last executing test programs: 5m26.700279275s ago: executing program 2 (id=2940): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m26.67301409s ago: executing program 3 (id=2941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x204, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x2, 0x10100, 0x0, 0x4}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff00000003", 0x47}], 0x1) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x10000, 0x1000, 0x101, 0x1}, 0x20) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0xfffc}, &(0x7f0000002500)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000002540)={r7, 0x8}, 0xc) syz_open_dev$usbfs(&(0x7f00000001c0), 0x1ff, 0x80000) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r8, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r9, r9) recvmsg$can_raw(r9, &(0x7f00000002c0)={&(0x7f00000000c0)=@ax25={{}, [@rose, @netrom, @null, @default, @default, @rose, @bcast, @rose]}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000180)=""/120, 0x78}, {&(0x7f0000001400)=""/255, 0xff}], 0x4, &(0x7f0000001500)=""/4096, 0x1000}, 0x1) connect$802154_dgram(r8, &(0x7f0000000240)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14) sendmsg$NL80211_CMD_DEL_PMKSA(r8, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x28, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 5m26.573102852s ago: executing program 2 (id=2942): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = syz_io_uring_setup(0xa3d, &(0x7f0000000180)={0x0, 0x43ed, 0x0, 0x2000001, 0x8002ae}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 5m26.413671212s ago: executing program 2 (id=2943): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r3) 5m25.679806798s ago: executing program 2 (id=2945): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000400)={0x2c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}]}]}, 0x2c}}, 0x8000) 5m25.290539154s ago: executing program 2 (id=2948): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x101000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x1, 0x0, 0x98, &(0x7f0000000040)={0x0, 0x1000, 0xf}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x100000}, 0x50) timer_settime(0x0, 0x0, &(0x7f0000000840)={{}, {0x0, 0x989680}}, &(0x7f0000000880)) 5m24.777301278s ago: executing program 3 (id=2949): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 5m24.693876842s ago: executing program 2 (id=2950): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) truncate(0x0, 0x42d9) 5m24.651723354s ago: executing program 3 (id=2951): r0 = epoll_create1(0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c61737400000000040002"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 5m23.591604802s ago: executing program 3 (id=2954): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="73a27bb653150a6a3c936ebaffd28e43012512ebe5a6ed1332e0046451137ffb1dfda4794838aa8b693789447216195b1fcdcc9eaa56f4a931378fcd6124579defeaa730b80054b8478986056350450ed7646428efa856ec51df8be44ba8a380390c79efb3fd3f2ce14376b292a18386efefecb3e023cf8ecf661f483147f50ba48681eb931ba60aa5afff8548d7213ed19c688cd3058ed1697cabab4095c06779000c35dfa8ed33"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r7}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 5m22.327651139s ago: executing program 3 (id=2961): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x101000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x1, 0x0, 0x98, &(0x7f0000000040)={0x0, 0x1000, 0xf}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x100000}, 0x50) timer_settime(0x0, 0x0, &(0x7f0000000840)={{}, {0x0, 0x989680}}, &(0x7f0000000880)) 5m21.259819327s ago: executing program 3 (id=2962): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x4000804) 5m19.566695073s ago: executing program 4 (id=2966): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5m19.413756377s ago: executing program 4 (id=2968): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000040000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c69"], 0x110}}, 0x0) 5m17.74076767s ago: executing program 4 (id=2970): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000400)={0x2c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}]}]}, 0x2c}}, 0x8000) 5m17.494702266s ago: executing program 4 (id=2971): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 5m17.33925844s ago: executing program 4 (id=2972): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x101000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x1, 0x0, 0x98, &(0x7f0000000040)={0x0, 0x1000, 0xf}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x100000}, 0x50) timer_settime(0x0, 0x0, &(0x7f0000000840)={{}, {0x0, 0x989680}}, &(0x7f0000000880)) 5m17.141066532s ago: executing program 4 (id=2973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x204, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) r2 = syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x2, 0x10100, 0x0, 0x4}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff00000003", 0x47}], 0x1) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x10000, 0x1000, 0x101, 0x1}, 0x20) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0xfffc}, &(0x7f0000002500)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000002540)={r8, 0x8}, 0xc) syz_open_dev$usbfs(&(0x7f00000001c0), 0x1ff, 0x80000) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r9, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r10, r10) recvmsg$can_raw(r10, &(0x7f00000002c0)={&(0x7f00000000c0)=@ax25={{}, [@rose, @netrom, @null, @default, @default, @rose, @bcast, @rose]}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000180)=""/120, 0x78}, {&(0x7f0000001400)=""/255, 0xff}], 0x4, &(0x7f0000001500)=""/4096, 0x1000}, 0x1) connect$802154_dgram(r9, &(0x7f0000000240)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14) sendmsg$NL80211_CMD_DEL_PMKSA(r9, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x28, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 5m12.6461345s ago: executing program 32 (id=2924): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000800000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000fe030000280000000000000200000000541b94813093dccd515e59ca6d4ed0cf65752593511ac1b85d450901eb18f5857d35f8b79058c7e96a19", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="18008000000000000000000003000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd, &(0x7f0000000100)=""/13, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES64], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 5m9.579029891s ago: executing program 33 (id=2950): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) truncate(0x0, 0x42d9) 5m6.15540718s ago: executing program 34 (id=2962): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x4000804) 5m1.6222718s ago: executing program 35 (id=2973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x204, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) r2 = syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x2, 0x10100, 0x0, 0x4}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff00000003", 0x47}], 0x1) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x10000, 0x1000, 0x101, 0x1}, 0x20) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0xfffc}, &(0x7f0000002500)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000002540)={r8, 0x8}, 0xc) syz_open_dev$usbfs(&(0x7f00000001c0), 0x1ff, 0x80000) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r9, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r10, r10) recvmsg$can_raw(r10, &(0x7f00000002c0)={&(0x7f00000000c0)=@ax25={{}, [@rose, @netrom, @null, @default, @default, @rose, @bcast, @rose]}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000180)=""/120, 0x78}, {&(0x7f0000001400)=""/255, 0xff}], 0x4, &(0x7f0000001500)=""/4096, 0x1000}, 0x1) connect$802154_dgram(r9, &(0x7f0000000240)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14) sendmsg$NL80211_CMD_DEL_PMKSA(r9, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x28, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 4m30.921517579s ago: executing program 1 (id=2991): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1c99a}, 0x94) io_uring_enter(0xffffffffffffffff, 0x47f8, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) 4m30.63723631s ago: executing program 1 (id=2992): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) tee(0xffffffffffffffff, r0, 0x20db819b, 0xa) 4m30.465938008s ago: executing program 1 (id=2993): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb04181800010000950074000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x94) 4m30.345501451s ago: executing program 1 (id=2994): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) 4m30.031284847s ago: executing program 1 (id=2995): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 4m29.946950608s ago: executing program 1 (id=2996): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 4m14.582229708s ago: executing program 36 (id=2996): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 3m41.568274611s ago: executing program 8 (id=3138): getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) 3m41.445798941s ago: executing program 8 (id=3139): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r2], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) 3m39.963182566s ago: executing program 8 (id=3146): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) unshare(0x28000600) pselect6(0x40, &(0x7f0000000000)={0xf2, 0x9d, 0x2, 0x2e, 0xe, 0xfffffffffffffff7, 0x400, 0x2c}, 0x0, 0x0, 0x0, 0x0) 3m39.829824039s ago: executing program 8 (id=3147): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9", 0x4}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000"], 0x40}, 0x20000000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) r1 = epoll_create1(0x0) socket$kcm(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r2, @ANYRESHEX=r0, @ANYRES8], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x3, 0x7ffffffffffffffc, 0x0, 0x10000000000000, 0x8000000000000000, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) socket(0x2, 0x6, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r7, &(0x7f0000000080)={0xa002a008}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ffff0000c9c4582da77b47e7b1", @ANYRES16=r8], 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x20000044) close(0x4) 3m38.766911073s ago: executing program 8 (id=3152): lsm_set_self_attr(0x69, 0x0, 0x20, 0x0) 3m38.661911806s ago: executing program 8 (id=3153): prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 3m23.002014151s ago: executing program 37 (id=3153): prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 8.671330936s ago: executing program 9 (id=3731): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000340)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, 0x24) listen(r0, 0xffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)}, 0x20001) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYRES8=r1, @ANYRES32], 0x50) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01010000000000000000010000090900010073797a3100000000380000000b0a03060000000000000000000000080900020073797a31000000000800044000000001040012800900010073797a300000000078000000160a01080000000000000000010000070900010073797a31000000000900020073797a31000000000900020073797a3200000000400003800800024000000006050001"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000003780)=ANY=[@ANYBLOB="1c1000000a08040228bd7000fbdbdf25000000010800e2", @ANYRES32, @ANYBLOB], 0x101c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40001) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r3) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', r4, 0x0, 0x9}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) recvmmsg(r6, &(0x7f0000006100), 0x49f, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) 7.407894694s ago: executing program 9 (id=3739): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.191810122s ago: executing program 6 (id=3741): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7, 0x4932, 0x0, 0x1, 0x1}, 0x50) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 7.158381512s ago: executing program 9 (id=3742): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="73a27bb653150a6a3c936ebaffd28e43012512ebe5a6ed1332e0046451137ffb1dfda4794838aa8b693789447216195b1fcdcc9eaa56f4a931378fcd6124579defeaa730b80054b8478986056350450ed7646428efa856ec51df8be44ba8a380390c79efb3fd3f2ce14376b292a18386efefecb3e023cf8ecf661f483147f50ba48681eb931ba60aa5afff8548d7213ed19c688cd3058ed1697cabab4095c06779000c35dfa8ed33"], 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r9}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 6.973602335s ago: executing program 6 (id=3745): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "06000000e380ff03", "5615c6170f365581598bfabd2e006a7a2a6ea19e000000000000000800", '\x00', "b6405ad112e098b1"}, 0x38) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 4.804556225s ago: executing program 7 (id=3752): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.696444075s ago: executing program 5 (id=3753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delchain={0x2c, 0x65, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x10}}, [@TCA_CHAIN={0x8, 0xb, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 4.542815605s ago: executing program 7 (id=3754): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc000041) 4.393223951s ago: executing program 7 (id=3756): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) write(r0, &(0x7f00000002c0)="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", 0xfc) 4.21628304s ago: executing program 5 (id=3757): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x1000007, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x170b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) 4.177896655s ago: executing program 6 (id=3758): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000015ab3107feae68fed6e26216b4000000000000"], 0x48) close(r0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="2b63707520cfdaa0e942c4787b4775cbeebc323f9103e1e354041bdad26361f5a2bd78ad4f8c7f048efa5f0c05aecbae1c1b6967b08555578164c9a0ede9407f4acaa8c95569aaaaa11d68b93e81093a7c1e86854e6d6b3ee5fe1bad39e3b279c6f1c013b5edce5c8d860f55156efa8140cb876b877a1bd5a1b4f90a7b27274225eb0952"], 0x5) r4 = openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r4, &(0x7f00000001c0), 0x9) 4.162264323s ago: executing program 7 (id=3759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newtfilter={0x60, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044080) 3.864367413s ago: executing program 6 (id=3760): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r1, 0x0, 0x7}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) syz_io_uring_setup(0x496, &(0x7f0000000940)={0x0, 0x422e, 0x800, 0x3, 0xac}, &(0x7f0000000080), &(0x7f0000000400)) 3.575578057s ago: executing program 6 (id=3762): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='\b', 0x1}], 0x1, 0x1) close(r1) socket$kcm(0x10, 0x2, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000580)={0x0, 0xf, 0xd2650fa}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0000000400000004000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x1000, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000004c0)={0x5, {{0xa, 0x4e23, 0xa69, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}}, 0x88) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuset.memory_pressure\x00', 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@exit, @alu={0x7, 0x0, 0x5, 0x7, 0xb, 0xfffffffffffffff8, 0xfffffffffffffffc}, @exit]}, &(0x7f0000000180)='syzkaller\x00', 0xc1b1, 0x51, &(0x7f00000001c0)=""/81, 0x40f00, 0x20, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000280)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xa, 0x8, 0x7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r4, r5, r6], 0x0, 0x10, 0x30cf}, 0x94) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) 3.379369416s ago: executing program 6 (id=3763): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000340)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, 0x24) listen(r0, 0xffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)}, 0x20001) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYRES8=r1, @ANYRES32], 0x50) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01010000000000000000010000090900010073797a3100000000380000000b0a03060000000000000000000000080900020073797a31000000000800044000000001040012800900010073797a300000000078000000160a01080000000000000000010000070900010073797a31000000000900020073797a31000000000900020073797a3200000000400003800800024000000006050001"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000003780)=ANY=[@ANYBLOB="1c1000000a08040228bd7000fbdbdf25000000010800e2", @ANYRES32, @ANYBLOB], 0x101c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40001) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r3) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', r4, 0x0, 0x9}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) recvmmsg(r6, &(0x7f0000006100), 0x49f, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) 3.333161606s ago: executing program 5 (id=3764): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, 0x0, 0x0) 3.092093547s ago: executing program 5 (id=3765): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x82083) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x9, 0xb801, 0x0, 0x0}, {0x100, 0xc00, 0x0, 0x0}], 0x2}) 3.09083452s ago: executing program 7 (id=3766): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc000041) 2.983848708s ago: executing program 7 (id=3768): syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x400) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') epoll_create1(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) personality(0xbe4e602dc9e6c1d3) uname(&(0x7f0000000140)=""/62) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) syz_open_pts(r3, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LE_HOST_SUPPORTED={{0xa6}, 0x6}}}, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fedbdf257c00000008000300", @ANYRES32=r4], 0x58}, 0x1, 0x0, 0x0, 0x40045}, 0x10) 2.855693113s ago: executing program 9 (id=3769): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 2.431828391s ago: executing program 0 (id=3770): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdc01, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 2.115094253s ago: executing program 9 (id=3771): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x5}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 2.090413354s ago: executing program 0 (id=3772): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002211c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.700697001s ago: executing program 0 (id=3773): syz_emit_ethernet(0x5a, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}, @timestamp={0x8, 0xa, 0x8, 0x7}, @eol, @sack={0x5, 0x12, [0xfffffffe, 0x66a418d2, 0xffffffff, 0x0]}, @mss={0x2, 0x4, 0xf5b6}]}}}}}}}, 0x0) 1.673615044s ago: executing program 9 (id=3774): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e079c0814"], 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}, 0x1, 0x0, 0x0, 