last executing test programs: 8m49.649535237s ago: executing program 32 (id=1287): r0 = socket(0x80000000000000a, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) epoll_create(0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x9, 0x0, 0x1a}, 0x10) socket(0x28, 0x5, 0x9) 8m43.701307999s ago: executing program 33 (id=1304): socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32, @ANYRES32=r0], 0x1c}}, 0x0) 8m22.179193785s ago: executing program 1 (id=1546): setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x81}, 0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 8m21.799544263s ago: executing program 1 (id=1549): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140e02000010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 8m21.469219633s ago: executing program 1 (id=1552): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x0, 0x0, 0xe7}}}}}}, 0x0) 8m20.387761654s ago: executing program 1 (id=1561): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140e02000010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 8m20.10026687s ago: executing program 1 (id=1564): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0xc11270e446e71eb1, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0xfffffffe, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000080)={0x9, 0x9, 0x5007, 0x0, 0x200, 0x4, 0x0, &(0x7f0000000040)=[{0x19, 0x1ff, 0x9}, {0x6, 0x1ff, 0xffff}, {0x18, 0x1ff, 0x1}, {0xa, 0x0, 0xfffffe00}]}) 8m19.841115619s ago: executing program 1 (id=1567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r6 = socket$unix(0x1, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 8m4.765530574s ago: executing program 34 (id=1567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r6 = socket$unix(0x1, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 7m56.52616257s ago: executing program 5 (id=1734): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 7m53.886917829s ago: executing program 6 (id=1754): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f00000001c0)=[0x0, 0x0], 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004084, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={0x0}, 0x18) socket(0x18, 0x2, 0x6) socket(0x23, 0x2, 0xfefffffe) r1 = userfaultfd(0x801) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000ff6000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x2}) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0xc004) r3 = socket(0x2, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200), 0x0, 0x4000014) 7m53.045437302s ago: executing program 5 (id=1759): io_uring_setup(0x7456, &(0x7f0000000180)={0x0, 0xa4c6, 0x20, 0x0, 0x10000000}) mount$overlay(0x0, 0x0, 0x0, 0x48000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1e, 0xce, &(0x7f0000000680)="11d100a05ec99f1e575f5172c7a909c330ef6feaaf4e8e93044445172dd05a3cde8e7e44644b00a4bee15b77fb177d346985db416f54eb3fa115d0e0af319aa6ab4c9bbdd18caf0234d1dbe31d415e7d2ecf20b8b6469ec7815b9061f19e2d1197a2e9f5e5b75a1781e1d3bbf0429dc232512402e0395315a12f75c370ed10842c009f42ab0c2f0d31beb72962643b3a5beb5e6d2141651cd77aec522abdab109c2d4721e203d12c18792a342b683c4018298ca1191da72815b00f49bbdaa5fd05ba77a0cbbe2e7ae017bcf58066c9f2f99d8a721f1d81b2f4c43e8ab0350cf3785f4df6a0735a9f023f0cccf52108f84e91246b11a5807a219ede9cf008b0b7555fe89687f9687cca6cb8c02b287e1d4039805c6f1cabd7801f6cea95b2b1fe80e829c17861b98214ee02832480e9184d8fcf5f9cab6c8840f017e7d353f578aee2b8377573e4db95febdf1b300958bebfbc79761eadce63b107124124b1635833b4eab022e47d76b6416d7505a16598108d1e65627a581d7e3fd0d72496db0a3e239d2237911910063ca709753b641b5d9f7dd3a6bfceaa2bb41ca48fb6e4ef757badcb7e5491a32fea7e67867467b367358d9de9300be254fdf696c96f72a0af3b1c68ead53263fce81d6c37bad627d8129b49a5b22a55214fcbe761e3bb3a315d37d0cf354d2b4302ca42db89618e3692ed5c16f2b42555dceb1cf4dc9e31cbc385b5551238f9b9d559543cb874d262e8162973c63ccf5d48c9f6de3ea6c2acb23042896359afdac6343fbcc3f33340e71094042ffc42360f2fd0280e5208e1b7ea1ee83864b52f6db10943ee206de561afd85ab6b69113a7e4229287ea75deb9b2661010934468d8339ce1b0f4625f226fefa90c14c1cb17c43a8ab97f5e7ff4d363256cc6462335af924ef7ed6367e23a9270fb8b2a6d1437aa232fa618e5196c86ae96d30bc7e9e5f0ba6799c1e1710712355accb75c2609985a678dd1e1f683e9138aa819ff80bd0ab0a592a7b2ef59100e1c2f456b591f1c4d4ffda621cc4d4c1c9685364093d5f23b259969f0183f4bf72102c4ca0835761d8c833462b8b11d8939c44bb8091fa1a0c8ee20da85d5278fc793840abe7106fe9c98c089ecf4d21c6b743e4b2ca0d0536d6e409b53d4321a949295e3c37137907bfb8938204127c9be102042f2ce81f0a7834b2b38790466efea8ea3093cb1844f63766c6eca2f6ee2735d6cafbaa6aa746bfe0dd480b420cd98954b37718eb80198f2f4eb39e60b413d63a1f35a0c391c3e584b75fe9e29edf0d547a1a2e4c1a672cb8efb6991c0bea4eb164c2f77a37bee55d56e9f8b347d0a9412da3b1aa21dbfdd86dc3139f6a2d182f8b9ab0f39cfffae6f006be6537ba81659d067d1919bafc0db401190b1272c358212629457a15b5b45afafe40bdb40b0ea5d3865b920150"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a002800726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000000080), 0x4) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/154, 0x9a, 0xe4) 7m52.747693271s ago: executing program 6 (id=1762): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x7fff, @loopback, 0x7ffffffd}}, 0x2, 0x0, 0xe457, 0x0, 0xa, 0x6}, 0x9c) 7m52.61706081s ago: executing program 5 (id=1764): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x40008080) sendto$inet(r0, &(0x7f0000000300)="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", 0xfe48, 0x40040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/210, 0xd2}], 0x1}, 0x168}], 0x1, 0x40000002, 0x0) 7m52.42820174s ago: executing program 6 (id=1767): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) unshare(0x28000600) close(0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 7m52.392289213s ago: executing program 5 (id=1768): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 7m51.986844638s ago: executing program 6 (id=1771): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f00000001c0)=[0x0, 0x0], 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004084, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={0x0}, 0x18) socket(0x18, 0x2, 0x6) socket(0x23, 0x2, 0xfefffffe) r1 = userfaultfd(0x801) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000ff6000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x2}) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0xc004) r3 = socket(0x2, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200), 0x0, 0x4000014) 7m50.578640026s ago: executing program 6 (id=1779): setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x81}, 0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000004000000140005000303000a000a0000005dc00006000000080002000500000014000600"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 7m50.150107811s ago: executing program 6 (id=1782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0x140}, {&(0x7f0000000340)="448b7c", 0x3}, {&(0x7f0000000140)="03be00fbb46ecedbe0090a43", 0xc}], 0x3) 7m49.102727189s ago: executing program 5 (id=1788): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) bind$inet(0xffffffffffffffff, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f00000001c0)=[0x0, 0x0], 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004084, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={0x0}, 0x18) socket(0x18, 0x2, 0x6) socket(0x23, 0x2, 0xfefffffe) r1 = userfaultfd(0x801) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000ff6000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x2}) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0xc004) r3 = socket(0x2, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200), 0x0, 0x4000014) 7m48.077225428s ago: executing program 5 (id=1795): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="1400060000000000"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x108}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 7m35.063550518s ago: executing program 35 (id=1782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0x140}, {&(0x7f0000000340)="448b7c", 0x3}, {&(0x7f0000000140)="03be00fbb46ecedbe0090a43", 0xc}], 0x3) 7m33.013086715s ago: executing program 36 (id=1795): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="1400060000000000"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x108}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 6m41.508409167s ago: executing program 9 (id=2140): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xeb) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r1}, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffff9c, &(0x7f00000000c0), 0x48100, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) userfaultfd(0x80001) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7fff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) prlimit64(0x0, 0x8, 0x0, 0x0) 6m39.652601854s ago: executing program 9 (id=2144): io_uring_setup(0x7456, &(0x7f0000000180)={0x0, 0xa4c6, 0x20, 0x0, 0x10000000}) mount$overlay(0x0, 0x0, 0x0, 0x48000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1e, 0xce, &(0x7f0000000680)="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"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a002800726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000000080), 0x4) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/154, 0x9a, 0xe4) 6m38.276766102s ago: executing program 9 (id=2146): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x388, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0xa}, {0x0, 0x5}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x358, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x401}, @TCA_FLOW_EMATCHES={0x330, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xfc, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xe8, 0x1, 0x0, 0x0, {{0x3, 0x0, 0x1}, "5a5d675a1f9c0aed2f96616231729cb282636fc5608c65c69217fd7b8165ee509c8c76800bd440fd4e608a7b0f6a93b78ed0956ef0972752c4490ebe832c7218bda66cc4089073dece2dda6b1b93e4b7f33288ae51607f2fc46d83448408c7c0737ac8bb9bc6d2070a0e7a4daa4acb379cc21943c3b08b13d9fb7205f0849613ff28f2a067a5b7581904a96390c1a5ae34a759dddfac49f3f8b42e3a0b62031d15cb248d085810cacd3111ca82e1ecfc2270f4545aaf0cbe40a8d85a169c51233825dd20cef11e9641bbc8366f84b663a1e3f74400f7b4d5bb11"}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x5, 0x8, 0x5}, {0x2, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x21c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x13c, 0x3, 0x0, 0x0, {{0x2c09, 0x9, 0xed}, [@TCA_EM_IPT_MATCH_DATA={0x86, 0x5, "8e010a781a41bed7813eeb4c9bc3366888131f03040a49613b20a2753249cb3fcf3c0098ac53b73c8523868ab3d6380c181537b729bb1df2975fd7261ba195dc39c55974b136cd371d02d2e1c5c95de2d467977fc02cfa0a51d009ec5f090f0db3f062ed3cb14df2e23c68c00c8dc094cc0959b76e632bb875fe2951f7e8aab4386b"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x8b, 0x5, "99957b997a7030cfef718accce8655109a11f4a28a44be0b3f450a48c8f55ba93361f809411e496392e212b46aa473dc53b9a767314e13c0720e6a36dc0f7b03648b92f86cb3ffed16504fab310e4fd3ae9802a58b448daf8e209a87ad091e7fdb9ce4f1e1e6f938ba27d3ab07df3774b2e532eaeeda1b327c60a0c711ebe89b50cbbb924a5841"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x20}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_META={0x2c, 0x3, 0x0, 0x0, {{0x8, 0x4, 0x800}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x28, 0x6}, {0x3, 0x8}}}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="d9", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="5451c096e7293d16"]}]}}, @TCF_EM_CONTAINER={0x9c, 0x1, 0x0, 0x0, {{0x1ff, 0x0, 0x2}, "cb5703a18ac1b94a8a6a07771e2c8f98a363d1369529e2e5d230b8a15cb7a2d6329d9cebeb8efe407c2496b59664161e0d42d76cebf2dc829cb53d5e35a6a48aa243681a221a287784e7d51a01dcb63192901fbb076fe6ececd78543334e66476e3bd1b085d46f42befc4feec98e1da88b79c2aedd601a4bf4c241fc5abf67fdbb3663e30738400e9c1e6817c7c578"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7, 0x7, 0x6}, {{0x4, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x1000}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x8}, @TCA_FLOW_POLICE={0xc, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x67}]}]}}]}, 0x388}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$inet6(r0, &(0x7f00000027c0)={&(0x7f0000001740)={0xa, 0x4e24, 0xfffffffa, @remote}, 0x1c, 0x0}, 0x4040814) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r5) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fcdbdf252100000009001f00706879320000000005002000000000000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r8) sendmsg$NFC_CMD_VENDOR(r8, &(0x7f0000000200)={0x0, 0xfffffffffffffdbc, &(0x7f0000000100)={&(0x7f0000001480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000401000008001e00300b00000800010082"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) 6m37.339755941s ago: executing program 8 (id=2151): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000000500)="00e76113b5", 0x5, 0xfffffffffffffffb) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x4}, 0x9) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0)={0x0, 0x40}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000280)={0x2, 0x3}, 0x2) r2 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) 6m37.034597743s ago: executing program 9 (id=2153): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f00000012c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xf8, 0x29, 0x4, {0x4, 0x1b, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x6b, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f5"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @pad1, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}, @ra={0x5, 0x2, 0x6}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x6, 0x4, 0x1, 0x9, 0x0, [@empty, @private0]}}}, @hopopts={{0x170, 0x29, 0x36, {0x5e, 0x2a, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0x7}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dstopts={{0x20, 0x29, 0x37, {0x32, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x74}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x360}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m34.895472735s ago: executing program 8 (id=2156): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0xfff1, 0xffff}, {0x9, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2008085}, 0x4041) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x48c0}, 0x800c000) 6m33.639230201s ago: executing program 8 (id=2159): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000340)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) close(0x3) 6m33.419861534s ago: executing program 9 (id=2162): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffdbc, &(0x7f0000000100)={&(0x7f0000001480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000401000008001e00300b00000800010082"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) 6m33.017376021s ago: executing program 9 (id=2164): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x255fdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 6m32.392716442s ago: executing program 8 (id=2166): io_uring_setup(0x7456, &(0x7f0000000180)={0x0, 0xa4c6, 0x20, 0x0, 0x10000000}) mount$overlay(0x0, 0x0, 0x0, 0x48000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1e, 0xce, &(0x7f0000000680)="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"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a002800726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000000080), 0x4) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/154, 0x9a, 0xe4) 6m31.405440983s ago: executing program 8 (id=2169): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x10001, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x2, 0x0) 6m30.033553931s ago: executing program 8 (id=2171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40488c1}, 0x4008810) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6m17.91262791s ago: executing program 37 (id=2164): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x255fdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 6m14.78197597s ago: executing program 38 (id=2171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40488c1}, 0x4008810) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m38.968886867s ago: executing program 0 (id=2968): brk(0x7fffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_IO_FLUSHER(0x4) syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 2m36.168898997s ago: executing program 0 (id=2971): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f90000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)=r2}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [], {0x14, 0x10}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m34.597052728s ago: executing program 0 (id=2975): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40102, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) dup(r4) keyctl$join(0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260600000fff0790670600000f000000170300000ee60060bf050000000000001d360000000000006507f9ff01000000a70700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000023000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733a9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819cf5c8ac86d8a297dff0445a13d00dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d7039dd21be3f3767ce603c9d48cac052ca363f601ae899a53f67b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424b92e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef5d5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b67845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bfeffe6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a84e3d6bd82526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_80211_inject_frame(0x0, 0x0, 0x2f) 2m32.593158276s ago: executing program 0 (id=2981): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000409'], 0x2a, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 2m27.373369643s ago: executing program 0 (id=2991): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40102, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) dup(r4) keyctl$join(0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_80211_inject_frame(0x0, 0x0, 0x2f) 2m21.093206286s ago: executing program 0 (id=3002): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000001940)={0xa, 0x0, 0x1000006, @private0, 0x4005}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, 0x0, 0x0) 2m8.704255993s ago: executing program 2 (id=3017): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/67, 0x43}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x2000) 2m7.571166513s ago: executing program 2 (id=3030): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/67, 