last executing test programs: 27m0.229399178s ago: executing program 32 (id=30): madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 26m45.432836365s ago: executing program 33 (id=47): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0x5, &(0x7f0000000040)) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x68b}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = userfaultfd(0x801) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, 0x0) 25m40.557812491s ago: executing program 34 (id=165): socket$kcm(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00'}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x3, 0x0, 0x1, {0xa, 0x4e20, 0xa6, @mcast2, 0x400}}}, 0x80, 0x0}, 0x4) socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000100)=@generic={0x0}, 0x18) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}}, 0x8000) 22m3.649168725s ago: executing program 35 (id=423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 19m1.142450314s ago: executing program 36 (id=631): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, 0x0, 0x20040000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000001300)={{0x3, 0x3, 0x1, 0x1}, 0x4000000000000, 0x80000000, 0x6}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f00001b9000/0x1000)=nil, 0x1000, 0x4, 0x8010, r1, 0x91502000) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='pvfs2\x00', 0x2200892, 0x0) 18m44.534454522s ago: executing program 37 (id=647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000003c000180060001000a0000000c000700000000000a0000000800090064000000090006006e6f6e65000000000800009cf9fb77c4601a197bd88bd8d5802da66360cb3b5b6cc0d799e858fb61f498f3264b742517e90feee96094aeac1363730f952434f8b5638fe8dff88803f6e566e4688cfc9472cfe9216542173152ec077b77b66106e9c0ff961ee7e6944cc193a9cadf92de4b4be2cbb08434e05d4dc464cc41b8d1802e4f100045742f74f5d2f787"], 0x50}}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x285ec}], 0x1) close(r5) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x40702) 15m4.315627033s ago: executing program 38 (id=892): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000000f) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000440)='.\x00', 0x12000021) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x64000522) 11m49.59255047s ago: executing program 39 (id=1076): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x54, 0xe1, 0xc, 0x10, 0x41e, 0x4018, 0xedb4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf0, 0x0, 0x0, 0xf1, 0xf6, 0x20}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)={0x40, 0x1c}, 0x0, 0x0, 0x0, 0x0}) 11m41.635669602s ago: executing program 40 (id=1062): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048010) socket(0xa, 0x3, 0x87) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x80000000, 0x10b200) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000051}, 0x100) 11m34.16867936s ago: executing program 41 (id=1089): r0 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff0005008505090581fcffffff00000904010000020d00000904010102020d00000905820200040000000905030200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x80, 0xfffffffffffffe91, {0x2, 0x9, 0x3, 0x0, 0xfffe, 0x361, 0x1, 0x40001, 0x409, 0x7f, 0x6, 0x9}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 11m27.702009031s ago: executing program 42 (id=1085): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x40881, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/206, 0xce}], 0x1}, 0x101}], 0x1, 0x20, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r5) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c000780180001800800"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 11m13.299704603s ago: executing program 43 (id=1097): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x18, 0x6, 0x1, @rand_addr=' \x01\x00', @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}}, 0x0) 9m41.594568569s ago: executing program 44 (id=1154): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="13d9887cfd24", @val={@val={0x88a8, 0x5, 0x1, 0x3}, {0x8100, 0x5}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xe, @remote, @multicast2, @broadcast, @multicast2}}}}, 0x0) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 8m58.851596494s ago: executing program 1 (id=1251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ppoll(&(0x7f0000000800)=[{r1, 0x1021}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000000c0)) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15, 0x4800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010100}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}]}, 0x48}, 0x1, 0x0, 0x0, 0x28000}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r2, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x82) r3 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x10) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_disconnect(r3) 8m52.512542037s ago: executing program 1 (id=1255): bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10, 0x0, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) syz_usb_connect(0x0, 0x51, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x35, 0x301, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xcc182, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8m48.052826274s ago: executing program 1 (id=1257): socket$key(0xf, 0x3, 0x2) vmsplice(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000340)="549c7f6edb2d7a6553af48052bfd94373f41a504e2e496c8853067d096934b397f", 0x21}, {&(0x7f0000000280)="ee9e90763cd9ba656721dafa1c3796f33997031891ffbfe74fda2a63fc0a74727a989c6351962f", 0x27}], 0x2, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'geneve1\x00'}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, &(0x7f00000006c0)="a654977455fc925217afcea29c4a31d4412689e17da77560f949fdb05fabd2a83c9e1294b8e390fbee7214fe59d1f3012a7badf2a22ec4acf0299648e4582af2bd714e0a71af1113cea9a3b27396ac8dfeee8ff49a1435d6ffbbb51b5a9a", 0x5e, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000740)={0x0, 0x0, r4}, &(0x7f0000000780)=""/230, 0xe6, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@cswp={0x58, 0x114, 0x7, {{0x2000007, 0x400}, &(0x7f0000000140)=0xc, 0x0, 0x6, 0x5, 0xd, 0x8, 0x9, 0x4}}], 0x58}, 0x0) 8m44.443428821s ago: executing program 1 (id=1260): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) setns(r1, 0x24020000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m42.634983285s ago: executing program 6 (id=1263): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e04004220"], 0x7) writev(0xffffffffffffffff, 0x0, 0x0) 8m40.719040107s ago: executing program 1 (id=1264): mlockall(0x2) shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x5000) shmctl$SHM_LOCK(0x0, 0xb) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 8m39.101821186s ago: executing program 6 (id=1267): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$rds(r0, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/41, 0xfd83}], 0x1, 0x0, 0x0, 0x8000}, 0x48004) 8m38.668002598s ago: executing program 6 (id=1268): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, r1, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x13}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 8m37.370690203s ago: executing program 6 (id=1271): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan1\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, 0x0, 0x0) sendmsg$can_j1939(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0xffffffffeffffffe, {0x2, 0x0, 0x1}, 0xff}, 0x18, &(0x7f0000000180)={0x0}}, 0xaa) 8m36.982435878s ago: executing program 1 (id=1272): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r1 = socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt(r1, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000a00)=@file={0x1, './file1\x00'}, 0x6e) listen(r5, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r6, 0x10, 0x6, 0x10001) syz_io_uring_setup(0x51e, &(0x7f0000000000)={0x0, 0x9e92, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0}) close(r0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000020c0)={0x8, "27462f89ac984960d0cb39da157bb856b2fa6218995190a501b5a7c1702588da", 0x2, 0x4, 0xe, 0x80000001, 0x10, 0x2, 0x0, 0x2}) 8m36.848444469s ago: executing program 6 (id=1273): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) setns(r1, 0x24020000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m33.688086549s ago: executing program 45 (id=1272): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r1 = socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt(r1, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000a00)=@file={0x1, './file1\x00'}, 0x6e) listen(r5, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r6, 0x10, 0x6, 0x10001) syz_io_uring_setup(0x51e, &(0x7f0000000000)={0x0, 0x9e92, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0}) close(r0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000020c0)={0x8, "27462f89ac984960d0cb39da157bb856b2fa6218995190a501b5a7c1702588da", 0x2, 0x4, 0xe, 0x80000001, 0x10, 0x2, 0x0, 0x2}) 8m33.540349102s ago: executing program 6 (id=1277): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x1, 0x0, &(0x7f00000002c0)) 8m31.008478899s ago: executing program 46 (id=1277): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x1, 0x0, &(0x7f00000002c0)) 7m28.77039992s