0x8018}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYRESOCT=r3, @ANYRES16, @ANYRES16=r2, @ANYBLOB="a0437c927661196d08378a87691cf7e97619365ec53648a8252e8808b3a9822719d8e2dbbb25dbafed83cea4d029bf860bb51246baeeb4ebf59ef547aac9553195ea44029e007616207fac4bb6307a9620e863e88cb85e891c00e7b45c2b80429485adf1a038db52e36170216648b9487c60e67e98ff0f2b18429131f3cac95e51d61fe5e1a2ac8e1343960dff98a49aa203079d5cdd71b84e40cfe676241d2a83c3e2d7e5c8f6d1a5dace4f648a9e05daf76b5506b4cf7e0b7f74f11e9421eccee8003a2d628c274f1daebb6930ef285f119b40065c919359f9f9ffeacd72cf2f75908e64281068a04309194f7c6ca8", @ANYRES16, @ANYRESOCT=r1, @ANYRES64=r2], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$smackfs_change_rule(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='^ ful r\t\x00\x00\x00b\x00\x00'], 0xe) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f000000e400)=[{{&(0x7f0000000640)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000940)="88cac6fb17e27e2748d01f89051f10a7c6ccbbf86f2a7d58e48846ea0a27965f1b6f005a5c0a45b0cecf7c1257e055bed6abcc7736a94212e856a758a24bd41d52d1e2bbd87a6ee8722bd67e488b00b9b67d63bbe842159960697eda9689c973d756ae40652e0b8e", 0x25}, {&(0x7f0000000ac0)="ad0cd647527030d4fd474fef1d575272151c106b6ff5647f3f7df4cc1c4350d2fc5e0c20cdd0fa8d605b6d60beb6d70b40d2764d5c67c90c233c9162274fc862e8fd8814af049e346781f083e2084b417a6afc1f561211a836e378bef4941c121a45a3c1aa6dc7191049d2628ea31bf0bcc33268b3b5b678cb6d1244b1fef06bdcb62d3b8d9dbba18c0a1ff787ad38a15c874df2faf76c6685f9e1f61539a8ab5b5dade054563db5bc9a0c2a29f09e01b5734922aea83ce3dc781b7634895f1f66d36e0f231879f81d5b43bea2db4e12109704d2f5f7b2feafd9a7caa95ba19e24b988ca6c1c62fcfbfe69ab62b33c8927556770e15c630b77fe7f501432050421dd9e272551490ffd81341482b2ad0fbc70efae2d1a67017ad8159e53a8f5574d0d88667224c4e28bbff2e5ebb1653da0e55f474d305d21dd7e0a29c9eea5006a526eb753b9f95d661c35914cf4c198915d8e1778d71506d5aa8b0ad35f75f47473986df1b53ea26df53c2584b395e9b45462f8085250dc812967b6443cfa84cadf107f64278469406f89bbbc03bd6aad4c53defe113fb8d668681c9c73a6f057940f5d922b61cdd10401d16671917f4957fdbbc059e61abbd1e377e0280c1db78bb09dbfba6a736c99c0fd6eb6effc16439bd4821c7f558f0c2f47741b1efe7d27d6d663ac902811021eb6b3cfaa493abd53f05236e35d13dd7c91f432d2c58e47650f36ae185b7aa17bd7359d78f00e4874fe429552a46b07c6e5e3522ec0669dc5ae85d9e7de38241b2887aa504efa99e1a5b8430780ba052ddb581687e3852ce519fdcb93180a1f93a48a336d7f97f41be18faa6739c39428c322302d6ea568a5e088a9ac124e249aa96126d28b1085df076255357e2061c15869d5859148c07530c902e0b138ef8a256c1c483b57402c6de62e33a8a5d2d1b00a8566a567366003e39c46a639c7ec4a25e8b5215a54b3656fa3d498b149c3f6658384abc4ed18a7298772f6648e33721bfc18c9e1e9f46452753236e17fdd72fb5f21cbb2437f29713ebe0c5faf03b7f4adbc7b85cb19d1cecf131521f2f933f05c7a06a7e79ea7478fec9ff72007a58292338839d86a13b77391f4d49618af6094bddec37c579716bb8d6fffafc568c031643f586a70bba637d797b8dfeec4832849740782634dc11a3f027e24b08f8e959faf38ed9cc77560d60b168970a8d790378e5d351b4133d8b965bbf7a8ab75d03feade9416d3fbefab27ea63c3ee51577e1f9898eb512c2737c03e1247ad0acf122677a808c3602624be2f43195414121db28dc5f87f26df8c99c5da631da4cb1ef703f54dd9dbf8a31b50c5d1c0aa9adc2a94f3c1a41bae46418ded6f48a9fb6d380027e520fa7963f420cb4578ae1581e2a8f268588bd7de73a56a3a9a75b9c9ce1806227d3ab0f69475c8cca02a9a9e14109528abfc309de41a23c45fa582dbc45da4a35e012daaa771db98e8ce8fb0eb13ea7629cd22e7fe8d949386655090d4225f51dab496111d7b2ef63a84df2fe1662e41d3683660e899d696a2932d7283315a73b583a57853e0fab6a5c2605a2ef79dfdd3758dbc51ad9261a5464f8046d7d1335ed6857c246c82dc8cfda490a587a4439cace2cee34b058c4a98a1a678b8793da49433a7f2c66bed9fc392b298525cc1058ef43f2eddc2e7a4878191b4a7a9a787298e194f2eee9e864ed239c360a9d6d583870af140eb6f33e67c25edaf73fb24fa502d67a34f46d91d2f8db5f97557ae22db2a9ce4aaf1b294f751d823d55f4f86bf7f8446761a441fdc5f3105790a05198156305b6113f189e0bcf868c3fa984fd1c84f2edd1929e32a2da0b1754ccce574230e36a54db3e4e65991d5084ec99f0058c87d6b078fe6871b4318a188c21872a271cc7fe5eae7405bb5ad7fff10a37b4c81db920a86ff0e34196bd002ba456f457074e8a03837f6e8940761b1b447078291e7c542c239042e44c32f694a1a64f57bd332ea9dbd61e3e810f760e9d4837a86c239c90f73e215adfa1bc7ffbfd436251777fb7b346341eb85ee233766650056b84e6bbe34be10eeeac3eada5fe2f3d546d79914568ebc1858767cd1c52eaff45503d9c08b649cbd859bc4274b31116b79eafc51a92f55045e0139b8d546995adffdff05c4b2a9df9d1c54862f1259445eaa94bf0f3dd362275352e5fdbc9ca7f52d21bd8b650a50ec296815479612553c9e26c22450632ec796964746496844da7b1dfbc965c902843d60daa07e74fd32b7057d48b05634493a1ec3720e071739981f108485556b4ad62bfc40416066a59ff2af08dad291be0e2e03e8ef17b64b0dd06fc8e8e1fc7e7e8b7ed72e050f267a4ca812c9d850a314091ee02b8170a9c96c6e7ded434a1752cbc81f346b145c58dc5c3de66647086ed14ba538271620cd1cbedc8f91388882c299c523b6ade919f3b10eb505e7c01d21c160dc075f57236397b8e63443bd9b1328b49311faf9e14e726231dc5437c33f585bf323d8d76789bfe35bc7a8611f07c7ad1475771dc7a186875566518844a37e1449618732fc30e3914901330cfd28d66d07aedc926560083ab053b9c4e74e626674fdb6a5837843f2b1065ca41f45b92271e64cefcc2db2f31b3eedd7e38de7992002ba744dfb2559a7e15bad533f3844c93f63794c89a8f0417ebd2f456e7acd08908e44bec9d5da367b84070bdb14780cfe4d5c98c0b556217ab604cd472b7f2ff6827a2d09322f2e0df1f22cd72291839c4eef8fb354afd8a2f0c917626f446bb647a666dfdb6b7100d1180b2816bbeaa89cfec10654b4c523999a3a3709a047b49d722bdb2db63cf9c8162a673c255557db9241c120f89ccf443b1d85e7ac2e19d434c3f1c25478dfd76ffec3ff2d91193b4fd3e3be2224464d9785576e2cad6b2dc58885d64598445114731f0361081ea85fcc1186714e625aaa89ceee041cfc03e06b25eb6cd66ed854890e999478e077a0a1d4217347b5645eddd81a00bccbc549eed1f1659cfadb092c6abcfaf3656165080c0b622c0a08ae00393df5e17035909b09150efb916ae7985bb610e05ecd2d6a81ee263d64421b9d53215ee050d9c97a948a1b1f23fef465a7e7a9f32d293a80aa52e28562562b10ef4a31989ad5e60f9f38da0544edc6f513a2b0a5d25be79916e7b63d03bfe0460f1006d2a1f4a9cf30ce3c95c2a21726b80e38a557da17bfd3edf78e8d9cdd20484867a7c601a4ffb03e0e3ce6e69607e6a41b1843762d10202ea9bac0e7454049683754a73a086b91bf4db45dcfd0591e1d91e25b5447b93a938b4a7f046e363480e0686875ccc263c96da5921ff5bdb283811616f6e42fdd881c492aa59c94e2698db850b7de2a61b77c3bef178466a4852f7533e88ceb745947cbee8220adaa7e065b7a985e95ec9e5564601605d7d6a645a3bd039af0a344c561b4565136fbc12b0e960350a5ae739f2c9a086260577692442c3fa6f72c87a5590dfae2814d4107acaea17635a503f9c4e110aa6b49341370fc142170b8907959c37433356fe1aa40331619b06ff01e31c20acabb5b871d0520fd8c6a8487efb74cc76f5e51373d2e28d10721f1031b047f7fc9b442d9cb04f5b69058536017b12db0fdf9762b10d25feadd0cec8ba0a98cd8f26e570452e0f1a6fb0ebf4585714ef8090763be644680ce8023e6f0d08513962fd6735ad53744fab78de35c653ce9cd3c7ba55eb19beb4ab9d6f13200fc209aa45f940ffaa6f39f8ac1e884dcc388869cdcd4d1339ba3f97112c1b9f18b1d03f53fb10c872404d9646f1c5decb7be0ba0d4c5dbc341a79e6fc0dc101b343a09df60cf8f390b8537a525c621ba5591f9e63a7b57325e09762d77e991249f3416264c3e47346c0d13aa8241083004cc9010e4a93e1684a58caf2b85c68b0bc3aa0d8eeb80c1090d60819b9e952d8374dda81eddb9676ddfea7721f59fa613b5402c1746fb2b6a576252b173d4897e5bab90b9fe737266d9dcc62f912e655c9ff3a5119b26d0e22d4783f3f4a2c9a3686c1f017f5ed7f4d49b752cddfcdb4713651ec2159b64bb20978d5311de7f5e21f0b6771fda019c38e8f968ccf1994c2280d4231fc076f511185bda049aedc0e366dbeec8cb64a2e0fb0a1b8136393a9358e0baf965b48fefebb3aba64d0470908b3a2abf9174ef9ad19cc73989027ed7b4c9525747f1d9378ccd4d48f95946dad69ec1ca5d4789c3636207dc435caa6c165f8ac0abcd66469662a2d1305d122254c4d1cb45a3af046ba89621976c911bd267e78beee2d387407d53704b283f6215e00850168f580d5e062f0e3ec2c88cd73dff9470fd94ad85e1a4a89af9b40e97c279584ea7d90cce98f7b56d996a8e0617d9ed11e46e7afb4c7ec00b8728d1d22915f2466703f947f7f2e412d48bae33287a899c63f8f16005f9b3cdb3270e82c46ffa53ca8c8d28b97f572de2ffddeba4f950eadef753c9414dc9e3a2c6fc20794b4e3093d6dfef244766a4447999d6d433f31bab5548dc0aca6106a787339c6043795eab345d6f0e9a9b77d21707bf62ad8495c9b8e9525e7f249fc5ec4c142f6eb009e2dd24f162bf7f48f57ae07e3632d0c5043b294d254a8cb907e53109f2335cf4467160b7a9245cc2bc7a16179475dd5269a78969dbc4f30e4f2b9cbba62dc34e2f8972f6005a638b7f63494176b0988a22148fb383cc51c99454c17211b957c6ce070bdbfdca36cd3a2dcb35e401c08dbbb4ecb651d900e57165fa9feac11703968afb2927d1454b174bd3de611596b34f75647be296881296486856510534f00a42e26882fb995ae068683a9a0b6a25be22eee0da2d53e0ab3eaa6da4a36dc350b8d319f9d37c2f4041b9a13115721e12c01d62e219ea2f48ade5b8d85391ca0f7ff1be09e7c73c4dbaec515f75dedd19cccceac320781bd5f407bd378287863102a1e3ba2b71bdebe86d21374f2f26fef4f580cc665a6c09d9e0bc6cfffe3467e5373469a681c5f49a3e11c3eb991083365c1362507160334d0650425307524104792531144ef68c26df660dfe74b42867153f434853bdd1593ae703400edf14e578f1ba6010ad73006a20fdd264252d149e6d7dcefb93e05c828f06af46633cc020954d72716c768c38628775aff9d71dca797d971c6d8a7961b4e6b22c250b5dd46aabf0d54ada221fa656e6753185b7c7c30c2a95920eee002ab4f25912ffcaf086d78f9bec4a3a44c24792b55131cbb41f97b9de03571114e3b7235bd9220c071555c72cbebbf6e00e3361f0f4c200e0f6b7bdb47a635b3db1c159c9a86aa7f485691a4d5b1ab3dfacb7876c667d84cbe331830f1383e709e76c857fc2fcdde31ac7320b9ee5a2afb5ef5f1aa98ab0c241ffcaad284c27379e543d494444e0a66badfec744773a0d69fdc7e9d00b2b56d8a555b313e3d93a0fd4bd0757924c5877ffc3904837b2d7701ad305121b3d339d3c461a1793a50a5c5359c6ab968dcb4792d990b80ef6741705e401b00bc629fc5a4180c0971348df904ac4de834914cad3e0239cd1d4bbd7657e3c4e399b105737fcb9699e9b943160aead43399092c48e42f8d0c0da23e52c758014c7ec814160d7750d5245da2f835f964bdc2cf4dbf1dc04f64e2bef75f84dd7ab4f8687e9abddd9c207244d32136752fa37a46962f2511895e3cb96d7bc2c7f87cb5888ceb3bdfbf999c520834f244bbd1f519ec5b6adb24f553d893afcdfa392831a3fc633b162534ccb5a8808802a2a297b6ecb29c607fae3397896", 0x1000}], 0x2, &(0x7f0000001d00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32, @ANYRES32=r4, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000b4e8b0bb3e3db7229dc39bc3efa9d0777527654171b7c150b35630e8feebec34269715d472be16998ee1a24b"], 0x80, 0x4000800}}, {{&(0x7f0000005f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006140)=[{&(0x7f0000005f80)="5d5dd81dcd6217dbd25ff7fac5b69129ba365d334bf0afce53a42a08b7c6fd24deebd07be72a74cde871eab7835753e8f4e0f7829e73d37f30cecc3ab0789ca4e462130be2c3a12ecf890d6c71e7998955570fb68b9687211437736377a79dd19f9ceb0720216e5cf6293a086b6c63e0128297e256931e47e4646327cfd5065cfdff67", 0x83}, {&(0x7f0000006040)="d4f172d2ced0804595", 0x9}, {&(0x7f0000006080)="d9cf984ed902d8cf8ca5fb7a83af2867b03973930c4604bad07acee02db40b42afcf935a88e6c2a3e82952797163b6ada874a6593149700128acd6306230061e36b3e431c4f95e3471a8499872035a25f5372ff6ce95d90b37511f5b1d33845e0c5eb76e9bc75234a3ee1772cdbb04bc8117d0a88030bb7ec19bed301f8bc1ee7d70104796b89954b4e62c786a30cc17bb5200f593aa598d9886", 0x9a}], 0x3, 0x0, 0x0, 0x24000151}}, {{&(0x7f0000006180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000062c0)=[{&(0x7f0000006200)="333d4e4bc8947c21a510b31a9645ffa09427defee22f66719c98497a94c6abeb0edf6f74ac012eeda3f807aab70f71ef5371187657f0c5407689e0e4b58d9def2c855f5cb39d62787585efba2a255096733a57802929287478ccaf507cd4ad1ba4a5cf0056fe9d1760fbce9cfd8ceb80c06a0d8455c54debec23bc301e5ff39ede73eb9d9c2235c7fed300ee6c9af13d31e06ca85b68cc72f8a59e50ad58622b3036f61eee8f", 0xa6}], 0x1, 0x0, 0x0, 0x80}}, {{&(0x7f0000006300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008580)=[{&(0x7f0000008380)="04f1783cbe61dffd72c8d7e7da42ca361a14a407eef19ab43112c2a60061579eebfbf063790b75ccc6e1326525d8a463941f8a4f8e82f740f16a7a0150dc1eaf38d95a64c746acac889d61368fa87317fd980f385cf884a8fbe06cd1736457459ffcc59db806cacf5e1790e56981bb644c4a033ef7d4506b2ea0a2c02228d676f1bfea8cf7557a8a62d288e1a4596af122fe8489b5dab66b6929f900969a262d8e9cf73344d9f36c314949e2d5c2d98a843f1a7f84b7529839543035a8e0", 0xbe}, {&(0x7f0000008440)="5cc0871d670deccaa456bfde958effeedf393357b885766cba84a000acd07a11956cc1e108", 0x25}, {&(0x7f0000008480)="dc607e3fa9592127264259e44239cebd23f0328744907967ef7d65a2eca65423d9d48bc6daff696bdb22da6cc57f15b157f99ce139763bdf63ac160a481790ec6109913cd96c8eef0b570e96fd6a812b7e4fcd2c780c4851ab92570a923f7958c112fa310b5be04a250a79ef8935291c98e5f7ef29fc27fd2a107968290f40fbfbd5ff7bcdf1efcb7dd77223436d989b8f67ccdb87", 0x95}, {&(0x7f0000008540)="6fbf393b1a30ec", 0x7}], 0x4, 0x0, 0x0, 0x4000080}}, {{&(0x7f00000085c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000088c0)=[{&(0x7f0000008640)="c831c2d701a34ae78ace09b3b1306c2d2e301e1242bc23d2a2e5e22c4f579f36704efaeef86453c626f7283d5297427115af329f93bffdb10b1be0a0c24b1c9cde0bbe92b36c22d9e530", 0x4a}, {&(0x7f00000086c0)="d7f5caa809a6186232fd800a552c2e8f262dcf43cbe728e598376bd584eb0123421d64e7b0e77227416ca20fc6f747f7f85e5d0ab995c50a61a14b7855cd9dcfa5112d1d958d83b2a47f5c5e59ae2f8d87c5f01a3b8e05b5ecf917d51fd1babcb5a94b45eac850b74272f4b13f7cf973ca5fd2c261c8dbcf86a7f2f480bf39b95f173ba132fe6b02de4053bda2d560d26bddebbce0507e99103479cef48da47fea744791bf4dbc335a2256b1285c5050ff9094b675cb1a877848e8", 0xbb}, {&(0x7f0000008780)="0669da59d659008eba5caa9e2b535b426d0bf7cf69f3", 0x16}, {&(0x7f00000087c0)="dc111a3b63874f64e7b4a4e93aaf45cf3e6493f369e71a5113c988025ba1a7871a1d22d0", 0x24}, {&(0x7f0000008800)="390ab36d1a2168c199481fd54bd2e5c7a4b6e96591c2dc4e7f0cce6347caed2aef071aab6ceac24f9f7a7dd28c9b0b2ccc34236779256ecd4f80130b11f8cfa48cd6f7e73e973d114e4b80cd5cd01956796d49b7a799de7696580b395cbcdd985888aeaeec337420d03e83a91d0708a6164b361d98c9ab8db4f70c664bc93c0657f8dc353bf49dce8d5be537feec9061f9aff53e7ae8b83d478292caa25c4edeafcd615be843ca774ee81a3bb3c99b2005b0c73c20d9e8cae0fcacb3e368ac", 0xbf}], 0x5, 0x0, 0x0, 0x20008801}}, {{&(0x7f0000008940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008a80)=[{&(0x7f000000b400)="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", 0x1000}, {&(0x7f00000089c0)="60ded3f8e43454bbb6ae06d8f7273d521092fd6c74a6e53ee4cafc3788a04805ca770bba1de7bb4b62d666b5649142da436824415394f8531f276c00897fb30ebef04d1e3d7b157db7dc062985aab48df6e0bf3121917469d0d327d89ec7e9d367642816911ea2e28c874463aa6e15f50ff5", 0x72}, {&(0x7f0000008a40)="91d0d778ed99222013caa0a25e0bc0eeb1cb13974bff5bc8891b1004bfeb", 0x1e}], 0x3, &(0x7f0000008ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r1]}}], 0x60, 0x20000000}}, {{&(0x7f0000008b40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000009000)=[{&(0x7f0000001ec0)="68b407e39788816f59a6479a18e635bfcd6a5bebeafb40333ecae31864eb5488abd9bb6fda80eca432bcf796986eba81c0132c8be26ca615566c90f422ad4a3e3c648e6ca7a18c0caf834ae715c786da5dac135411876c135137a0490436d95b38ecf41d0b9664cb8f720e51a5d4242d0004138eeed67a9e4c08a9a19207ae88c0f53013d299d40c190ce5e98a0a1b748754e750945b399119cd49af1b5d6c74a0e6b032ebb1d5a501421352b433b31b1275cdda8aee7ad693733d4878c92b913bf1ac1e462a1524bc4e853f7dcda6a32799", 0xd2}, {&(0x7f0000008cc0)="d5b4d5c64d87f35af1b20dcbad013e3fbba5c23a01e9b5f5fc4d2428ec91", 0x1e}, {&(0x7f0000008d00)="b853d776d45809547e60b65c9e81b5497ebb19f9e0877bf8caeb1c26f0d0f89bebf08d5b063bbf35ecb19a393222e875785f2964f2e92229753b8fd8827a679fd89e45f853", 0x45}, {&(0x7f0000008d80)="a5906e48ffc1ca4fbd1876353f89d9560106f4eb6b6663cfdfde1c4281b65bbbacc5bf27a84bddb1cf72dec8425a66ebf125be0e53aa829dd93e0ff89750a539cc784c287113186d89895d3c55c8de0e1d2b409dfb5a997d4e6202f9cc160a1b7e84455a7cc0ee5b440cf87ef65f403aff4e01282b14dc59c6cab4f64c087045048b94ff0feffb9eb81a78f17ffe372a943e2886f108e6cf4626297b3aeee061852bf55ba6eaacdb2da6171d30da00922ea0e61e2bcdf3cb42165e304d04d2d491d4", 0xc2}, {&(0x7f000000c400)="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", 0x1000}, {&(0x7f0000008e80)="ea10fd1dc463c44b6ca8794d9d1a0b76779045083d939959d26ff5f91608123ec84884b6ba1f6b6c2748b67f8aadf2956e0579dbf93cdd4edeb09ad265c514504a9c3d33478ce9c8", 0x48}, {&(0x7f0000008f00)="bf9726cdc2209aa7255d00deb70fe90a278fbbcb69f758dca604883fe8eb6fc6e17da04588b6c5710e073e68f960328ae3bc0542afb0ec943802ac0816573f94de16ccd829832ead5d298a74d25ed6fdad8d40fd88fbc910049a03706ca488a494e3f7789ce1ae92cc7d93ff1c05b690282fd710630615aa9f58f5e4893a19890a5cedfbc51220", 0x87}, {&(0x7f0000008fc0)="c64d6d6e7862d6c52748801549e435c21409de2ef04de8b865c6b09c38e3d83b161141", 0x23}], 0x8, &(0x7f0000009080)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c}}], 0xa0, 0x4040010}}, {{0x0, 0x0, &(0x7f0000009140)=[{&(0x7f000000d400)="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", 0x1000}], 0x1, &(0x7f0000001b40)=[@rights={{0x2c, 0x1, 0x1, [r5, r4, r8, r3, r0, r8, r7]}}, @cred={{0x1c}}], 0x50, 0x5}}], 0x8, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x3, 0x3, 0x9, 0x10, 0x9}, 0x47, &(0x7f0000000380)=ANY=[@ANYBLOB="050f470004141004088f5a99f8920076a161ccb3883326644208100302040000026c4710100a078100000000f0440030000000141004ff0fa6ade58769fa77c6783f7d2fe1f749"], 0x6, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x409}}, {0x2b, &(0x7f00000001c0)=ANY=[@ANYBLOB="2b038e207d34049fa9713b258d5caaa654651f36f36976684ed46f83b8b637870f9f316a616a252508000000c557cc5f38ca64f1a81d89"]}, {0xb6, &(0x7f00000004c0)=@string={0xb6, 0x3, "8c96d2b845588d4be428af1f1df885f0332597ee1975c3855f561299bba9c3cd936992630be9a2f54526f8bafc12be46c7ec8e7ffffc61e97b63001c6667559f79cd6fd7af76441b53a6bfaf0fba446b557da94ce260b8fd1298832d37b581c582b381d1b10d6600e8e7d0d45c4c64900041db90cf34eb064d2f87557ab23daf3562150ed7e5fedecd3bb3a785c9c8ea7b5b28f0a29673afd813a15398cbb85c3fb6f9752751e7d698c3ae4ade8352d9182be6b9"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x419}}, {0x9c, &(0x7f0000000a00)=ANY=[@ANYBLOB="9c03e86a24ca7967e23ff544d21f92cbb24e5529dd277175ce86b486cead2aeb14084a7cae19b580d171009c2e614fd2a28f8893c9069f71cdab9a6db26395d933eb9029d8cd3d0adf4d4acf2c5128352552bd3d44bcb71af2ff7514c8c23b0f3fcd68c1494c7a4170876ae0614ee8bd3929da5ac8f5cfcef3369e64fd2548090fe60e6e9b63491366cded7d2857fa8ea1ca0d407d5cc8601cbdf4a3bd48e1f882669df7ddc86672f967db"]}]}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 1.567520175s ago: executing program 0 (id=3775): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, 0x0, 0x0, 0x200040c4) 1.449650246s ago: executing program 0 (id=3776): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r0, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r1], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 1.389858841s ago: executing program 0 (id=3777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newtfilter={0x60, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044080) 77.519497ms ago: executing program 5 (id=3778): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xf, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}, @timestamp={0x8, 0xa, 0x8, 0x7}, @eol, @sack={0x5, 0x2}, @sack={0x5, 0x12, [0xfffffffe, 0x66a418d2, 0xffffffff, 0x0]}, @mss={0x2, 0x4, 0xf5b6}]}}}}}}}, 0x0) 0s ago: executing program 5 (id=3779): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="73a27bb653150a6a3c936ebaffd28e43012512ebe5a6ed1332e0046451137ffb1dfda4794838aa8b693789447216195b1fcdcc9eaa56f4a931378fcd6124579defeaa730b80054b8478986056350450ed7646428efa856ec51df8be44ba8a380390c79efb3fd3f2ce14376b292a18386efefecb3e023cf8ecf661f483147f50ba48681eb931ba60aa5afff8548d7213ed19c688cd3058ed1697cabab4095c06779000c35dfa8ed33"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r9}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) kernel console output (not intermixed with test programs): 28206][ T6065] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.355004][T13430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.372539][ T6065] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.240324][T13434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.700424][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.700445][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.710327][T13427] veth0_vlan: entered promiscuous mode [ 480.425968][T13427] veth1_vlan: entered promiscuous mode [ 480.441837][ T6065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.441858][ T6065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.633987][T13534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2969'. [ 481.009573][T13537] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2969'. [ 