_0: entered allmulticast mode [ 1306.887609][T12143] bridge_slave_0: entered promiscuous mode [ 1307.183224][ T5780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1307.223250][ T5780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1307.243499][ T5780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1307.276788][ T5780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1307.294151][ T5780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1307.301382][ T7888] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.402885][T12143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.469800][T12143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.511393][T12143] bridge_slave_1: entered allmulticast mode [ 1307.581317][T12143] bridge_slave_1: entered promiscuous mode [ 1309.400529][ T49] Bluetooth: hci5: command tx timeout [ 1310.266201][ T29] audit: type=1326 audit(1775640222.898:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12263 comm="syz.8.572" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f54f6c code=0x0 [ 1310.903974][T12143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.481165][ T49] Bluetooth: hci5: command tx timeout [ 1312.050806][T12143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1312.653410][T12166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.690798][T12166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.698790][T12166] bridge_slave_0: entered allmulticast mode [ 1312.751089][T12166] bridge_slave_0: entered promiscuous mode [ 1313.126062][T12166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.162103][T12166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.180705][T12166] bridge_slave_1: entered allmulticast mode [ 1313.191145][T12166] bridge_slave_1: entered promiscuous mode [ 1313.249297][T12143] team0: Port device team_slave_0 added [ 1313.283000][T12143] team0: Port device team_slave_1 added [ 1313.560780][ T49] Bluetooth: hci5: command tx timeout [ 1314.316791][T12166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1314.537515][T12166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1315.025455][T12143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1315.038390][T12143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1315.076614][T12143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1315.097846][T12143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1315.105558][T12143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1315.132143][T12143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1315.182288][ T7888] bridge_slave_1: left allmulticast mode [ 1315.188183][ T7888] bridge_slave_1: left promiscuous mode [ 1315.202079][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.215362][ T7888] bridge_slave_0: left allmulticast mode [ 1315.221930][ T7888] bridge_slave_0: left promiscuous mode [ 1315.228537][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.263368][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1315.270588][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1315.276717][ T7888] bridge_slave_1: left allmulticast mode [ 1315.287536][ T7888] bridge_slave_1: left promiscuous mode [ 1315.297129][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.318803][ T7888] bridge_slave_0: left allmulticast mode [ 1315.325821][ T7888] bridge_slave_0: left promiscuous mode [ 1315.333044][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.654285][ T49] Bluetooth: hci5: command tx timeout [ 1315.845661][ T7888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1315.865645][ T7888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1315.886561][ T7888] bond0 (unregistering): Released all slaves [ 1316.128503][ T7888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1316.154758][ T7888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1316.169529][ T7888] bond0 (unregistering): Released all slaves [ 1316.190454][T12166] team0: Port device team_slave_0 added [ 1316.293442][T12166] team0: Port device team_slave_1 added [ 1316.616935][T12166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1316.629622][T12166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.662947][T12166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1316.884724][ T7888] hsr_slave_0: left promiscuous mode [ 1316.896573][ T7888] hsr_slave_1: left promiscuous mode [ 1316.906248][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1316.916949][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1316.942220][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1316.950558][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1316.981988][ T7888] hsr_slave_0: left promiscuous mode [ 1316.995851][ T7888] hsr_slave_1: left promiscuous mode [ 1317.005080][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1317.018650][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1317.042928][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1317.060295][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1317.127500][ T7888] veth1_macvtap: left promiscuous mode [ 1317.136045][ T7888] veth0_macvtap: left promiscuous mode [ 1317.144721][ T7888] veth1_vlan: left promiscuous mode [ 1317.151718][ T7888] veth0_vlan: left promiscuous mode [ 1317.167433][ T7888] veth1_macvtap: left promiscuous mode [ 1317.180484][ T7888] veth0_macvtap: left promiscuous mode [ 1317.186474][ T7888] veth1_vlan: left promiscuous mode [ 1317.195333][ T7888] veth0_vlan: left promiscuous mode [ 1318.667153][ T7888] team0 (unregistering): Port device team_slave_1 removed [ 1318.708766][ T7888] team0 (unregistering): Port device team_slave_0 removed [ 1319.263570][ T7888] team0 (unregistering): Port device team_slave_1 removed [ 1319.313057][ T7888] team0 (unregistering): Port device team_slave_0 removed [ 1319.548305][T12166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1319.556179][T12166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1319.583784][T12166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1319.715027][T12143] hsr_slave_0: entered promiscuous mode [ 1319.728504][T12143] hsr_slave_1: entered promiscuous mode [ 1319.747586][T12143] debugfs: 'hsr0' already exists in 'hsr' [ 1319.755508][T12143] Cannot create hsr debugfs directory [ 1320.579505][T12166] hsr_slave_0: entered promiscuous mode [ 1320.590860][T12166] hsr_slave_1: entered promiscuous mode [ 1320.598955][T12166] debugfs: 'hsr0' already exists in 'hsr' [ 1320.605381][T12166] Cannot create hsr debugfs directory [ 1320.850476][T12112] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1320.928035][T12260] chnl_net:caif_netlink_parms(): no params data found [ 1321.077262][T12112] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1321.193617][T12112] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1321.346935][T12112] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1321.966197][ T7888] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.207029][ T7888] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.548592][ T7888] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.881957][ T7888] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.948616][T12260] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.958799][T12260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.969223][T12260] bridge_slave_0: entered allmulticast mode [ 1322.981634][T12260] bridge_slave_0: entered promiscuous mode [ 1323.053960][T12260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.063085][T12260] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.072537][T12260] bridge_slave_1: entered allmulticast mode [ 1323.086299][T12260] bridge_slave_1: entered promiscuous mode [ 1323.586399][T12260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1323.789264][T12260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1324.252472][T12260] team0: Port device team_slave_0 added [ 1324.327279][ T7888] bridge_slave_1: left allmulticast mode [ 1324.335047][ T7888] bridge_slave_1: left promiscuous mode [ 1324.342833][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.364910][ T7888] bridge_slave_0: left allmulticast mode [ 1324.374997][ T7888] bridge_slave_0: left promiscuous mode [ 1324.406194][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.969229][ T7888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1325.013270][ T7888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1325.037614][ T7888] bond0 (unregistering): Released all slaves [ 1325.082934][T12260] team0: Port device team_slave_1 added [ 1325.363117][ T7888] hsr_slave_0: left promiscuous mode [ 1325.391859][ T7888] hsr_slave_1: left promiscuous mode [ 