ago: executing program 3 (id=1373): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setlease(r1, 0x400, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x3}}}, 0x108) 7m24.966133215s ago: executing program 3 (id=1380): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000182"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 7m24.256316281s ago: executing program 3 (id=1384): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0x40a, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x11, 0x4) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 7m20.305859572s ago: executing program 3 (id=1392): r0 = syz_pidfd_open(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) setns(r0, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 7m19.536396428s ago: executing program 3 (id=1397): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x4}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000083c0)="8f", 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0xf, @empty, 0x8005b}}, 0x104, 0x6, 0xf06, 0x0, 0xb4, 0x5d, 0x1}, 0x9c) dup(r1) 7m18.869477247s ago: executing program 3 (id=1400): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x0, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x13}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 7m16.782272712s ago: executing program 47 (id=1400): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x0, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x13}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 6m41.486585475s ago: executing program 8 (id=1503): socket(0x11, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r1, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6m41.325659902s ago: executing program 7 (id=1505): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 6m39.17918151s ago: executing program 7 (id=1508): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4b", 0xbd) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 6m38.799720377s ago: executing program 8 (id=1510): sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m36.960831129s ago: executing program 8 (id=1512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x1a, &(0x7f00000000c0)=@raw=[@ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], 0x0, 0xfffffffa, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="120000000600000004000000020000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r3, &(0x7f0000000180), &(0x7f0000000000), 0x2}, 0x20) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 6m36.81947604s ago: executing program 7 (id=1513): ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300) 6m35.443762158s ago: executing program 7 (id=1516): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4048aecb, &(0x7f0000000480)={0x4, 0x0, [{0x80000007, 0x2, 0x1, 0x5, 0xff, 0x4, 0x2}, {0xb, 0x8, 0x0, 0x10001, 0x7ffffdff, 0x8015, 0xffff}, {0x80000019, 0xe5f, 0x3, 0x6, 0xdf1, 0x6, 0x80000001}, {0x80000000, 0x802bb, 0x7, 0xd, 0x66, 0x7ff, 0x400}]}) 6m33.752814472s ago: executing program 8 (id=1517): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 6m33.150556436s ago: executing program 7 (id=1520): keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) unshare(0xc000400) finit_module(0xffffffffffffffff, 0x0, 0x0) 6m30.378246355s ago: executing program 7 (id=1521): sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m27.676976408s ago: executing program 8 (id=1524): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) 6m24.886896313s ago: executing program 8 (id=1527): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x15, 0x3, "42359d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0xa) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5c, 0x0, &(0x7f0000000180)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacf5bb80b4b7ee0fae7aea53492b38978defbb39a1ffa8a175e8257c3c5386795f7aaa2b", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001500010303000000000000080a000000"], 0x14}}, 0x20000080) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newtaction={0x114, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x100, 0x1, [@m_ife={0xfc, 0x18, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xeb, 0x1, 0x10000000, 0x2, 0x294}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x9}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6c, 0x55, 0x5, 0xa77, 0x5}}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_SMAC={0xa, 0x4, @random="eca2dd3791cd"}]}, {0x71, 0x6, "593e458f943faf1c8d410fc33705f8340e0392787ecd74ccdb77163445245f3be00c3b42ef1d290fad41aeca1091eb8f3ec1b0e0661d867c14bd549a7daba8e1f090ce111b45a9ea9724dfab29f7a5511e9ed95710934e05f00359ee35d5a388c619a1e9d4a44bf53365583990"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x114}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040800}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x4, 0x1, 0x13, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x20, 0x700, 0xc17, 0x417f}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'wg1\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0xff, 0x5, 0x21, @dev={0xfe, 0x80, '\x00', 0x10}, @rand_addr=' \x01\x00', 0x80, 0x40, 0x7, 0x1ff}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'ip6_vti0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'veth1_to_bond\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'ip6gre0\x00', 0x0, 0x2f, 0x9f, 0x10, 0xd, 0x40, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @loopback, 0x10, 0x1, 0x1, 0x9}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 6m13.51078692s ago: executing program 48 (id=1521): sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m2.486548132s ago: executing program 49 (id=1527): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x15, 0x3, "42359d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0xa) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5c, 0x0, &(0x7f0000000180)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacf5bb80b4b7ee0fae7aea53492b38978defbb39a1ffa8a175e8257c3c5386795f7aaa2b", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001500010303000000000000080a000000"], 0x14}}, 0x20000080) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newtaction={0x114, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x100, 0x1, [@m_ife={0xfc, 0x18, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xeb, 0x1, 0x10000000, 0x2, 0x294}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x9}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6c, 0x55, 0x5, 0xa77, 0x5}}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_SMAC={0xa, 0x4, @random="eca2dd3791cd"}]}, {0x71, 0x6, "593e458f943faf1c8d410fc33705f8340e0392787ecd74ccdb77163445245f3be00c3b42ef1d290fad41aeca1091eb8f3ec1b0e0661d867c14bd549a7daba8e1f090ce111b45a9ea9724dfab29f7a5511e9ed95710934e05f00359ee35d5a388c619a1e9d4a44bf53365583990"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x114}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040800}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x4, 0x1, 0x13, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x20, 0x700, 0xc17, 0x417f}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'wg1\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0xff, 0x5, 0x21, @dev={0xfe, 0x80, '\x00', 0x10}, @rand_addr=' \x01\x00', 0x80, 0x40, 0x7, 0x1ff}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'ip6_vti0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'veth1_to_bond\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'ip6gre0\x00', 0x0, 0x2f, 0x9f, 0x10, 0xd, 0x40, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @loopback, 0x10, 0x1, 0x1, 0x9}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1m41.265290022s ago: executing program 4 (id=1900): pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000042000100233d5002fcdbdf250100000079700000"], 0x18}, 0x1, 0x0, 0x0, 0x40098}, 0x20008854) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) epoll_create1(0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$setlease(r4, 0x400, 0x1) open(0x0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r6, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000500)={0x28, 0x2, r6, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6}) socket$inet_icmp(0x2, 0x2, 0x1) socket$key(0xf, 0x3, 0x2) 1m38.380646744s ago: executing program 4 (id=1908): socket(0x11, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/18, @ANYRES32=r1, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m33.991068321s ago: executing program 4 (id=1912): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m32.786117187s ago: executing program 4 (id=1915): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x168, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}, @CTA_EXPECT_NAT={0x118, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}]}, 0x168}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000004) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 1m29.591340652s ago: executing program 4 (id=1919): r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) preadv(r0, &(0x7f000000cf80)=[{&(0x7f0000000040)=""/178, 0xb2}, {0x0}], 0x2, 0x0, 0x0) 1m29.080774639s ago: executing program 4 (id=1924): syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, 0x0, 0x0, 0x40, 0x0, 