481.077635][T13423] veth0_vlan: entered promiscuous mode [ 481.088022][T13430] veth0_vlan: entered promiscuous mode [ 481.427062][T13543] tipc: Started in network mode [ 481.427079][T13543] tipc: Node identity , cluster identity 4711 [ 481.427093][T13543] tipc: Failed to obtain node identity [ 481.427118][T13543] tipc: Enabling of bearer rejected, failed to enable media [ 481.596837][T13547] serio: Serial port ptm0 [ 481.829143][T13430] veth1_vlan: entered promiscuous mode [ 481.833374][T13423] veth1_vlan: entered promiscuous mode [ 481.838033][T13427] veth0_macvtap: entered promiscuous mode [ 481.866093][T13434] veth0_vlan: entered promiscuous mode [ 481.984973][T13427] veth1_macvtap: entered promiscuous mode [ 482.328884][T13434] veth1_vlan: entered promiscuous mode [ 482.459807][T13427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.509394][T13427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.510172][T13423] veth0_macvtap: entered promiscuous mode [ 482.523446][T13430] veth0_macvtap: entered promiscuous mode [ 482.601796][T13423] veth1_macvtap: entered promiscuous mode [ 482.603304][ T6065] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.603880][T13430] veth1_macvtap: entered promiscuous mode [ 482.629314][ T6065] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.641340][ T6065] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.646703][ T6065] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.694441][T13434] veth0_macvtap: entered promiscuous mode [ 482.706537][T13567] random: crng reseeded on system resumption [ 482.805264][T13434] veth1_macvtap: entered promiscuous mode [ 482.851911][T13423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.854263][T13430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.981766][T13430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.985636][T13423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.141732][T10816] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.146466][T10816] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.157486][T10816] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.178371][T13434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.190633][T10816] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.207863][T10816] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.253011][T10816] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.304511][T13434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.355951][T10816] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.430022][T10816] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.770710][T13578] can0: slcan on ptm0. [ 483.817962][ T6065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.817982][ T6065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.830561][ T6999] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.891032][ T6999] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.910227][T13579] can0 (unregistered): slcan off ptm0. [ 483.931280][ T6999] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.046991][ T6999] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.198643][ T1501] hsr_slave_0: left promiscuous mode [ 484.220187][ T1501] hsr_slave_1: left promiscuous mode [ 484.281217][ T1501] hsr_slave_0: left promiscuous mode [ 484.319318][ T1501] hsr_slave_1: left promiscuous mode [ 484.368780][ T1501] hsr_slave_0: left promiscuous mode [ 484.408813][ T1501] hsr_slave_1: left promiscuous mode [ 484.468618][ T1501] hsr_slave_0: left promiscuous mode [ 484.488701][ T1501] hsr_slave_1: left promiscuous mode [ 484.621309][ T1501] veth1_vlan: left promiscuous mode [ 484.621451][ T1501] veth0_vlan: left promiscuous mode [ 484.775275][ T1501] veth1_vlan: left promiscuous mode [ 484.775472][ T1501] veth0_vlan: left promiscuous mode [ 484.889192][ T1501] veth1_vlan: left promiscuous mode [ 484.889387][ T1501] veth0_vlan: left promiscuous mode [ 484.980802][ T1501] veth1_vlan: left promiscuous mode [ 484.980940][ T1501] veth0_vlan: left promiscuous mode [ 487.160151][ T1501] team0 (unregistering): Port device team_slave_1 removed [ 491.430771][ T1501] team0 (unregistering): Port device team_slave_1 removed [ 491.679259][ T1501] team0 (unregistering): Port device team_slave_0 removed [ 492.133997][ T6055] smc: removing ib device syz0 [ 495.979195][ T1501] team0 (unregistering): Port device team_slave_1 removed [ 496.229267][ T1501] team0 (unregistering): Port device team_slave_0 removed [ 499.192514][ T5123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 499.195208][ T5123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 499.212744][ T5123] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 499.235971][ T5123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 499.236765][ T5123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 500.729236][ T1501] team0 (unregistering): Port device team_slave_1 removed [ 500.959290][ T1501] team0 (unregistering): Port device team_slave_0 removed [ 501.271332][ T5811] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 501.308887][ T5819] Bluetooth: hci3: command tx timeout [ 501.317788][ T5811] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 501.323049][ T5811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 501.324344][ T5811] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 501.329027][ T5811] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 501.555644][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.555736][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.394599][ T5123] Bluetooth: hci6: command tx timeout [ 503.405225][ T5123] Bluetooth: hci3: command tx timeout [ 503.929196][ T6065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.929216][ T6065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.135422][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.135442][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.200827][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.200846][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.393709][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 505.468534][ T5819] Bluetooth: hci6: command tx timeout [ 505.468624][ T5811] Bluetooth: hci3: command tx timeout [ 505.468936][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 505.471114][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 505.472445][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 505.473441][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 506.553872][ T4511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.553891][ T4511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.659361][T10816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.659381][T10816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.548736][ T5811] Bluetooth: hci2: command tx timeout [ 507.548739][ T5819] Bluetooth: hci6: command tx timeout [ 507.560382][ T5123] Bluetooth: hci3: command tx timeout [ 507.599041][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3003'. [ 507.649786][T13587] chnl_net:caif_netlink_parms(): no params data found [ 507.751915][T13622] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3005'. [ 507.934609][T13581] chnl_net:caif_netlink_parms(): no params data found [ 507.991875][T13624] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3005'. [ 508.185985][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 508.186003][ T37] audit: type=1326 audit(508.003:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.8.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de71bf749 code=0x7ffc0000 [ 508.187937][ T37] audit: type=1326 audit(508.003:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.8.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de71bf749 code=0x7ffc0000 [ 508.238156][ T37] audit: type=1326 audit(508.033:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.8.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de71bf749 code=0x7ffc0000 [ 508.238221][ T37] audit: type=1326 audit(508.033:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.8.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1de71bf749 code=0x7ffc0000 [ 508.238262][ T37] audit: type=1326 audit(508.033:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.8.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de71bf749 code=0x7ffc0000 [ 508.238308][ T37] audit: type=1326 audit(508.033:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.8.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de71bf749 code=0x7ffc0000 [ 508.238348][ T37] audit: type=1326 audit(508.033:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.8.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de71bf749 code=0x7ffc0000 [ 508.238496][ T37] audit: type=1326 audit(508.033:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.8.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de71bf749 code=0x7ffc0000 [ 508.238535][ T37] audit: type=1326 audit(508.033:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.8.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de71bf749 code=0x7ffc0000 [ 508.238576][ T37] audit: type=1326 audit(508.033:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13630 comm="syz.8.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1de71bf749 code=0x7ffc0000 [ 509.551490][T13592] chnl_net:caif_netlink_parms(): no params data found [ 509.628625][ T5123] Bluetooth: hci2: command tx timeout [ 509.647425][ T5123] Bluetooth: hci6: command tx timeout [ 509.692335][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3014'. [ 510.299482][T13587] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.299680][T13587] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.300404][T13587] bridge_slave_0: entered allmulticast mode [ 510.302178][T13587] bridge_slave_0: entered promiscuous mode [ 510.349157][T13581] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.349233][T13581] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.349406][T13581] bridge_slave_0: entered allmulticast mode [ 510.352501][T13581] bridge_slave_0: entered promiscuous mode [ 510.393738][T13587] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.393813][T13587] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.394058][T13587] bridge_slave_1: entered allmulticast mode [ 510.395739][T13587] bridge_slave_1: entered promiscuous mode [ 510.426691][T13581] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.426826][T13581] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.427077][T13581] bridge_slave_1: entered allmulticast mode [ 510.452330][T13581] bridge_slave_1: entered promiscuous mode [ 510.925488][T13587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.940049][T13581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.026827][ T1501] IPVS: stop unused estimator thread 0... [ 511.037596][T13587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.038119][ T1501] IPVS: stop unused estimator thread 0... [ 511.041796][ T1501] IPVS: stop unused estimator thread 0... [ 511.063239][T13581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.063477][T13592] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.063939][T13592] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.064125][T13592] bridge_slave_0: entered allmulticast mode [ 511.066783][T13592] bridge_slave_0: entered promiscuous mode [ 511.270448][T13678] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3025'. [ 511.294556][T13592] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.295268][T13592] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.295506][T13592] bridge_slave_1: entered allmulticast mode [ 511.319342][T13592] bridge_slave_1: entered promiscuous mode [ 511.624571][T13687] netlink: 133536 bytes leftover after parsing attributes in process `syz.8.3030'. [ 511.641176][T13587] team0: Port device team_slave_0 added [ 511.656015][T13581] team0: Port device team_slave_0 added [ 511.711325][ T5123] Bluetooth: hci2: command tx timeout [ 511.981966][T13587] team0: Port device team_slave_1 added [ 511.985138][T13581] team0: Port device team_slave_1 added [ 511.992365][T13592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.280380][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3035'. [ 512.311323][T13592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.328305][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3035'. [ 512.662999][T13587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.663016][T13587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.663042][T13587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.669046][T13581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.669064][T13581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.669086][T13581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.804461][T13581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.804478][T13581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.804501][T13581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.806744][T13587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.806765][T13587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.806790][T13587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.819594][T13592] team0: Port device team_slave_0 added [ 512.891794][T13592] team0: Port device team_slave_1 added [ 513.393173][T13592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.393189][T13592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.393211][T13592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.643956][T13592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.643973][T13592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.643998][T13592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.695511][T13581] hsr_slave_0: entered promiscuous mode [ 513.705276][T13581] hsr_slave_1: entered promiscuous mode [ 513.726525][T13581] debugfs: 'hsr0' already exists in 'hsr' [ 513.726553][T13581] Cannot create hsr debugfs directory [ 513.750135][T13587] hsr_slave_0: entered promiscuous mode [ 513.751625][T13587] hsr_slave_1: entered promiscuous mode [ 513.752575][T13587] debugfs: 'hsr0' already exists in 'hsr' [ 513.752599][T13587] Cannot create hsr debugfs directory [ 513.798600][ T5123] Bluetooth: hci2: command tx timeout [ 514.075055][ T37] kauditd_printk_skb: 39 callbacks suppressed [ 514.075073][ T37] audit: type=1326 audit(513.893:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13737 comm="syz.8.3050" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1de71bf749 code=0x0 [ 514.785439][T13745] tipc: Can't bind to reserved service type 1 [ 514.862348][ T37] audit: type=1326 audit(514.683:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13746 comm="syz.8.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de71bf749 code=0x7ffc0000 [ 514.864049][ T37] audit: type=1326 audit(514.683:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13746 comm="syz.8.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1de71bf749 code=0x7ffc0000 [ 514.864395][ T37] audit: type=1326 audit(514.683:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13746 comm="syz.8.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de71bf749 code=0x7ffc0000 [ 514.864516][ T37] audit: type=1326 audit(514.683:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13746 comm="syz.8.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de71bf749 code=0x7ffc0000 [ 514.864951][ T37] audit: type=1326 audit(514.683:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13746 comm="syz.8.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1de71bf749 code=0x7ffc0000 [ 514.869518][ T37] audit: type=1326 audit(514.683:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13746 comm="syz.8.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de71bf749 code=0x7ffc0000 [ 514.880138][ T37] audit: type=1326 audit(514.683:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13746 comm="syz.8.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de71bf749 code=0x7ffc0000 [ 514.882473][ T37] audit: type=1326 audit(514.703:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13746 comm="syz.8.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1de71bf749 code=0x7ffc0000 [ 514.883135][ T37] audit: type=1326 audit(514.703:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13746 comm="syz.8.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de71bf749 code=0x7ffc0000 [ 516.013642][T13592] hsr_slave_0: entered promiscuous mode [ 516.099317][T13592] hsr_slave_1: entered promiscuous mode [ 516.100382][T13592] debugfs: 'hsr0' already exists in 'hsr' [ 516.100406][T13592] Cannot create hsr debugfs directory [ 516.401408][ T4511] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.706977][T13781] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3066'. [ 516.707194][T13781] ksmbd: Unknown IPC event: 1, ignore. [ 516.840959][ T4511] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.320396][ T4511] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.607222][ T4511] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.066588][T13581] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 518.156889][T13581] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 518.421596][T13587] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.492436][T13581] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 518.516420][T13581] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 518.759063][T13587] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.046089][T13587] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.337371][T13587] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.927893][ T4511] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.342410][ T4511] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.738135][ T4511] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.799368][T13581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.963144][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 520.963162][ T37] audit: type=1326 audit(520.783:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13850 comm="syz.7.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfbcf749 code=0x7ffc0000 [ 520.963220][ T37] audit: type=1326 audit(520.783:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13850 comm="syz.7.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfbcf749 code=0x7ffc0000 [ 520.963338][ T37] audit: type=1326 audit(520.783:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13850 comm="syz.7.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07bfbcf749 code=0x7ffc0000 [ 520.964098][ T37] audit: type=1326 audit(520.783:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13850 comm="syz.7.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfbcf749 code=0x7ffc0000 [ 520.964500][ T37] audit: type=1326 audit(520.783:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13850 comm="syz.7.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfbcf749 code=0x7ffc0000 [ 520.964618][ T37] audit: type=1326 audit(520.783:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13850 comm="syz.7.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07bfbcf749 code=0x7ffc0000 [ 520.965855][ T37] audit: type=1326 audit(520.783:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13850 comm="syz.7.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfbcf749 code=0x7ffc0000 [ 520.965996][ T37] audit: type=1326 audit(520.783:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13850 comm="syz.7.