1325.411010][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1325.418689][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1325.454670][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1325.479668][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1325.514158][ T7888] veth1_macvtap: left promiscuous mode [ 1325.521373][ T7888] veth0_macvtap: left promiscuous mode [ 1325.527341][ T7888] veth1_vlan: left promiscuous mode [ 1325.538203][ T7888] veth0_vlan: left promiscuous mode [ 1325.843701][T12070] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1326.043052][T12070] usb 9-1: Using ep0 maxpacket: 16 [ 1326.060442][T12070] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.111663][T12070] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1326.128959][T12070] usb 9-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1326.139792][T12070] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.169676][T12070] usb 9-1: config 0 descriptor?? [ 1326.277774][ T7888] team0 (unregistering): Port device team_slave_1 removed [ 1326.316436][ T7888] team0 (unregistering): Port device team_slave_0 removed [ 1326.653128][T12260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1326.660682][T12260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.696129][T12260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1326.737714][T12260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1326.745942][T12260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.774490][T12260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.911953][T12143] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1326.970477][T12143] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1327.008844][T12143] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1327.150360][T12143] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1327.527997][T12260] hsr_slave_0: entered promiscuous mode [ 1327.553987][T12260] hsr_slave_1: entered promiscuous mode [ 1327.577995][T12260] debugfs: 'hsr0' already exists in 'hsr' [ 1327.590839][T12260] Cannot create hsr debugfs directory [ 1327.951100][T12112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1328.406703][T12112] 8021q: adding VLAN 0 to HW filter on device team0 [ 1328.473058][T12166] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1328.548125][T12166] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1328.634085][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.642021][ T6039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1328.661788][T12166] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1328.747440][T12166] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1328.804801][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.812629][ T6039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1329.508472][ T5837] usb 9-1: USB disconnect, device number 12 [ 1329.791595][T12143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1330.036036][T12260] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1330.156260][T12260] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1330.238705][T12260] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1330.296148][T12260] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1330.647477][T12143] 8021q: adding VLAN 0 to HW filter on device team0 [ 1330.805248][ T7844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.812860][ T7844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1330.998943][ T7844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.006633][ T7844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1331.311676][T12166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1331.620547][T12166] 8021q: adding VLAN 0 to HW filter on device team0 [ 1331.623070][T12370] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1331.754940][ T7844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.763324][ T7844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1331.807535][T12112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1331.920239][ T7844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.927988][ T7844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1333.057406][T12260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1333.458585][T12260] 8021q: adding VLAN 0 to HW filter on device team0 [ 1333.596455][ T7844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.604401][ T7844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1333.811093][ T8561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.818677][ T8561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1334.582871][T12143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1335.286458][T12112] veth0_vlan: entered promiscuous mode [ 1335.359183][T12166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1335.613269][T12112] veth1_vlan: entered promiscuous mode [ 1336.222457][T12143] veth0_vlan: entered promiscuous mode [ 1336.560529][T12166] veth0_vlan: entered promiscuous mode [ 1336.769013][T12143] veth1_vlan: entered promiscuous mode [ 1336.831640][T12112] veth0_macvtap: entered promiscuous mode [ 1336.861332][T12166] veth1_vlan: entered promiscuous mode [ 1336.954159][T12112] veth1_macvtap: entered promiscuous mode [ 1337.285075][T12260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1337.479555][T12112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1337.604428][T12112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1337.758717][T12143] veth0_macvtap: entered promiscuous mode [ 1337.883678][ T8561] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.970448][ T8561] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.995525][T12143] veth1_macvtap: entered promiscuous mode [ 1338.084046][ T8561] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.094828][ T8561] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.191069][T12166] veth0_macvtap: entered promiscuous mode [ 1338.408819][T12166] veth1_macvtap: entered promiscuous mode [ 1338.709235][T12143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1338.796797][T12260] veth0_vlan: entered promiscuous mode [ 1338.945768][T12143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1339.017463][T12166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1339.078725][T12260] veth1_vlan: entered promiscuous mode [ 1339.158798][T12166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1339.344104][ T7875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.405498][ T7875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.460469][ T7875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.514844][ T7875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.646749][ T7875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.690998][ T7875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.808235][ T7875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.924174][ T7875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.378208][T12260] veth0_macvtap: entered promiscuous mode [ 1340.516885][T12260] veth1_macvtap: entered promiscuous mode [ 1340.888282][T12260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1341.028437][T12260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1341.302265][ T7888] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.341229][ T7888] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.528037][ T7888] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.602970][ T6216] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.108510][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1343.185504][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1343.198523][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1343.224462][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1343.247833][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1345.322651][ T49] Bluetooth: hci2: command tx timeout [ 1346.868165][T12422] chnl_net:caif_netlink_parms(): no params data found [ 1347.400320][ T49] Bluetooth: hci2: command tx timeout [ 1347.699670][ T7875] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.204381][ T7875] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.556237][ T7875] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.942555][ T7875] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.480417][ T49] Bluetooth: hci2: command tx timeout [ 1349.846101][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1349.911155][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1349.928904][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1349.962745][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1349.981565][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1351.091100][ T6039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1351.099193][ T6039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1351.114213][T12422] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.185404][T12422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.231792][T12422] bridge_slave_0: entered allmulticast mode [ 1351.269765][T12422] bridge_slave_0: entered promiscuous mode [ 1351.476722][T12422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.497636][T12422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.522476][T12422] bridge_slave_1: entered allmulticast mode [ 1351.570324][ T5780] Bluetooth: hci2: command tx timeout [ 1351.590952][T12422] bridge_slave_1: entered promiscuous mode [ 1351.745455][ T7875] bridge_slave_1: left allmulticast mode [ 1351.765343][ T49] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1351.787114][ T7875] bridge_slave_1: left promiscuous mode [ 1351.802692][ T49] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1351.812539][ T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1351.825511][ T49] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1351.838064][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.848949][ T49] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1351.874257][ T7875] bridge_slave_0: left allmulticast mode [ 1351.890830][ T7875] bridge_slave_0: left promiscuous mode [ 1351.897683][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.120494][ T5780] Bluetooth: hci0: command tx timeout [ 1352.899764][ T7875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1352.946040][ T7875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1352.975343][ T7875] bond0 (unregistering): Released all slaves [ 1353.406235][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1353.416406][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1353.426421][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1353.477031][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1353.504577][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1353.786098][ T7875] hsr_slave_0: left promiscuous mode [ 1353.814036][ T7875] hsr_slave_1: left promiscuous mode [ 1353.841078][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1353.851137][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1353.881737][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1353.889545][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1353.933807][ T7875] veth1_macvtap: left promiscuous mode [ 1353.939682][ T7875] veth0_macvtap: left promiscuous mode [ 1353.960362][ T5780] Bluetooth: hci6: command tx timeout [ 1353.972196][ T7875] veth1_vlan: left promiscuous mode [ 1353.982235][ T7875] veth0_vlan: left promiscuous mode [ 1354.200344][ T5780] Bluetooth: hci0: command tx timeout [ 1355.561335][ T5780] Bluetooth: hci4: command tx timeout [ 1355.816397][ T7875] team0 (unregistering): Port device team_slave_1 removed [ 1355.905247][ T7875] team0 (unregistering): Port device team_slave_0 removed [ 1356.041156][ T5780] Bluetooth: hci6: command tx timeout [ 1356.280558][ T5780] Bluetooth: hci0: command tx timeout [ 1356.395566][T12422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1356.769682][T12422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1357.124626][T12422] team0: Port device team_slave_0 added [ 1357.307577][T12422] team0: Port device team_slave_1 added [ 1357.640627][ T5780] Bluetooth: hci4: command tx timeout [ 1357.751408][T12422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1357.758560][T12422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1357.786183][T12422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1357.835286][ T7888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1357.878282][T12422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1357.881764][ T7888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.928223][T12422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1357.958587][T12422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1358.113595][ T7875] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.125624][ T5780] Bluetooth: hci6: command tx timeout [ 1358.315937][ T7875] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.360839][ T5780] Bluetooth: hci0: command tx timeout [ 1358.541815][T12422] hsr_slave_0: entered promiscuous mode [ 1358.551954][T12422] hsr_slave_1: entered promiscuous mode [ 1358.603229][ T6216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1358.615084][ T6216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1358.620825][ T7875] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.903529][ T7875] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.462256][T12464] chnl_net:caif_netlink_parms(): no params data found [ 1359.522288][ T5832] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1359.680810][ T5832] usb 2-1: Using ep0 maxpacket: 8 [ 1359.720519][ T5780] Bluetooth: hci4: command tx timeout [ 1359.729612][ T5832] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1359.742379][ T5832] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1359.753038][ T5832] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1359.763734][ T5832] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1359.774502][ T5832] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1359.789012][ T5832] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1359.855666][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.961704][ T5832] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 1360.183702][ T5832] usb 2-1: USB disconnect, device number 9 [ 1360.200206][ T5780] Bluetooth: hci6: command tx timeout [ 1360.544848][T12471] chnl_net:caif_netlink_parms(): no params data found [ 1361.281854][T12475] chnl_net:caif_netlink_parms(): no params data found [ 1361.323801][T12506] evm: overlay not supported [ 1361.776317][ T7875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.800726][ T5780] Bluetooth: hci4: command tx timeout [ 1362.115204][ T7875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.264856][T12464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.280656][T12464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.288586][T12464] bridge_slave_0: entered allmulticast mode [ 1362.334636][T12464] bridge_slave_0: entered promiscuous mode [ 1362.373815][T12464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.409672][T12464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.437715][T12464] bridge_slave_1: entered allmulticast mode [ 1362.474358][T12464] bridge_slave_1: entered promiscuous mode [ 1362.987275][ T7875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.009850][T12523] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1363.411283][ T7875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.550368][T12464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1363.769206][T12471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.791498][T12471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.799489][T12471] bridge_slave_0: entered allmulticast mode [ 1363.838143][T12471] bridge_slave_0: entered promiscuous mode [ 1363.870747][T12471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.885108][T12471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.898176][T12471] bridge_slave_1: entered allmulticast mode [ 1363.914634][T12471] bridge_slave_1: entered promiscuous mode [ 1364.012328][T12464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1364.720714][T12542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.604'. [ 1364.877101][T12475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.889780][T12475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.901380][T12475] bridge_slave_0: entered allmulticast mode [ 1364.916496][T12475] bridge_slave_0: entered promiscuous mode [ 1364.957146][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880285eec00: rx timeout, send abort [ 1365.120437][T12471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1365.171698][T12471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1365.232153][T12464] team0: Port device team_slave_0 added [ 1365.243273][T12475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.260864][T12475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.280847][T12475] bridge_slave_1: entered allmulticast mode [ 1365.326002][T12475] bridge_slave_1: entered promiscuous mode [ 1365.748248][T12464] team0: Port device team_slave_1 added [ 1365.802750][T12070] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1365.962528][T12070] usb 2-1: Using ep0 maxpacket: 8 [ 1365.985761][T12471] team0: Port device team_slave_0 added [ 1366.009339][T12471] team0: Port device team_slave_1 added [ 