0x0) lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001280)=0x35, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000280), 0xfffffffffffffffa, 0x109202) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)={0x0, 0xe4, 0x5d}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r5, 0x5608, 0x1) socket$nl_route(0x10, 0x3, 0x0) 1m10.736924612s ago: executing program 50 (id=1924): syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, 0x0, 0x0, 0x40, 0x0, 0x0) lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001280)=0x35, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000280), 0xfffffffffffffffa, 0x109202) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)={0x0, 0xe4, 0x5d}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r5, 0x5608, 0x1) socket$nl_route(0x10, 0x3, 0x0) 16.810337511s ago: executing program 2 (id=2040): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_enter(r2, 0x7277, 0x0, 0x0, 0x0, 0x0) 11.05649744s ago: executing program 5 (id=2050): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map, 0x2f, 0x1, 0x8, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x76, 0x46, 0x1, 0x0, 0xffffffffffffffff, 0x9}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r1, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@map=r1, 0xffffffffffffffff, 0xa, 0x2014, 0xffffffffffffffff, @value, @void, @void, @void, r0}, 0x20) 8.765864285s ago: executing program 0 (id=2054): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 8.528280703s ago: executing program 5 (id=2055): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) syz_usb_disconnect(r0) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000400)="126c8a", 0x3}, {0x0}], 0x2) 7.938389721s ago: executing program 0 (id=2056): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, 0x0, 0x0) 7.620757287s ago: executing program 9 (id=2057): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) 7.211605109s ago: executing program 0 (id=2058): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois', 0x8) sendmsg$xdp(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)="5c4aa4ab47b503d343970f43a946e8814385cf6f2e2b4ecf5b8ba1baf780a353fce9a16e3c1e13f2b9d92b1a1047ef15631386e84e470df284f04f1a87aff35f611e5435ae05626afd1898320655539038bf833f45104ed1b5548e32280b25fbdef2d36a628ad90d396b9dc6e2b46484e095e44c63bb5037e8d4d37834735740f1b137a6bc3af43d4049fa0678f89c62ea4f15d15dc2f327b494aad4a699b5252af393251b8af551057d7781", 0xac}, {&(0x7f0000000400)="70526499b1d26d6ac4d1183268899f769621f3c09609011499c14606b74b815796c0087f9c76ec990f8cc14805810b0c37057f0fe9e3d277f8b7f48dddda1c7a9935575b4648151c81841827228947da62b037afb2fcf52260f3215f14bbfa5f47485998", 0x64}, {&(0x7f0000000500)="bb40e6c6095eb4f0ecdbd06913f37d173e36be974ab7b5572ced9475c3572ab061ef17e194e1580db54db61c597c3ea8e4ec16142631736a8c9051229fb1f844e0701c612a268ebb9694bc593ac8cb2a0f65e705033f3919", 0x58}, {&(0x7f0000000480)="acdc00d9ddc4eb3f6cf656db", 0xc}, {&(0x7f0000000800)="5b5ab6817a28cbf9f38812c5bb530e5fb7a0d05075445dcb1a23624b5f40c7cf690216c4852fe87337a0f01932b6e32d2a22e4750b2d5a329391e8361f226592cf09aec2b1a1a3027db1d542bf927f4630acc90d2e2d930f232181ae23d3f5890339868597d8676a26c7bb75cf5654d6373dcbcf7ef6", 0x76}, {&(0x7f0000000880)="bcd7", 0x2}, {&(0x7f00000008c0)}], 0x7, 0x0, 0x0, 0x8000000}, 0x8000) 6.814151329s ago: executing program 2 (id=2059): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000001400)="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", 0xa7e}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd72145cf", 0x40}, {&(0x7f00000006c0)}, {0x0}], 0x5}, 0x800) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000540), &(0x7f0000000700)=0x8) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.337348582s ago: executing program 0 (id=2060): r0 = syz_open_dev$evdev(0x0, 0x0, 0x80840) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, 0x0) 5.618693918s ago: executing program 9 (id=2061): r0 = socket(0x1d, 0x2, 0x6) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}, 0x1}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r3, 0x1}, 0x18) sendmmsg$unix(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48c4}}], 0x1, 0x1d3) 5.475287412s ago: executing program 5 (id=2062): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)="64fc7365346f", 0x6}], 0x2, 0x0, 0x0, 0x100100}, 0x0) 5.361474369s ago: executing program 2 (id=2063): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 4.941066557s ago: executing program 9 (id=2064): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map, 0x2f, 0x1, 0x8, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x76, 0x46, 0x1, 0x0, 0xffffffffffffffff, 0x9}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r1, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@map=r1, 0xffffffffffffffff, 0xa, 0x2014, 0xffffffffffffffff, @value, @void, @void, @void, r0}, 0x20) 4.865388036s ago: executing program 5 (id=2065): listen(0xffffffffffffffff, 0xb5d6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffffffff004) 4.865221191s ago: executing program 0 (id=2066): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x3fe, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f0000000080)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) 3.861221673s ago: executing program 9 (id=2067): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000140)={0x18, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6}) 2.76821628s ago: executing program 0 (id=2068): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sync_file_range(0xffffffffffffffff, 0x6, 0x200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2.432169032s ago: executing program 9 (id=2069): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois', 0x8) sendmsg$xdp(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)="5c4aa4ab47b503d343970f43a946e8814385cf6f2e2b4ecf5b8ba1baf780a353fce9a16e3c1e13f2b9d92b1a1047ef15631386e84e470df284f04f1a87aff35f611e5435ae05626afd1898320655539038bf833f45104ed1b5548e32280b25fbdef2d36a628ad90d396b9dc6e2b46484e095e44c63bb5037e8d4d37834735740f1b137a6bc3af43d4049fa0678f89c62ea4f15d15dc2f327b494aad4a699b5252af393251b8af551057d7781", 0xac}, {&(0x7f0000000400)="70526499b1d26d6ac4d1183268899f769621f3c09609011499c14606b74b815796c0087f9c76ec990f8cc14805810b0c37057f0fe9e3d277f8b7f48dddda1c7a9935575b4648151c81841827228947da62b037afb2fcf52260f3215f14bbfa5f47485998", 0x64}, {&(0x7f0000000500)="bb40e6c6095eb4f0ecdbd06913f37d173e36be974ab7b5572ced9475c3572ab061ef17e194e1580db54db61c597c3ea8e4ec16142631736a8c9051229fb1f844e0701c612a268ebb9694bc593ac8cb2a0f65e705033f3919", 0x58}, {&(0x7f0000000480)="acdc00d9ddc4eb3f6cf656db", 0xc}, {&(0x7f0000000800)="5b5ab6817a28cbf9f38812c5bb530e5fb7a0d05075445dcb1a23624b5f40c7cf690216c4852fe87337a0f01932b6e32d2a22e4750b2d5a329391e8361f226592cf09aec2b1a1a3027db1d542bf927f4630acc90d2e2d930f232181ae23d3f5890339868597d8676a26c7bb75cf5654d6373dcbcf7ef6", 0x76}, {&(0x7f0000000880)="bcd7", 0x2}, {&(0x7f00000008c0)}], 0x7, 0x0, 0x0, 0x8000000}, 0x8000) 1.64630108s ago: executing program 5 (id=2070): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000000)=0xffffffffffffffff, 0x12) read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2020) 1.534103761s ago: executing program 2 (id=2071): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000001f40)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0xca3, 0x3, 0x200, 0x5, 0x7, 0x7a6, 0x10001, 0x7, r2}, 0x20) 1.09565771s ago: executing program 9 (id=2072): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x4, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB='@\x00\n\x00\x00\x00\x00'], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x21}, 0x94) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000540)="fc0000", 0x3) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket(0x1d, 0x2, 0x6) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f00000002c0)={0x8}) splice(r2, 0x0, r4, 0x0, 0x1100000000f336, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000300)="0000001d1e", 0x5, 0x0, &(0x7f0000000080)={0x11, 0x8100, r10, 0x1, 0x3}, 