0x43}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x2000) 2m7.144530501s ago: executing program 7 (id=3022): syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) 2m7.143841871s ago: executing program 2 (id=3023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a002800726f75746500000014000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="f4000900062b3325fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad", 0x25}, {&(0x7f0000000100)="42e9", 0x2}, {&(0x7f00000002c0)="8b3306", 0x3}], 0x3}, 0x0) 2m5.985791433s ago: executing program 39 (id=3002): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000001940)={0xa, 0x0, 0x1000006, @private0, 0x4005}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, 0x0, 0x0) 2m4.38849971s ago: executing program 7 (id=3027): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x1) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) 2m4.275832101s ago: executing program 2 (id=3028): socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x3, {[@main=@item_012={0x0, 0x0, 0xb}, @global=@item_012={0x1, 0x1, 0x7, "86"}]}}, 0x0}, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc0145b0e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_demux(0x0, 0x0, 0x41) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x29, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x194f, 0x4) sendmmsg$inet6(r2, &(0x7f00000000c0), 0x0, 0x800) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f4000020000000000000800000000000000000100000044000500ac1414aa000000000000000000000000000000003c00"], 0xfc}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m3.739253818s ago: executing program 7 (id=3031): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x1d, 0x2, 0x6) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2m1.774998129s ago: executing program 7 (id=3034): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/67, 0x43}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x2000) 2m1.482785222s ago: executing program 2 (id=3035): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)=r2}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [], {0x14, 0x10}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m0.269458869s ago: executing program 7 (id=3038): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a002800726f757465000000140000001100"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="f4000900062b3325fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad", 0x25}, {&(0x7f0000000100)="42e9", 0x2}, {&(0x7f00000002c0)="8b3306", 0x3}], 0x3}, 0x0) 1m59.656323027s ago: executing program 2 (id=3041): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfeda", 0xb}], 0x1, &(0x7f00000012c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xf8, 0x29, 0x4, {0x4, 0x1b, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @pad1, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}, @ra={0x5, 0x2, 0x6}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x6, 0x4, 0x1, 0x9, 0x0, [@empty, @private0]}}}, @hopopts={{0x188, 0x29, 0x36, {0x5e, 0x2d, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0xffffffffffffff04]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dstopts={{0x20, 0x29, 0x37, {0x32, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x74}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x378}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m58.954266309s ago: executing program 7 (id=3044): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_pidfd_open(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) 1m44.272821888s ago: executing program 40 (id=3041): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfeda", 0xb}], 0x1, &(0x7f00000012c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xf8, 0x29, 0x4, {0x4, 0x1b, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @pad1, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}, @ra={0x5, 0x2, 0x6}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x6, 0x4, 0x1, 0x9, 0x0, [@empty, @private0]}}}, @hopopts={{0x188, 0x29, 0x36, {0x5e, 0x2d, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0xffffffffffffff04]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dstopts={{0x20, 0x29, 0x37, {0x32, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x74}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x378}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m43.661348965s ago: executing program 41 (id=3044): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_pidfd_open(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) 7.826024337s ago: executing program 3 (id=3202): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)=r2}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [], {0x14, 0x10}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7.103159421s ago: executing program 4 (id=3203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6.920774214s ago: executing program 3 (id=3204): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) sendmmsg(r0, 0x0, 0x0, 0x9200000000000000) 5.912853007s ago: executing program 4 (id=3205): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380"], 0xfc}}, 0x0) 4.264215643s ago: executing program 3 (id=3206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x2000c011) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0xb83, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) 4.259848335s ago: executing program 4 (id=3207): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001000010400000000000000ffff00", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r0], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.280878295s ago: executing program 4 (id=3208): sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYBLOB="00052bbd70000100000001"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x20002001) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2508000000440003800800030003000000080003000b00000008000300165d0000080003000000000008000100001000000800030000000000080002"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 2.000123202s ago: executing program 3 (id=3209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140e02000010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1.772801787s ago: executing program 4 (id=3210): socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x3, {[@main=@item_012={0x0, 0x0, 0xb}, @global=@item_012={0x1, 0x1, 0x7, "86"}]}}, 0x0}, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc0145b0e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_demux(0x0, 0x0, 0x41) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x29, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x194f, 0x4) sendmmsg$inet6(r2, &(0x7f00000000c0), 0x0, 0x800) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f4000020000000000000800000000000000000100000044000500ac1414aa000000"], 0xfc}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.384208759s ago: executing program 3 (id=3211): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)=r2}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [], {0x14, 0x10}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.048093351s ago: executing program 4 (id=3212): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000000509a0000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0], 0x48}}, 0x4008004) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) 0s ago: executing program 3 (id=3213): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) sendmmsg(r0, &(0x7f00000030c0), 0x0, 0x9200000000000000) kernel console output (not intermixed with test programs): port 1(bridge_slave_0) entered disabled state [ 520.780111][ T5822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.830706][ T5822] bond_slave_0: left promiscuous mode [ 520.869403][ T5822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.054676][ T5822] bond_slave_1: left promiscuous mode [ 521.055300][ T5822] bond0 (unregistering): Released all slaves [ 521.276506][ T5822] jý: left promiscuous mode [ 521.447472][T10263] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 521.484895][T10263] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 521.505099][T10263] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 521.574861][T10263] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 521.577421][T10263] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 521.758189][T10263] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 521.765065][T10263] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 521.810183][T10263] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 522.626188][T10263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.660953][T10263] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.677901][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.685272][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.826784][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1779'. [ 522.833055][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1779'. [ 522.926569][ T3013] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.943507][ T3013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.258247][ T5822] hsr_slave_0: left promiscuous mode [ 523.298252][ T5822] hsr_slave_1: left promiscuous mode [ 523.299946][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.340780][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.290979][ T5822] team0 (unregistering): Port device team_slave_1 removed [ 524.428802][ T5822] team0 (unregistering): Port device team_slave_0 removed [ 524.808841][T10605] tipc: Started in network mode [ 524.808871][T10605] tipc: Node identity e2d006298161, cluster identity 4711 [ 524.817776][T10605] tipc: Enabled bearer , priority 0 [ 524.937733][T10608] syzkaller0: entered promiscuous mode [ 524.937759][T10608] syzkaller0: entered allmulticast mode [ 524.942247][T10608] tipc: Resetting bearer [ 525.183954][ T2949] tipc: Resetting bearer [ 525.238298][T10600] tipc: Resetting bearer [ 525.417864][T10648] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1795'. [ 538.259225][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 538.328675][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 538.330724][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 538.332730][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 538.333770][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 540.050175][T10600] tipc: Disabling bearer [ 540.265837][ T5615] tipc: Node number set to 1672545833 [ 540.420827][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 540.443569][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 540.446549][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 540.472985][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 540.473101][ T5614] Bluetooth: hci2: command tx timeout [ 540.475459][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 542.529210][T10263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.548255][T10881] Bluetooth: hci2: command tx timeout [ 542.628210][T10881] Bluetooth: hci3: command tx timeout [ 543.627973][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.157355][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.506200][T10840] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.507842][T10840] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.507983][T10840] bridge_slave_0: entered allmulticast mode [ 544.512133][T10840] bridge_slave_0: entered promiscuous mode [ 544.628463][T10881] Bluetooth: hci2: command tx timeout [ 544.708148][T10881] Bluetooth: hci3: command tx timeout [ 544.742833][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.790859][T10840] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.790961][T10840] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.791137][T10840] bridge_slave_1: entered allmulticast mode [ 544.792494][T10840] bridge_slave_1: entered promiscuous mode [ 544.810485][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 544.885027][T10840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.940338][T10840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.100772][T10263] veth0_vlan: entered promiscuous mode [ 545.261348][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.370459][T10840] team0: Port device team_slave_0 added [ 545.411454][T10840] team0: Port device team_slave_1 added [ 545.493950][T10840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.493965][T10840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.493989][T10840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.544551][T10263] veth1_vlan: entered promiscuous mode [ 545.547707][T10840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.547717][T10840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.547732][T10840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.857820][T10873] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.857886][T10873] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.858273][T10873] bridge_slave_0: entered allmulticast mode [ 545.865618][T10873] bridge_slave_0: entered promiscuous mode [ 545.927623][T10873] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.927783][T10873] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.927964][T10873] bridge_slave_1: entered allmulticast mode [ 545.938830][T10873] bridge_slave_1: entered promiscuous mode [ 545.981028][T10840] hsr_slave_0: entered promiscuous mode [ 545.987376][T10840] hsr_slave_1: entered promiscuous mode [ 546.273663][T10873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.324430][T10873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.670544][T10873] team0: Port device team_slave_0 added [ 546.672171][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 546.708180][T10881] Bluetooth: hci2: command tx timeout [ 546.727034][T10873] team0: Port device team_slave_1 added [ 546.788968][T10881] Bluetooth: hci3: command tx timeout [ 546.897221][T10873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.897236][T10873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.897355][T10873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.914251][T10263] veth0_macvtap: entered promiscuous mode [ 546.956118][T10873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.956129][T10873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.956143][T10873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.957049][T10263] veth1_macvtap: entered promiscuous mode [ 547.351287][ T13] bridge_slave_1: left allmulticast mode [ 547.351318][ T13] bridge_slave_1: left promiscuous mode [ 547.351627][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.549271][ T13] bridge_slave_0: left allmulticast mode [ 547.549294][ T13] bridge_slave_0: left promiscuous mode [ 547.549443][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.629963][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.711436][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.752548][ T13] bond0 (unregistering): Released all slaves [ 548.885689][T10881] Bluetooth: hci3: command tx timeout [ 549.044488][T10873] hsr_slave_0: entered promiscuous mode [ 549.045596][T10873] hsr_slave_1: entered promiscuous mode [ 549.047922][T10873] debugfs: 'hsr0' already exists in 'hsr' [ 549.047940][T10873] Cannot create hsr debugfs directory [ 549.107887][T10263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.804769][T10263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.425129][ T73] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.429853][ T5260] 8021q: adding VLAN 0 to HW filter on device eth11 [ 550.447047][ T73] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.566404][ T73] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.660125][ T73] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.807050][T10840] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 550.952799][T10840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 550.974942][T10840] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 551.024970][T10840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 551.053058][T10840] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 551.148239][T10840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 551.328931][ T13] hsr_slave_0: left promiscuous mode [ 551.370259][ T13] hsr_slave_1: left promiscuous mode [ 551.371320][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.371345][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.431148][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.431173][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.540400][ T13] veth1_macvtap: left promiscuous mode [ 551.540500][ T13] veth0_macvtap: left promiscuous mode [ 551.540726][ T13] veth1_vlan: left promiscuous mode [ 551.540890][ T13] veth0_vlan: left promiscuous mode [ 552.589319][ T13] team0 (unregistering): Port device team_slave_1 removed [ 552.630765][ T13] team0 (unregistering): Port device team_slave_0 removed [ 552.956241][T10840] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 553.025798][T10840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 554.153067][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.153085][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.420991][T10873] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 554.485853][T10873] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 554.500276][T10873] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 554.526322][T10873] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 554.530843][T10873] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 554.549770][ T5822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.549787][ T5822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.567212][T10873] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 554.597629][T10873] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 554.685621][T10873] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 554.853406][T10840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.919390][T10840] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.990484][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.990612][ T6475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.063403][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.063610][ T5822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.321840][T10873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.448969][T10873] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.483799][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.483927][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.508488][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1682'. [ 