1366.015859][T12070] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1366.027589][T12070] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1366.052824][T12070] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1366.063652][T12070] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1366.075061][T12070] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1366.101535][T12070] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1366.111242][T12070] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.135140][T12070] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 1366.194415][T12475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1366.350720][T12070] usb 2-1: USB disconnect, device number 10 [ 1366.461760][T12464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1366.468978][T12464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1366.507465][T12464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1366.538209][T12464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1366.557206][T12464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1366.586060][T12464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1366.626364][T12475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1366.845847][ T7875] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.115880][T12471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1367.134605][T12471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1367.164877][T12471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1367.235684][ T7875] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.268672][T12475] team0: Port device team_slave_0 added [ 1367.302330][T12471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1367.309517][T12471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1367.364219][T12471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1367.397008][T12475] team0: Port device team_slave_1 added [ 1367.468789][ T7875] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.717305][ T7875] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.318637][T12464] hsr_slave_0: entered promiscuous mode [ 1371.331099][T12464] hsr_slave_1: entered promiscuous mode [ 1371.348262][T12464] debugfs: 'hsr0' already exists in 'hsr' [ 1371.354621][T12464] Cannot create hsr debugfs directory [ 1371.419348][T12475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1371.434035][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1371.468481][T12475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1371.539598][T12422] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1371.658651][T12422] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1371.689487][T12422] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1371.828485][T12475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1371.845556][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1371.904723][T12475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1371.921067][T12422] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1372.069193][T12471] hsr_slave_0: entered promiscuous mode [ 1372.092689][T12471] hsr_slave_1: entered promiscuous mode [ 1372.140682][T12471] debugfs: 'hsr0' already exists in 'hsr' [ 1372.146673][T12471] Cannot create hsr debugfs directory [ 1373.707399][T12475] hsr_slave_0: entered promiscuous mode [ 1373.719474][T12475] hsr_slave_1: entered promiscuous mode [ 1373.736948][T12475] debugfs: 'hsr0' already exists in 'hsr' [ 1373.744378][T12475] Cannot create hsr debugfs directory [ 1374.264773][ T7875] bridge_slave_1: left allmulticast mode [ 1374.273299][ T7875] bridge_slave_1: left promiscuous mode [ 1374.287786][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.312889][ T7875] bridge_slave_0: left allmulticast mode [ 1374.318815][ T7875] bridge_slave_0: left promiscuous mode [ 1374.327407][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.353310][ T7875] bridge_slave_1: left allmulticast mode [ 1374.359205][ T7875] bridge_slave_1: left promiscuous mode [ 1374.376506][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.406837][ T7875] bridge_slave_0: left allmulticast mode [ 1374.426425][ T7875] bridge_slave_0: left promiscuous mode [ 1374.435221][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.479632][ T7875] bridge_slave_1: left allmulticast mode [ 1374.496479][ T7875] bridge_slave_1: left promiscuous mode [ 1374.517026][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.552961][ T7875] bridge_slave_0: left allmulticast mode [ 1374.558859][ T7875] bridge_slave_0: left promiscuous mode [ 1374.572993][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.089626][ T7875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1376.152610][ T7875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1376.169518][ T7875] bond0 (unregistering): Released all slaves [ 1376.666866][ T7875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1376.712111][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1376.718838][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1376.773883][ T7875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1376.792283][ T7875] bond0 (unregistering): Released all slaves [ 1377.376268][ T7875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1377.403880][ T7875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1377.446300][ T7875] bond0 (unregistering): Released all slaves [ 1378.111896][ T7875] IPVS: stopping backup sync thread 12019 ... [ 1380.148542][ T7875] hsr_slave_0: left promiscuous mode [ 1380.165704][ T7875] hsr_slave_1: left promiscuous mode [ 1380.185064][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1380.195633][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1380.207474][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1380.224971][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1380.256019][ T7875] hsr_slave_0: left promiscuous mode [ 1380.266768][ T7875] hsr_slave_1: left promiscuous mode [ 1380.286707][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1380.309700][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1380.325498][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1380.339802][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1380.377031][ T7875] hsr_slave_0: left promiscuous mode [ 1380.396295][ T7875] hsr_slave_1: left promiscuous mode [ 1380.405634][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1380.425729][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1380.438038][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1380.455949][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1380.536437][ T7875] veth1_macvtap: left promiscuous mode [ 1380.542902][ T7875] veth0_macvtap: left promiscuous mode [ 1380.548854][ T7875] veth1_vlan: left promiscuous mode [ 1380.556981][ T7875] veth0_vlan: left promiscuous mode [ 1380.574083][ T7875] veth1_macvtap: left promiscuous mode [ 1380.579827][ T7875] veth0_macvtap: left promiscuous mode [ 1380.587529][ T7875] veth1_vlan: left promiscuous mode [ 1380.596924][ T7875] veth0_vlan: left promiscuous mode [ 1380.612647][ T7875] veth1_macvtap: left promiscuous mode [ 1380.618401][ T7875] veth0_macvtap: left promiscuous mode [ 1380.629197][ T7875] veth1_vlan: left promiscuous mode [ 1380.646637][ T7875] veth0_vlan: left promiscuous mode [ 1383.471243][ T7875] team0 (unregistering): Port device team_slave_1 removed [ 1383.558715][ T7875] team0 (unregistering): Port device team_slave_0 removed [ 1384.613329][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1384.637968][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1384.652615][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1384.731114][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1384.743791][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1385.306096][ T7875] team0 (unregistering): Port device team_slave_1 removed [ 1385.367562][ T7875] team0 (unregistering): Port device team_slave_0 removed [ 1385.992098][ T7875] team0 (unregistering): Port device team_slave_1 removed [ 1386.028753][ T7875] team0 (unregistering): Port device team_slave_0 removed [ 1386.840855][ T49] Bluetooth: hci1: command tx timeout [ 1387.219274][T12422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1387.586079][T12422] 8021q: adding VLAN 0 to HW filter on device team0 [ 1387.780902][T12464] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1387.812832][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.820475][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1387.890825][T12464] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1387.938755][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.946553][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1387.971534][T12464] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1388.098045][T12464] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1388.197163][T12583] chnl_net:caif_netlink_parms(): no