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfbcf749 code=0x7ffc0000 [ 520.967034][ T37] audit: type=1326 audit(520.783:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13850 comm="syz.7.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07bfbcf749 code=0x7ffc0000 [ 520.967497][ T37] audit: type=1326 audit(520.783:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13850 comm="syz.7.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfbcf749 code=0x7ffc0000 [ 521.317818][ T4511] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.510354][T13581] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.574393][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.578732][ T6067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.625567][ T6183] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.625771][ T6183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.082679][ T4511] bridge_slave_1: left allmulticast mode [ 522.082708][ T4511] bridge_slave_1: left promiscuous mode [ 522.082962][ T4511] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.170453][ T4511] bridge_slave_0: left allmulticast mode [ 522.170483][ T4511] bridge_slave_0: left promiscuous mode [ 522.170722][ T4511] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.255355][ T4511] bridge_slave_1: left allmulticast mode [ 522.255383][ T4511] bridge_slave_1: left promiscuous mode [ 522.255630][ T4511] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.410208][ T4511] bridge_slave_0: left allmulticast mode [ 522.410238][ T4511] bridge_slave_0: left promiscuous mode [ 522.410486][ T4511] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.489526][ T4511] bridge_slave_1: left allmulticast mode [ 522.489557][ T4511] bridge_slave_1: left promiscuous mode [ 522.489803][ T4511] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.560449][ T4511] bridge_slave_0: left allmulticast mode [ 522.560479][ T4511] bridge_slave_0: left promiscuous mode [ 522.560726][ T4511] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.150504][ T4511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.239621][ T4511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.286583][ T4511] bond0 (unregistering): Released all slaves [ 527.000149][ T4511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.059127][ T4511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.080865][ T4511] bond0 (unregistering): Released all slaves [ 528.829406][ T4511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.889225][ T4511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.931666][ T4511] bond0 (unregistering): Released all slaves [ 528.979630][T13904] tipc: Started in network mode [ 528.979658][T13904] tipc: Node identity baa04606ea91, cluster identity 4711 [ 528.979857][T13904] tipc: Enabled bearer , priority 0 [ 528.980601][T13905] syzkaller0: entered promiscuous mode [ 528.980620][T13905] syzkaller0: entered allmulticast mode [ 529.060195][T13909] tipc: Resetting bearer [ 529.169101][T13902] tipc: Resetting bearer [ 529.319459][T13902] tipc: Disabling bearer [ 529.541139][T13587] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 529.643961][T13587] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 530.126235][T13587] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 530.283665][T13587] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 530.639542][T13581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.866369][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 530.866491][ T37] audit: type=1326 audit(530.683:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13954 comm="syz.7.3130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfbcf749 code=0x7ffc0000 [ 530.866543][ T37] audit: type=1326 audit(530.683:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13954 comm="syz.7.3130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfbcf749 code=0x7ffc0000 [ 530.866653][ T37] audit: type=1326 audit(530.683:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13954 comm="syz.7.3130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f07bfbcf749 code=0x7ffc0000 [ 530.940109][ T37] audit: type=1326 audit(530.683:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13954 comm="syz.7.3130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfbcf749 code=0x7ffc0000 [ 530.940170][ T37] audit: type=1326 audit(530.683:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13954 comm="syz.7.3130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfbcf749 code=0x7ffc0000 [ 531.456257][ T5866] IPVS: starting estimator thread 0... [ 531.559829][T13964] IPVS: using max 8 ests per chain, 19200 per kthread [ 531.950681][T13592] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 532.040797][T13592] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 532.420783][T13592] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 532.600035][T13592] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 533.011582][ T4511] hsr_slave_0: left promiscuous mode [ 533.048534][ T4511] hsr_slave_1: left promiscuous mode [ 533.049593][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.049880][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.081032][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.081059][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.278541][ T4511] hsr_slave_0: left promiscuous mode [ 533.318612][ T4511] hsr_slave_1: left promiscuous mode [ 533.319651][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.319675][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.379924][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.379952][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.562015][ T4511] hsr_slave_0: left promiscuous mode [ 533.599446][ T4511] hsr_slave_1: left promiscuous mode [ 533.600551][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.600577][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.630313][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.630341][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.660014][ T6269] IPVS: starting estimator thread 0... [ 533.748683][T14021] IPVS: using max 10 ests per chain, 24000 per kthread [ 533.876165][ T4511] veth1_macvtap: left promiscuous mode [ 533.876268][ T4511] veth0_macvtap: left promiscuous mode [ 533.876540][ T4511] veth1_vlan: left promiscuous mode [ 533.876723][ T4511] veth0_vlan: left promiscuous mode [ 533.947774][ T37] audit: type=1326 audit(533.763:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14031 comm="syz.7.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfbcf749 code=0x7ffc0000 [ 533.948107][ T37] audit: type=1326 audit(533.763:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14031 comm="syz.7.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f07bfbcf749 code=0x7ffc0000 [ 533.948367][ T37] audit: type=1326 audit(533.763:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14031 comm="syz.7.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfbcf749 code=0x7ffc0000 [ 534.135745][ T4511] veth1_macvtap: left promiscuous mode [ 534.135857][ T4511] veth0_macvtap: left promiscuous mode [ 534.151689][ T4511] veth1_vlan: left promiscuous mode [ 534.151891][ T4511] veth0_vlan: left promiscuous mode [ 534.322024][ T4511] veth1_macvtap: left promiscuous mode [ 534.322134][ T4511] veth0_macvtap: left promiscuous mode [ 534.322386][ T4511] veth1_vlan: left promiscuous mode [ 534.322531][ T4511] veth0_vlan: left promiscuous mode [ 537.770460][ T4511] team0 (unregistering): Port device team_slave_1 removed [ 537.989955][ T4511] team0 (unregistering): Port device team_slave_0 removed [ 542.379329][ T4511] team0 (unregistering): Port device team_slave_1 removed [ 542.599186][ T4511] team0 (unregistering): Port device team_slave_0 removed [ 543.859681][T14121] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 543.859855][T14121] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 545.321451][T14138] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 545.321589][T14138] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 548.001057][ T4511] team0 (unregistering): Port device team_slave_1 removed [ 548.239200][ T4511] team0 (unregistering): Port device team_slave_0 removed [ 549.228635][ T5123] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 549.228658][ T5811] Bluetooth: hci1: command 0x1003 tx timeout [ 550.519186][T14167] capability: warning: `syz.7.3203' uses deprecated v2 capabilities in a way that may be insecure [ 550.988028][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 551.004291][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 551.006441][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 551.012532][ T5811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 551.013386][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 551.853410][T14043] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 551.853437][T14043] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 551.853453][T14043] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 552.062617][T13587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.648937][T13581] veth0_vlan: entered promiscuous mode [ 553.082661][ T5811] Bluetooth: hci1: command tx timeout [ 553.491307][T13587] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.573077][ T6065] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.573307][ T6065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.587859][T13581] veth1_vlan: entered promiscuous mode [ 553.623719][ T6065] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.623839][ T6065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.075639][T13581] veth0_macvtap: entered promiscuous mode [ 554.157928][T13592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.176917][T13581] veth1_macvtap: entered promiscuous mode [ 554.286468][T13592] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.328955][T14174] chnl_net:caif_netlink_parms(): no params data found [ 554.531005][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.532077][ T6067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.544036][T13581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.149091][ T5811] Bluetooth: hci1: command tx timeout [ 555.507251][T13581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.527096][ T1284] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.527316][ T1284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.596525][T13587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.636293][ T6183] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.789170][ T6183] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.904842][ T6183] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.908314][T14174] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.909896][T14174] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.910096][T14174] bridge_slave_0: entered allmulticast mode [ 555.920115][T14174] bridge_slave_0: entered promiscuous mode [ 555.944448][ T6183] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.945952][T14174] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.946077][T14174] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.946314][T14174] bridge_slave_1: entered allmulticast mode [ 555.979392][T14174] bridge_slave_1: entered promiscuous mode [ 557.277824][T14174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.297176][T14174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.308706][ T5811] Bluetooth: hci1: command tx timeout [ 557.600810][T14174] team0: Port device team_slave_0 added [ 557.704971][T14174] team0: Port device team_slave_1 added [ 558.104412][T14174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.104429][T14174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.104453][T14174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.187072][T14174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.187089][T14174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.187116][T14174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.228949][ T6183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.228970][ T6183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.817900][T14174] hsr_slave_0: entered promiscuous mode [ 558.820059][T14174] hsr_slave_1: entered promiscuous mode [ 558.821846][ T6065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.821863][ T6065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.999735][T13587] veth0_vlan: entered promiscuous mode [ 559.254872][T13587] veth1_vlan: entered promiscuous mode [ 559.388646][ T5811] Bluetooth: hci1: command tx timeout [ 559.556478][ T5123] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 559.560616][ T5123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 559.561944][ T5123] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 559.563618][ T5123] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 559.593125][ T5123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 559.627870][T13592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.890374][ T4511] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.956765][T13587] veth0_macvtap: entered promiscuous mode [ 561.089880][T13587] veth1_macvtap: entered promiscuous mode [ 561.235725][ T4511] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.523789][ T4511] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.709103][ T5123] Bluetooth: hci4: command tx timeout [ 562.045473][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 562.068314][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 562.069875][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 562.071726][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 562.074914][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 562.180973][ T4511] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.915665][T13592] veth0_vlan: entered promiscuous mode [ 562.994171][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.994236][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.017947][T14279] chnl_net:caif_netlink_parms(): no params data found [ 563.284317][T14315] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3252'. [ 563.284335][T14315] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3252'. [ 563.284345][T14315] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3252'. [ 563.390574][T14315] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3252'. [ 563.390593][T14315] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3252'. [ 563.390602][T14315] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3252'. [ 563.403112][T13592] veth1_vlan: entered promiscuous mode [ 563.501296][ T4511] bridge_slave_1: left allmulticast mode [ 563.501324][ T4511] bridge_slave_1: left promiscuous mode [ 563.501577][ T4511] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.551441][T14315] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3252'. [ 563.551468][T14315] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3252'. [ 563.551483][T14315] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3252'. [ 563.588858][ T4511] bridge_slave_0: left allmulticast mode [ 563.588886][ T4511] bridge_slave_0: left promiscuous mode [ 563.589172][ T4511] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.788813][ T5123] Bluetooth: hci4: command tx timeout [ 564.125738][ T5123] Bluetooth: hci3: command tx timeout [ 565.292834][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 565.327450][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 565.341660][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 565.343738][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 565.344429][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 565.659399][ T4511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.720763][ T4511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.740990][ T4511] bond0 (unregistering): Released all slaves [ 565.868631][ T5123] Bluetooth: hci4: command tx timeout [ 565.892023][T14174] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 565.969661][ T4511] tipc: Left network mode [ 566.129089][T14174] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 566.201326][ T5123] Bluetooth: hci3: command tx timeout [ 566.478228][T14345] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3259'. [ 566.619718][T14279] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.619932][T14279] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.620264][T14279] bridge_slave_0: entered allmulticast mode [ 566.623201][T14279] bridge_slave_0: entered promiscuous mode [ 566.627415][T14174] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 566.922144][T14279] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.922247][T14279] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.922396][T14279] bridge_slave_1: entered allmulticast mode [ 566.923963][T14279] bridge_slave_1: entered promiscuous mode [ 566.969522][T14174] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 567.388597][ T5123] Bluetooth: hci5: command tx timeout [ 567.620722][T14279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.669757][T14279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.958797][ T5123] Bluetooth: hci4: command tx timeout [ 568.109270][ T4511] hsr_slave_0: left promiscuous mode [ 568.148614][ T4511] hsr_slave_1: left promiscuous mode [ 568.149468][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.149486][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.192922][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.192949][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.270181][ T5123] Bluetooth: hci3: command tx timeout [ 568.292872][ T4511] veth1_macvtap: left promiscuous mode [ 568.292983][ T4511] veth0_macvtap: left promiscuous mode [ 568.293313][ T4511] veth1_vlan: left promiscuous mode [ 568.293499][ T4511] veth0_vlan: left promiscuous mode [ 569.468588][ T5123] Bluetooth: hci5: command tx timeout [ 570.359964][ T5123] Bluetooth: hci3: command tx timeout [ 570.839297][ T4511] team0 (unregistering): Port device team_slave_1 removed [ 571.100187][ T4511] team0 (unregistering): Port device team_slave_0 removed [ 571.548735][ T5123] Bluetooth: hci5: command tx timeout [ 573.638594][ T5811] Bluetooth: hci5: command tx timeout [ 573.802072][T14279] team0: Port device team_slave_0 added [ 573.847361][T14279] team0: Port device team_slave_1 added [ 574.211624][T14392] __nla_validate_parse: 17 callbacks suppressed [ 574.211650][T14392] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3273'. [ 574.211668][T14392] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3273'. [ 574.211683][T14392] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3273'. [ 575.048059][T14279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.048076][T14279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.048101][T14279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.055241][T14279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.055257][T14279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.055282][T14279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.084019][T14301] chnl_net:caif_netlink_parms(): no params data found [ 575.308641][ T5811] Bluetooth: hci0: command 0x0406 tx timeout [ 575.412737][T14402] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 575.454077][T14279] hsr_slave_0: entered promiscuous mode [ 575.455814][T14279] hsr_slave_1: entered promiscuous