555.546514][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.546717][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.658543][T10840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.670813][T10873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.807874][ T5260] 8021q: adding VLAN 0 to HW filter on device eth12 [ 558.188947][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.736310][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.247646][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.372571][ T5260] 8021q: adding VLAN 0 to HW filter on device eth13 [ 559.637783][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.783892][T10873] veth0_vlan: entered promiscuous mode [ 559.786271][T10840] veth0_vlan: entered promiscuous mode [ 559.896423][T10873] veth1_vlan: entered promiscuous mode [ 559.947304][T10840] veth1_vlan: entered promiscuous mode [ 560.377567][T10840] veth0_macvtap: entered promiscuous mode [ 560.446087][T10873] veth0_macvtap: entered promiscuous mode [ 560.481487][T10840] veth1_macvtap: entered promiscuous mode [ 560.507050][T10873] veth1_macvtap: entered promiscuous mode [ 560.858489][ T13] bridge_slave_1: left allmulticast mode [ 560.858513][ T13] bridge_slave_1: left promiscuous mode [ 560.858773][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.039310][ T13] bridge_slave_0: left allmulticast mode [ 561.039331][ T13] bridge_slave_0: left promiscuous mode [ 561.039472][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.271019][T11333] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 562.240199][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.319939][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.361661][ T13] bond0 (unregistering): Released all slaves [ 563.255041][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.255104][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.277365][ T5260] 8021q: adding VLAN 0 to HW filter on device eth14 [ 563.436671][T10840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.446840][T10873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.483512][ T13] tipc: Left network mode [ 563.485190][T10840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.504182][T10873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.593119][ T6475] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.600168][ T6475] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.605744][ T6475] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.635851][ T6475] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.637777][ T6475] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.645807][ T6475] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.761092][ T6475] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.781184][ T6475] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.689549][T11375] veth1_macvtap: renamed from vlan0 [ 566.064991][ T2053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.065009][ T2053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.247137][ T2053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.247156][ T2053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.400748][ T13] hsr_slave_0: left promiscuous mode [ 566.440070][ T13] hsr_slave_1: left promiscuous mode [ 566.441464][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.441489][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.492794][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.492821][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.750838][ T13] veth1_macvtap: left promiscuous mode [ 566.752599][ T13] veth0_macvtap: left promiscuous mode [ 566.752843][ T13] veth1_vlan: left promiscuous mode [ 566.753029][ T13] veth0_vlan: left promiscuous mode [ 568.591237][ T36] kauditd_printk_skb: 79 callbacks suppressed [ 568.591307][ T36] audit: type=1107 audit(1779165722.126:1135): pid=11461 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='C]žÑ¼êÅ¢£xx·p¹ôæ' [ 569.799839][ T13] team0 (unregistering): Port device team_slave_1 removed [ 570.659487][ T13] team0 (unregistering): Port device team_slave_0 removed [ 571.149794][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.149809][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.420236][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.420255][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.820445][ T5260] 8021q: adding VLAN 0 to HW filter on device eth15 [ 575.005560][T10267] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 575.072965][T10267] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 575.075035][T10267] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 575.089533][T10267] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 575.092944][T10267] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 576.806662][ T73] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.806692][ T73] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.956222][T11585] batman_adv: batadv0: Adding interface: macvtap1 [ 576.956239][T11585] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.956273][T11585] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 577.034404][ T5260] 8021q: adding VLAN 0 to HW filter on device eth16 [ 577.222035][T10881] Bluetooth: hci5: command tx timeout [ 577.357415][ T73] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.357447][ T73] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.711032][T10881] block nbd0: Receive control failed (result -22) [ 578.425647][T11595] nbd0: detected capacity change from 0 to 32 [ 578.516598][ T5707] block nbd0: Dead connection, failed to find a fallback [ 578.516636][ T5707] block nbd0: shutting down sockets [ 578.516736][ T5707] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.516836][ T5707] Buffer I/O error on dev nbd0, logical block 0, async page read [ 578.618341][ T5707] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.618361][ T5707] Buffer I/O error on dev nbd0, logical block 0, async page read [ 578.618451][ T5707] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.618464][ T5707] Buffer I/O error on dev nbd0, logical block 0, async page read [ 578.618548][ T5707] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.618560][ T5707] Buffer I/O error on dev nbd0, logical block 0, async page read [ 578.618640][ T5707] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.618651][ T5707] Buffer I/O error on dev nbd0, logical block 0, async page read [ 578.618746][ T5707] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.618758][ T5707] Buffer I/O error on dev nbd0, logical block 0, async page read [ 578.618904][ T5707] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.618916][ T5707] Buffer I/O error on dev nbd0, logical block 0, async page read [ 578.618996][ T5707] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.619015][ T5707] Buffer I/O error on dev nbd0, logical block 0, async page read [ 578.619065][ T5707] ldm_validate_partition_table(): Disk read failed. [ 578.619114][ T5707] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.619126][ T5707] Buffer I/O error on dev nbd0, logical block 0, async page read [ 578.619217][ T5707] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.619229][ T5707] Buffer I/O error on dev nbd0, logical block 0, async page read [ 578.619426][ T5707] Dev nbd0: unable to read RDB block 0 [ 578.638361][ T5707] nbd0: unable to read partition table [ 578.869086][ T5707] ldm_validate_partition_table(): Disk read failed. [ 578.869674][ T5707] Dev nbd0: unable to read RDB block 0 [ 578.870303][ T5707] nbd0: unable to read partition table [ 578.979026][ T73] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.979057][ T73] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.278961][T10881] Bluetooth: hci5: command tx timeout [ 581.590250][T10881] Bluetooth: hci5: command tx timeout [ 581.822957][T11640] Bluetooth: MGMT ver 1.23 [ 581.823100][T11640] Bluetooth: hci1: expected 4473 bytes, got 2 bytes [ 582.674996][ T73] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.675030][ T73] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.217540][ T5260] 8021q: adding VLAN 0 to HW filter on device eth17 [ 583.737477][T10267] Bluetooth: hci5: command tx timeout [ 585.232937][T11528] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.233160][T11528] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.233326][T11528] bridge_slave_0: entered allmulticast mode [ 585.236728][T11528] bridge_slave_0: entered promiscuous mode [ 585.243326][T11528] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.243483][T11528] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.243616][T11528] bridge_slave_1: entered allmulticast mode [ 585.245779][T11528] bridge_slave_1: entered promiscuous mode [ 585.285790][T11528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.302305][T11528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.585593][T11528] team0: Port device team_slave_0 added [ 585.603588][T11528] team0: Port device team_slave_1 added [ 585.976186][T11528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.976201][T11528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.976238][T11528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.027622][T11528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.027637][T11528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.027661][T11528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.266737][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2118'. [ 586.380623][T10267] block nbd1: Receive control failed (result -22) [ 586.572661][T11691] nbd1: detected capacity change from 0 to 32 [ 586.654655][ T6081] block nbd1: Dead connection, failed to find a fallback [ 586.654680][ T6081] block nbd1: shutting down sockets [ 586.654693][ T6081] blk_print_req_error: 27 callbacks suppressed [ 586.654703][ T6081] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 586.654727][ T6081] buffer_io_error: 27 callbacks suppressed [ 586.654736][ T6081] Buffer I/O error on dev nbd1, logical block 0, async page read [ 586.655479][ T6081] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 586.655502][ T6081] Buffer I/O error on dev nbd1, logical block 0, async page read [ 586.655646][ T6081] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 586.655666][ T6081] Buffer I/O error on dev nbd1, logical block 0, async page read [ 586.655797][ T6081] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 586.655817][ T6081] Buffer I/O error on dev nbd1, logical block 0, async page read [ 586.655959][ T6081] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 586.655980][ T6081] Buffer I/O error on dev nbd1, logical block 0, async page read [ 586.656157][ T6081] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 586.656178][ T6081] Buffer I/O error on dev nbd1, logical block 0, async page read [ 586.991492][ T6081] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 586.991525][ T6081] Buffer I/O error on dev nbd1, logical block 0, async page read [ 586.991686][ T6081] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 586.991707][ T6081] Buffer I/O error on dev nbd1, logical block 0, async page read [ 586.991797][ T6081] ldm_validate_partition_table(): Disk read failed. [ 586.991863][ T6081] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 586.991883][ T6081] Buffer I/O error on dev nbd1, logical block 0, async page read [ 586.992024][ T6081] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 586.992044][ T6081] Buffer I/O error on dev nbd1, logical block 0, async page read [ 587.007630][ T6081] Dev nbd1: unable to read RDB block 0 [ 587.727852][ T6081] nbd1: unable to read partition table [ 587.797189][ T6081] ldm_validate_partition_table(): Disk read failed. [ 587.797490][ T6081] Dev nbd1: unable to read RDB block 0 [ 587.814126][ T6081] nbd1: unable to read partition table [ 587.856289][ T5260] 8021q: adding VLAN 0 to HW filter on device eth18 [ 588.199654][ T73] bridge_slave_1: left allmulticast mode [ 588.199676][ T73] bridge_slave_1: left promiscuous mode [ 588.199848][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.371372][ T73] bridge_slave_0: left allmulticast mode [ 588.371396][ T73] bridge_slave_0: left promiscuous mode [ 588.371565][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.631547][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.712336][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.751331][ T73] bond0 (unregistering): Released all slaves [ 591.042631][T11528] hsr_slave_0: entered promiscuous mode [ 591.043919][T11528] hsr_slave_1: entered promiscuous mode [ 591.044811][T11528] debugfs: 'hsr0' already exists in 'hsr' [ 591.044832][T11528] Cannot create hsr debugfs directory [ 591.628224][ T5929] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 591.778183][ T5929] usb 8-1: Using ep0 maxpacket: 32 [ 592.994208][ T5929] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 592.994226][ T5929] usb 8-1: config 0 has no interface number 0 [ 592.994254][ T5929] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 592.994265][ T5929] usb 8-1: config 0 interface 89 has no altsetting 0 [ 593.043287][ T5929] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 593.043306][ T5929] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.043315][ T5929] usb 8-1: Product: syz [ 593.043322][ T5929] usb 8-1: Manufacturer: syz [ 593.043329][ T5929] usb 8-1: SerialNumber: syz [ 593.047246][ T5929] usb 8-1: config 0 descriptor?? [ 593.093264][ T5929] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 593.093323][ T5929] em28xx 8-1:0.89: Video interface 89 found: [ 593.183152][T11758] smc: net device vcan0 applied user defined pnetid SYZ1 [ 593.471834][T11771] tipc: Started in network mode [ 593.471860][T11771] tipc: Node identity d6ea52dae992, cluster identity 4711 [ 593.472024][T11771] tipc: Enabled bearer , priority 0 [ 593.505568][T11768] syzkaller0: entered promiscuous mode [ 593.505592][T11768] syzkaller0: entered allmulticast mode [ 593.675818][ T5929] em28xx 8-1:0.89: chip ID is em2828X [ 594.932816][ T5929] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 594.932984][ T5929] em28xx 8-1:0.89: board has no eeprom [ 594.991396][ T5929] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 594.991490][ T5929] em28xx 8-1:0.89: analog set to bulk mode. [ 594.993726][T11362] em28xx 8-1:0.89: Registering V4L2 extension [ 595.022880][T11768] tipc: Resetting bearer [ 595.037602][ T5929] usb 8-1: USB disconnect, device number 2 [ 595.067877][ T5929] em28xx 8-1:0.89: Disconnecting em28xx [ 595.169551][T11766] tipc: Resetting bearer [ 595.333090][T11362] usb 8-1: Decoder not found [ 595.333138][T11362] em28xx 8-1:0.89: failed to create media graph [ 595.333220][T11362] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 595.380840][T11766] tipc: Disabling bearer [ 595.406060][T11362] em28xx 8-1:0.89: Registering snapshot button... [ 595.423642][T11362] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input8 [ 595.467103][T11362] em28xx 8-1:0.89: Remote control support is not available for this card. [ 595.470278][ T5929] em28xx 8-1:0.89: Closing input extension [ 595.472987][ T5929] em28xx 8-1:0.89: Deregistering snapshot button [ 595.601629][ T820] tipc: Node number set to 1064850138 [ 595.696604][ T5260] 8021q: adding VLAN 0 to HW filter on device eth19 [ 598.102294][ T5929] em28xx 8-1:0.89: Freeing device [ 598.158250][ T73] hsr_slave_0: left promiscuous mode [ 598.198703][ T73] hsr_slave_1: left promiscuous mode [ 598.199686][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.199709][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.231731][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.231756][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.313366][ T73] veth1_macvtap: left promiscuous mode [ 599.313502][ T73] veth0_macvtap: left promiscuous mode [ 599.313748][ T73] veth1_vlan: left promiscuous mode [ 599.313914][ T73] veth0_vlan: left promiscuous mode [ 599.980919][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2161'. [ 601.818812][ T73] team0 (unregistering): Port device team_slave_1 removed [ 601.867570][ T73] team0 (unregistering): Port device team_slave_0 removed [ 603.311236][T11849] syzkaller0: entered promiscuous mode [ 603.311255][T11849] syzkaller0: entered allmulticast mode [ 615.347875][T10881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 615.432132][T10881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 615.433214][T10881] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 615.436527][T10881] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 615.437160][T10881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 617.588343][T10267] Bluetooth: hci4: command tx timeout [ 618.444713][T10881] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 618.506186][T10881] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 618.507453][T10881] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 618.522998][T10881] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 618.523646][T10881] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 619.668363][T10881] Bluetooth: hci4: command tx timeout [ 620.636769][T10881] Bluetooth: hci6: command tx timeout [ 620.914701][T11882] tipc: Enabled bearer , priority 0 [ 620.916273][T11885] syzkaller0: entered promiscuous mode [ 620.916294][T11885] syzkaller0: entered allmulticast mode [ 620.919072][T11889] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2171'. [ 620.921774][T11895] tipc: Resetting bearer [ 620.968366][T11880] tipc: Resetting bearer [ 621.129663][T11880] tipc: Disabling bearer [ 621.772412][T10881] Bluetooth: hci4: command tx timeout [ 622.708630][T10881] Bluetooth: hci6: command tx timeout [ 623.790540][ T5260] 8021q: adding VLAN 0 to HW filter on device eth20 [ 623.838250][T10881] Bluetooth: hci4: command tx timeout [ 623.939842][T12085] netlink: 'syz.7.2241': attribute type 12 has an invalid length. [ 623.939862][T12085] netlink: 'syz.7.2241': attribute type 29 has an invalid length. [ 623.939873][T12085] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2241'. [ 623.939895][T12085] netlink: 59 bytes leftover after parsing attributes in process `syz.7.2241'. [ 624.236275][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.236341][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.265770][ T73] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.798267][T10881] Bluetooth: hci6: command tx timeout [ 