params data found [ 1388.628664][T12471] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1388.687816][ T7875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.802812][T12471] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1388.887311][ T7875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.926114][ T49] Bluetooth: hci1: command tx timeout [ 1389.029133][T12471] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1389.077031][T12471] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1389.267967][ T7875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.487643][ T7875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.750351][T12583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.758187][T12583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.768123][T12583] bridge_slave_0: entered allmulticast mode [ 1389.779779][T12583] bridge_slave_0: entered promiscuous mode [ 1389.826870][T12583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.844137][T12583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.857194][T12583] bridge_slave_1: entered allmulticast mode [ 1389.869269][T12583] bridge_slave_1: entered promiscuous mode [ 1390.277434][T12583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1390.326009][T12583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1390.592187][T12583] team0: Port device team_slave_0 added [ 1390.842650][T12583] team0: Port device team_slave_1 added [ 1391.000395][ T49] Bluetooth: hci1: command tx timeout [ 1391.203254][T12583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1391.220782][T12583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1391.262496][T12583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1391.437219][T12583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1391.451303][T12583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1391.479773][T12583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1391.551045][ T7875] bridge_slave_1: left allmulticast mode [ 1391.556953][ T7875] bridge_slave_1: left promiscuous mode [ 1391.568299][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.587298][ T7875] bridge_slave_0: left allmulticast mode [ 1391.599439][ T7875] bridge_slave_0: left promiscuous mode [ 1391.619178][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.209745][ T7875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1392.245969][ T7875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1392.262763][ T7875] bond0 (unregistering): Released all slaves [ 1392.299036][T12475] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1392.378896][T12475] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1392.482388][T12475] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1392.696340][T12475] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1392.918359][T12583] hsr_slave_0: entered promiscuous mode [ 1392.947517][T12583] hsr_slave_1: entered promiscuous mode [ 1392.957787][T12583] debugfs: 'hsr0' already exists in 'hsr' [ 1392.966274][T12583] Cannot create hsr debugfs directory [ 1393.080587][ T49] Bluetooth: hci1: command tx timeout [ 1393.527245][ T7875] hsr_slave_0: left promiscuous mode [ 1393.538138][ T7875] hsr_slave_1: left promiscuous mode [ 1393.548483][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1393.558085][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1393.569293][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1393.579258][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1393.604963][ T7875] veth1_macvtap: left promiscuous mode [ 1393.611045][ T7875] veth0_macvtap: left promiscuous mode [ 1393.616856][ T7875] veth1_vlan: left promiscuous mode [ 1393.628569][ T7875] veth0_vlan: left promiscuous mode [ 1394.217307][ T7875] team0 (unregistering): Port device team_slave_1 removed [ 1394.273140][ T7875] team0 (unregistering): Port device team_slave_0 removed [ 1394.577956][T12422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1394.683884][T12464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1395.274390][T12464] 8021q: adding VLAN 0 to HW filter on device team0 [ 1395.489159][T12471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1395.551495][ T7900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.559111][ T7900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1395.820174][ T6216] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.827770][ T6216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1396.158015][T12471] 8021q: adding VLAN 0 to HW filter on device team0 [ 1396.296997][ T6216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.304496][ T6216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1396.491006][ T6216] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.498688][ T6216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1397.371633][T12475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1397.734346][T12422] veth0_vlan: entered promiscuous mode [ 1397.817922][T12583] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1398.058819][T12475] 8021q: adding VLAN 0 to HW filter on device team0 [ 1398.072237][T12583] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1398.145863][T12583] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1398.296017][T12422] veth1_vlan: entered promiscuous mode [ 1398.333136][T12583] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1398.564111][ T7867] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.572032][ T7867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1398.710111][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.717705][ T7875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1399.372981][T12422] veth0_macvtap: entered promiscuous mode [ 1399.505639][T12422] veth1_macvtap: entered promiscuous mode [ 1399.563830][T12471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1399.686722][T12464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1399.938115][T12422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1400.175966][T12422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1400.459498][ T7844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.484830][ T6216] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.574357][ T7867] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.604755][ T7867] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.176253][T12583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1401.218876][T12464] veth0_vlan: entered promiscuous mode [ 1401.475590][T12464] veth1_vlan: entered promiscuous mode [ 1401.568221][T12583] 8021q: adding VLAN 0 to HW filter on device team0 [ 1401.777501][T12475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1401.875067][ T7900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.882722][ T7900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1401.976080][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.983834][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1402.517858][T12464] veth0_macvtap: entered promiscuous mode [ 1402.785744][T12464] veth1_macvtap: entered promiscuous mode [ 1403.393843][T12471] veth0_vlan: entered promiscuous mode [ 1403.407136][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1403.425179][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1403.442297][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1403.456595][T12464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1403.474809][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1403.506507][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1403.768878][T12464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1403.945769][T12471] veth1_vlan: entered promiscuous mode [ 1404.021376][ T6216] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.042335][ T6216] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.089068][T12475] veth0_vlan: entered promiscuous mode [ 1404.218649][ T6216] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.247606][ T6216] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.551600][T12475] veth1_vlan: entered promiscuous mode [ 1405.376588][T12471] veth0_macvtap: entered promiscuous mode [ 1405.560554][ T5780] Bluetooth: hci3: command tx timeout [ 1405.702146][T12471] veth1_macvtap: entered promiscuous mode [ 1405.742779][T12475] veth0_macvtap: entered promiscuous mode [ 1405.986649][ T7888] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.069783][T12475] veth1_macvtap: entered