mode [ 575.456342][T14279] debugfs: 'hsr0' already exists in 'hsr' [ 575.456356][T14279] Cannot create hsr debugfs directory [ 575.892111][T14301] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.892334][T14301] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.892573][T14301] bridge_slave_0: entered allmulticast mode [ 575.895780][T14301] bridge_slave_0: entered promiscuous mode [ 576.079630][T14301] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.080103][T14301] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.080334][T14301] bridge_slave_1: entered allmulticast mode [ 576.082536][T14301] bridge_slave_1: entered promiscuous mode [ 576.181456][T14415] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3280'. [ 576.181484][T14415] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3280'. [ 576.181499][T14415] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3280'. [ 577.255321][T14301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.279008][ T4511] IPVS: stop unused estimator thread 0... [ 577.287395][T14332] chnl_net:caif_netlink_parms(): no params data found [ 577.314848][T14301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.751060][T14428] binder: 14426:14428 ioctl c0306201 200000000640 returned -22 [ 577.831707][T14301] team0: Port device team_slave_0 added [ 577.939235][T14301] team0: Port device team_slave_1 added [ 578.303966][T14432] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3286'. [ 578.805047][T14301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.805064][T14301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.805086][T14301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.048464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 580.088467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 580.458455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 580.528422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 580.628455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 580.789702][ C0] vkms_vblank_simulate: vblank timer overrun [ 581.028447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 581.038498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 581.128461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 581.128495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 581.222435][T14279] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.365816][T14301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.365833][T14301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.365859][T14301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.368898][T14332] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.408890][T14332] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.409160][T14332] bridge_slave_0: entered allmulticast mode [ 581.419248][T14332] bridge_slave_0: entered promiscuous mode [ 581.901585][ C0] vkms_vblank_simulate: vblank timer overrun [ 581.932183][T14279] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.981681][T14332] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.981830][T14332] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.982152][T14332] bridge_slave_1: entered allmulticast mode [ 581.984675][T14332] bridge_slave_1: entered promiscuous mode [ 582.023647][T14451] binder: 14449:14451 ioctl c0306201 200000000640 returned -22 [ 582.602368][T14453] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3293'. [ 582.615592][T14279] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.656403][T14332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.952345][ C0] vkms_vblank_simulate: vblank timer overrun [ 583.063226][T14332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.082475][T14301] hsr_slave_0: entered promiscuous mode [ 583.084478][T14301] hsr_slave_1: entered promiscuous mode [ 583.086092][T14301] debugfs: 'hsr0' already exists in 'hsr' [ 583.086154][T14301] Cannot create hsr debugfs directory [ 583.281712][T14279] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.558763][T14174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.741654][T14332] team0: Port device team_slave_0 added [ 583.750317][T14467] binder: 14465:14467 ioctl c0306201 200000000640 returned -22 [ 583.882623][T14332] team0: Port device team_slave_1 added [ 584.239616][T14332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.239634][T14332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.239661][T14332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.252402][ C0] vkms_vblank_simulate: vblank timer overrun [ 584.321907][T14332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.321922][T14332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.321937][T14332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.494703][T14174] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.825229][ T6999] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.825401][ T6999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.836026][T14332] hsr_slave_0: entered promiscuous mode [ 584.837318][T14332] hsr_slave_1: entered promiscuous mode [ 584.838277][T14332] debugfs: 'hsr0' already exists in 'hsr' [ 584.838301][T14332] Cannot create hsr debugfs directory [ 584.846169][T14279] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 584.895047][T14279] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 585.110290][T14279] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 585.145842][ T6999] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.146385][ T6999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.232781][T14279] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 586.319392][T14488] binder: 14487:14488 ioctl c0306201 200000000640 returned -22 [ 586.603944][ T4511] bridge_slave_1: left allmulticast mode [ 586.603973][ T4511] bridge_slave_1: left promiscuous mode [ 586.604223][ T4511] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.660198][ T4511] bridge_slave_0: left allmulticast mode [ 586.660227][ T4511] bridge_slave_0: left promiscuous mode [ 586.660512][ T4511] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.751459][ T4511] bridge_slave_1: left allmulticast mode [ 586.751489][ T4511] bridge_slave_1: left promiscuous mode [ 586.751658][ T4511] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.881066][T14495] binder: 14494:14495 ioctl 4018620d 0 returned -22 [ 587.057404][ T4511] bridge_slave_0: left allmulticast mode [ 587.057423][ T4511] bridge_slave_0: left promiscuous mode [ 587.057582][ T4511] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.143306][T14497] binder: 14494:14497 ioctl c0306201 200000000640 returned -22 [ 587.451405][ T4511] bridge_slave_1: left allmulticast mode [ 587.451435][ T4511] bridge_slave_1: left promiscuous mode [ 587.451604][ T4511] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.509790][ T4511] bridge_slave_0: left allmulticast mode [ 587.509810][ T4511] bridge_slave_0: left promiscuous mode [ 587.509975][ T4511] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.680819][ T4511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.739268][ T4511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.761120][ T4511] bond0 (unregistering): Released all slaves [ 591.370171][ T4511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.430388][ T4511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.450898][ T4511] bond0 (unregistering): Released all slaves [ 593.239376][ T4511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.299372][ T4511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.328344][ T4511] bond0 (unregistering): Released all slaves [ 593.557837][T14279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.742106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 594.515407][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.550871][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.788146][T14279] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.811152][T14174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.823866][ T7358] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.824071][ T7358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.882306][T14514] fuse: Bad value for 'rootmode' [ 595.152301][ T6999] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.153714][ T6999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.362038][ C1] vkms_vblank_simulate: vblank timer overrun [ 595.489722][ T4511] hsr_slave_0: left promiscuous mode [ 595.508739][ T4511] hsr_slave_1: left promiscuous mode [ 595.510057][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.560066][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.720320][ T4511] hsr_slave_0: left promiscuous mode [ 595.738597][ T4511] hsr_slave_1: left promiscuous mode [ 595.739627][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.769407][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.854386][T14517] binder: 14516:14517 ioctl 4018620d 0 returned -22 [ 596.112620][T14519] binder: 14516:14519 ioctl c0306201 200000000640 returned -22 [ 596.397830][ T4511] hsr_slave_0: left promiscuous mode [ 596.428667][ T4511] hsr_slave_1: left promiscuous mode [ 596.429403][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.429420][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.459497][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.459524][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.594361][ T4511] veth1_vlan: left promiscuous mode [ 596.594523][ T4511] veth0_vlan: left promiscuous mode [ 596.610118][ T4511] veth1_macvtap: left promiscuous mode [ 596.610161][ T4511] veth0_macvtap: left promiscuous mode [ 596.610263][ T4511] veth1_vlan: left promiscuous mode [ 596.610425][ T4511] veth0_vlan: left promiscuous mode [ 596.640237][ T4511] veth1_macvtap: left promiscuous mode [ 596.640303][ T4511] veth0_macvtap: left promiscuous mode [ 596.640452][ T4511] veth1_vlan: left promiscuous mode [ 596.640555][ T4511] veth0_vlan: left promiscuous mode [ 596.768329][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.026463][T14526] binder: 14524:14526 ioctl 5000940a 0 returned -22 [ 597.911933][ C1] vkms_vblank_simulate: vblank timer overrun [ 598.462590][ C1] vkms_vblank_simulate: vblank timer overrun [ 598.659331][ T4511] team0 (unregistering): Port device team_slave_1 removed [ 598.835335][ C1] vkms_vblank_simulate: vblank timer overrun [ 598.879130][ T4511] team0 (unregistering): Port device team_slave_0 removed [ 598.965905][ C1] vkms_vblank_simulate: vblank timer overrun [ 603.029339][ T4511] team0 (unregistering): Port device team_slave_1 removed [ 603.253489][ T4511] team0 (unregistering): Port device team_slave_0 removed [ 607.659244][ T4511] team0 (unregistering): Port device team_slave_1 removed [ 607.909174][ T4511] team0 (unregistering): Port device team_slave_0 removed [ 610.533530][T14533] fuse: Bad value for 'rootmode' [ 610.777718][T14174] veth0_vlan: entered promiscuous mode [ 610.973386][T14174] veth1_vlan: entered promiscuous mode [ 611.187030][T14174] veth0_macvtap: entered promiscuous mode [ 611.261168][T14174] veth1_macvtap: entered promiscuous mode [ 611.354216][T14174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.432024][T14174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.503201][ T6063] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.509961][ T6063] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.548090][ T6063] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.667633][ T6063] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.888303][T14279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.933430][T14301] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 612.003930][T14301] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 612.104300][T14301] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 612.341718][T14301] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 612.427898][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 612.450318][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 612.451723][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 612.453451][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 612.454324][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 613.064372][T14332] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 613.115659][T14332] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 613.161182][T14332] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 613.169738][T14569] fuse: Bad value for 'rootmode' [ 613.223467][T14332] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 613.799271][T14279] veth0_vlan: entered promiscuous mode [ 614.070431][T14279] veth1_vlan: entered promiscuous mode [ 614.222927][T14548] chnl_net:caif_netlink_parms(): no params data found [ 614.237890][T14301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.508796][ T5811] Bluetooth: hci2: command tx timeout [ 614.547278][T14587] tc_dump_action: action bad kind [ 614.725057][T14548] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.725225][T14548] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.725435][T14548] bridge_slave_0: entered allmulticast mode [ 614.727704][T14548] bridge_slave_0: entered promiscuous mode [ 614.759459][T14301] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.765882][T14548] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.766030][T14548] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.766242][T14548] bridge_slave_1: entered allmulticast mode [ 614.773381][T14548] bridge_slave_1: entered promiscuous mode [ 614.992896][ T4511] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.373352][ T4511] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.398598][ T3595] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.398805][ T3595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.403202][T14548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.406695][T14279] veth0_macvtap: entered promiscuous mode [ 615.446042][T14332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.460056][T14548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.752137][ T4511] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.880320][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.880412][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.904952][T14279] veth1_macvtap: entered promiscuous mode [ 615.911661][T14548] team0: Port device team_slave_0 added [ 616.116130][ T4511] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.179202][T14548] team0: Port device team_slave_1 added [ 616.404179][T14548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.404190][T14548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.404204][T14548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.414707][T14548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.414723][T14548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.414748][T14548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.491018][T14332] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.528356][T14279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.588716][ T5811] Bluetooth: hci2: command tx timeout [ 616.704658][ T7358] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.704790][ T7358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.713273][T14279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.722775][T14548] hsr_slave_0: entered promiscuous mode [ 616.724943][T14548] hsr_slave_1: entered promiscuous mode [ 616.725870][T14548] debugfs: 'hsr0' already exists in 'hsr' [ 616.725891][T14548] Cannot create hsr debugfs directory [ 616.833356][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.833515][ T6174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.942999][ T6174] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.958329][ T6174] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.053577][ T6174] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.083940][ T6174] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.196662][T14606] tc_dump_action: action bad kind [ 617.275300][ T4511] bridge_slave_1: left allmulticast mode [ 617.275331][ T4511] bridge_slave_1: left promiscuous mode [ 617.275622][ T4511] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.353956][T14609] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.3337'. [ 617.400575][ T4511] bridge_slave_0: left allmulticast mode [ 617.400603][ T4511] bridge_slave_0: left promiscuous mode [ 617.400878][ T4511] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.527611][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3340'. [ 617.527626][T14617] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3340'. [ 618.005595][ C0] vkms_vblank_simulate: vblank timer overrun [ 618.537362][ C0] vkms_vblank_simulate: vblank timer overrun [ 618.668726][ T5811] Bluetooth: hci2: command tx timeout [ 619.363260][ T5123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 619.369621][ T5123] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 619.378078][ T5123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 619.380156][ T5123] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 619.381010][ T5123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 619.663389][ C0] vkms_vblank_simulate: vblank timer overrun [ 619.740476][ C0] vkms_vblank_simulate: vblank timer overrun [ 620.076520][ C0] vkms_vblank_simulate: vblank timer overrun [ 620.137465][ C0] vkms_vblank_simulate: vblank timer overrun [ 620.257511][ C0] vkms_vblank_simulate: vblank timer overrun [ 620.307926][ C0] vkms_vblank_simulate: vblank timer overrun [ 620.640241][ C0] vkms_vblank_simulate: vblank timer overrun [ 620.748862][ T5123] Bluetooth: hci2: command tx timeout [ 620.990095][ C0] vkms_vblank_simulate: vblank timer overrun [ 621.411021][ T5123] Bluetooth: hci1: command tx timeout [ 621.639767][ T4511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.719133][ T4511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.744441][ T4511] bond0 (unregistering): Released all slaves [ 621.881570][T14628] tc_dump_action: action bad kind [ 622.411966][T14634] binder: 14633:14634 ioctl c0306201 200000000640 returned -22 [ 622.636849][ T5811] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 622.657826][ T5811] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 622.660543][ T5811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 622.683496][ T5811] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 622.684372][ T5811] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 622.754730][ T4511] hsr_slave_0: left promiscuous mode [ 622.778683][ T4511] hsr_slave_1: left promiscuous mode [ 622.782231][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.782257][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.813617][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.813644][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.944080][ T4511] veth1_macvtap: left promiscuous mode [ 622.944193][ T4511] veth0_macvtap: left promiscuous mode [ 622.944458][ T4511] veth1_vlan: left promiscuous mode [ 622.944661][ T4511] veth0_vlan: left promiscuous mode [ 623.760350][ T5123] Bluetooth: hci1: command tx timeout [ 624.788795][ T5123] Bluetooth: hci6: command tx timeout [ 624.949298][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.949371][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.400186][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 625.419918][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 