626.868155][T10881] Bluetooth: hci6: command tx timeout [ 627.764082][ T73] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.376241][ T73] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.898238][T12124] netlink: 'syz.3.2251': attribute type 12 has an invalid length. [ 628.898258][T12124] netlink: 'syz.3.2251': attribute type 29 has an invalid length. [ 628.898270][T12124] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2251'. [ 628.898288][T12124] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2251'. [ 630.560118][ T73] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.907286][T11528] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 630.947662][T11528] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 630.982828][T11528] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 631.012539][T11528] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 631.227290][T11528] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 631.249587][T12148] random: crng reseeded on system resumption [ 631.306446][T11528] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 631.338808][T11985] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.338924][T11985] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.339119][T11985] bridge_slave_0: entered allmulticast mode [ 631.341642][T11985] bridge_slave_0: entered promiscuous mode [ 631.346434][T11528] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 631.412583][T11528] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 631.436677][T11985] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.437029][T11985] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.437225][T11985] bridge_slave_1: entered allmulticast mode [ 631.449975][T11985] bridge_slave_1: entered promiscuous mode [ 631.660077][T11985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.665539][T12012] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.665703][T12012] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.665887][T12012] bridge_slave_0: entered allmulticast mode [ 631.674268][T10267] Bluetooth: hci1: command 0x0406 tx timeout [ 631.695190][T12012] bridge_slave_0: entered promiscuous mode [ 631.744895][T11985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.797553][T12012] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.797695][T12012] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.797881][T12012] bridge_slave_1: entered allmulticast mode [ 631.804383][T12012] bridge_slave_1: entered promiscuous mode [ 632.052512][T11985] team0: Port device team_slave_0 added [ 632.055823][T12012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.079048][T11985] team0: Port device team_slave_1 added [ 632.081133][T12012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.438965][T10267] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 633.440461][T10267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 633.456477][T10267] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 633.506495][T10267] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 633.517215][T10267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 633.758916][ T73] bridge_slave_1: left allmulticast mode [ 633.758949][ T73] bridge_slave_1: left promiscuous mode [ 633.759193][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.929886][ T73] bridge_slave_0: left allmulticast mode [ 633.929920][ T73] bridge_slave_0: left promiscuous mode [ 633.930166][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.473985][ T6147] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 634.679117][ T6147] usb 8-1: unable to get BOS descriptor or descriptor too short [ 634.679678][ T6147] usb 8-1: not running at top speed; connect to a high speed hub [ 634.685779][ T6147] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 634.685822][ T6147] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 634.690876][ T6147] usb 8-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 634.690900][ T6147] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.690917][ T6147] usb 8-1: Product: syz [ 634.690929][ T6147] usb 8-1: Manufacturer: syz [ 634.690941][ T6147] usb 8-1: SerialNumber: syz [ 635.029173][ T6147] usb 8-1: USB disconnect, device number 3 [ 635.198987][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.279884][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.320212][ T73] bond0 (unregistering): Released all slaves [ 635.496736][T11985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.496752][T11985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.496776][T11985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.530949][T12012] team0: Port device team_slave_0 added [ 635.597393][T12012] team0: Port device team_slave_1 added [ 635.612864][T10267] Bluetooth: hci2: command tx timeout [ 635.614766][T11985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.614780][T11985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.614804][T11985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.758450][T12012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.758466][T12012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.758490][T12012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.761294][T12012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.761307][T12012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.761331][T12012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.961049][T11985] hsr_slave_0: entered promiscuous mode [ 635.962466][T11985] hsr_slave_1: entered promiscuous mode [ 635.963389][T11985] debugfs: 'hsr0' already exists in 'hsr' [ 635.963412][T11985] Cannot create hsr debugfs directory [ 636.359964][T12012] hsr_slave_0: entered promiscuous mode [ 636.360806][T12012] hsr_slave_1: entered promiscuous mode [ 636.361311][T12012] debugfs: 'hsr0' already exists in 'hsr' [ 636.361328][T12012] Cannot create hsr debugfs directory [ 637.528234][ T73] hsr_slave_0: left promiscuous mode [ 637.568367][ T73] hsr_slave_1: left promiscuous mode [ 637.569447][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.569470][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.613427][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.613452][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.668729][T10267] Bluetooth: hci2: command tx timeout [ 637.691971][ T73] veth1_macvtap: left promiscuous mode [ 637.692073][ T73] veth0_macvtap: left promiscuous mode [ 637.692309][ T73] veth1_vlan: left promiscuous mode [ 637.692467][ T73] veth0_vlan: left promiscuous mode [ 638.420243][ T73] team0 (unregistering): Port device team_slave_1 removed [ 638.458836][ T73] team0 (unregistering): Port device team_slave_0 removed [ 638.615117][ T73] smc: removing net device vcan0 with user defined pnetid SYZ1 [ 638.685542][ T5260] 8021q: adding VLAN 0 to HW filter on device eth21 [ 639.748655][T10267] Bluetooth: hci2: command tx timeout [ 640.210096][ T5260] 8021q: adding VLAN 0 to HW filter on device eth22 [ 640.331605][T12172] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.334357][T12172] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.334563][T12172] bridge_slave_0: entered allmulticast mode [ 640.337865][T12172] bridge_slave_0: entered promiscuous mode [ 640.408941][T12172] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.409053][T12172] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.409283][T12172] bridge_slave_1: entered allmulticast mode [ 640.411973][T12172] bridge_slave_1: entered promiscuous mode [ 640.693369][T12172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.709683][T12172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.788333][T12172] team0: Port device team_slave_0 added [ 640.892716][T12172] team0: Port device team_slave_1 added [ 641.364512][T12172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.364523][T12172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.364538][T12172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.372521][ T5260] 8021q: adding VLAN 0 to HW filter on device eth23 [ 641.374186][T12172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.374198][T12172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.374222][T12172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.467431][T12172] hsr_slave_0: entered promiscuous mode [ 641.472832][T12172] hsr_slave_1: entered promiscuous mode [ 641.473698][T12172] debugfs: 'hsr0' already exists in 'hsr' [ 641.473719][T12172] Cannot create hsr debugfs directory [ 641.839677][T10267] Bluetooth: hci2: command tx timeout [ 642.237781][ T5260] 8021q: adding VLAN 0 to HW filter on device eth24 [ 644.218820][ T73] bridge_slave_1: left allmulticast mode [ 644.218853][ T73] bridge_slave_1: left promiscuous mode [ 644.219091][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.369925][ T73] bridge_slave_0: left allmulticast mode [ 644.369968][ T73] bridge_slave_0: left promiscuous mode [ 644.370270][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.070137][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.170150][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.229947][ T73] bond0 (unregistering): Released all slaves [ 645.610741][T11985] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 645.642541][T11985] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 645.661792][T11985] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 645.704514][T11985] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 645.988347][ T73] hsr_slave_0: left promiscuous mode [ 646.028158][ T73] hsr_slave_1: left promiscuous mode [ 646.029171][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.079889][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.653844][ T73] team0 (unregistering): Port device team_slave_1 removed [ 646.741637][ T73] team0 (unregistering): Port device team_slave_0 removed [ 646.959627][T11985] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 646.982510][T11985] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 647.003924][T11985] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 647.041787][T11985] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 647.473432][T11985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.678978][T11985] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.689050][ T2053] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.689255][ T2053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.702498][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.702700][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.874141][T11985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.931396][T12012] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 648.983624][T12012] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 648.985385][T12012] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 649.022608][T12012] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 649.073516][T12012] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 649.121382][T12012] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 649.137594][T12012] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 649.164369][T12012] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 649.520156][T12172] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 649.551534][T12172] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 649.553474][T12172] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 649.617103][T12172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 649.624712][T12172] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 649.653856][T12172] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 649.681059][T12172] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 649.722681][T12172] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 649.747367][T11985] veth0_vlan: entered promiscuous mode [ 649.807859][T11985] veth1_vlan: entered promiscuous mode [ 650.057922][T11985] veth0_macvtap: entered promiscuous mode [ 650.077713][T12012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.091393][T11985] veth1_macvtap: entered promiscuous mode [ 650.164118][T12012] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.191783][T11985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.231188][T11867] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.231376][T11867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.280559][T11985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.316585][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.316716][ T5822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.347608][ T5822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.374535][ T5822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.376725][ T5822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.383801][ T5822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.422403][T12172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.641684][T12172] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.873006][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.881812][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.003974][ T3052] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.004102][ T3052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.109670][T11867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.109689][T11867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.384207][ T3052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.384227][ T3052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.535986][T12012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.866014][T12172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.876339][T12503] netlink: 'syz.7.2268': attribute type 12 has an invalid length. [ 653.876369][T12503] netlink: 'syz.7.2268': attribute type 29 has an invalid length. [ 653.876382][T12503] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2268'. [ 653.876404][T12503] netlink: 59 bytes leftover after parsing attributes in process `syz.7.2268'. [ 654.101516][T12172] veth0_vlan: entered promiscuous mode [ 654.124630][T12172] veth1_vlan: entered promiscuous mode [ 654.392747][T12012] veth0_vlan: entered promiscuous mode [ 654.502442][T12172] veth0_macvtap: entered promiscuous mode [ 654.523288][T12012] veth1_vlan: entered promiscuous mode [ 654.583726][T12172] veth1_macvtap: entered promiscuous mode [ 654.886758][T12172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.914540][T12172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.001384][T12012] veth0_macvtap: entered promiscuous mode [ 655.020585][T11867] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.028458][T11867] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.096759][ T5822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.109138][T12012] veth1_macvtap: entered promiscuous mode [ 655.189721][ T5822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.717855][T12012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.823401][T12012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.042914][ T1181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.076050][ T1181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.085008][ T1181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.089354][ T1181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.115162][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.115197][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.477914][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.477933][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.866392][T12549] netlink: 'syz.2.2281': attribute type 12 has an invalid length. [ 656.866413][T12549] netlink: 'syz.2.2281': attribute type 29 has an invalid length. [ 656.866426][T12549] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2281'. [ 656.866448][T12549] netlink: 59 bytes leftover after parsing attributes in process `syz.2.2281'. [ 657.109760][ T2053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.109778][ T2053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.599488][T12565] netlink: 'syz.0.2080': attribute type 1 has an invalid length. [ 657.650722][ T2053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.650741][ T2053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.222800][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2285'. [ 660.366486][T12591] openvswitch: netlink: Message has 4 unknown bytes. [ 660.807380][T12608] netlink: 'syz.4.2291': attribute type 12 has an invalid length. [ 660.807401][T12608] netlink: 'syz.4.2291': attribute type 29 has an invalid length. [ 660.807412][T12608] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2291'. [ 660.807433][T12608] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2291'. [ 660.995433][T10881] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 661.070453][T10881] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 661.074977][T10881] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 661.097471][T10881] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 661.122340][T10881] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 663.279298][T10881] Bluetooth: hci3: command tx timeout [ 663.533330][T12653] process 'syz.0.2299' launched '/dev/fd/5' with NULL argv: empty string added [ 663.894314][T12662] openvswitch: netlink: Message has 4 unknown bytes. [ 664.053643][T12663] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 664.053720][T12663] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 665.352828][T10881] Bluetooth: hci3: command tx timeout [ 665.473130][ T73] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.516942][T12684] vlan1: entered promiscuous mode [ 666.517154][T12684] vlan1: entered allmulticast mode [ 666.517168][T12684] veth0_vlan: entered allmulticast mode [ 666.585886][T12676] netlink: 'syz.4.2304': attribute type 12 has an invalid length. [ 666.586022][T12676] netlink: 'syz.4.2304': attribute type 29 has an invalid length. [ 666.586036][T12676] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2304'. [ 666.586059][T12676] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2304'. [ 667.554687][T12699] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2307'. [ 668.070471][T10881] Bluetooth: hci3: command tx timeout [ 668.411575][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2310'. [ 668.480360][ T73] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.934828][T12724] openvswitch: netlink: Message has 4 unknown bytes. [ 669.466282][ T73] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.848118][ T73] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.148897][T10881] Bluetooth: hci3: command tx timeout [ 671.948483][T12744] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 672.720662][T12609] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.723484][T12609] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.725100][T12609] bridge_slave_0: entered allmulticast mode [ 672.745449][T12609] bridge_slave_0: entered promiscuous mode [ 672.762288][T12609] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.762401][T12609] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.762603][T12609] bridge_slave_1: entered allmulticast mode [ 672.788798][T12609] bridge_slave_1: entered promiscuous mode [ 672.881128][T12782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 673.108745][T12609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.660530][T12609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.994118][T12609] team0: Port device team_slave_0 added [ 674.015393][T12609] team0: Port device team_slave_1 added [ 674.091633][T12609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.091649][T12609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.091673][T12609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.114268][T12609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.114283][T12609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.114308][T12609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.453853][T12811] netlink: 'syz.4.2328': attribute type 12 has an invalid length. [ 674.453872][T12811] netlink: 'syz.4.2328': attribute type 29 has an invalid length. [ 674.453885][T12811] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2328'. [ 674.453906][T12811] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2328'. [ 674.805073][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2330'. [ 674.874924][ T73] bridge_slave_1: left allmulticast mode [ 674.874957][ T73] bridge_slave_1: left promiscuous mode [ 674.875981][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.906151][T12823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.051772][ T73] bridge_slave_0: left allmulticast mode [ 675.051805][ T73] bridge_slave_0: left promiscuous mode [ 675.052108][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.622012][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.711512][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.751848][ T73] bond0 (unregistering): Released all slaves [ 676.823236][T12609] hsr_slave_0: entered promiscuous mode [ 676.824496][T12609] hsr_slave_1: entered promiscuous mode [ 676.825376][T12609] debugfs: 'hsr0' already exists in 'hsr' [ 676.825399][T12609] Cannot create hsr debugfs directory [ 676.958359][T12834] netlink: 'syz.7.2339': attribute type 12 has an invalid length. [ 676.958379][T12834] netlink: 'syz.7.2339': attribute type 29 has an invalid length. [ 676.958392][T12834] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2339'. [ 676.958414][T12834] netlink: 59 bytes leftover after parsing attributes in process `syz.7.2339'. [ 677.622158][T12861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 678.658286][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2352'. [ 679.110069][T12904] mmap: syz.2.2355 (12904) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 679.153124][T12900] netlink: 'syz.7.2354': attribute type 12 has an invalid length. [ 679.153145][T12900] netlink: 'syz.7.2354': attribute type 29 has an invalid length. [ 679.153157][T12900] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2354'. [ 679.153178][T12900] netlink: 59 bytes leftover after parsing attributes in process `syz.7.2354'. [ 679.387813][T12908] openvswitch: netlink: Missing valid actions attribute. [ 679.387843][T12908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.602066][ T73] hsr_slave_0: left promiscuous mode [ 680.619563][ T73] hsr_slave_1: left promiscuous mode [ 680.620558][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.620581][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.660687][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.660710][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.891289][ T73] veth1_macvtap: left promiscuous mode [ 680.891390][ T73] veth0_macvtap: left promiscuous mode [ 680.921344][ T73] veth1_vlan: left promiscuous mode [ 680.921514][ T73] veth0_vlan: left promiscuous mode [ 681.250883][T12948] openvswitch: netlink: Missing valid actions attribute. [ 681.250912][T12948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.518497][T12952] tmpfs: Unsupported parameter 'huge' [ 682.200372][T12961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2373'. [ 682.271084][ T73] team0 (unregistering): Port device team_slave_1 removed [ 682.349055][ T73] team0 (unregistering): Port device team_slave_0 removed [ 682.867021][T12945] netlink: 'syz.7.2366': attribute type 12 has an invalid length. [ 682.867044][T12945] netlink: 'syz.7.2366': attribute type 29 has an invalid length. [ 682.867055][T12945] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2366'. [ 682.867076][T12945] netlink: 59 bytes leftover after parsing attributes in process `syz.7.2366'. [ 683.670799][T12609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 683.770611][T12609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 683.775328][T12609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 683.851769][T12609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 683.901233][T12609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 683.962346][T12609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 683.980330][T12609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 684.167965][T12990] openvswitch: netlink: Missing valid actions attribute. [ 684.190588][T12990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.229286][T12609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 684.672550][ T73] IPVS: stop unused estimator thread 0... [ 684.726423][T12609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.797037][T12609] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.837049][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.837265][ T5822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.895851][T11760] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.895990][T11760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.486160][T13019] netlink: 'syz.4.2385': attribute type 12 has an invalid length. [ 685.486180][T13019] netlink: 'syz.4.2385': attribute type 29 has an invalid length. [ 685.486193][T13019] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2385'. [ 685.682416][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.682485][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.051284][T13037] openvswitch: netlink: Missing valid actions attribute. [ 686.051313][T13037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.546097][T12609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.786389][T12609] veth0_vlan: entered promiscuous mode [ 686.821981][T12609] veth1_vlan: entered promiscuous mode [ 686.921114][T12609] veth0_macvtap: entered promiscuous mode [ 686.935121][T12609] veth1_macvtap: entered promiscuous mode [ 686.984887][T12609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.076080][T13060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2393'. [ 687.096104][T12609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.227911][T11760] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.239115][T11760] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.240691][T11760] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.240947][T11760] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.216725][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.216745][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.319907][T13077] netlink: 'syz.7.2397': attribute type 12 has an invalid length. [ 688.319928][T13077] netlink: 'syz.7.2397': attribute type 29 has an invalid length. [ 688.319941][T13077] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2397'. [ 688.591018][ T5822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.591039][ T5822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.016201][T13089] openvswitch: netlink: Missing valid actions attribute. [ 689.016231][T13089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 691.170436][T13119] netlink: 'syz.3.2408': attribute type 12 has an invalid length. [ 691.170456][T13119] netlink: 'syz.3.2408': attribute type 29 has an invalid length. [ 691.170469][T13119] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2408'. [ 691.908723][T13153] openvswitch: netlink: Missing valid actions attribute. [ 691.908752][T13153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.390722][T13161] overlayfs: conflicting lowerdir path [ 693.298793][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2423'. [ 698.003628][T13315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2454'. [ 698.758456][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2458'. [ 700.186059][T13368] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2473'. [ 701.132769][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2481'. [ 701.397377][T13398] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2484'. [ 701.687802][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2486'. [ 703.142563][T13461] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2498'. [ 703.382127][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2501'. [ 704.935212][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2508'. [ 706.518558][T13523] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2514'. [ 706.952255][T13531] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2516'. [ 709.052273][T13574] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2526'. [ 710.479245][T13580] syz.3.2525 (13580): drop_caches: 2 [ 710.725608][T13591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2528'. [ 711.753510][T13627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2539'. [ 711.760613][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2538'. [ 712.204850][T13638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2542'. [ 712.326407][T13646] netlink: 'syz.0.2542': attribute type 10 has an invalid length. [ 712.501581][T13643] bridge_slave_0: left allmulticast mode [ 712.501611][T13643] bridge_slave_0: left promiscuous mode [ 712.501899][T13643] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.936617][T13643] bridge_slave_1: left allmulticast mode [ 712.936637][T13643] bridge_slave_1: left promiscuous mode [ 712.936782][T13643] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.209325][T13643] bond0: (slave bond_slave_0): Releasing backup interface [ 713.322625][T13643] bond0: (slave bond_slave_1): Releasing backup interface [ 713.445764][T13643] team0: Port device team_slave_0 removed [ 713.490755][T13643] team0: Port device team_slave_1 removed [ 713.497682][T13643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.497708][T13643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.544380][T13643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.544407][T13643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.585701][T13643] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 714.081818][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2551'. [ 716.542590][T13710] Cannot find del_set index 14804 as target [ 717.119821][T10881] Bluetooth: hci4: link tx timeout [ 717.121593][T10881] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 717.441384][T13735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'. [ 719.230374][T10881] Bluetooth: hci4: command 0x0406 tx timeout [ 721.040060][ T820] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 721.140991][ T820] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 721.492258][T13800] fido_id[13800]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 723.068315][T13857] netlink: 'syz.7.2588': attribute type 10 has an invalid length. [ 723.068359][T13857] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2588'. [ 723.075255][T13857] team0: entered promiscuous mode [ 723.075320][T13857] team_slave_0: entered promiscuous mode [ 723.078721][T13857] team_slave_1: entered promiscuous mode [ 723.082148][T13857] team0: entered allmulticast mode [ 723.082210][T13857] team_slave_0: entered allmulticast mode [ 723.082377][T13857] team_slave_1: entered allmulticast mode [ 723.094169][T13857] bridge0: port 3(team0) entered blocking state [ 723.095123][T13857] bridge0: port 3(team0) entered disabled state [ 723.146632][T13857] bridge0: port 3(team0) entered blocking state [ 723.148300][T13857] bridge0: port 3(team0) entered forwarding state [ 724.457463][T10267] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 724.709331][ T5858] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 726.098588][T11362] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 726.594507][T11362] usb 5-1: device descriptor read/64, error -71 [ 727.032970][T11362] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 727.159932][T13916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2605'. [ 727.268868][T11362] usb 5-1: device descriptor read/64, error -71 [ 727.324158][ T5858] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 727.324195][ T5858] usb 8-1: can't read configurations, error -71 [ 727.340932][T13923] lo speed is unknown, defaulting to 1000 [ 727.341476][T13923] lo speed is unknown, defaulting to 1000 [ 727.402246][T11362] usb usb5-port1: attempt power cycle [ 727.649561][T13923] lo speed is unknown, defaulting to 1000 [ 727.775901][T13923] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 727.775975][T13923] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 727.776073][T13923] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 728.068710][T13923] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 728.508390][T11362] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 728.531002][T11362] usb 5-1: device descriptor read/8, error -71 [ 728.872409][T13923] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 729.170703][T11362] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 729.320267][T11362] usb 5-1: device descriptor read/8, error -71 [ 729.463897][T11362] usb usb5-port1: unable to enumerate USB device [ 730.118660][T13923] lo speed is unknown, defaulting to 1000 [ 730.289828][T13923] lo speed is unknown, defaulting to 1000 [ 730.365059][T13923] lo speed is unknown, defaulting to 1000 [ 730.396329][T13923] lo speed is unknown, defaulting to 1000 [ 730.438637][T13923] lo speed is unknown, defaulting to 1000 [ 730.522067][T13923] lo speed is unknown, defaulting to 1000 [ 731.636954][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2607'. [ 732.336936][T13923] syz.2.2605 (13923) used greatest stack depth: 17560 bytes left [ 734.093748][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2614'. [ 737.697331][T14025] syzkaller0: entered promiscuous mode [ 737.697354][T14025] syzkaller0: entered allmulticast mode [ 738.084570][T14037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2639'. [ 738.404425][T14035] ip6tnl1: entered allmulticast mode [ 738.626788][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2641'. [ 739.736500][ T6147] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 739.747502][ T6147] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 739.923443][T14068] fido_id[14068]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 741.248107][ T6147] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 741.312322][T14107] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 741.411403][ T6147] usb 1-1: Using ep0 maxpacket: 16 [ 741.416119][ T6147] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 741.416145][ T6147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.416164][ T6147] usb 1-1: Product: syz [ 741.416176][ T6147] usb 1-1: Manufacturer: syz [ 741.416189][ T6147] usb 1-1: SerialNumber: syz [ 741.430348][ T6147] usb 1-1: config 0 descriptor?? [ 741.505190][ T6147] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 741.602709][T14113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2654'. [ 741.798278][ T6147] usb 1-1: Detected FT-X [ 741.823928][ T6147] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 741.825261][ T6147] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 741.826665][ T6147] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 741.844298][ T6147] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 741.947185][ T6147] usb 1-1: USB disconnect, device number 13 [ 742.115429][ T6147] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 742.187852][ T6147] ftdi_sio 1-1:0.0: device disconnected [ 743.458536][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2666'. [ 744.068129][T10881] Bluetooth: hci6: command 0x0406 tx timeout [ 744.977497][T14189] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2674'. [ 746.252797][T14204] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2679'. [ 747.111109][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.111176][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.820213][T14226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.824451][T14226] bond1: (slave bond0): Enslaving as an active interface with an up link [ 747.898196][ T5615] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 748.060662][ T5615] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 748.060688][ T5615] usb 4-1: config 1 has no interface number 0 [ 748.060730][ T5615] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 748.060757][ T5615] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 748.060770][ T5615] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.063255][ T5615] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 748.063280][ T5615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.063297][ T5615] usb 4-1: Product: syz [ 748.063309][ T5615] usb 4-1: Manufacturer: syz [ 748.063321][ T5615] usb 4-1: SerialNumber: syz [ 748.073823][T14222] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 750.295670][T14240] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2693'. [ 751.199730][ T5615] usb 4-1: Error in usbnet_get_endpoints (-71) [ 751.236866][ T5615] usb 4-1: USB disconnect, device number 38 [ 751.784441][T10267] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 751.915830][T14276] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2708'. [ 752.579623][T14283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2711'. [ 