promiscuous mode [ 1406.349138][ T7888] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.508411][T12583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1406.569106][ T7888] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.792737][ T7888] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.905728][T12471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1407.059241][T12471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1407.155765][T12705] chnl_net:caif_netlink_parms(): no params data found [ 1407.408785][T12475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1407.638633][ T8561] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.648289][ T5780] Bluetooth: hci3: command tx timeout [ 1407.897536][ T8561] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.918860][ T8561] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.959287][T12475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1408.017145][ T8561] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.377628][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.421707][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.496243][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.530275][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.568491][ T7888] bridge_slave_1: left allmulticast mode [ 1408.582042][ T7888] bridge_slave_1: left promiscuous mode [ 1408.601131][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.665401][ T7888] bridge_slave_0: left allmulticast mode [ 1408.690322][ T7888] bridge_slave_0: left promiscuous mode [ 1408.697175][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.544478][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1409.556271][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1409.573510][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1409.595482][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1409.607777][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1409.721139][ T5780] Bluetooth: hci3: command tx timeout [ 1409.872869][ T7888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1409.942189][ T7888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1410.009738][ T7888] bond0 (unregistering): Released all slaves [ 1410.635866][ T7888] hsr_slave_0: left promiscuous mode [ 1410.648696][ T7888] hsr_slave_1: left promiscuous mode [ 1410.683009][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1410.710275][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1410.753472][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1410.779337][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1410.930753][ T7888] veth1_macvtap: left promiscuous mode [ 1410.936559][ T7888] veth0_macvtap: left promiscuous mode [ 1410.970680][ T7888] veth1_vlan: left promiscuous mode [ 1410.976355][ T7888] veth0_vlan: left promiscuous mode [ 1411.563074][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1411.577695][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1411.589306][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1411.604940][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1411.617110][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1411.641099][ T49] Bluetooth: hci2: command tx timeout [ 1411.800393][ T5071] Bluetooth: hci3: command tx timeout [ 1412.649161][ T7888] team0 (unregistering): Port device team_slave_1 removed [ 1412.709253][ T7888] team0 (unregistering): Port device team_slave_0 removed [ 1413.561407][ T5780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1413.587831][ T5780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1413.603060][ T5780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1413.618625][ T5780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1413.637066][ T5780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1413.720659][ T5071] Bluetooth: hci2: command tx timeout [ 1413.726741][ T5780] Bluetooth: hci0: command tx timeout [ 1413.862682][T12583] veth0_vlan: entered promiscuous mode [ 1413.981011][T12705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.996911][T12705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.018105][T12705] bridge_slave_0: entered allmulticast mode [ 1414.049488][T12705] bridge_slave_0: entered promiscuous mode [ 1414.162440][T12705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1414.192237][T12705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.204558][T12705] bridge_slave_1: entered allmulticast mode [ 1414.215347][T12705] bridge_slave_1: entered promiscuous mode [ 1414.646304][T12583] veth1_vlan: entered promiscuous mode [ 1414.699070][T12705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1414.831710][ T7844] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.889509][T12705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1415.104540][ T7844] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.302053][ T7844] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.397226][ T7844] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.439082][T12705] team0: Port device team_slave_0 added [ 1415.488046][T12705] team0: Port device team_slave_1 added [ 1415.724669][ T5780] Bluetooth: hci5: command tx timeout [ 1415.775043][T12705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1415.782657][T12705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1415.810637][ T5780] Bluetooth: hci0: command tx timeout [ 1415.810723][ T5071] Bluetooth: hci2: command tx timeout [ 1415.822563][T12705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1415.907171][T12705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1415.915663][T12705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1415.944817][T12705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1417.154638][T12705] hsr_slave_0: entered promiscuous mode [ 1417.166809][T12705] hsr_slave_1: entered promiscuous mode [ 1417.280461][T12757] chnl_net:caif_netlink_parms(): no params data found [ 1417.404944][T12583] veth0_macvtap: entered promiscuous mode [ 1417.467447][T12771] chnl_net:caif_netlink_parms(): no params data found [ 1417.810392][ T5071] Bluetooth: hci5: command tx timeout [ 1417.861598][ T7844] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.881671][ T5071] Bluetooth: hci2: command tx timeout [ 1417.887323][ T5071] Bluetooth: hci0: command tx timeout [ 1417.985663][T12583] veth1_macvtap: entered promiscuous mode [ 1418.103851][T12775] chnl_net:caif_netlink_parms(): no params data found [ 1418.256069][ T7844] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.479745][ T7844] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.648760][ T7844] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.870371][T12757] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.878079][T12757] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.886717][T12757] bridge_slave_0: entered allmulticast mode [ 1418.897613][T12757] bridge_slave_0: entered promiscuous mode [ 1419.014535][T12757] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.024680][T12757] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.032932][T12757] bridge_slave_1: entered allmulticast mode [ 1419.044048][T12757] bridge_slave_1: entered promiscuous mode [ 1419.118021][T12771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.129577][T12771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.139664][T12771] bridge_slave_0: entered allmulticast mode [ 1419.151628][T12771] bridge_slave_0: entered promiscuous mode [ 1419.238300][T12771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.248893][T12771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.257295][T12771] bridge_slave_1: entered allmulticast mode [ 1419.266460][T12771] bridge_slave_1: entered promiscuous mode [ 1419.356477][T12583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1419.385019][T12757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1419.416125][T12757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1419.511838][T12771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1419.565609][T12583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1419.732743][T12771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1419.807762][T12757] team0: Port device team_slave_0 added [ 1419.819116][T12775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.829128][T12775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.839844][T12775] bridge_slave_0: entered allmulticast mode [ 1419.848923][T12775] bridge_slave_0: entered promiscuous mode [ 1419.864500][T12775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.874426][T12775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.882284][ T5780] Bluetooth: hci5: command tx timeout [ 1419.890070][T12775] bridge_slave_1: entered allmulticast mode [ 1419.901304][T12775] bridge_slave_1: entered promiscuous mode [ 1419.960246][ T5780] Bluetooth: hci0: command tx timeout [ 1420.112442][T12757] team0: Port device team_slave_1 added [ 1420.203560][T12771] team0: Port device team_slave_0 added [ 1420.269409][T12775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1420.279191][ T7867] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.290626][ T7867] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.355624][T12771] team0: Port device team_slave_1 added [ 1420.517671][T12757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1420.531338][T12757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1420.559608][T12757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1420.595163][T12775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.664708][ T7867] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.675876][ T7867] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.752290][T12757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1420.759551][T12757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1420.788694][T12757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.860189][ T7844] bridge_slave_1: left allmulticast mode [ 1420.866120][ T7844] bridge_slave_1: left promiscuous mode [ 1420.877628][ T7844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.904952][ T7844] bridge_slave_0: left allmulticast mode [ 1420.912041][ T7844] bridge_slave_0: left promiscuous mode [ 1420.918796][ T7844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.939519][ T7844] bridge_slave_1: left allmulticast mode [ 1420.956615][ T7844] bridge_slave_1: left promiscuous mode [ 1420.967299][ T7844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.993104][ T7844] bridge_slave_0: left allmulticast mode [ 1420.999074][ T7844] bridge_slave_0: left promiscuous mode [ 1421.007834][ T7844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.516692][ T7844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1421.537342][ T7844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1421.553081][ T7844] bond0 (unregistering): Released all slaves [ 1421.747489][ T7844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1421.769191][ T7844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1421.788629][ T7844] bond0 (unregistering): Released all slaves [ 1421.805795][T12771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1421.813308][T12771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1421.839712][T12771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1421.919251][T12775] team0: Port device team_slave_0 added [ 1421.961845][ T5780] Bluetooth: hci5: command tx timeout [ 1422.013561][T12771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1422.023413][T12771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1422.053723][T12771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1422.119272][ T7844] hsr_slave_0: left promiscuous mode [ 1422.133616][ T7844] hsr_slave_1: left promiscuous mode [ 1422.142992][ T7844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1422.152436][ T7844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1422.170345][ T7844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1422.178065][ T7844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1422.209264][ T7844] hsr_slave_0: left promiscuous mode [ 1422.221048][ T7844] hsr_slave_1: left promiscuous mode [ 1422.229385][ T7844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1422.239393][ T7844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1422.257710][ T7844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1422.266393][ T7844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1422.298875][ T7844] veth1_macvtap: left promiscuous mode [ 1422.305062][ T7844] veth0_macvtap: left promiscuous mode [ 1422.311421][ T7844] veth1_vlan: left promiscuous mode [ 1422.317202][ T7844] veth0_vlan: left promiscuous mode [ 1422.324818][ T7844] veth1_macvtap: left promiscuous mode [ 1422.330730][ T7844] veth0_macvtap: left promiscuous mode [ 1422.336542][ T7844] veth1_vlan: left promiscuous mode [ 1422.343116][ T7844] veth0_vlan: left promiscuous mode [ 1423.205231][ T7844] team0 (unregistering): Port device team_slave_1 removed [ 1423.252671][ T7844] team0 (unregistering): Port device team_slave_0 removed [ 1423.798028][ T7844] team0 (unregistering): Port device team_slave_1 removed [ 1423.838835][ T7844] team0 (unregistering): Port device team_slave_0 removed [ 1424.106151][T12775] team0: Port device team_slave_1 added [ 1424.437170][T12757] hsr_slave_0: entered promiscuous mode [ 1424.474966][T12757] hsr_slave_1: entered promiscuous mode [ 1424.513619][T12757] debugfs: 'hsr0' already exists in 'hsr' [ 1424.519636][T12757] Cannot create hsr debugfs directory [ 1424.756257][T12775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1424.776748][T12775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1424.804796][T12775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1424.831254][T12775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1424.838448][T12775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1424.867018][T12775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1424.925772][T12771] hsr_slave_0: entered promiscuous mode [ 1424.952725][T12771] hsr_slave_1: entered promiscuous mode [ 1424.963553][T12771] debugfs: 'hsr0' already exists in 'hsr' [ 1424.969525][T12771] Cannot create hsr debugfs directory [ 1425.215640][T12705] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1425.397206][T12705] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1425.612882][T12705] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1425.767693][T12775] hsr_slave_0: entered promiscuous mode [ 1425.777395][T12775] hsr_slave_1: entered promiscuous mode [ 1425.790856][T12775] debugfs: 'hsr0' already exists in 'hsr' [ 1425.796729][T12775] Cannot create hsr debugfs directory [ 1425.804157][T12705] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1426.347137][ T7888] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.708738][ T7888] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.970847][ T7888] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.168135][ T7888] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.403037][ T8561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.430369][ T8561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.793677][ T8561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.804567][ T8561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.987689][ T7888] bridge_slave_1: left allmulticast mode [ 1428.005893][ T7888] bridge_slave_1: left promiscuous mode [ 1428.019405][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.039732][ T7888] bridge_slave_0: left allmulticast mode [ 1428.046518][ T7888] bridge_slave_0: left promiscuous mode [ 1428.054938][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.369049][T12837] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1428.705577][ T7888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1428.757397][ T7888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1428.795151][ T7888] bond0 (unregistering): Released all slaves [ 1428.924261][T12757] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1429.069156][T12757] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1429.229533][ T7888] hsr_slave_0: left promiscuous mode [ 1429.244895][ T7888] hsr_slave_1: left promiscuous mode [ 1429.258043][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1429.270643][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1429.287333][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1429.296433][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1429.325332][ T7888] veth1_macvtap: left promiscuous mode [ 1429.331990][ T7888] veth0_macvtap: left promiscuous mode [ 1429.344337][ T7888] veth1_vlan: left promiscuous mode [ 1429.364640][ T7888] veth0_vlan: left promiscuous mode [ 1431.072555][ T7888] team0 (unregistering): Port device team_slave_1 removed [ 1431.180945][ T7888] team0 (unregistering): Port device team_slave_0 removed [ 1431.806790][T12757] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1431.961288][T12757] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1432.308269][T12705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1432.504605][T12858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.615'. [ 1432.515403][T12858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.615'. [ 1434.937818][T12705] 8021q: adding VLAN 0 to HW filter