0x14) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$can_j1939(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x2}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000640)="87c4b6e7141c184d98938154406e3ad2b38d5b7737d21e35b1e8ad3b9253c686fa9af08e1fc4bf7871c24803877fbc4957b310420b5ed2e75640f62d440d0c8ade1b0f730392cd77cf42ddfb4086a73a95395711f92359a6cbb79aa049b10bfb7259dd503d9462e6acbdf101db52693f732a38cbfdc7d85bbb28d9fdf44ebd1ec1038d2681961a3639534d72def058181e33f53759a74289667637a92446ac51d2632de5585100f642acf0b6bbc11de5f7c6eb4b55eecf74608fc7a2c6e3eaa224be524b8e01006beef355555ce7d84a04d69c83c870022bb2c11b40a7cbe5d7f099d0c5f78e21f011b6a4b6b21d81c3334d4145027f893110ca435363930c2fd1b9f151c9f6e54a24bde997a79a12e5e3d3eb29eeb85282e8ca033915fe9a3b53265d96c0b7a7843a673654b537835fbdc92d7440b5c1ef1173795beb0f0bc584f6522d4b4d8ec95c6333b82825375803368026dc8e4392d3f5110404d1811bc7147f02b42da6f19a8d7ba3d20a735f41fa0c533fd02ed0419d4f79965fc7f26519dc8eec93ea361d5725c2c9fd39eeb4b57aec86d50c6f2bda554f850b43980cb5d9b99dd38490f7e75ce742da37f9c2c4074f6727d466a4dd60ce1e09b5d33cb07054dede30cc2d07622a63c2ecf71c3c93606167d4b6fb09b696ccb5cb4f9cc338bbbc8707f55c37198cd69f7e5a43e1078b0335083c9a6213fda8a74f9f2523d813682ffc7be25369e733d4add05aac8fa64ab019b60b90aa6de4c70e23970c777709e8db0a965942e57641579c6dd99832be1d8a61ca8fde02af3da0c659ec6313dce20f25988d777855027d8c944b38a3c9cffd1fd0108a1e6acef3bf1cba1e9443f4dbdc25554952723fa335a8228bb6d5d36358da47c80ef698916ef932892b17fe49a0928aa0d6f853a91fa6765ce8ecbe7b407613856acfd687180ac3287e7f534ddcb208d596d62d45d8d264c6d2ddf67a4f489188a6994dd5aa539f1445e3c90e802496de3b20874928fe757c6d1cb739ecf50704577820e1aefaaa6315f77b9e0d0a497c948725cdea8392fa9262fe106d6c93e03ed283f050be70c660dc032c4ae98b19cfbfc68c4665116f2e0138a35d0baaf52fca1e77d18facf81ea74b1c08aa61e50755bc1113fa34903fe70b148ecbb19aeab15b1947353e9f90c0e00e9b186f4690203000d3149b32669366141ff0dbe0db0b62324e45869c0299af1a21dcbaa731b87cb4d69207e30c4c9577c4a7288e5e500d7bf75c05b94c6d7c589dc0119b7e4579f84e3727a6c9e1d8ed5b130ce58ce503182d15f9a3a8367b88d7a3aaccad8f072e8b4e8ae9040cc3e521d1c30dda6758480dec52667b0084e814ddc3345bb10dac17a55ff2531611994f1d730f759ae87aae42db04690006ed56431ac9ce54b10f95637597e9eb04ebc9e75f9902a0cabed99f5c4c9865e68f0755c87b22180a7db314c6bf2d88b16ad1274a5938d9749ac8f7d5654d0c3105d1656ed458f2b715930e230d59857c01181160f8b2bc200baed633f04cc7ef0070c5e43e70892fb65c283dc9a2c5c81da8fd2c6dee376fcf25f7edae9b9590e2f67259c314afb9328dfbd52ce7b2b36525b287288cf9c7a04ce3097fecf5289f0d1de90e059fa7a9e9d1f437786af8de232d9e144abbe540523b9b3b83acf0fe86e88b843b8f638fac784d9c6d78339a59e82ec8367b82c64b456d1e2df9e89f0b761a157f190b8df13078083b4f63dcc35ba5d12af4427ba54a2e8b0a5260b22cdabe4a08c8430720249fc4f0277b47646ac88499a5dcc919598bf3163d39e09ed2bcf66f2fe6a3903d662f298fdf36d799de6f156feeb4d053290ca3f696328e6705857abf229d983e74438104461dfad96ac64c79d365103e713805d523890b618df57fd8890a8e40d1c5524ad75d6d04a52210f37a8074cdee9da6a5f212073317fb2cb4c3b53536661bb0d339eeeea068898e32268bc23af3f3d432cfbb0f87978f7d480bdb9b81734867f809b66bbfb7d3c060b8eedf277084f8587893f793732e347bbbb954ed6d01ceeac00fee62c966909dc2b1d532154f351c925577138f5f80b33059585329796bc270ad46340579658c9402e9f6eac576b8a7019dd4f72317a4ec90b3cdf1f86ce23fbbc538c04b300be1711c19c747fa6caf53eb0e367514a0d36818a3439000d9225ab162df965dc778f390e2a4e12fae78f3139bcd3920221b055a30467d22b58fe65001777a20623ad0e07442dd4388f29d6115a2391bfd8969c885d55b2409c1ec716bfa8f954a9663a9eb8c6a2a39d9dfb3367fc83b1b712d943a8d1c25570fc43a518d4fd4a14f8cad0b9cb428e1d80b535d74c17b4547ba99e5484d785034e7cd6f7f4a4b9e54b9b1ce71c00f56f97a7b4ffd285df01715171cf0124ac076219123006266a34be0b0419c08965eccb7824725dd1549d04fadaa5ffd02e981b807ff3c1b5848547c3d61d2166f93627dcb2f420b190d367dd4dd2e622f6e97cb2e3be842dffde43fcb4e0874a55ce0c6a450bcfbdb939b8dea6ab534bf2e06083b19d76df197661fae85c27089e9792ed1cc775eb06855692409ebdf30938b3b4fb96df82d629dc15088bb50cf8267bbc00e4c7f4364695af57f383304bfcf5707299a3cdef8c7a3c25479eb985de95fbf2e616abf7cee27a10f1ab5f90a70b17891a5953829d04180be463012bc899d2c40d7070ff73fe7cb214e1eb96fffd3e4bd23c03b4eab58f80b1e4d239cda40495a65ff22d5a8e3f98393c30be7b4667e21720e1cd7708be206ba97b73dd37d55a81f2d172a598017165d4ddcd04cba57ead0b3103cd49389a19e3330d2a4903f9f8eb9646423effdb0aa390e784acd3c8303036bd1fc15a5446226bba7018e5ea26a1cbe9ab6392d394fd65f656cce286db64c999d4470c0ffbaeb5052837d1ccb78572022f0bf72d8ff2d32f996bf62d745ddeb456b3e5f0fce6198d894280f47dd849d1af3518f418127320f3e2cf4805a7c8b24d68673bdc7339fb413ba663e9faedcb260e04705e57ac5bbb89bc19ec5bf3237707f0a45f14a6471fe844c46cbc5b7542f2a71c63b69e6a2a2da9fa4baf76a49c8205c0dfe92a6ac0c60e986f63ebec4b774decd674256e4894bac44eafb4ab83852cf85edbefde5c7679cfeeaae298d0405c67022e0eec7010ecee2f8f4cf66b7078bb4cb862eb4dba017cbac4cf958f66d78d1ee178364ba7100bfead958b91dd5bd6e70ba9008f2c61d39ab60f482e713329556ace731c993b25e04d0c0097b667ac941e6352b1def164d4bcc966aecf21b1ffdbdd4d20a8b7d59e7d1a0749e2e2045ee6ec1957761efa5e25fea22c33f1c8e72fdd02fa3c363f78abc81815abf9f97b6268413d5e27db07c350f26b2c0f129f18761a5bd4fd33dab914643d10e6609756e633ee9896739fd762887a09488f52522ddefac4d3db93ef92855157fb32c160aec4d5e62e9eb23fe5cd4a4bd9f944003517603138a83c3d43686687ac857b9ffa04044487a0eafa97738e0da62e93be6c86d963ff9419322d7face85c30da1359c78652e4ea5ea08eb0e4e8228dad284f52e88bf5d3b8ce79aa4b0ee79961f11b35ea503cc65be0caf009c165951327ca1456e71e79048c738650eca19ec2d0eeabbaf1e3cd18c1bfb1a8a927dd8161eb681e674dae6015b086afd7693b9532d8f79624a2a0b134b35c4649cdecb7efde70b63b4e4f3a84d31e73768847fb52da5d2be0265cd14485637bb87f8ef6e158cf0e2fd5034fd16d2549673c0ac1542d9e423da1a4c95ccb3370244e76637a868fafe4c60ad17e9bb94c600a35657befb7217bb951b3ddb131ba6a5c13454491a2b7a52e24367af23325a187a67c7dfb864316a512932a0879766af80add17ebb59db06e740cde1e1e7b7ea1f54349f58c6f2e286c4074a760724404bff7787d73e5305d2099d5451b32faa8f276c7930018f714654794bac52188ebce0d975f63da95148b66009c5e7536b9b460f306169ac0a6fd23e71553d6ad53a3ccc1cd5ecc97d0034c65b81b2211646485e45d39221fe408632fab4ffd8754882d0d7914aeb620914e56b045299210b4f850f05dad281ee90539dd018fa69feda2c9c5f6e657060699ed551d29e35513ad5a340a9e0f84b9c009381bf46b293bd69e915e470a033021e364152652389d5d5f93edf5ceef1420d020b7ed4e38f165427ed9e357ab31fd7bf5d6dda463d775ad85cef0df8035f7977d5d5f24c416cee298575b404a8fdbb78e458a5ccb8f51c35bda5e24340e4b6f669817c40df4576128e0414309b", 0xbf8}, 0x1, 0x0, 0x0, 0x8090}, 0x801) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2b3e74c83c6200ee}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9088800000380001002cbd7000fcdbdf25120000008b2a90c5eb5924e32231900906cf30e9a8ac96979e3f86b9f9923efc5e603c51263bca0a47176999208eb66699d75e9312186338228b87a648c6752ce222e481af603f154b267206a4356a9b326fb7c1bddc478173cf3b4980d46604b64ea77aa53099371800038004003e0004001c800600c5000800000000000000"], 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x4) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r12) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r12, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000800", @ANYRES16=r13, @ANYBLOB="100027bd7000fddbdf250b0000000800320000100000"], 0x1c}, 0x1, 0x0, 0x0, 0x4851}, 0x40840) 852.849236ms ago: executing program 2 (id=2073): r0 = socket(0x1d, 0x2, 0x6) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}, 0x1}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r3, 0x1}, 0x18) sendmmsg$unix(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48c4}}], 0x1, 0x1d3) 218.785953ms ago: executing program 5 (id=2074): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)="64fc7365346f", 0x6}], 0x2, 0x0, 0x0, 0x100100}, 0x0) 0s ago: executing program 2 (id=2075): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x5) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) kernel console output (not intermixed with test programs): ing 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1273.832323][T11632] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.886298][T11267] usb 7-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1273.910078][T11269] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1273.975108][T11269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.022698][T11267] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1274.055632][T11269] usb 2-1: Product: syz [ 1274.085676][T11269] usb 2-1: Manufacturer: syz [ 1274.128532][T11267] usb 7-1: config 0 has no interface number 0 [ 1274.142137][T11269] usb 2-1: SerialNumber: syz [ 1274.219358][T11267] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1274.347910][ T5779] Bluetooth: hci1: command tx timeout [ 1274.409435][T11267] usb 7-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1274.454449][T11269] usb 2-1: config 0 descriptor?? [ 1274.758424][T11267] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1274.782601][T11803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.819655][T11267] usb 7-1: config 0 has no interface number 0 [ 1274.826080][T11267] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1274.838712][T11803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.875165][T11875] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1211'. [ 1274.876260][T11803] bridge_slave_0: entered allmulticast mode [ 1274.909734][T11803] bridge_slave_0: entered promiscuous mode [ 1274.918758][T11267] usb 7-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1274.941020][T11267] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1274.954655][T11267] usb 7-1: config 0 has no interface number 0 [ 1274.962814][T11267] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1274.988773][T11267] usb 7-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1274.996262][T11632] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.065241][T11267] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1275.093440][T11267] usb 7-1: config 0 has no interface number 0 [ 1275.111154][T11803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.129290][T11803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.139641][T11267] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1275.193722][T11803] bridge_slave_1: entered allmulticast mode [ 1275.204000][T11267] usb 7-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1275.219672][T11803] bridge_slave_1: entered promiscuous mode [ 1275.292623][T11267] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1275.342594][T11267] usb 7-1: config 0 has no interface number 0 [ 1275.349114][T11267] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1275.406158][T11267] usb 