625.422537][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 625.424424][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 625.425398][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 625.789718][ T5123] Bluetooth: hci1: command tx timeout [ 626.828549][ T5123] Bluetooth: hci6: command tx timeout [ 627.549631][ T5123] Bluetooth: hci4: command tx timeout [ 627.579080][ T4511] team0 (unregistering): Port device team_slave_1 removed [ 627.829433][ T4511] team0 (unregistering): Port device team_slave_0 removed [ 627.868859][ T5123] Bluetooth: hci1: command tx timeout [ 628.918603][ T5123] Bluetooth: hci6: command tx timeout [ 629.628817][ T5123] Bluetooth: hci4: command tx timeout [ 630.599121][T14656] tc_dump_action: action bad kind [ 631.542164][ T5123] Bluetooth: hci6: command tx timeout [ 631.708806][ T5123] Bluetooth: hci4: command tx timeout [ 633.790875][ T5123] Bluetooth: hci4: command tx timeout [ 635.632790][T14625] chnl_net:caif_netlink_parms(): no params data found [ 635.843252][T14637] chnl_net:caif_netlink_parms(): no params data found [ 636.070668][T14653] chnl_net:caif_netlink_parms(): no params data found [ 636.409502][T14548] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 636.759324][T14548] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 636.877588][T14548] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 637.185064][T14548] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 637.290106][T14625] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.290363][T14625] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.290507][T14625] bridge_slave_0: entered allmulticast mode [ 637.292237][T14625] bridge_slave_0: entered promiscuous mode [ 637.419624][T14625] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.419762][T14625] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.419949][T14625] bridge_slave_1: entered allmulticast mode [ 637.421959][T14625] bridge_slave_1: entered promiscuous mode [ 637.654621][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.699257][T14637] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.699368][T14637] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.699551][T14637] bridge_slave_0: entered allmulticast mode [ 637.702607][T14637] bridge_slave_0: entered promiscuous mode [ 637.911616][T14637] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.911762][T14637] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.911945][T14637] bridge_slave_1: entered allmulticast mode [ 637.913468][T14637] bridge_slave_1: entered promiscuous mode [ 638.022826][T14653] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.022986][T14653] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.023221][T14653] bridge_slave_0: entered allmulticast mode [ 638.025173][T14653] bridge_slave_0: entered promiscuous mode [ 638.078600][T14190] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 638.237163][T14190] usb 8-1: config 0 has an invalid interface number: 199 but max is 1 [ 638.237191][T14190] usb 8-1: config 0 has no interface number 1 [ 638.237272][T14190] usb 8-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 638.237292][T14190] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 638.264560][T14190] usb 8-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 638.264587][T14190] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 638.264605][T14190] usb 8-1: SerialNumber: syz [ 638.296028][T14625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.311129][T14190] usb 8-1: config 0 descriptor?? [ 638.325060][T14653] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.325234][T14653] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.325770][T14653] bridge_slave_1: entered allmulticast mode [ 638.346731][T14653] bridge_slave_1: entered promiscuous mode [ 638.396776][T14190] uvcvideo 8-1:0.199: Found UVC 0.00 device (0002:0000) [ 638.396801][T14190] uvcvideo 8-1:0.199: No valid video chain found. [ 638.471913][T14625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.573095][ T7300] usb 8-1: USB disconnect, device number 2 [ 638.594828][T14637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.734674][T14637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.916556][T14653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.924837][T14625] team0: Port device team_slave_0 added [ 639.002067][T14653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.004522][T14625] team0: Port device team_slave_1 added [ 639.282067][ C1] vkms_vblank_simulate: vblank timer overrun [ 639.361097][T14637] team0: Port device team_slave_0 added [ 639.773135][T14637] team0: Port device team_slave_1 added [ 639.777936][T14653] team0: Port device team_slave_0 added [ 639.781687][T14625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.781702][T14625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.781725][T14625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.892735][T14653] team0: Port device team_slave_1 added [ 639.895274][T14625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.895286][T14625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.895300][T14625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.163470][T14637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.163486][T14637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.163511][T14637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.272487][T14637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.272506][T14637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.272531][T14637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.274922][T14653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.274936][T14653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.274962][T14653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.439035][T14653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.439052][T14653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.439077][T14653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.916400][T14625] hsr_slave_0: entered promiscuous mode [ 640.917355][T14625] hsr_slave_1: entered promiscuous mode [ 640.947276][T14737] bridge0: entered promiscuous mode [ 640.950175][T14737] bridge0: port 3(macvtap1) entered blocking state [ 640.950425][T14737] bridge0: port 3(macvtap1) entered disabled state [ 640.950610][T14737] macvtap1: entered allmulticast mode [ 640.950625][T14737] bridge0: entered allmulticast mode [ 640.954242][T14737] macvtap1: left allmulticast mode [ 640.954258][T14737] bridge0: left allmulticast mode [ 641.029752][T14737] bridge0: left promiscuous mode [ 641.406710][T14637] hsr_slave_0: entered promiscuous mode [ 641.407578][T14637] hsr_slave_1: entered promiscuous mode [ 641.408223][T14637] debugfs: 'hsr0' already exists in 'hsr' [ 641.408238][T14637] Cannot create hsr debugfs directory [ 641.773318][ C1] vkms_vblank_simulate: vblank timer overrun [ 641.855527][T14653] hsr_slave_0: entered promiscuous mode [ 641.856410][T14653] hsr_slave_1: entered promiscuous mode [ 641.856988][T14653] debugfs: 'hsr0' already exists in 'hsr' [ 641.857011][T14653] Cannot create hsr debugfs directory [ 642.912458][T14757] binder: 14756:14757 ioctl 4018620d 0 returned -22 [ 643.203570][ C1] vkms_vblank_simulate: vblank timer overrun [ 643.955112][ C1] vkms_vblank_simulate: vblank timer overrun [ 644.283108][T14625] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.382250][T14548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.525917][ C1] vkms_vblank_simulate: vblank timer overrun [ 644.543316][T14625] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.609341][T14548] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.616806][ T6380] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.616962][ T6380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.654853][ T6380] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.655030][ T6380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.839443][T14625] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.153285][T14625] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.203148][T14768] netlink: 'syz.7.3378': attribute type 7 has an invalid length. [ 645.326444][T14772] fuse: Bad value for 'rootmode' [ 645.570115][ T4511] bridge_slave_1: left allmulticast mode [ 645.570136][ T4511] bridge_slave_1: left promiscuous mode [ 645.570326][ T4511] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.640974][ T4511] bridge_slave_0: left allmulticast mode [ 645.641001][ T4511] bridge_slave_0: left promiscuous mode [ 645.641219][ T4511] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.701628][ T4511] bridge_slave_1: left allmulticast mode [ 645.701656][ T4511] bridge_slave_1: left promiscuous mode [ 645.701850][ T4511] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.790413][ T4511] bridge_slave_0: left allmulticast mode [ 645.790441][ T4511] bridge_slave_0: left promiscuous mode [ 645.790713][ T4511] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.851627][ T4511] bridge_slave_1: left allmulticast mode [ 645.851652][ T4511] bridge_slave_1: left promiscuous mode [ 645.851894][ T4511] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.939433][ T4511] bridge_slave_0: left allmulticast mode [ 645.939454][ T4511] bridge_slave_0: left promiscuous mode [ 645.939613][ T4511] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.599839][ T7300] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 646.788667][ T7300] usb 8-1: Using ep0 maxpacket: 32 [ 646.797034][ T7300] usb 8-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice=71.3d [ 646.797058][ T7300] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.797068][ T7300] usb 8-1: Product: syz [ 646.797074][ T7300] usb 8-1: Manufacturer: syz [ 646.797081][ T7300] usb 8-1: SerialNumber: syz [ 646.803130][ T7300] usb 8-1: config 0 descriptor?? [ 646.836318][ T7300] usb 8-1: selecting invalid altsetting 1 [ 646.836354][ T7300] snd-usb-caiaq 8-1:0.0: can't set alt interface. [ 646.836368][ T7300] usb 8-1: unable to init card! (ret=-5) [ 646.843398][ T7300] snd-usb-caiaq 8-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 649.289363][ T4511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.369253][ T4511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.411227][ T4511] bond0 (unregistering): Released all slaves [ 649.946252][T14190] usb 8-1: USB disconnect, device number 3 [ 651.379487][ T4511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.449295][ T4511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.473314][ T4511] bond0 (unregistering): Released all slaves [ 653.359802][ T4511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.439282][ T4511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.461937][ T4511] bond0 (unregistering): Released all slaves [ 653.527649][T14796] bridge0: entered promiscuous mode [ 653.553634][T14796] bridge0: port 3(macvtap1) entered blocking state [ 653.553809][T14796] bridge0: port 3(macvtap1) entered disabled state [ 653.553992][T14796] macvtap1: entered allmulticast mode [ 653.554006][T14796] bridge0: entered allmulticast mode [ 653.557427][T14796] macvtap1: left allmulticast mode [ 653.557441][T14796] bridge0: left allmulticast mode [ 653.669477][T14796] bridge0: left promiscuous mode [ 654.024452][ T5123] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 654.248586][ T4511] hsr_slave_0: left promiscuous mode [ 654.298607][ T4511] hsr_slave_1: left promiscuous mode [ 654.299540][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.566837][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.738606][ T4511] hsr_slave_0: left promiscuous mode [ 654.760218][ T4511] hsr_slave_1: left promiscuous mode [ 654.761224][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.781920][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.948582][ T4511] hsr_slave_0: left promiscuous mode [ 654.956360][T14802] 9pnet_virtio: no channels available for device syz [ 654.998775][ T4511] hsr_slave_1: left promiscuous mode [ 654.999496][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.999513][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.056028][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.056057][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.864514][ T4511] veth1_macvtap: left promiscuous mode [ 655.864621][ T4511] veth0_macvtap: left promiscuous mode [ 655.864868][ T4511] veth1_vlan: left promiscuous mode [ 655.865045][ T4511] veth0_vlan: left promiscuous mode [ 656.899180][ T4511] team0 (unregistering): Port device team_slave_1 removed [ 657.129722][ T4511] team0 (unregistering): Port device team_slave_0 removed [ 660.089128][ T4511] team0 (unregistering): Port device team_slave_1 removed [ 660.359334][ T4511] team0 (unregistering): Port device team_slave_0 removed [ 664.869224][ T4511] team0 (unregistering): Port device team_slave_1 removed [ 665.159061][ T4511] team0 (unregistering): Port device team_slave_0 removed [ 667.864587][T14548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.049930][T14548] veth0_vlan: entered promiscuous mode [ 668.056382][T14548] veth1_vlan: entered promiscuous mode [ 668.132267][T14548] veth0_macvtap: entered promiscuous mode [ 668.145459][T14548] veth1_macvtap: entered promiscuous mode [ 668.194925][T14548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.216642][T14548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.235601][ T3618] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.235649][ T3618] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.235682][ T3618] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.235714][ T3618] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.871405][ T6063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.871420][ T6063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.070587][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.070608][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.740703][T14625] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 669.799083][T14625] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 669.847956][T14625] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 669.889357][T14625] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 670.281093][T14625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.305218][T14625] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.314754][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.314980][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.327890][ T6999] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.328103][ T6999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.413975][T14835] binder: 14827:14835 ioctl c0306201 200000000040 returned -11 [ 670.721040][T14637] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 670.801026][T14637] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 670.860697][T14637] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 671.019871][T14637] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 671.183782][T14849] netlink: 'syz.7.3397': attribute type 12 has an invalid length. [ 671.310682][T14653] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 671.370430][T14653] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 671.421385][T14653] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 671.514728][T14653] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 671.663232][T14625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.837223][T14637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.922083][T14637] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.953063][ T4511] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.953193][ T4511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.991235][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.991796][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.024016][T14653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.072011][ T5908] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 672.112881][T14653] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.134970][ T3595] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.135123][ T3595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.174078][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.174209][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.218690][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 672.239372][ T5908] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 672.239401][ T5908] usb 1-1: config 1 has no interface number 1 [ 672.239532][ T5908] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 672.239573][ T5908] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 672.295537][ T5908] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 672.295560][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.295570][ T5908] usb 1-1: Product: С [ 672.295577][ T5908] usb 1-1: Manufacturer:   [ 672.295584][ T5908] usb 1-1: SerialNumber: 轱拡쐶ί祱嵪쎼帠䛬綔蜌긭礻ᚘ䟰ィ쫸ꭑ 櫃꿇쩋㰴壗䦊竵鸲騱蝂쿫靨笏饬㠡脘锥桕鬏郠竊퐄챙벟ꞝS圬痁麗朊垓絪怊臂獸㜕ꆲ䖯멙ﳞﮭ攫ఈᰣ멏䶈惜斤肨ﳋꌛᙶ䯴᠓ [ 672.432781][T14625] veth0_vlan: entered promiscuous mode [ 672.529109][T14625] veth1_vlan: entered promiscuous mode [ 672.629465][ T5908] usb 1-1: 2:1: invalid format type 0x100c is detected, processed as PCM [ 672.629506][ T5908] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 672.676257][T14625] veth0_macvtap: entered promiscuous mode [ 672.700359][T14625] veth1_macvtap: entered promiscuous mode [ 672.795280][T14625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.853239][ T5908] usb 1-1: USB disconnect, device number 2 [ 672.857458][T14625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.922855][T10816] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.923680][T10816] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.923914][T10816] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.924333][T10816] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.372420][T14637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.446398][T14892] binder: 14889:14892 ioctl c0306201 200000000040 returned -14 [ 673.471813][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.471832][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.567925][T14653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.600678][T14895] netlink: 'syz.7.3404': attribute type 4 has an invalid length. [ 673.621081][T10816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.621101][T10816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.830553][T14653] veth0_vlan: entered promiscuous mode [ 674.873147][T14653] veth1_vlan: entered promiscuous mode [ 674.952742][T14637] veth0_vlan: entered promiscuous mode [ 674.986530][T14653] veth0_macvtap: entered promiscuous mode [ 675.003282][T14637] veth1_vlan: entered promiscuous mode [ 675.598854][T14653] veth1_macvtap: entered promiscuous mode [ 675.691391][T14653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.743432][T14653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.951103][ T1151] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.956818][ T1151] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.975868][ T1151] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.978268][T14637] veth0_macvtap: entered promiscuous mode [ 675.981117][ T1151] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.202582][T14637] veth1_macvtap: entered promiscuous mode [ 