752.956231][T14293] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2715'. [ 755.424902][T14315] netlink: 'syz.4.2721': attribute type 12 has an invalid length. [ 755.424921][T14315] netlink: 'syz.4.2721': attribute type 29 has an invalid length. [ 755.424933][T14315] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2721'. [ 755.586447][T14317] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2722'. [ 755.949767][T10267] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 755.982882][T10267] Bluetooth: hci1: Injecting HCI hardware error event [ 756.060439][T10881] Bluetooth: hci1: hardware error 0x00 [ 758.190684][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2732'. [ 758.468594][T10881] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 759.014140][T14354] netlink: 'syz.4.2735': attribute type 12 has an invalid length. [ 759.014161][T14354] netlink: 'syz.4.2735': attribute type 29 has an invalid length. [ 759.014175][T14354] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2735'. [ 759.988185][T10881] Bluetooth: hci2: command 0x0406 tx timeout [ 761.752319][T14367] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2736'. [ 762.256132][ T59] Bluetooth: hci3: link tx timeout [ 762.256281][ T59] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 762.306880][T14390] netlink: 'syz.4.2747': attribute type 12 has an invalid length. [ 762.306897][T14390] netlink: 'syz.4.2747': attribute type 29 has an invalid length. [ 762.306904][T14390] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2747'. [ 762.555124][T14396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2748'. [ 763.444361][T14405] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2752'. [ 764.876252][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 766.432328][T14439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2765'. [ 766.432350][T14439] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2765'. [ 769.014548][T14464] netlink: 'syz.4.2773': attribute type 10 has an invalid length. [ 769.014613][T14464] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2773'. [ 769.015133][T14464] team0: entered promiscuous mode [ 769.015171][T14464] team_slave_0: entered promiscuous mode [ 769.016804][T14464] team_slave_1: entered promiscuous mode [ 769.019442][T14464] team0: entered allmulticast mode [ 769.019480][T14464] team_slave_0: entered allmulticast mode [ 769.019644][T14464] team_slave_1: entered allmulticast mode [ 769.022605][T14464] bridge0: port 3(team0) entered blocking state [ 769.023449][T14464] bridge0: port 3(team0) entered disabled state [ 769.063039][T14464] bridge0: port 3(team0) entered blocking state [ 769.063695][T14464] bridge0: port 3(team0) entered forwarding state [ 770.161216][T14477] netlink: 'syz.4.2777': attribute type 12 has an invalid length. [ 770.161236][T14477] netlink: 'syz.4.2777': attribute type 29 has an invalid length. [ 770.161248][T14477] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2777'. [ 771.479056][T14490] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2781'. [ 771.479079][T14490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2781'. [ 771.896101][T14500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2789'. [ 772.969605][T14506] bridge1: port 1(dummy0) entered blocking state [ 772.969734][T14506] bridge1: port 1(dummy0) entered disabled state [ 772.969942][T14506] dummy0: entered allmulticast mode [ 772.977126][T14506] dummy0: entered promiscuous mode [ 773.027314][T14500] netlink: 'syz.4.2789': attribute type 10 has an invalid length. [ 773.027327][T14500] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2789'. [ 773.073241][T14500] bridge1: port 1(dummy0) entered blocking state [ 773.077418][T14500] bridge1: port 1(dummy0) entered forwarding state [ 773.087837][T14500] dummy0: left allmulticast mode [ 773.091191][T14500] bridge1: port 1(dummy0) entered disabled state [ 773.417041][T14510] netlink: 'syz.2.2791': attribute type 12 has an invalid length. [ 773.417065][T14510] netlink: 'syz.2.2791': attribute type 29 has an invalid length. [ 773.417078][T14510] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2791'. [ 774.576478][T14521] binder: 14520:14521 ioctl c0306201 0 returned -14 [ 775.691098][T14537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2800'. [ 775.691127][T14537] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2800'. [ 776.044623][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2805'. [ 776.044650][T14548] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2805'. [ 779.012618][T14582] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2816'. [ 779.012644][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2816'. [ 783.615064][ T5858] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 783.748157][ T5858] usb 5-1: device descriptor read/64, error -71 [ 783.988148][ T5858] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 784.128175][ T5858] usb 5-1: device descriptor read/64, error -71 [ 784.379773][T14625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2832'. [ 784.379801][T14625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2832'. [ 784.424124][ T5858] usb usb5-port1: attempt power cycle [ 784.988146][ T5858] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 785.019573][ T5858] usb 5-1: device descriptor read/8, error -71 [ 785.420610][ T5858] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 785.501271][ T5858] usb 5-1: device descriptor read/8, error -71 [ 785.625001][ T5858] usb usb5-port1: unable to enumerate USB device [ 786.744504][T14642] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2836'. [ 787.476416][T13067] IPVS: starting estimator thread 0... [ 787.558188][T14643] IPVS: using max 8 ests per chain, 19200 per kthread [ 789.794692][T14663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 790.105107][T14676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2851'. [ 790.420827][ T5852] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 790.452532][T14680] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2853'. [ 790.452553][T14680] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2853'. [ 790.584392][ T5852] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 790.584422][ T5852] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 790.584434][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.608835][ T5852] usb 5-1: config 0 descriptor?? [ 790.638455][ T5852] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 791.998241][T10881] Bluetooth: hci3: command 0x0406 tx timeout [ 793.205481][T13067] usb 5-1: USB disconnect, device number 48 [ 793.755378][T14708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2864'. [ 794.761145][T14709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.236605][T14714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2866'. [ 795.918162][ T5929] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 796.069961][ T5929] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 796.070009][ T5929] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 796.070031][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.085711][ T5929] usb 8-1: config 0 descriptor?? [ 796.134380][ T5929] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 796.480124][T14741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2878'. [ 796.511018][T14743] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2879'. [ 799.407872][ T5852] usb 8-1: USB disconnect, device number 6 [ 800.495220][T14759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 802.428837][ T31] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 803.355136][T14780] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2891'. [ 804.078392][ T5615] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 804.090890][T14793] netlink: 'syz.2.2896': attribute type 12 has an invalid length. [ 804.090910][T14793] netlink: 'syz.2.2896': attribute type 29 has an invalid length. [ 804.090922][T14793] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2896'. [ 804.294160][ T5615] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 804.294279][ T5615] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 804.294301][ T5615] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.261177][T14794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.722275][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 805.811064][ T31] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 805.811102][ T31] usb 1-1: can't read configurations, error -71 [ 805.818831][ T5615] usb 8-1: config 0 descriptor?? [ 805.912671][ T5615] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 808.381133][ T5858] usb 8-1: USB disconnect, device number 7 [ 808.559836][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.559910][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.126275][T14818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2905'. [ 809.742302][T14826] netlink: 'syz.7.2908': attribute type 12 has an invalid length. [ 809.742321][T14826] netlink: 'syz.7.2908': attribute type 29 has an invalid length. [ 809.742333][T14826] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2908'. [ 812.811253][T14834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.648156][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 813.814912][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 813.814962][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 813.814983][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.830648][ T31] usb 1-1: config 0 descriptor?? [ 813.854587][ T31] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 817.062048][T14860] netlink: 'syz.7.2920': attribute type 12 has an invalid length. [ 817.062068][T14860] netlink: 'syz.7.2920': attribute type 29 has an invalid length. [ 817.062081][T14860] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2920'. [ 817.094702][ T31] usb 1-1: USB disconnect, device number 16 [ 819.349589][T14873] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2917'. [ 820.471094][T14880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.480565][T14899] netlink: 'syz.2.2935': attribute type 12 has an invalid length. [ 823.480598][T14899] netlink: 'syz.2.2935': attribute type 29 has an invalid length. [ 823.480611][T14899] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2935'. [ 825.256762][T14923] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2942'. [ 826.281251][T14926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.910221][T14935] netlink: 'syz.2.2947': attribute type 12 has an invalid length. [ 826.910241][T14935] netlink: 'syz.2.2947': attribute type 29 has an invalid length. [ 826.910254][T14935] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2947'. [ 828.948142][T10881] Bluetooth: hci3: command 0x0406 tx timeout [ 829.197973][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2957'. [ 829.658267][ T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 830.721229][T14973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 831.307636][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 831.307683][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 831.307704][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.361642][ T31] usb 1-1: config 0 descriptor?? [ 831.606229][ T31] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 831.611608][T14979] netlink: 'syz.7.2963': attribute type 12 has an invalid length. [ 831.611627][T14979] netlink: 'syz.7.2963': attribute type 29 has an invalid length. [ 831.611639][T14979] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2963'. [ 834.069435][ T5858] usb 1-1: USB disconnect, device number 17 [ 837.325361][T15001] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2970'. [ 839.681181][T15012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 843.864057][T15036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2983'. [ 844.994552][T15049] trusted_key: encrypted_key: key user:syz not found [ 849.935368][T10881] Bluetooth: hci3: command 0x0406 tx timeout [ 849.945297][ T5858] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 850.047612][T15074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2997'. [ 850.997713][T15058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 851.052213][ T5858] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 851.052242][ T5858] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 851.052253][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.073322][ T5858] usb 3-1: config 0 descriptor?? [ 851.102073][ T5858] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 851.920157][ T5332] usb 3-1: USB disconnect, device number 36 [ 860.149478][T15123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3010'. [ 861.878250][ T5858] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 863.290260][T15136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 863.495321][ T5858] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 863.495367][ T5858] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 863.495387][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.481350][ T5858] usb 5-1: config 0 descriptor?? [ 864.481899][ T5858] usb 5-1: can't set config #0, error -71 [ 864.487266][ T5858] usb 5-1: USB disconnect, device number 49 [ 867.311153][T10881] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 867.410211][T10881] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 867.488349][T10881] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 867.495780][T10881] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 867.496753][T10881] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 867.749140][T15167] Bluetooth: hci1: expected 4473 bytes, got 2 bytes [ 868.793284][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3024'. [ 868.875029][T15173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3025'. [ 869.542988][ T5615] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 869.562910][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3039'. [ 869.588137][T10881] Bluetooth: hci0: command tx timeout [ 870.291211][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.291794][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.680786][ T5615] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 870.680832][ T5615] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 870.680854][ T5615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.715614][ T5615] usb 3-1: config 0 descriptor?? [ 870.737356][ T5615] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 871.355456][T15159] lo speed is unknown, defaulting to 1000 [ 871.522838][ T5852] usb 3-1: USB disconnect, device number 37 [ 871.668205][T10881] Bluetooth: hci0: command tx timeout [ 873.759666][T10881] Bluetooth: hci0: command tx timeout [ 874.213742][T15159] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.213872][T15159] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.214086][T15159] bridge_slave_0: entered allmulticast mode [ 874.257094][T15159] bridge_slave_0: entered promiscuous mode [ 874.267293][T15159] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.272534][T15159] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.272741][T15159] bridge_slave_1: entered allmulticast mode [ 874.316975][T15159] bridge_slave_1: entered promiscuous mode [ 874.391913][T15159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.423642][T15159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.490818][T15159] team0: Port device team_slave_0 added [ 874.495980][T15159] team0: Port device team_slave_1 added [ 874.563446][T15159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.563463][T15159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.563487][T15159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.565874][T15159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.565887][T15159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.565910][T15159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.720399][T15159] hsr_slave_0: entered promiscuous mode [ 874.721762][T15159] hsr_slave_1: entered promiscuous mode [ 874.722652][T15159] debugfs: 'hsr0' already exists in 'hsr' [ 874.722674][T15159] Cannot create hsr debugfs directory [ 876.351750][T10881] Bluetooth: hci0: command tx timeout [ 876.952909][T15229] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 882.841034][T15254] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 882.841061][T15254] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 885.359385][ T5332] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 885.536137][ T5332] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 885.536183][ T5332] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 885.536204][ T5332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.608139][ T5332] usb 5-1: config 0 descriptor?? [ 885.643515][ T5332] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 887.886173][ T5930] usb 5-1: USB disconnect, device number 50 [ 889.783625][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 889.825408][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 889.991568][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 890.409641][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 890.412129][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 890.720678][T10881] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 890.787689][T10881] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 890.939014][T10881] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 890.942905][T10881] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 890.945929][T10881] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 891.287411][T15331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3057'. [ 892.549071][T10881] Bluetooth: hci2: command tx timeout [ 892.796329][T15315] lo speed is unknown, defaulting to 1000 [ 892.993796][T15348] block device autoloading is deprecated and will be removed. [ 893.028898][T10881] Bluetooth: hci5: command tx timeout [ 893.492369][T15356] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 893.492394][T15356] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 893.639339][T15322] lo speed is unknown, defaulting to 1000 [ 894.628094][T10881] Bluetooth: hci2: command tx timeout [ 895.108191][T10881] Bluetooth: hci5: command tx timeout [ 895.908107][ T5852] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 895.939411][T15315] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.939544][T15315] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.939762][T15315] bridge_slave_0: entered allmulticast mode [ 896.008076][T15315] bridge_slave_0: entered promiscuous mode [ 896.113106][T15315] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.113327][T15315] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.113572][T15315] bridge_slave_1: entered allmulticast mode [ 896.146024][T15315] bridge_slave_1: entered promiscuous mode [ 896.295041][T15315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.314152][T15315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.381401][ T5852] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 896.381449][ T5852] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 896.381469][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.708288][T10881] Bluetooth: hci2: command tx timeout [ 896.989668][ T5852] usb 5-1: config 0 descriptor?? [ 897.178757][ T5852] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 897.188244][T10881] Bluetooth: hci5: command tx timeout [ 897.364077][T15315] team0: Port device team_slave_0 added [ 897.400813][T15315] team0: Port device team_slave_1 added [ 897.529750][T15315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.529766][T15315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.529790][T15315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.608833][T15315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.608848][T15315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.608873][T15315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.878121][T10881] Bluetooth: hci2: command tx timeout [ 899.273234][T10881] Bluetooth: hci5: command tx timeout [ 900.093461][ T5858] usb 5-1: USB disconnect, device number 51 [ 900.154376][T15385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3066'. [ 900.154401][T15385] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3066'. [ 900.310575][T15322] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.310809][T15322] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.311012][T15322] bridge_slave_0: entered allmulticast mode [ 900.317869][T15322] bridge_slave_0: entered promiscuous mode [ 900.389269][T15322] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.389648][T15322] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.389871][T15322] bridge_slave_1: entered allmulticast mode [ 900.392854][T15322] bridge_slave_1: entered promiscuous mode [ 900.487271][T15315] hsr_slave_0: entered promiscuous mode [ 900.497221][T15315] hsr_slave_1: entered promiscuous mode [ 900.504483][T15315] debugfs: 'hsr0' already exists in 'hsr' [ 900.504507][T15315] Cannot create hsr debugfs directory [ 900.545016][T15322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.589955][T15322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.642885][T15322] team0: Port device team_slave_0 added [ 900.646314][T15322] team0: Port device team_slave_1 added [ 900.698315][T15322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.698330][T15322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.698352][T15322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 900.700943][T15322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 900.700955][T15322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.700979][T15322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.095195][T15322] hsr_slave_0: entered promiscuous mode [ 901.096554][T15322] hsr_slave_1: entered promiscuous mode [ 901.097489][T15322] debugfs: 'hsr0' already exists in 'hsr' [ 901.097511][T15322] Cannot create hsr debugfs directory [ 903.059833][T15396] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 903.059857][T15396] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 906.707852][T15409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3075'. [ 906.707877][T15409] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3075'. [ 906.908195][ T5615] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 907.065287][ T5615] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 907.065335][ T5615] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 907.065357][ T5615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.108811][ T5615] usb 5-1: config 0 descriptor?? [ 907.133133][ T5615] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 911.638100][ T5930] usb 5-1: USB disconnect, device number 52 [ 913.266938][ T1125] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.665171][T15433] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 913.665196][T15433] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 921.901281][T15517] netlink: 'syz.3.3093': attribute type 1 has an invalid length. [ 929.042878][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 929.107457][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 929.128153][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 929.129822][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 929.130844][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 930.905601][T15544] lo speed is unknown, defaulting to 1000 [ 931.188275][T10881] Bluetooth: hci1: command tx timeout [ 931.465815][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.465884][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.222099][T15544] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.268156][T10881] Bluetooth: hci1: command tx timeout [ 933.402400][T15544] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.415463][T15544] bridge_slave_0: entered allmulticast mode [ 933.492274][T15544] bridge_slave_0: entered promiscuous mode [ 933.497789][T15544] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.498088][T15544] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.498276][T15544] bridge_slave_1: entered allmulticast mode [ 933.503401][T15544] bridge_slave_1: entered promiscuous mode [ 933.642551][T15544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 933.646728][T15544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 933.715104][T15544] team0: Port device team_slave_0 added [ 933.744235][T15544] team0: Port device team_slave_1 added [ 933.796290][T15544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 933.796306][T15544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.796328][T15544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 933.847045][T15544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 933.847061][T15544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.847087][T15544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 934.036190][T15544] hsr_slave_0: entered promiscuous mode [ 934.037636][T15544] hsr_slave_1: entered promiscuous mode [ 934.051386][T15544] debugfs: 'hsr0' already exists in 'hsr' [ 934.051411][T15544] Cannot create hsr debugfs directory [ 934.365168][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3111'. [ 934.365194][T15577] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3111'. [ 935.348266][T10881] Bluetooth: hci1: command tx timeout [ 937.428315][T10881] Bluetooth: hci1: command tx timeout [ 949.470631][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 949.503711][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 949.542170][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 949.549536][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 949.551440][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 950.618618][T15627] lo speed is unknown, defaulting to 1000 [ 950.725658][T10881] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 950.806306][T10881] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 950.834057][T10881] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 950.838130][T10881] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 950.838883][T10881] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 951.669271][ T59] Bluetooth: hci4: command tx timeout [ 952.273892][T15627] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.274018][T15627] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.274282][T15627] bridge_slave_0: entered allmulticast mode [ 952.328553][T15627] bridge_slave_0: entered promiscuous mode [ 952.361806][T15627] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.365599][T15627] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.365930][T15627] bridge_slave_1: entered allmulticast mode [ 952.390185][T15627] bridge_slave_1: entered promiscuous mode [ 952.472369][T15642] lo speed is unknown, defaulting to 1000 [ 952.516001][T15627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.535126][T15627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.948226][ T59] Bluetooth: hci7: command tx timeout [ 953.047704][T15627] team0: Port device team_slave_0 added [ 953.105510][T15627] team0: Port device team_slave_1 added [ 953.311378][T15627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.311390][T15627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.311405][T15627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.383381][T15627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.383395][T15627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.383415][T15627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.749767][ T59] Bluetooth: hci4: command tx timeout [ 953.787674][T15627] hsr_slave_0: entered promiscuous mode [ 953.791118][T15627] hsr_slave_1: entered promiscuous mode [ 953.793768][T15627] debugfs: 'hsr0' already exists in 'hsr' [ 953.793785][T15627] Cannot create hsr debugfs directory [ 955.028566][ T59] Bluetooth: hci7: command tx timeout [ 955.092848][T15642] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.093060][T15642] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.094464][T15642] bridge_slave_0: entered allmulticast mode [ 955.097215][T15642] bridge_slave_0: entered promiscuous mode [ 955.153846][T15642] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.154063][T15642] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.154281][T15642] bridge_slave_1: entered allmulticast mode [ 955.156910][T15642] bridge_slave_1: entered promiscuous mode [ 955.338986][T15642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.370702][T15642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.443815][T15642] team0: Port device team_slave_0 added [ 955.464994][T15642] team0: Port device team_slave_1 added [ 955.554944][T15642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.554960][T15642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.554984][T15642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.557434][T15642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.557447][T15642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.557470][T15642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.710695][T15642] hsr_slave_0: entered promiscuous mode [ 955.712004][T15642] hsr_slave_1: entered promiscuous mode [ 955.712953][T15642] debugfs: 'hsr0' already exists in 'hsr' [ 955.712975][T15642] Cannot create hsr debugfs directory [ 955.828416][ T59] Bluetooth: hci4: command tx timeout [ 957.108187][ T59] Bluetooth: hci7: command tx timeout [ 957.908186][ T59] Bluetooth: hci4: command tx timeout [ 959.188184][ T59] Bluetooth: hci7: command tx timeout [ 959.604950][T15700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3151'. [ 959.604978][T15700] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3151'. [ 964.896618][T15718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3161'. [ 965.869836][T15725] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 965.869862][T15725] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 973.333838][T15757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3179'. [ 974.393700][T15762] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3181'. [ 982.286342][ T1125] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.876629][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3196'. [ 983.823653][T15821] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3198'. [ 989.833751][T15872] Bluetooth: hci0: command 0x0406 tx timeout [ 990.056770][T15872] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 990.115348][T15872] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 990.117873][T15872] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 990.137892][T15872] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 990.161880][T15872] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 991.413123][T15871] lo speed is unknown, defaulting to 1000 [ 992.104742][T15871] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.104954][T15871] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.105170][T15871] bridge_slave_0: entered allmulticast mode [ 992.107895][T15871] bridge_slave_0: entered promiscuous mode [ 992.140053][T15871] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.140313][T15871] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.140524][T15871] bridge_slave_1: entered allmulticast mode [ 992.143270][T15871] bridge_slave_1: entered promiscuous mode [ 992.235406][T15871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.290380][T15871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.308388][T10881] Bluetooth: hci8: command tx timeout [ 992.398106][T15871] team0: Port device team_slave_0 added [ 992.403645][T15871] team0: Port device team_slave_1 added [ 992.486093][T15871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.486109][T15871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.486132][T15871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.536343][T15871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.536360][T15871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.536385][T15871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.874013][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.874079][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.752198][T15871] hsr_slave_0: entered promiscuous mode [ 993.753693][T15871] hsr_slave_1: entered promiscuous mode [ 993.754752][T15871] debugfs: 'hsr0' already exists in 'hsr' [ 993.754775][T15871] Cannot create hsr debugfs directory [ 994.388086][T10881] Bluetooth: hci8: command tx timeout [ 996.468264][T10881] Bluetooth: hci8: command tx timeout [ 998.548180][T10881] Bluetooth: hci8: command tx timeout [ 1011.035232][ T59] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1011.108877][ T59] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1011.117889][ T59] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1011.139814][ T59] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1011.140499][ T59] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1011.264247][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1011.312587][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1011.314513][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1011.315684][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1011.341481][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1012.607556][T15915] lo speed is unknown, defaulting to 1000 [ 1012.767451][T15918] lo speed is unknown, defaulting to 1000 [ 1013.189962][ T59] Bluetooth: hci9: command tx timeout [ 1013.438379][T10267] Bluetooth: hci10: command tx timeout [ 1013.724157][T15915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.724364][T15915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.724575][T15915] bridge_slave_0: entered allmulticast mode [ 1013.727265][T15915] bridge_slave_0: entered promiscuous mode [ 1013.766734][T15915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.766953][T15915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.767179][T15915] bridge_slave_1: entered allmulticast mode [ 1013.803022][T15915] bridge_slave_1: entered promiscuous mode [ 1013.894715][T15915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.917488][T15915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.093374][T15915] team0: Port device team_slave_0 added [ 1014.122229][T15915] team0: Port device team_slave_1 added [ 1015.268402][T10267] Bluetooth: hci9: command tx timeout [ 1015.430787][T10267] Bluetooth: hci2: command 0x0406 tx timeout [ 1015.430962][T10267] Bluetooth: hci5: command 0x0406 tx timeout [ 1015.509674][T15872] Bluetooth: hci10: command tx timeout [ 1015.837787][T15915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.837803][T15915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.837828][T15915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.930727][T15915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.930744][T15915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.930767][T15915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.931480][T15918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.931895][T15918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.932101][T15918] bridge_slave_0: entered allmulticast mode [ 1015.934783][T15918] bridge_slave_0: entered promiscuous mode [ 1016.053501][T15918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.053623][T15918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.054149][T15918] bridge_slave_1: entered allmulticast mode [ 1016.057692][T15918] bridge_slave_1: entered promiscuous mode [ 1016.264132][T15918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.316501][T15918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.344866][T15915] hsr_slave_0: entered promiscuous mode [ 1016.346399][T15915] hsr_slave_1: entered promiscuous mode [ 1016.347469][T15915] debugfs: 'hsr0' already exists in 'hsr' [ 1016.347491][T15915] Cannot create hsr debugfs directory [ 1016.607131][T15918] team0: Port device team_slave_0 added [ 1016.673028][T15918] team0: Port device team_slave_1 added [ 1016.806523][T15918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.806540][T15918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.806564][T15918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.348076][ T59] Bluetooth: hci9: command tx timeout [ 1017.588581][ T59] Bluetooth: hci10: command tx timeout [ 1018.095023][T15918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.095038][T15918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.095062][T15918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.303291][T15918] hsr_slave_0: entered promiscuous mode [ 1019.304823][T15918] hsr_slave_1: entered promiscuous mode [ 1019.305858][T15918] debugfs: 'hsr0' already exists in 'hsr' [ 1019.305882][T15918] Cannot create hsr debugfs directory [ 1019.429902][ T59] Bluetooth: hci9: command tx timeout [ 1019.668126][ T59] Bluetooth: hci10: command tx timeout [ 