7-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1275.481762][T11267] usb 7-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1275.534955][T11267] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.577446][T11267] usb 7-1: Product: syz [ 1275.582030][T11267] usb 7-1: Manufacturer: syz [ 1275.586918][T11267] usb 7-1: SerialNumber: syz [ 1275.649259][T11269] usb 2-1: Firmware version (0.0) predates our first public release. [ 1275.661952][T11269] usb 2-1: Please update to version 0.2 or newer [ 1275.708019][T11267] usb 7-1: config 0 descriptor?? [ 1275.755957][T11803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1275.772769][T11267] etas_es58x 7-1:0.2: Starting syz syz (Serial Number syz) [ 1276.050006][T11267] etas_es58x 7-1:0.2: could not retrieve the product info string [ 1276.097598][T11803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1276.398271][T11269] usb 2-1: USB disconnect, device number 4 [ 1277.358786][T11632] bridge_slave_1: left allmulticast mode [ 1277.380500][T11632] bridge_slave_1: left promiscuous mode [ 1277.387224][T11632] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.437767][T11632] bridge_slave_0: left allmulticast mode [ 1278.459305][T11632] bridge_slave_0: left promiscuous mode [ 1278.494000][T11632] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.234992][T11916] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1222'. [ 1280.817064][T11632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1280.906670][T11632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1280.969376][T11632] bond0 (unregistering): Released all slaves [ 1281.088897][T11267] usb 7-1: USB disconnect, device number 2 [ 1281.122168][T11803] team0: Port device team_slave_0 added [ 1281.148415][T11267] etas_es58x 7-1:0.2: Disconnecting syz syz [ 1281.234398][ T6908] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1281.257834][T11803] team0: Port device team_slave_1 added [ 1283.618068][ T6908] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1283.678121][ T6908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.729503][ T6908] usb 5-1: Product: syz [ 1283.756437][ T6908] usb 5-1: Manufacturer: syz [ 1283.795734][ T6908] usb 5-1: SerialNumber: syz [ 1283.969199][ T6908] usb 5-1: config 0 descriptor?? [ 1284.910850][ T6908] usb 5-1: Firmware version (0.0) predates our first public release. [ 1284.980888][ T6908] usb 5-1: Please update to version 0.2 or newer [ 1285.128440][T11803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1285.171901][T11803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1285.244312][T11803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1286.941873][T11803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1286.950229][T11803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1286.960803][ T6908] usb 5-1: USB disconnect, device number 33 [ 1287.044297][T11803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1287.644829][T11632] hsr_slave_0: left promiscuous mode [ 1294.885093][ T8979] Bluetooth: hci5: command 0x0406 tx timeout [ 1294.994736][T11632] hsr_slave_1: left promiscuous mode [ 1295.002599][T11632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1295.190256][T11632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1295.303192][T11632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1295.317485][T11970] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1237'. [ 1295.325612][T11632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1295.373506][T11632] veth1_macvtap: left promiscuous mode [ 1295.380602][T11632] veth0_macvtap: left promiscuous mode [ 1295.522064][T11632] veth1_vlan: left promiscuous mode [ 1295.558137][T11632] veth0_vlan: left promiscuous mode [ 1296.573688][T11267] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1296.847462][T11267] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1296.909049][T11267] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.959580][T11267] usb 7-1: Product: syz [ 1296.989452][T11267] usb 7-1: Manufacturer: syz [ 1297.027772][T11267] usb 7-1: SerialNumber: syz [ 1297.090894][T11267] usb 7-1: config 0 descriptor?? [ 1298.341306][T11267] usb 7-1: Firmware version (0.0) predates our first public release. [ 1298.356386][T11267] usb 7-1: Please update to version 0.2 or newer [ 1298.704117][T11632] team0 (unregistering): Port device team_slave_1 removed [ 1298.729453][T11632] team0 (unregistering): Port device team_slave_0 removed [ 1299.324569][T11983] macvtap1: entered promiscuous mode [ 1299.330065][T11983] macvtap1: entered allmulticast mode [ 1299.573204][T11267] usb 7-1: USB disconnect, device number 3 [ 1300.592126][T11803] hsr_slave_0: entered promiscuous mode [ 1301.219398][T11803] hsr_slave_1: entered promiscuous mode [ 1308.266460][T11267] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1308.540008][T11267] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1308.743164][T11267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.828243][T11267] usb 2-1: Product: syz [ 1308.864735][T11267] usb 2-1: Manufacturer: syz [ 1308.869527][T11267] usb 2-1: SerialNumber: syz [ 1310.467982][T11267] rtl8150 2-1:1.0: couldn't reset the device [ 1310.540484][T11267] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1310.689604][T11267] usb 2-1: USB disconnect, device number 5 [ 1310.958178][T11803] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1311.053301][T11803] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1311.137260][T11803] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1311.165350][ T5779] Bluetooth: hci5: unexpected event for opcode 0x2042 [ 1311.300185][T11803] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1315.086626][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1315.105237][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1316.078073][ T5779] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1316.086636][ T5779] Bluetooth: hci5: Injecting HCI hardware error event [ 1316.094193][ T5779] Bluetooth: hci5: hardware error 0x00 [ 1317.186857][T12061] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1252'. [ 1317.522954][T11803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1318.263390][T11803] 8021q: adding VLAN 0 to HW filter on device team0 [ 1318.577816][ T6459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.585555][ T6459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1319.381263][ T5779] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1319.915520][ T6459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.923090][ T6459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1326.630219][ T6473] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.793864][T11803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1327.175166][ T6473] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.617532][ T6473] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.541197][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1328.561685][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1328.579831][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1328.637338][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1328.648007][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1328.718547][ T6473] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.929707][ T6473] bridge_slave_1: left allmulticast mode [ 1329.935556][ T6473] bridge_slave_1: left promiscuous mode [ 1329.981669][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.093848][ T6473] bridge_slave_0: left allmulticast mode [ 1330.172494][ T6473] bridge_slave_0: left promiscuous mode [ 1330.178747][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.920614][ T49] Bluetooth: hci2: command tx timeout [ 1332.033279][ T6473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1332.106974][ T6473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1332.154428][ T6473] bond0 (unregistering): Released all slaves [ 1332.191339][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1332.219515][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1332.230272][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1332.275258][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1332.291273][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1333.132714][ T49] Bluetooth: hci2: command tx timeout [ 1333.175912][ T6473] hsr_slave_0: left promiscuous mode [ 1333.239665][ T6473] hsr_slave_1: left promiscuous mode [ 1333.247498][ T6473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1333.282651][ T6473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1333.327465][ T6473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1333.389174][ T6473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1333.569777][ T6473] veth1_macvtap: left promiscuous mode [ 1333.585976][ T6473] veth0_macvtap: left promiscuous mode [ 1333.613571][ T6473] veth1_vlan: left promiscuous mode [ 1333.619205][ T6473] veth0_vlan: left promiscuous mode [ 1334.241769][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1334.259741][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1334.268587][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1334.282427][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1334.292708][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1334.500416][ T49] Bluetooth: hci1: command tx timeout [ 1335.000845][ T6473] team0 (unregistering): Port device team_slave_1 removed [ 1335.104554][ T6473] team0 (unregistering): Port device team_slave_0 removed [ 1335.358090][ T49] Bluetooth: hci2: command tx timeout [ 1336.513170][T12130] chnl_net:caif_netlink_parms(): no params data found [ 1336.552125][ T49] Bluetooth: hci3: command tx timeout [ 1336.723526][ T49] Bluetooth: hci1: command tx timeout [ 1337.578060][ T49] Bluetooth: hci2: command tx timeout [ 1338.786089][ T49] Bluetooth: hci3: command tx timeout [ 1338.934052][T12151] chnl_net:caif_netlink_parms(): no params data found [ 1338.946887][ T49] Bluetooth: hci1: command tx timeout [ 1339.035291][T12130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.074702][T12130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.082412][T12130] bridge_slave_0: entered allmulticast mode [ 1339.129750][T12130] bridge_slave_0: entered promiscuous mode [ 1339.255720][T12130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.263183][T12130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.285844][T12130] bridge_slave_1: entered allmulticast mode [ 1339.340465][T12130] bridge_slave_1: entered promiscuous mode [ 1339.653186][T12130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.688675][T12167] chnl_net:caif_netlink_parms(): no params data found [ 1339.764769][T12130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1340.489696][T12130] team0: Port device team_slave_0 added [ 1340.607019][T12130] team0: Port device team_slave_1 added [ 1340.997512][ T49] Bluetooth: hci3: command tx timeout [ 1341.168761][ T49] Bluetooth: hci1: command tx timeout [ 1341.234341][ T6473] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.501852][T12130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1341.508959][T12130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1341.596211][T12130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1341.634568][T12130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1341.681419][T12130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1341.790024][T12130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1341.909997][ T6473] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.213835][ T6473] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.249144][T12151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.256601][T12151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.327603][T12151] bridge_slave_0: entered allmulticast mode [ 1342.366648][T12151] bridge_slave_0: entered promiscuous mode [ 1342.600794][T12151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.620688][T12151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.651697][T12151] bridge_slave_1: entered allmulticast mode [ 1342.860934][T12151] bridge_slave_1: entered promiscuous mode [ 1343.222513][ T49] Bluetooth: hci3: command tx timeout [ 1343.283122][ T6473] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.395660][T12167] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.646275][T12167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.672234][T12167] bridge_slave_0: entered allmulticast mode [ 1343.706541][T12167] bridge_slave_0: entered promiscuous mode [ 1343.751895][T12167] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.780206][T12167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.820873][T12167] bridge_slave_1: entered allmulticast mode [ 1343.868225][T12167] bridge_slave_1: entered promiscuous mode [ 1344.543730][T12130] hsr_slave_0: entered promiscuous mode [ 1344.583433][T12130] hsr_slave_1: entered promiscuous mode [ 1344.627754][T12130] debugfs: 'hsr0' already exists in 'hsr' [ 1344.712496][T12130] Cannot create hsr debugfs directory [ 1345.004280][T12167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1345.055960][T12167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1345.990076][T12151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1346.310127][T12151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1346.556856][T12167] team0: Port device team_slave_0 added [ 1346.921681][T12167] team0: Port device team_slave_1 added [ 1346.991267][T12151] team0: Port device team_slave_0 added [ 1347.425294][T12151] team0: Port device team_slave_1 added [ 1347.609040][T12167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1347.632973][T12167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1347.698216][T12167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1348.014304][T12167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1348.050997][T12167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1348.100681][T12167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1348.120366][ T6473] bridge_slave_1: left allmulticast mode [ 1348.127161][ T6473] bridge_slave_1: left promiscuous mode [ 1348.133968][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.161902][ T6473] bridge_slave_0: left allmulticast mode [ 1348.185910][ T6473] bridge_slave_0: left promiscuous mode [ 1348.217874][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.255441][ T6473] bridge_slave_1: left allmulticast mode [ 1348.261292][ T6473] bridge_slave_1: left promiscuous mode [ 1348.282546][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.334022][ T6473] bridge_slave_0: left allmulticast mode [ 1348.344905][ T6473] bridge_slave_0: left promiscuous mode [ 1348.359329][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.413060][ T6473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.480755][ T6473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.520004][ T6473] bond0 (unregistering): Released all slaves [ 1350.398378][ T6473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1350.427412][ T6473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1350.464586][ T6473] bond0 (unregistering): Released all slaves [ 1350.481470][T12151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1350.499752][T12151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1350.561787][T12151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1350.599696][T12151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1350.615123][T12151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1350.700522][T12151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1351.455885][T12151] hsr_slave_0: entered promiscuous mode [ 1351.478122][T12151] hsr_slave_1: entered promiscuous mode [ 1351.495913][T12151] debugfs: 'hsr0' already exists in 'hsr' [ 1351.519759][T12151] Cannot create hsr debugfs directory [ 1351.824094][T12167] hsr_slave_0: entered promiscuous mode [ 1351.848044][T12167] hsr_slave_1: entered promiscuous mode [ 1351.882456][T12167] debugfs: 'hsr0' already exists in 'hsr' [ 1352.883524][T12167] Cannot create hsr debugfs directory [ 1355.456139][ T6473] hsr_slave_0: left promiscuous mode [ 1355.484069][ T6473] hsr_slave_1: left promiscuous mode [ 1355.511833][ T6473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1355.545778][ T6473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1355.659396][ T6473] hsr_slave_0: left promiscuous mode [ 1355.680264][ T6473] hsr_slave_1: left promiscuous mode [ 1355.687966][ T6473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1355.744255][ T6473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1355.772391][ T6473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1355.799361][ T6473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1355.896499][ T6473] veth1_macvtap: left promiscuous mode [ 1355.902206][ T6473] veth0_macvtap: left promiscuous mode [ 1355.936713][ T6473] veth1_vlan: left promiscuous mode [ 1355.942242][ T6473] veth0_vlan: left promiscuous mode [ 1357.477631][ T6473] team0 (unregistering): Port device team_slave_1 removed [ 1357.521596][ T6473] team0 (unregistering): Port device team_slave_0 removed [ 1358.450542][ T6473] team0 (unregistering): Port device team_slave_1 removed [ 1358.487443][ T6473] team0 (unregistering): Port device team_slave_0 removed [ 1360.619772][T12130] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1360.720143][T12130] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1360.761530][T12130] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1360.862390][T12130] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1361.417240][T12151] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1361.506029][T12151] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1361.613074][T12151] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1361.732689][T12151] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1363.586321][T12384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1321'. [ 1364.150337][T12167] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1365.299133][T12167] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1368.601474][T12167] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1368.689831][T12130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1368.719624][T12167] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1369.004033][T12130] 8021q: adding VLAN 0 to HW filter on device team0 [ 1369.221415][ T6473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.228991][ T6473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1369.441778][ T6465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.449298][ T6465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1370.143481][T12151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1370.394194][T12151] 8021q: adding VLAN 0 to HW filter on device team0 [ 1370.473542][ T6465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.481067][ T6465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1370.764363][ T6474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.771943][ T6474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1371.139630][T12167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1371.422842][T12167] 8021q: adding VLAN 0 to HW filter on device team0 [ 1371.525680][T11632] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.533387][T11632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1371.651768][T11632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.659387][T11632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1373.834787][T12130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1374.822144][T12130] veth0_vlan: entered promiscuous mode [ 1374.942114][T12130] veth1_vlan: entered promiscuous mode [ 1375.184283][T12151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1375.389568][T12445] bond_slave_0: entered promiscuous mode [ 1375.412149][T12444] bond_slave_0: left promiscuous mode [ 1375.463608][T12449] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1329'. [ 1375.529745][T12130] veth0_macvtap: entered promiscuous mode [ 1375.603730][T12167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1375.726095][T12130] veth1_macvtap: entered promiscuous mode [ 1376.033672][T12130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1376.168426][T12130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1376.177358][T12151] veth0_vlan: entered promiscuous mode [ 1376.327769][ T6465] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.341388][ T6465] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.390577][ T6465] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.405469][ T6465] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.430803][T12151] veth1_vlan: entered promiscuous mode [ 1376.899682][T12151] veth0_macvtap: entered promiscuous mode [ 1376.983889][T12151] veth1_macvtap: entered promiscuous mode [ 1377.319700][T12151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1377.521450][T12151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1377.755109][ T6465] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.797900][ T6465] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.837675][ T6465] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.885313][ T6465] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.052451][T12167] veth0_vlan: entered promiscuous mode [ 1378.218948][T12167] veth1_vlan: entered promiscuous mode [ 1378.583658][T12495] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1337'. [ 1378.741384][T12167] veth0_macvtap: entered promiscuous mode [ 1378.844977][T12167] veth1_macvtap: entered promiscuous mode [ 1379.070648][T12167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1379.220565][T12167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1379.402769][ T6465] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.456547][ T6465] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.465556][ T6465] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.559276][ T6465] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.606373][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1380.613774][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1381.799718][T12552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1345'. [ 1382.217841][ T6473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1382.251732][ T6473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1383.175948][T12561] trusted_key: encrypted_key: insufficient parameters specified [ 1388.197095][ T6459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.256014][ T6459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.626239][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1348'. [ 1389.325394][ T8605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.355369][ T8605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.673017][ T6473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.707470][ T6473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1390.276868][T12603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1353'. [ 1392.071184][ T8605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.079376][ T8605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.219642][ T6465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.295153][ T6465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.028417][T12632] overlayfs: failed to clone upperpath [ 1394.212861][T12652] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1365'. [ 1396.153774][T12677] overlayfs: failed to clone upperpath [ 1398.861014][T12694] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1378'. [ 1404.301898][T12733] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1391'. [ 1405.507307][ T6457] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.758213][ T6457] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.096740][ T6457] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.254082][ T6457] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.861406][ T6457] bridge_slave_1: left allmulticast mode [ 1406.881522][ T6457] bridge_slave_1: left promiscuous mode [ 1406.907721][ T6457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.932349][ T6457] bridge_slave_0: left allmulticast mode [ 1406.938190][ T6457] bridge_slave_0: left promiscuous mode [ 1406.963817][ T6457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.908006][ T6457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1408.000535][ T6457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1408.049178][ T6457] bond0 (unregistering): Released all slaves [ 1408.662744][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1408.676528][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1408.686087][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1408.710307][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1408.723483][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1409.095360][T12790] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1408'. [ 1409.309433][ T6457] hsr_slave_0: left promiscuous mode [ 1409.367093][ T6457] hsr_slave_1: left promiscuous mode [ 1409.375022][ T6457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1409.424038][ T6457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1409.471730][ T6457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1409.505910][ T6457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1409.677183][ T6457] veth1_macvtap: left promiscuous mode [ 1409.682911][ T6457] veth0_macvtap: left promiscuous mode [ 1409.716644][ T6457] veth1_vlan: left promiscuous mode [ 1409.722504][ T6457] veth0_vlan: left promiscuous mode [ 1411.012536][ T49] Bluetooth: hci1: command tx timeout [ 1411.790002][ T6457] team0 (unregistering): Port device team_slave_1 removed [ 1411.846758][ T6457] team0 (unregistering): Port device team_slave_0 removed [ 1413.235946][ T49] Bluetooth: hci1: command tx timeout [ 1415.459242][ T49] Bluetooth: hci1: command tx timeout [ 1415.719839][T12783] chnl_net:caif_netlink_parms(): no params data found [ 1417.691208][ T49] Bluetooth: hci1: command tx timeout [ 1417.737734][T12783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.837016][T12783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.884086][T12783] bridge_slave_0: entered allmulticast mode [ 1417.969856][T12783] bridge_slave_0: entered promiscuous mode [ 1418.076084][T12783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.120542][T12783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.192078][T12783] bridge_slave_1: entered allmulticast mode [ 1418.265622][T12783] bridge_slave_1: entered promiscuous mode [ 1418.806119][T12783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1419.003420][T12783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1419.512558][T12783] team0: Port device team_slave_0 added [ 1419.555580][T12783] team0: Port device team_slave_1 added [ 1419.800773][T12911] process 'syz.0.1446' launched './file1' with NULL argv: empty string added [ 1419.939603][T12783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1419.967272][T12783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1420.063151][T12783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1420.124323][T12783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1420.152602][T12783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1420.257176][T12783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1421.497222][T12783] hsr_slave_0: entered promiscuous mode [ 1421.577884][T12783] hsr_slave_1: entered promiscuous mode [ 1427.467840][T12783] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1427.551415][T12783] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1427.728581][T12783] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1427.921189][T12783] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1431.885348][T12783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1432.239992][T12783] 