677.405024][T14637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.494649][T14637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.516183][ T6186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.516203][ T6186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.527603][ T10] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 677.553106][ T6186] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.572810][ T6186] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.593565][ T6186] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.611469][ T6186] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.638929][ T6181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.638951][ T6181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.830280][ T10] usb 10-1: not running at top speed; connect to a high speed hub [ 677.831487][ T10] usb 10-1: config 1 has an invalid interface descriptor of length 3, skipping [ 677.831582][ T10] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 677.837756][ T10] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 677.837782][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.837800][ T10] usb 10-1: Product: syz [ 677.837812][ T10] usb 10-1: Manufacturer: syz [ 677.837825][ T10] usb 10-1: SerialNumber: syz [ 677.881749][T14935] binder: 14933:14935 ioctl c0306201 200000000640 returned -22 [ 679.450176][ T10] usb 10-1: found format II with max.bitrate = 5, frame size=9 [ 679.450202][ T10] usb 10-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 679.558671][ T10] usb 10-1: USB disconnect, device number 2 [ 679.717369][T14944] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 680.150950][T14950] 9pnet_fd: Insufficient options for proto=fd [ 680.739764][T14952] netlink: 'syz.0.3418': attribute type 4 has an invalid length. [ 681.041541][ T6181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.041559][ T6181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.049068][ T5879] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 681.126592][T14960] bridge0: entered promiscuous mode [ 681.140637][T14960] bridge0: port 3(macvtap1) entered blocking state [ 681.140871][T14960] bridge0: port 3(macvtap1) entered disabled state [ 681.141060][T14960] macvtap1: entered allmulticast mode [ 681.141076][T14960] bridge0: entered allmulticast mode [ 681.145377][T14960] macvtap1: left allmulticast mode [ 681.145394][T14960] bridge0: left allmulticast mode [ 681.198578][ T5879] usb 10-1: Using ep0 maxpacket: 32 [ 681.205554][ T5879] usb 10-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice=71.3d [ 681.205642][ T5879] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.205660][ T5879] usb 10-1: Product: syz [ 681.205673][ T5879] usb 10-1: Manufacturer: syz [ 681.205686][ T5879] usb 10-1: SerialNumber: syz [ 681.249516][ T5879] usb 10-1: config 0 descriptor?? [ 681.257511][T14960] bridge0: left promiscuous mode [ 681.290083][ T5879] usb 10-1: selecting invalid altsetting 1 [ 681.290105][ T5879] snd-usb-caiaq 10-1:0.0: can't set alt interface. [ 681.290118][ T5879] usb 10-1: unable to init card! (ret=-5) [ 681.290637][ T5879] snd-usb-caiaq 10-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 682.895576][ T6063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.895598][ T6063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.956258][T14969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3421'. [ 683.839608][T14986] 9pnet_fd: Insufficient options for proto=fd [ 685.059591][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 685.085299][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 685.086804][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 685.088908][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 685.089808][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 686.010732][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.010804][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.746232][ T10] usb 10-1: USB disconnect, device number 3 [ 686.911321][T15013] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3434'. [ 687.152426][ T5811] Bluetooth: hci3: command tx timeout [ 688.636530][ T6186] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.739700][T15048] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3446'. [ 688.795780][T15041] bridge0: entered promiscuous mode [ 688.814724][T15041] bridge0: port 3(macvtap1) entered blocking state [ 688.819206][T15041] bridge0: port 3(macvtap1) entered disabled state [ 688.819465][T15041] macvtap1: entered allmulticast mode [ 688.819480][T15041] bridge0: entered allmulticast mode [ 688.834450][T15041] macvtap1: left allmulticast mode [ 688.834471][T15041] bridge0: left allmulticast mode [ 688.919842][T15041] bridge0: left promiscuous mode [ 689.228518][ T5811] Bluetooth: hci3: command tx timeout [ 689.281915][T15060] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 689.403764][ T6186] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.892375][T15059] bridge0: entered promiscuous mode [ 689.893992][T15059] bridge0: port 3(macvtap1) entered blocking state [ 689.894718][T15059] bridge0: port 3(macvtap1) entered disabled state [ 689.894936][T15059] macvtap1: entered allmulticast mode [ 689.894952][T15059] bridge0: entered allmulticast mode [ 689.902091][T15059] macvtap1: left allmulticast mode [ 689.902110][T15059] bridge0: left allmulticast mode [ 690.142235][T15059] bridge0: left promiscuous mode [ 690.369642][T15078] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3456'. [ 690.633018][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3463'. [ 690.700982][ T6186] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.938726][T15102] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3465'. [ 690.969608][ C1] vkms_vblank_simulate: vblank timer overrun [ 691.046892][ T6186] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.263033][T14998] chnl_net:caif_netlink_parms(): no params data found [ 691.308663][ T5811] Bluetooth: hci3: command tx timeout [ 691.960128][T15120] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3469'. [ 692.704578][T14998] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.704787][T14998] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.705039][T14998] bridge_slave_0: entered allmulticast mode [ 692.714530][T14998] bridge_slave_0: entered promiscuous mode [ 692.782086][T14998] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.789595][T14998] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.789860][T14998] bridge_slave_1: entered allmulticast mode [ 692.811235][T14998] bridge_slave_1: entered promiscuous mode [ 693.177695][T14998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.183143][T14998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.304885][ T6186] bridge_slave_1: left allmulticast mode [ 693.304914][ T6186] bridge_slave_1: left promiscuous mode [ 693.305140][ T6186] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.605530][ T5811] Bluetooth: hci3: command tx timeout [ 693.772354][T15166] binder: 15156:15166 ioctl c0306201 200000000040 returned -14 [ 693.775340][ C1] vkms_vblank_simulate: vblank timer overrun [ 694.214849][ T6186] bridge_slave_0: left allmulticast mode [ 694.214882][ T6186] bridge_slave_0: left promiscuous mode [ 694.215153][ T6186] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.604790][T15173] netlink: 9 bytes leftover after parsing attributes in process `syz.9.3487'. [ 694.915734][ C1] vkms_vblank_simulate: vblank timer overrun [ 695.664963][ C1] vkms_vblank_simulate: vblank timer overrun [ 697.898656][ T5811] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 698.050795][T15188] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3490'. [ 699.109414][ T6186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.169458][ T6186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.191140][ T6186] bond0 (unregistering): Released all slaves [ 699.491580][T15173] .70: renamed from hsr0 (while UP) [ 699.531682][T15173] .70: entered allmulticast mode [ 699.531699][T15173] hsr_slave_0: entered allmulticast mode [ 699.531710][T15173] hsr_slave_1: entered allmulticast mode [ 699.532079][T15173] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check. [ 699.543248][T14998] team0: Port device team_slave_0 added [ 700.081232][T14998] team0: Port device team_slave_1 added [ 700.214085][T15207] binder: 15202:15207 ioctl c0306201 200000000040 returned -14 [ 701.428623][T15226] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3502'. [ 701.616998][T14998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.617015][T14998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.617040][T14998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.703872][T14998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.703889][T14998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.703914][T14998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.099307][ T6186] hsr_slave_0: left promiscuous mode [ 702.151867][ T6186] hsr_slave_1: left promiscuous mode [ 702.152977][ T6186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.153003][ T6186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.437139][ T6186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.437166][ T6186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.575919][T15247] binder: 15239:15247 ioctl c0306201 200000000040 returned -14 [ 703.325257][ T6186] veth1_macvtap: left promiscuous mode [ 703.325371][ T6186] veth0_macvtap: left promiscuous mode [ 703.325632][ T6186] veth1_vlan: left promiscuous mode [ 703.325817][ T6186] veth0_vlan: left promiscuous mode [ 703.439543][T15253] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3512'. [ 703.545336][T15255] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3513'. [ 705.969203][ T6186] team0 (unregistering): Port device team_slave_1 removed [ 706.179480][ T6186] team0 (unregistering): Port device team_slave_0 removed [ 709.110529][T10816] Bluetooth: hci5: Frame reassembly failed (-84) [ 709.110604][T10816] Bluetooth: hci5: Frame reassembly failed (-84) [ 709.110674][T10816] Bluetooth: hci5: Frame reassembly failed (-84) [ 709.110747][T10816] Bluetooth: hci5: Frame reassembly failed (-84) [ 709.299843][T14998] hsr_slave_0: entered promiscuous mode [ 709.301712][T14998] hsr_slave_1: entered promiscuous mode [ 709.568561][ T6274] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 709.775702][ T6274] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 709.775729][ T6274] usb 8-1: config 0 has no interface number 0 [ 709.775786][ T6274] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 709.775806][ T6274] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.789776][ T6274] usb 8-1: config 0 descriptor?? [ 709.866529][ T6274] usb 8-1: selecting invalid altsetting 1 [ 709.867397][ T6274] dvb_ttusb_budget: ttusb_init_controller: error [ 709.867633][ T6274] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 710.061281][ T6274] DVB: Unable to find symbol cx22700_attach() [ 710.212844][ T6274] DVB: Unable to find symbol tda10046_attach() [ 710.212858][ T6274] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 710.217117][ T6274] usb 8-1: USB disconnect, device number 4 [ 710.294348][T14946] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 710.660411][T15287] binder: 15283:15287 ioctl c0306201 0 returned -14 [ 710.666273][T15287] binder: 15283:15287 ioctl c0306201 200000000040 returned -22 [ 710.667369][T15287] binder: 15283:15287 ioctl c0306201 200000000640 returned -22 [ 710.766011][T14946] usb 1-1: Using ep0 maxpacket: 8 [ 711.080489][T14946] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.093611][T14946] usb 1-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 711.093725][T14946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.163064][ T5123] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 711.302961][T14946] usb 1-1: config 0 descriptor?? [ 711.559833][ T5879] usb 1-1: USB disconnect, device number 3 [ 711.741459][T15301] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3530'. [ 711.741518][T15301] bridge_slave_1: left allmulticast mode [ 711.741532][T15301] bridge_slave_1: left promiscuous mode [ 711.741704][T15301] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.829544][T15301] bridge_slave_0: left allmulticast mode [ 711.829564][T15301] bridge_slave_0: left promiscuous mode [ 711.829743][T15301] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.387087][T15326] binder: 15320:15326 ioctl c0306201 200000000040 returned -22 [ 713.388712][T15326] binder: 15320:15326 ioctl c0306201 200000000640 returned -22 [ 714.301379][T15336] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 714.301406][T15336] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 714.451615][T14998] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 714.491877][T14998] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 714.528525][ T5879] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 714.564390][T14998] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 714.596149][T15344] netlink: 'syz.9.3543': attribute type 12 has an invalid length. [ 714.596637][T14998] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 714.698551][ T5879] usb 7-1: Using ep0 maxpacket: 8 [ 714.703192][ T5879] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.703251][ T5879] usb 7-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 714.703271][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.706381][ T5879] usb 7-1: config 0 descriptor?? [ 714.979110][T14956] usb 7-1: USB disconnect, device number 2 [ 715.364935][T14998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.432609][T14998] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.446234][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.446459][ T6049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.463660][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.466573][ T6049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.867078][T15370] binder: 15360:15370 ioctl c0306201 200000000040 returned -22 [ 715.868450][T15370] binder: 15360:15370 ioctl c0306201 200000000640 returned -22 [ 716.522882][T15369] capability: warning: `syz.0.3552' uses 32-bit capabilities (legacy support in use) [ 716.716416][T15375] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 717.070885][T15386] batman_adv: batadv0: Adding interface: dummy0 [ 717.070902][T15386] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.070934][T15386] batman_adv: batadv0: Interface activated: dummy0 [ 717.274980][T15386] batadv0: mtu less than device minimum [ 717.292948][T15386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 717.330452][T15386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 717.357154][T15386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 717.386605][T15386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 717.404211][T15386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 717.431035][T15386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 717.435865][T15386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 717.544773][T15394] netlink: 'syz.6.3557': attribute type 10 has an invalid length. [ 717.597237][T15395] netlink: 'syz.6.3557': attribute type 10 has an invalid length. [ 717.762917][T15394] team0: Port device dummy0 added [ 717.766872][T15395] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 717.876488][T15395] team0: Failed to send options change via netlink (err -105) [ 717.876747][T15395] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 717.886304][T15395] team0: Port device dummy0 removed [ 717.965956][T15395] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 718.001595][T15400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3559'. [ 718.142283][T14998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.137273][T14998] veth0_vlan: entered promiscuous mode [ 719.230069][T14998] veth1_vlan: entered promiscuous mode [ 719.353755][T14998] veth0_macvtap: entered promiscuous mode [ 719.371790][T14998] veth1_macvtap: entered promiscuous mode [ 719.425636][T14998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 719.776151][T15443] binder: 15432:15443 ioctl c0306201 200000000040 returned -22 [ 719.777346][T15443] binder: 15432:15443 ioctl c0306201 200000000640 returned -22 [ 720.670768][T15451] netlink: 'syz.6.3575': attribute type 10 has an invalid length. [ 720.722558][T15454] netlink: 'syz.6.3575': attribute type 10 has an invalid length. [ 720.865461][T15451] bond0: (slave dummy0): Releasing backup interface [ 720.954680][T15451] team0: Port device dummy0 added [ 721.031119][T15454] team0: Port device dummy0 removed [ 721.089502][T15454] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 721.094224][T14998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.437942][ T3595] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.453530][ T3595] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.454979][ T3595] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.455020][ T3595] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.920465][T15476] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3583'. [ 722.442806][T15481] binder: 15478:15481 ioctl c0306201 200000000040 returned -22 [ 722.443893][T15481] binder: 15478:15481 ioctl c0306201 200000000640 returned -22 [ 722.767391][ T6382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.767440][ T6382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.257647][ T5123] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 723.257817][ T6069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.257832][ T6069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.208337][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2974'. [ 724.208364][T15497] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2974'. [ 727.475807][ T5892] IPVS: starting estimator thread 0... [ 727.550558][T15521] 9pnet_fd: Insufficient options for proto=fd [ 727.577010][T15518] IPVS: using max 9 ests per chain, 21600 per kthread [ 729.098545][T15002] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 729.278482][T15002] usb 10-1: Using ep0 maxpacket: 32 [ 729.282519][T15002] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 729.282551][T15002] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 729.291122][T15002] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 729.291150][T15002] usb 10-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 729.291168][T15002] usb 10-1: Product: syz [ 729.291180][T15002] usb 10-1: Manufacturer: syz [ 729.291193][T15002] usb 10-1: SerialNumber: syz [ 729.346399][T15002] usb 10-1: config 0 descriptor?? [ 729.466980][T15546] netlink: 'syz.7.3605': attribute type 10 has an invalid length. [ 729.529650][T15546] team0: Port device dummy0 added [ 729.548838][T15002] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 729.621371][T15552] netlink: 'syz.5.3606': attribute type 10 has an invalid length. [ 729.743131][ T6382] usb 10-1: Failed to submit usb control message: -71 [ 729.743169][ T6382] usb 10-1: unable to send the bmi data to the device: -71 [ 729.743185][ T6382] usb 10-1: unable to get target info from device [ 729.743214][ T6382] usb 10-1: could not get target info (-71) [ 729.743239][ T6382] usb 10-1: could not probe fw (-71) [ 729.759273][ T994] usb 10-1: USB disconnect, device number 4 [ 729.779271][T15552] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 