1050.274682][T10881] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1050.293578][T10881] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1050.295254][T10881] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1050.297721][T10881] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1050.327945][T10881] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1050.994400][T15957] lo speed is unknown, defaulting to 1000 [ 1052.037445][T15957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.037657][T15957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.037870][T15957] bridge_slave_0: entered allmulticast mode [ 1052.078589][T15957] bridge_slave_0: entered promiscuous mode [ 1052.103192][T15957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.103311][T15957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.103607][T15957] bridge_slave_1: entered allmulticast mode [ 1052.106419][T15957] bridge_slave_1: entered promiscuous mode [ 1052.206555][T15957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.229269][T15957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.300837][T15957] team0: Port device team_slave_0 added [ 1052.305112][T15957] team0: Port device team_slave_1 added [ 1052.389830][ T59] Bluetooth: hci11: command tx timeout [ 1053.683802][T15957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.683818][T15957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1053.683842][T15957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.747544][T15957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.747560][T15957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1053.747584][T15957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.930335][T15957] hsr_slave_0: entered promiscuous mode [ 1053.933402][T15957] hsr_slave_1: entered promiscuous mode [ 1053.947508][T15957] debugfs: 'hsr0' already exists in 'hsr' [ 1053.947533][T15957] Cannot create hsr debugfs directory [ 1054.334568][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.334634][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.468551][ T59] Bluetooth: hci11: command tx timeout [ 1056.228845][ T37] INFO: task syz-executor:15315 blocked for more than 143 seconds. [ 1056.228871][ T37] Tainted: G L syzkaller #0 [ 1056.228882][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1056.228907][ T37] task:syz-executor state:D stack:22592 pid:15315 tgid:15315 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1056.228968][ T37] Call Trace: [ 1056.228974][ T37] [ 1056.228974][ T37] [ 1056.228988][ T37] __schedule+0x16ec/0x5620 [ 1056.229043][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 1056.229075][ T37] ? __pfx___schedule+0x10/0x10 [ 1056.229094][ T37] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1056.229128][ T37] rt_mutex_schedule+0x76/0xf0 [ 1056.229147][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1056.229179][ T37] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1056.229201][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 1056.229222][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 1056.229242][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1056.229271][ T37] ? del_device_store+0xd7/0x370 [ 1056.229295][ T37] ? del_device_store+0xd7/0x370 [ 1056.229334][ T37] ? del_device_store+0xd7/0x370 [ 1056.229350][ T37] mutex_lock_nested+0x168/0x1d0 [ 1056.229374][ T37] del_device_store+0xd7/0x370 [ 1056.229397][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 1056.229422][ T37] ? __pfx_del_device_store+0x10/0x10 [ 1056.229441][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 1056.229464][ T37] ? sysfs_kf_write+0x166/0x260 [ 1056.229490][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1056.229512][ T37] kernfs_fop_write_iter+0x3b0/0x540 [ 1056.229541][ T37] vfs_write+0x629/0xba0 [ 1056.229570][ T37] ? __pfx_vfs_write+0x10/0x10 [ 1056.229592][ T37] ? do_sys_openat2+0x14c/0x200 [ 1056.229614][ T37] ? kmem_cache_free+0x187/0x6c0 [ 1056.229651][ T37] ksys_write+0x156/0x270 [ 1056.229673][ T37] ? __pfx_ksys_write+0x10/0x10 [ 1056.229701][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.229720][ T37] do_syscall_64+0x15f/0xf80 [ 1056.229741][ T37] ? trace_irq_disable+0x3b/0x140 [ 1056.229762][ T37] ? clear_bhb_loop+0x40/0x90 [ 1056.229784][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.229806][ T37] RIP: 0033:0x7fc8ee10d68e [ 1056.229826][ T37] RSP: 002b:00007ffc0ec26db8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1056.229845][ T37] RAX: ffffffffffffffda RBX: 0000555572b0f500 RCX: 00007fc8ee10d68e [ 1056.229858][ T37] RDX: 0000000000000001 RSI: 00007ffc0ec26e40 RDI: 0000000000000005 [ 1056.229870][ T37] RBP: 00007fc8ee1e35f2 R08: 0000000000000000 R09: 0000000000000000 [ 1056.229882][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1056.229892][ T37] R13: 00007ffc0ec26e40 R14: 00007fc8eeef4620 R15: 0000000000000003 [ 1056.229922][ T37] [ 1056.229930][ T37] INFO: task syz-executor:15322 blocked for more than 143 seconds. [ 1056.229946][ T37] Tainted: G L syzkaller #0 [ 1056.229955][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1056.229963][ T37] task:syz-executor state:D stack:18560 pid:15322 tgid:15322 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1056.230016][ T37] Call Trace: [ 1056.230022][ T37] [ 1056.230033][ T37] __schedule+0x16ec/0x5620 [ 1056.230075][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 1056.238114][ T37] ? __pfx___schedule+0x10/0x10 [ 1056.238163][ T37] rt_mutex_schedule+0x76/0xf0 [ 1056.238183][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1056.238222][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 1056.238244][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 1056.238264][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1056.238294][ T37] ? del_device_store+0xd7/0x370 [ 1056.238318][ T37] ? del_device_store+0xd7/0x370 [ 1056.238343][ T37] ? del_device_store+0xd7/0x370 [ 1056.238358][ T37] mutex_lock_nested+0x168/0x1d0 [ 1056.263191][ T37] del_device_store+0xd7/0x370 [ 1056.263220][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 1056.263247][ T37] ? __pfx_del_device_store+0x10/0x10 [ 1056.263266][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 1056.263288][ T37] ? sysfs_kf_write+0x166/0x260 [ 1056.263314][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1056.263336][ T37] kernfs_fop_write_iter+0x3b0/0x540 [ 1056.263364][ T37] vfs_write+0x629/0xba0 [ 1056.263400][ T37] ? __pfx_vfs_write+0x10/0x10 [ 1056.263422][ T37] ? do_sys_openat2+0x14c/0x200 [ 1056.263444][ T37] ? kmem_cache_free+0x187/0x6c0 [ 1056.263479][ T37] ksys_write+0x156/0x270 [ 1056.263501][ T37] ? __pfx_ksys_write+0x10/0x10 [ 1056.263529][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.263549][ T37] do_syscall_64+0x15f/0xf80 [ 1056.263570][ T37] ? trace_irq_disable+0x3b/0x140 [ 1056.263590][ T37] ? clear_bhb_loop+0x40/0x90 [ 1056.263611][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.263629][ T37] RIP: 0033:0x7fbfb7f4d68e [ 1056.263645][ T37] RSP: 002b:00007ffc42063498 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1056.263665][ T37] RAX: ffffffffffffffda RBX: 00005555655a0500 RCX: 00007fbfb7f4d68e [ 1056.263678][ T37] RDX: 0000000000000001 RSI: 00007ffc42063520 RDI: 0000000000000005 [ 1056.263690][ T37] RBP: 00007fbfb80235f2 R08: 0000000000000000 R09: 0000000000000000 [ 1056.263700][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1056.263711][ T37] R13: 00007ffc42063520 R14: 00007fbfb8d34620 R15: 0000000000000003 [ 1056.263740][ T37] [ 1056.263788][ T37] [ 1056.263788][ T37] Showing all locks held in the system: [ 1056.263798][ T37] 5 locks held by ksoftirqd/0/15: [ 1056.263812][ T37] 4 locks held by pr/legacy/17: [ 1056.263822][ T37] 2 locks held by rcuc/0/20: [ 1056.263834][ T37] 1 lock held by khungtaskd/37: [ 1056.263844][ T37] #0: ffffffff8dfc8080 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1056.263913][ T37] 6 locks held by kworker/u8:8/1125: [ 1056.263923][ T37] #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1056.263965][ T37] #1: ffffc900061d7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1056.264006][ T37] #2: ffffffff8f349760 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1056.264047][ T37] #3: ffff88802a87e160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 1056.264094][ T37] #4: ffff888062854310 (&devlink->lock_key#14){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 1056.264146][ T37] #5: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1056.264196][ T37] 5 locks held by kworker/u8:10/1181: [ 1056.264222][ T37] 1 lock held by klogd/4954: [ 1056.264233][ T37] 2 locks held by getty/5355: [ 1056.264243][ T37] #0: ffff888036d650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1056.264287][ T37] #1: ffffc90003cd32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 1056.264337][ T37] 3 locks held by kworker/u9:2/10881: [ 1056.264347][ T37] #0: ffff888063e79138 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1056.264403][ T37] #1: ffffc9000400fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1056.264444][ T37] #2: ffff88802fafcf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 1056.264489][ T37] 6 locks held by kworker/u8:7/11760: [ 1056.264507][ T37] 4 locks held by kworker/u8:19/13930: [ 1056.264518][ T37] 7 locks held by syz-executor/15159: [ 1056.264527][ T37] #0: ffff888037338480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1056.264572][ T37] #1: ffff88801ab2a478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1056.264615][ T37] #2: ffff888028cff4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1056.264661][ T37] #3: ffffffff8ebd0478 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1056.264702][ T37] #4: ffff88802c625160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1056.264747][ T37] #5: ffff88802c9ac310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1056.264789][ T37] #6: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1056.264829][ T37] 4 locks held by syz-executor/15315: [ 1056.264839][ T37] #0: ffff888037338480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1056.264882][ T37] #1: ffff88803bee2478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1056.264930][ T37] #2: ffff888028cff4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1056.264976][ T37] #3: ffffffff8ebd0478 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1056.265016][ T37] 4 locks held by syz-executor/15322: [ 1056.265027][ T37] #0: ffff888037338480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1056.265069][ T37] #1: ffff8880339b6878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1056.265110][ T37] #2: ffff888028cff4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1056.265156][ T37] #3: ffffffff8ebd0478 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1056.265197][ T37] 4 locks held by syz-executor/15544: [ 1056.265207][ T37] #0: ffff888037338480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1056.265250][ T37] #1: ffff88802c172878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1056.265291][ T37] #2: ffff888028cff4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1056.276105][ T37] #3: ffffffff8ebd0478 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1056.276166][ T37] 4 locks held by syz-executor/15627: [ 1056.276176][ T37] #0: ffff888037338480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1056.276224][ T37] #1: ffff88806e86c478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1056.276274][ T37] #2: ffff888028cff4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1056.276321][ T37] #3: ffffffff8ebd0478 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1056.276362][ T37] 4 locks held by syz-executor/15642: [ 1056.276371][ T37] #0: ffff888037338480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1056.276416][ T37] #1: ffff888059f86478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1056.276464][ T37] #2: ffff888028cff4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1056.276510][ T37] #3: ffffffff8ebd0478 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1056.276556][ T37] 4 locks held by syz-executor/15871: [ 1056.276566][ T37] #0: ffff888037338480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1056.276609][ T37] #1: ffff88803ef72c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1056.276656][ T37] #2: ffff888028cff4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1056.276702][ T37] #3: ffffffff8ebd0478 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1056.276744][ T37] 4 locks held by syz-executor/15915: [ 1056.276753][ T37] #0: ffff888037338480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1056.276797][ T37] #1: ffff888083428c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1056.276839][ T37] #2: ffff888028cff4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1056.276884][ T37] #3: ffffffff8ebd0478 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1056.276925][ T37] 4 locks held by syz-executor/15918: [ 1056.276935][ T37] #0: ffff888037338480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1056.276978][ T37] #1: ffff888080d4f878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1056.277019][ T37] #2: ffff888028cff4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1056.277065][ T37] #3: ffffffff8ebd0478 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1056.277107][ T37] 4 locks held by syz-executor/15957: [ 1056.277118][ T37] #0: ffff888037338480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1056.277161][ T37] #1: ffff88803a4e3c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1056.277202][ T37] #2: ffff888028cff4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1056.277245][ T37] #3: ffffffff8ebd0478 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1056.277285][ T37] [ 1056.277289][ T37] ============================================= [ 1056.277289][ T37] [ 1056.277313][ T37] NMI backtrace for cpu 0 [ 1056.277341][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1056.277364][ T37] Tainted: [L]=SOFTLOCKUP [ 1056.277370][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1056.277380][ T37] Call Trace: [ 1056.277389][ T37] [ 1056.277397][ T37] dump_stack_lvl+0xe8/0x150 [ 1056.277418][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 1056.277437][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1056.277464][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1056.277486][ T37] sys_info+0x135/0x170 [ 1056.277508][ T37] watchdog+0xfd3/0x1030 [ 1056.277534][ T37] ? watchdog+0x1c9/0x1030 [ 1056.277557][ T37] kthread+0x388/0x470 [ 1056.277579][ T37] ? __pfx_watchdog+0x10/0x10 [ 1056.277596][ T37] ? __pfx_kthread+0x10/0x10 [ 1056.277618][ T37] ret_from_fork+0x514/0xb70 [ 1056.277640][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1056.277658][ T37] ? __switch_to+0xc79/0x1410 [ 1056.277681][ T37] ? __pfx_kthread+0x10/0x10 [ 1056.277700][ T37] ret_from_fork_asm+0x1a/0x30 [ 1056.277734][ T37] [ 1056.277740][ T37] Sending NMI from CPU 0 to CPUs 1: [ 1056.277767][ C1] NMI backtrace for cpu 1 [ 1056.277782][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1056.277802][ C1] Tainted: [L]=SOFTLOCKUP [ 1056.277808][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1056.277817][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 1056.277839][ C1] Code: e8 8e 03 90 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 af 10 f7 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1056.277851][ C1] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202 [ 1056.277865][ C1] RAX: 1ffffffff3363e00 RBX: 00000000000003fd RCX: 0000000000000000 [ 1056.277876][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1056.277885][ C1] RBP: ffffffff99b1f970 R08: 0000000000000000 R09: 0000000000000000 [ 1056.277894][ C1] R10: dffffc0000000000 R11: ffffffff853475b0 R12: dffffc0000000000 [ 1056.277905][ C1] R13: 0000000000000000 R14: ffffffff99b1f6e0 R15: 0000000000000000 [ 1056.277915][ C1] FS: 0000000000000000(0000) GS:ffff888126271000(0000) knlGS:0000000000000000 [ 1056.277927][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1056.277938][ C1] CR2: 00007f01587bbb5d CR3: 000000003861e000 CR4: 00000000003526f0 [ 1056.277957][ C1] Call Trace: [ 1056.277963][ C1] [ 1056.277974][ C1] wait_for_lsr+0x1aa/0x2f0 [ 1056.277994][ C1] serial8250_console_write+0x120d/0x1b90 [ 1056.278021][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1056.278040][ C1] ? console_flush_one_record+0xfa/0xb90 [ 1056.278062][ C1] ? console_flush_one_record+0x48f/0xb90 [ 1056.278081][ C1] console_flush_one_record+0x68b/0xb90 [ 1056.278103][ C1] ? console_flush_one_record+0xfa/0xb90 [ 1056.278122][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 1056.278142][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1056.278164][ C1] legacy_kthread_func+0x1b6/0x250 [ 1056.278182][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1056.278200][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1056.278220][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1056.278240][ C1] kthread+0x388/0x470 [ 1056.278257][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1056.278273][ C1] ? __pfx_kthread+0x10/0x10 [ 1056.278291][ C1] ret_from_fork+0x514/0xb70 [ 1056.278307][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1056.278323][ C1] ? __switch_to+0xc79/0x1410 [ 1056.278343][ C1] ? __pfx_kthread+0x10/0x10 [ 1056.278361][ C1] ret_from_fork_asm+0x1a/0x30 [ 1056.278385][ C1] [ 1056.282035][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 1056.282053][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1056.282078][ T37] Tainted: [L]=SOFTLOCKUP [ 1056.282084][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1056.282094][ T37] Call Trace: [ 1056.282101][ T37] [ 1056.282109][ T37] vpanic+0x56c/0xa60 [ 1056.282133][ T37] ? __pfx___schedule+0x10/0x10 [ 1056.282155][ T37] ? __pfx_vpanic+0x10/0x10 [ 1056.282183][ T37] panic+0xc5/0xd0 [ 1056.282202][ T37] ? __pfx_panic+0x10/0x10 [ 1056.282223][ T37] ? preempt_schedule_thunk+0x16/0x30 [ 1056.282252][ T37] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1056.282274][ T37] watchdog+0x102c/0x1030 [ 1056.282300][ T37] ? watchdog+0x1c9/0x1030 [ 1056.282324][ T37] kthread+0x388/0x470 [ 1056.282346][ T37] ? __pfx_watchdog+0x10/0x10 [ 1056.282363][ T37] ? __pfx_kthread+0x10/0x10 [ 1056.282385][ T37] ret_from_fork+0x514/0xb70 [ 1056.282406][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1056.282425][ T37] ? __switch_to+0xc79/0x1410 [ 1056.282457][ T37] ? __pfx_kthread+0x10/0x10 [ 1056.282480][ T37] ret_from_fork_asm+0x1a/0x30 [ 1056.282514][ T37] [ 1056.282654][ T37] Kernel Offset: disabled