on device team0 [ 1435.071988][T12771] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1435.218855][T12771] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1435.306228][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.314035][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1435.501709][T12771] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1435.535165][T12771] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1435.598203][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.606048][ T7875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1436.333115][ C0] ===================================================== [ 1436.340634][ C0] BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x362/0x18e0 [ 1436.349456][ C0] __flush_smp_call_function_queue+0x362/0x18e0 [ 1436.355921][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1436.363092][ C0] __sysvec_call_function_single+0x4b/0x3e0 [ 1436.369305][ C0] sysvec_call_function_single+0x7c/0x90 [ 1436.375251][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 1436.381552][ C0] kmsan_get_metadata+0x0/0x160 [ 1436.386585][ C0] __msan_metadata_ptr_for_load_4+0x24/0x40 [ 1436.392799][ C0] stack_trace_consume_entry+0x4f/0x220 [ 1436.398645][ C0] arch_stack_walk+0x18e/0x280 [ 1436.403673][ C0] stack_trace_save+0xc2/0x100 [ 1436.408664][ C0] kmsan_internal_poison_memory+0x4a/0x90 [ 1436.414623][ C0] kmsan_slab_free+0xce/0x140 [ 1436.419614][ C0] kmem_cache_free+0x247/0xeb0 [ 1436.424617][ C0] __kfree_skb+0x20b/0x260 [ 1436.429295][ C0] consume_skb+0x86/0x2a0 [ 1436.433813][ C0] nsim_dev_trap_report_work+0x1063/0x1430 [ 1436.440055][ C0] process_scheduled_works+0xb82/0x1e80 [ 1436.446050][ C0] worker_thread+0xee4/0x1590 [ 1436.450932][ C0] kthread+0x53f/0x600 [ 1436.455260][ C0] ret_from_fork+0x20f/0x910 [ 1436.460086][ C0] ret_from_fork_asm+0x1a/0x30 [ 1436.465079][ C0] [ 1436.467491][ C0] Local variable iter created at: [ 1436.472614][ C0] tdp_mmu_zap_leafs+0x52/0x6e0 [ 1436.477713][ C0] kvm_tdp_mmu_unmap_gfn_range+0x910/0xb50 [ 1436.483737][ C0] [ 1436.486169][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 1436.495727][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1436.506119][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1436.513152][ C0] ===================================================== [ 1436.520177][ C0] Disabling lock debugging due to kernel taint [ 1436.526427][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 1436.532985][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G B syzkaller #0 PREEMPT(full) [ 1436.544129][ C0] Tainted: [B]=BAD_PAGE [ 1436.548412][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1436.558634][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1436.565697][ C0] Call Trace: [ 1436.569258][ C0] [ 1436.572206][ C0] __dump_stack+0x26/0x30 [ 1436.576751][ C0] dump_stack_lvl+0x50/0x1c0 [ 1436.581556][ C0] ? dump_stack+0x12/0x25 [ 1436.586373][ C0] dump_stack+0x1e/0x25 [ 1436.590808][ C0] vpanic+0x7b4/0x1430 [ 1436.595119][ C0] panic+0x15d/0x160 [ 1436.599277][ C0] kmsan_report+0x31a/0x320 [ 1436.604239][ C0] ? __msan_warning+0x1b/0x30 [ 1436.609139][ C0] ? __flush_smp_call_function_queue+0x362/0x18e0 [ 1436.615768][ C0] ? generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1436.623123][ C0] ? __sysvec_call_function_single+0x4b/0x3e0 [ 1436.629404][ C0] ? sysvec_call_function_single+0x7c/0x90 [ 1436.635443][ C0] ? asm_sysvec_call_function_single+0x1f/0x30 [ 1436.641797][ C0] ? __pfx_kmsan_get_metadata+0x10/0x10 [ 1436.647542][ C0] ? __msan_metadata_ptr_for_load_4+0x24/0x40 [ 1436.653852][ C0] ? stack_trace_consume_entry+0x4f/0x220 [ 1436.659806][ C0] ? arch_stack_walk+0x18e/0x280 [ 1436.665059][ C0] ? stack_trace_save+0xc2/0x100 [ 1436.670208][ C0] ? kmsan_internal_poison_memory+0x4a/0x90 [ 1436.676333][ C0] ? kmsan_slab_free+0xce/0x140 [ 1436.681418][ C0] ? kmem_cache_free+0x247/0xeb0 [ 1436.686544][ C0] ? __kfree_skb+0x20b/0x260 [ 1436.691318][ C0] ? consume_skb+0x86/0x2a0 [ 1436.696001][ C0] ? nsim_dev_trap_report_work+0x1063/0x1430 [ 1436.702245][ C0] ? process_scheduled_works+0xb82/0x1e80 [ 1436.708351][ C0] ? worker_thread+0xee4/0x1590 [ 1436.713392][ C0] ? kthread+0x53f/0x600 [ 1436.717845][ C0] ? ret_from_fork+0x20f/0x910 [ 1436.722811][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1436.727980][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1436.734567][ C0] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1436.740895][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1436.746197][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1436.752285][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1436.757580][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1436.764163][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1436.769505][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1436.775527][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1436.780919][ C0] __msan_warning+0x1b/0x30 [ 1436.785667][ C0] __flush_smp_call_function_queue+0x362/0x18e0 [ 1436.792123][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1436.798177][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1436.805357][ C0] __sysvec_call_function_single+0x4b/0x3e0 [ 1436.811491][ C0] sysvec_call_function_single+0x7c/0x90 [ 1436.817348][ C0] [ 1436.820380][ C0] [ 1436.823421][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 1436.829644][ C0] RIP: 0010:kmsan_get_metadata+0x0/0x160 [ 1436.835535][ C0] Code: 45 10 00 74 90 90 0f 0b 90 0f 0b 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 55 48 89 e5 41 57 41 56 53 41 89 f6 48 89 fb 48 83 e3 [ 1436.855347][ C0] RSP: 0018:ffff88810070b558 EFLAGS: 00000282 [ 1436.861603][ C0] RAX: ffff8880bbb0b6c8 RBX: ffff8880bbb0b6c8 RCX: 00000000003aa737 [ 1436.869742][ C0] RDX: 000000010070b6c8 RSI: 0000000000000001 RDI: ffff88810070b6c8 [ 1436.877870][ C0] RBP: ffff88810070b570 R08: ffffea000000000f R09: ffff88810070c000 [ 1436.886037][ C0] R10: ffff888100708000 R11: ffffffff81dd02d0 R12: 0000000000000000 [ 1436.894197][ C0] R13: ffff88810070b6c0 R14: ffff88810070b6c8 R15: 0000000000000040 [ 1436.902374][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1436.908822][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1436.914869][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1436.921286][ C0] __msan_metadata_ptr_for_load_4+0x24/0x40 [ 1436.927433][ C0] stack_trace_consume_entry+0x4f/0x220 [ 1436.933338][ C0] ? kmem_cache_free+0x247/0xeb0 [ 1436.938510][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1436.944925][ C0] arch_stack_walk+0x18e/0x280 [ 1436.950040][ C0] ? kmem_cache_free+0x247/0xeb0 [ 1436.955200][ C0] stack_trace_save+0xc2/0x100 [ 1436.960205][ C0] kmsan_internal_poison_memory+0x4a/0x90 [ 1436.966383][ C0] ? kmsan_internal_poison_memory+0x4a/0x90 [ 1436.972638][ C0] ? kmsan_slab_free+0xce/0x140 [ 1436.977783][ C0] ? kfree+0x1f1/0x1130 [ 1436.982219][ C0] ? filter_irq_stacks+0x49/0x190 [ 1436.987496][ C0] ? stack_depot_save_flags+0x35/0x790 [ 1436.993295][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1436.998590][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1437.004590][ C0] ? kmem_cache_free+0xd1/0xeb0 [ 1437.009629][ C0] ? filter_irq_stacks+0x49/0x190 [ 1437.015103][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1437.020410][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1437.026683][ C0] ? __memcg_slab_free_hook+0x2aa/0x5f0 [ 1437.032500][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1437.037827][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1437.043845][ C0] kmsan_slab_free+0xce/0x140 [ 1437.048771][ C0] kmem_cache_free+0x247/0xeb0 [ 1437.053823][ C0] ? __kfree_skb+0x20b/0x260 [ 1437.058633][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1437.063983][ C0] __kfree_skb+0x20b/0x260 [ 1437.068601][ C0] ? nsim_dev_trap_report_work+0x1063/0x1430 [ 1437.074870][ C0] consume_skb+0x86/0x2a0 [ 1437.079482][ C0] ? __local_bh_enable_ip+0x75/0xb0 [ 1437.084975][ C0] nsim_dev_trap_report_work+0x1063/0x1430 [ 1437.091110][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1437.097709][ C0] process_scheduled_works+0xb82/0x1e80 [ 1437.103654][ C0] worker_thread+0xee4/0x1590 [ 1437.108594][ C0] kthread+0x53f/0x600 [ 1437.112951][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1437.118474][ C0] ? __pfx_kthread+0x10/0x10 [ 1437.123342][ C0] ret_from_fork+0x20f/0x910 [ 1437.128141][ C0] ? __switch_to+0x51c/0x750 [ 1437.133085][ C0] ? __pfx_kthread+0x10/0x10 [ 1437.137997][ C0] ret_from_fork_asm+0x1a/0x30 [ 1437.143031][ C0] [ 1437.146642][ C0] Kernel Offset: disabled [ 1437.151051][ C0] Rebooting in 86400 seconds..