729.844085][T15552] syz.5.3606 (15552) used greatest stack depth: 15160 bytes left [ 729.932479][T15557] 9pnet_fd: Insufficient options for proto=fd [ 730.035487][T15559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3609'. [ 730.035512][T15559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3609'. [ 730.035546][T15559] veth0: entered promiscuous mode [ 730.035565][T15559] veth0: entered allmulticast mode [ 730.040312][T15559] veth0: left promiscuous mode [ 730.040339][T15559] veth0: left allmulticast mode [ 730.147068][T15561] 9pnet_virtio: no channels available for device syz [ 730.375541][T15567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3611'. [ 731.510568][T15576] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 732.192163][T15581] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3615'. [ 732.212614][T15581] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3615'. [ 733.179247][T15591] netlink: 'syz.5.3619': attribute type 10 has an invalid length. [ 733.968547][T15607] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3626'. [ 733.977492][T15605] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.3625'. [ 734.331797][T15442] net_ratelimit: 12 callbacks suppressed [ 734.331816][T15442] Set syz1 is full, maxelem 65536 reached [ 734.837621][T15627] syzkaller0: entered promiscuous mode [ 734.837646][T15627] syzkaller0: entered allmulticast mode [ 734.971815][T15634] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.3637'. [ 735.260774][ T5123] Bluetooth: hci3: link tx timeout [ 735.262047][ T5123] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 735.322400][T15644] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 735.373777][T15646] netlink: 'syz.0.3643': attribute type 3 has an invalid length. [ 735.373798][T15646] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3643'. [ 735.373835][T15646] block nbd0: not configured, cannot reconfigure [ 735.505015][T15652] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3647'. [ 735.592802][T15657] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.3648'. [ 735.761222][T15667] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3652'. [ 735.761247][T15667] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3652'. [ 735.842243][T15671] netlink: 'syz.6.3654': attribute type 10 has an invalid length. [ 735.873268][T15673] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 735.894540][T15674] netlink: 'syz.6.3654': attribute type 10 has an invalid length. [ 735.907353][T15671] bond0: (slave dummy0): Releasing backup interface [ 735.931952][T15671] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 735.932121][T15671] team0: Failed to send options change via netlink (err -105) [ 735.932135][T15671] team0: Port device dummy0 added [ 735.935458][T15674] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 735.988896][T15674] team0: Failed to send options change via netlink (err -105) [ 735.989205][T15674] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 735.989842][T15674] team0: Port device dummy0 removed [ 735.996919][T15674] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 736.637875][T15686] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3660'. [ 736.700344][T15688] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.3661'. [ 737.229877][T15693] ubi31: attaching mtd0 [ 737.382423][T15693] ubi31: scanning is finished [ 737.382444][T15693] ubi31: empty MTD device detected [ 737.849056][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 738.088803][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3664'. [ 738.088826][T15698] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3664'. [ 738.139132][T15693] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 738.201195][T15701] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 738.366649][T15708] netlink: 'syz.7.3668': attribute type 3 has an invalid length. [ 738.366665][T15708] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3668'. [ 738.366682][T15708] block nbd0: not configured, cannot reconfigure [ 739.159538][ T5123] Bluetooth: hci2: command 0x0406 tx timeout [ 740.594267][T15751] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 740.711836][T15762] __nla_validate_parse: 3 callbacks suppressed [ 740.711849][T15762] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3690'. [ 742.819991][T15800] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3707'. [ 743.188807][T14956] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 743.358586][T14956] usb 1-1: Using ep0 maxpacket: 32 [ 743.360542][T14956] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 743.360574][T14956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 743.363850][T14956] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 743.363878][T14956] usb 1-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 743.363896][T14956] usb 1-1: Product: syz [ 743.363908][T14956] usb 1-1: Manufacturer: syz [ 743.363921][T14956] usb 1-1: SerialNumber: syz [ 743.398247][T14956] usb 1-1: config 0 descriptor?? [ 743.765259][T14956] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 743.850793][ T994] usb 1-1: USB disconnect, device number 4 [ 743.868348][ T6382] usb 1-1: Failed to submit usb control message: -71 [ 743.869757][ T6382] usb 1-1: unable to send the bmi data to the device: -71 [ 743.869777][ T6382] usb 1-1: unable to get target info from device [ 743.869792][ T6382] usb 1-1: could not get target info (-71) [ 743.869808][ T6382] usb 1-1: could not probe fw (-71) [ 743.998342][ C1] vkms_vblank_simulate: vblank timer overrun [ 744.130732][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3719'. [ 744.130756][T15839] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3719'. [ 744.130780][T15839] netlink: 'syz.6.3719': attribute type 12 has an invalid length. [ 744.286805][ C1] vkms_vblank_simulate: vblank timer overrun [ 744.290901][ T5811] Bluetooth: hci1: command 0x0406 tx timeout [ 744.366754][ C1] vkms_vblank_simulate: vblank timer overrun [ 744.686875][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3725'. [ 744.686899][T15854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3725'. [ 744.941565][T15866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.974008][T15866] bond0: (slave rose0): Enslaving as an active interface with an up link [ 745.198733][T15877] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3733'. [ 745.198756][T15877] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3733'. [ 745.802325][T15890] netlink: 'syz.6.3735': attribute type 10 has an invalid length. [ 745.851685][T15890] bond0: (slave dummy0): Releasing backup interface [ 745.857007][T15893] netlink: 'syz.6.3735': attribute type 10 has an invalid length. [ 745.929533][T15890] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 745.929706][T15890] team0: Failed to send options change via netlink (err -105) [ 745.929720][T15890] team0: Port device dummy0 added [ 745.998326][ C1] vkms_vblank_simulate: vblank timer overrun [ 745.999305][T15893] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 746.078051][T15893] team0: Failed to send options change via netlink (err -105) [ 746.078296][T15893] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 746.079077][T15893] team0: Port device dummy0 removed [ 746.091072][T15893] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 746.226238][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3739'. [ 746.226262][T15901] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3739'. [ 746.498345][T15915] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 747.355824][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.355894][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.720346][T15953] netlink: 'syz.0.3751': attribute type 10 has an invalid length. [ 748.720497][T15953] batman_adv: batadv0: Interface deactivated: dummy0 [ 748.721634][T15953] batman_adv: batadv0: Removing interface: dummy0 [ 748.830781][T15953] team0: Port device dummy0 added [ 748.852930][T15957] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3752'. [ 748.852954][T15957] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3752'. [ 749.190624][T15969] netlink: 'syz.7.3756': attribute type 12 has an invalid length. [ 749.395622][T15974] syzkaller0: entered promiscuous mode [ 749.395647][T15974] syzkaller0: entered allmulticast mode [ 750.220730][T15991] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 750.231072][T16009] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 750.917191][T16032] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3769'. [ 750.920840][T16026] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3768'. [ 751.008253][ C1] vkms_vblank_simulate: vblank timer overrun [ 751.082745][T16033] netlink: set zone limit has 4 unknown bytes [ 751.194209][T16032] batadv0: entered promiscuous mode [ 751.195107][T16032] macvtap1: entered promiscuous mode [ 751.195311][T16032] macvtap1: entered allmulticast mode [ 751.195321][T16032] batadv0: entered allmulticast mode [ 751.196457][T16032] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 751.271196][ C1] vkms_vblank_simulate: vblank timer overrun [ 751.439652][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3771'. [ 751.509973][T16040] gretap0: entered promiscuous mode [ 751.510134][T16040] vlan2: entered promiscuous mode [ 751.627412][T16042] bond_slave_0: entered promiscuous mode [ 751.627466][T16042] bond_slave_1: entered promiscuous mode [ 751.627799][T16042] macvtap2: entered promiscuous mode [ 751.627809][T16042] bond0: entered promiscuous mode [ 751.628247][T16042] macvtap2: entered allmulticast mode [ 751.628257][T16042] bond0: entered allmulticast mode [ 751.628263][T16042] bond_slave_0: entered allmulticast mode [ 751.628272][T16042] bond_slave_1: entered allmulticast mode [ 751.653918][T16042] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 751.704947][T16043] macvtap2: left promiscuous mode [ 751.704972][T16043] bond0: left promiscuous mode [ 751.705633][T16043] macvtap2: left allmulticast mode [ 751.705649][T16043] bond0: left allmulticast mode [ 751.705660][T16043] bond_slave_0: left allmulticast mode [ 751.705676][T16043] bond_slave_1: left allmulticast mode [ 751.815710][ T5123] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 752.277696][T16021] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 752.277721][T16021] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 752.388950][T16021] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 752.388972][T16021] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 752.618238][ C1] vkms_vblank_simulate: vblank timer overrun [ 752.781921][T16021] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 752.781942][T16021] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 753.480469][T16021] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 753.480491][T16021] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 754.455891][T16021] ------------[ cut here ]------------ [ 754.455906][T16021] rtmutex deadlock detected [ 754.455920][T16021] WARNING: kernel/locking/rtmutex.c:1674 at 0x0, CPU#0: syz.7.3768/16021 [ 754.455954][T16021] Modules linked in: [ 754.455974][T16021] CPU: 0 UID: 0 PID: 16021 Comm: syz.7.3768 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 754.455994][T16021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 754.456006][T16021] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0 [ 754.456036][T16021] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 86 00 00 00 48 89 f7 e8 a6 3b 01 00 48 8d 3d ef c2 19 04 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1c 25 08 f0 a9 91 4c [ 754.456052][T16021] RSP: 0018:ffffc900050df950 EFLAGS: 00010286 [ 754.456068][T16021] RAX: 0000000080000000 RBX: ffffc900050df9e0 RCX: 0000000000000000 [ 754.456081][T16021] RDX: 0000000000000006 RSI: ffffffff8cde6eea RDI: ffffffff8edc7190 [ 754.456094][T16021] RBP: ffffc900050dfb00 R08: ffffffff8ed95177 R09: 1ffffffff1db2a2e [ 754.456107][T16021] R10: dffffc0000000000 R11: fffffbfff1db2a2f R12: 1ffff92000a1bf38 [ 754.456121][T16021] R13: ffffffff8ac2a989 R14: ffff88806911c098 R15: dffffc0000000000 [ 754.456135][T16021] FS: 00007f07bde366c0(0000) GS:ffff888126d81000(0000) knlGS:0000000000000000 [ 754.456151][T16021] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 754.456164][T16021] CR2: 0000001b34f22ff8 CR3: 0000000055fc8000 CR4: 00000000003526f0 [ 754.456180][T16021] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 754.456192][T16021] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 754.456205][T16021] Call Trace: [ 754.456213][T16021] [ 754.456223][T16021] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 754.456249][T16021] rt_mutex_slowlock+0x666/0x6b0 [ 754.456277][T16021] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 754.456310][T16021] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 754.456349][T16021] ? nfc_rfkill_set_block+0x50/0x2e0 [ 754.456375][T16021] ? rt_mutex_slowunlock+0x493/0x8a0 [ 754.456401][T16021] ? nfc_rfkill_set_block+0x50/0x2e0 [ 754.456422][T16021] mutex_lock_nested+0x16a/0x1d0 [ 754.456450][T16021] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 754.456474][T16021] nfc_rfkill_set_block+0x50/0x2e0 [ 754.456497][T16021] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 754.456522][T16021] rfkill_set_block+0x1e5/0x450 [ 754.456549][T16021] rfkill_fop_write+0x44e/0x580 [ 754.456575][T16021] ? __pfx_rfkill_fop_write+0x10/0x10 [ 754.456601][T16021] ? rw_verify_area+0x25b/0x4e0 [ 754.456626][T16021] ? __pfx_rfkill_fop_write+0x10/0x10 [ 754.456656][T16021] vfs_write+0x287/0xb40 [ 754.456691][T16021] ? __pfx_vfs_write+0x10/0x10 [ 754.456717][T16021] ? __fget_files+0x2a/0x420 [ 754.456741][T16021] ? __fget_files+0x2a/0x420 [ 754.456759][T16021] ? __fget_files+0x3a6/0x420 [ 754.456777][T16021] ? __fget_files+0x2a/0x420 [ 754.456807][T16021] ksys_write+0x14b/0x260 [ 754.456835][T16021] ? __pfx_ksys_write+0x10/0x10 [ 754.456863][T16021] ? do_syscall_64+0xbe/0xf80 [ 754.456889][T16021] do_syscall_64+0xfa/0xf80 [ 754.456911][T16021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.456930][T16021] ? clear_bhb_loop+0x60/0xb0 [ 754.456952][T16021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.456969][T16021] RIP: 0033:0x7f07bfbcf749 [ 754.456985][T16021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.456999][T16021] RSP: 002b:00007f07bde36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 754.457017][T16021] RAX: ffffffffffffffda RBX: 00007f07bfe25fa0 RCX: 00007f07bfbcf749 [ 754.457031][T16021] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 754.457043][T16021] RBP: 00007f07bfc53f91 R08: 0000000000000000 R09: 0000000000000000 [ 754.457055][T16021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.457067][T16021] R13: 00007f07bfe26038 R14: 00007f07bfe25fa0 R15: 00007ffecb28f4b8 [ 754.457102][T16021] [ 754.457121][T16021] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 754.457134][T16021] CPU: 0 UID: 0 PID: 16021 Comm: syz.7.3768 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 754.457154][T16021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 754.457164][T16021] Call Trace: [ 754.457172][T16021] [ 754.457179][T16021] dump_stack_lvl+0x99/0x250 [ 754.457201][T16021] ? __asan_memcpy+0x40/0x70 [ 754.457226][T16021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 754.457247][T16021] ? __pfx__printk+0x10/0x10 [ 754.457288][T16021] vpanic+0x237/0x6d0 [ 754.457318][T16021] ? __pfx_vpanic+0x10/0x10 [ 754.457337][T16021] ? is_bpf_text_address+0x292/0x2b0 [ 754.457356][T16021] ? is_bpf_text_address+0x26/0x2b0 [ 754.457385][T16021] panic+0xb9/0xc0 [ 754.457406][T16021] ? __pfx_panic+0x10/0x10 [ 754.457448][T16021] __warn+0x317/0x4b0 [ 754.457477][T16021] __report_bug+0x288/0x500 [ 754.457498][T16021] ? __lock_acquire+0x6b6/0x2cf0 [ 754.457529][T16021] ? __pfx___report_bug+0x10/0x10 [ 754.457554][T16021] ? lockdep_hardirqs_on+0x98/0x140 [ 754.457587][T16021] report_bug_entry+0x16a/0x220 [ 754.457608][T16021] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 754.457630][T16021] ? rt_mutex_handle_deadlock+0x26/0xb0 [ 754.457654][T16021] handle_bug+0xca/0x200 [ 754.457678][T16021] exc_invalid_op+0x1a/0x50 [ 754.457701][T16021] asm_exc_invalid_op+0x1a/0x20 [ 754.457718][T16021] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0 [ 754.457743][T16021] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 86 00 00 00 48 89 f7 e8 a6 3b 01 00 48 8d 3d ef c2 19 04 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1c 25 08 f0 a9 91 4c [ 754.457758][T16021] RSP: 0018:ffffc900050df950 EFLAGS: 00010286 [ 754.457773][T16021] RAX: 0000000080000000 RBX: ffffc900050df9e0 RCX: 0000000000000000 [ 754.457786][T16021] RDX: 0000000000000006 RSI: ffffffff8cde6eea RDI: ffffffff8edc7190 [ 754.457800][T16021] RBP: ffffc900050dfb00 R08: ffffffff8ed95177 R09: 1ffffffff1db2a2e [ 754.457813][T16021] R10: dffffc0000000000 R11: fffffbfff1db2a2f R12: 1ffff92000a1bf38 [ 754.457828][T16021] R13: ffffffff8ac2a989 R14: ffff88806911c098 R15: dffffc0000000000 [ 754.457844][T16021] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 754.457885][T16021] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 754.457909][T16021] rt_mutex_slowlock+0x666/0x6b0 [ 754.457937][T16021] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 754.457964][T16021] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 754.458002][T16021] ? nfc_rfkill_set_block+0x50/0x2e0 [ 754.458029][T16021] ? rt_mutex_slowunlock+0x493/0x8a0 [ 754.458056][T16021] ? nfc_rfkill_set_block+0x50/0x2e0 [ 754.458077][T16021] mutex_lock_nested+0x16a/0x1d0 [ 754.458105][T16021] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 754.458131][T16021] nfc_rfkill_set_block+0x50/0x2e0 [ 754.458154][T16021] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 754.458178][T16021] rfkill_set_block+0x1e5/0x450 [ 754.458202][T16021] rfkill_fop_write+0x44e/0x580 [ 754.458228][T16021] ? __pfx_rfkill_fop_write+0x10/0x10 [ 754.458252][T16021] ? rw_verify_area+0x25b/0x4e0 [ 754.458275][T16021] ? __pfx_rfkill_fop_write+0x10/0x10 [ 754.458300][T16021] vfs_write+0x287/0xb40 [ 754.458341][T16021] ? __pfx_vfs_write+0x10/0x10 [ 754.458368][T16021] ? __fget_files+0x2a/0x420 [ 754.458391][T16021] ? __fget_files+0x2a/0x420 [ 754.458406][T16021] ? __fget_files+0x3a6/0x420 [ 754.458421][T16021] ? __fget_files+0x2a/0x420 [ 754.458445][T16021] ksys_write+0x14b/0x260 [ 754.458468][T16021] ? __pfx_ksys_write+0x10/0x10 [ 754.458492][T16021] ? do_syscall_64+0xbe/0xf80 [ 754.458515][T16021] do_syscall_64+0xfa/0xf80 [ 754.458535][T16021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.458551][T16021] ? clear_bhb_loop+0x60/0xb0 [ 754.458571][T16021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.458587][T16021] RIP: 0033:0x7f07bfbcf749 [ 754.458600][T16021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.458614][T16021] RSP: 002b:00007f07bde36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 754.458631][T16021] RAX: ffffffffffffffda RBX: 00007f07bfe25fa0 RCX: 00007f07bfbcf749 [ 754.458642][T16021] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 754.458653][T16021] RBP: 00007f07bfc53f91 R08: 0000000000000000 R09: 0000000000000000 [ 754.458664][T16021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.458675][T16021] R13: 00007f07bfe26038 R14: 00007f07bfe25fa0 R15: 00007ffecb28f4b8 [ 754.458708][T16021] [ 754.459047][T16021] Kernel Offset: disabled