8021q: adding VLAN 0 to HW filter on device team0 [ 1432.295867][T13016] netlink: 'syz.4.1483': attribute type 1 has an invalid length. [ 1432.387451][ T6457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1432.395232][ T6457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1432.745820][T13021] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1484'. [ 1433.009852][T13016] bond1: entered promiscuous mode [ 1433.050194][T13016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1433.209226][T13017] bond1: (slave bridge1): making interface the new active one [ 1433.250086][T13017] bridge1: entered promiscuous mode [ 1433.296562][T13017] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1433.447324][ T6457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.454904][ T6457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1433.550371][T13027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1486'. [ 1435.369750][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1489'. [ 1440.214705][T12783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1440.511064][T13070] netlink: 'syz.4.1498': attribute type 1 has an invalid length. [ 1440.855146][T13070] bond2: entered promiscuous mode [ 1440.920633][T13070] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1445.607996][T12783] veth0_vlan: entered promiscuous mode [ 1445.788854][T12783] veth1_vlan: entered promiscuous mode [ 1446.270597][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1446.285702][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1446.360443][T12783] veth0_macvtap: entered promiscuous mode [ 1446.444881][T12783] veth1_macvtap: entered promiscuous mode [ 1446.743404][T12783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1446.826175][T12783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1447.088619][ T6463] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.163445][ T6463] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.172501][ T6463] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.209202][T13125] netlink: 'syz.0.1511': attribute type 1 has an invalid length. [ 1447.316100][ T6463] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.657085][T13125] bond1: entered promiscuous mode [ 1447.720943][T13125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1455.862021][ T7852] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1458.246234][T13174] netlink: 'syz.8.1524': attribute type 1 has an invalid length. [ 1459.400188][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 1466.836571][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 1468.834789][T11269] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1469.120282][T11269] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 1469.988840][T11269] usb 9-1: config 0 has no interface number 0 [ 1470.491000][T11269] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1470.500275][T11269] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.620464][T11269] usb 9-1: Product: syz [ 1470.624872][T11269] usb 9-1: Manufacturer: syz [ 1470.664613][T11269] usb 9-1: SerialNumber: syz [ 1470.707699][T11269] usb 9-1: config 0 descriptor?? [ 1470.807474][T11269] radio-si470x 9-1:0.35: could not find interrupt in endpoint [ 1470.886454][T11269] radio-si470x 9-1:0.35: probe with driver radio-si470x failed with error -5 [ 1470.992253][T11269] radio-raremono 9-1:0.35: this is not Thanko's Raremono. [ 1471.026427][T11269] usbhid 9-1:0.35: couldn't find an input interrupt endpoint [ 1471.078317][T13227] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1536'. [ 1471.205719][ T6474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.275383][ T6474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.571001][T13229] program syz.8.1527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1471.602413][ T6463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.610406][ T6463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.870644][T13235] netlink: 'syz.0.1538': attribute type 1 has an invalid length. [ 1473.022028][ T8979] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1473.045945][ T8979] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1473.055692][ T8979] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1476.885365][ T8979] Bluetooth: hci4: command 0x1005 tx timeout [ 1476.914289][ T49] Bluetooth: hci4: Opcode 0x1005 failed: -110 [ 1477.997504][T13249] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1480.119738][ T7852] usb 9-1: USB disconnect, device number 4 [ 1481.113991][T13244] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1482.859654][ T5779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1482.875721][ T5779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1482.901138][ T5779] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1482.963006][ T5779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1482.982170][ T5779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1483.742008][T13249] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1483.764206][T13249] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1483.786075][T13249] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1483.814931][T13249] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1483.829075][T13249] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1485.056934][ T6441] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.219330][T13249] Bluetooth: hci4: command tx timeout [ 1485.277473][ T6441] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.617634][ T6441] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.038177][ T6441] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.157071][T13249] Bluetooth: hci6: command tx timeout [ 1486.438548][T13264] chnl_net:caif_netlink_parms(): no params data found [ 1486.458297][T13290] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1546'. [ 1487.031290][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1487.108353][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1487.141171][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1487.159898][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1487.172018][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1487.450333][ T5779] Bluetooth: hci4: command tx timeout [ 1488.379422][ T5779] Bluetooth: hci6: command tx timeout [ 1488.511052][ T6441] bridge_slave_1: left allmulticast mode [ 1488.529477][ T6441] bridge_slave_1: left promiscuous mode [ 1488.536053][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.682710][ T6441] bridge_slave_0: left allmulticast mode [ 1488.688583][ T6441] bridge_slave_0: left promiscuous mode [ 1488.743691][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.771330][ T5779] Bluetooth: hci1: command tx timeout [ 1492.776933][ T5779] Bluetooth: hci4: command tx timeout [ 1492.782676][ T5779] Bluetooth: hci6: command tx timeout [ 1496.949674][T13249] Bluetooth: hci6: command tx timeout [ 1496.955381][T13249] Bluetooth: hci4: command tx timeout [ 1496.970943][T13249] Bluetooth: hci1: command tx timeout [ 1499.152872][ T49] Bluetooth: hci1: command tx timeout [ 1500.843734][ T6441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1500.932236][ T6441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1501.008147][ T6441] bond0 (unregistering): Released all slaves [ 1501.043065][T13344] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1556'. [ 1501.118285][T13268] chnl_net:caif_netlink_parms(): no params data found [ 1501.383876][ T49] Bluetooth: hci1: command tx timeout [ 1502.354167][T13264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.453410][T13264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.484271][T13264] bridge_slave_0: entered allmulticast mode [ 1502.567833][T13264] bridge_slave_0: entered promiscuous mode [ 1502.638683][T13264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1502.738037][T13264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.770772][T13264] bridge_slave_1: entered allmulticast mode [ 1502.822904][T13264] bridge_slave_1: entered promiscuous mode [ 1505.624216][T13264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1509.730803][T13264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1509.824387][T13401] netlink: 'syz.4.1566': attribute type 2 has an invalid length. [ 1509.876839][ T6441] hsr_slave_0: left promiscuous mode [ 1509.910941][ T6441] hsr_slave_1: left promiscuous mode [ 1509.938614][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1509.964248][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1510.010537][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1510.062859][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1510.169067][ T6441] veth1_macvtap: left promiscuous mode [ 1510.174781][ T6441] veth0_macvtap: left promiscuous mode [ 1510.194026][ T6441] veth1_vlan: left promiscuous mode [ 1510.199591][ T6441] veth0_vlan: left promiscuous mode [ 1511.949083][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1511.957700][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1511.996921][ T6441] team0 (unregistering): Port device team_slave_1 removed [ 1512.091122][ T6441] team0 (unregistering): Port device team_slave_0 removed [ 1512.756549][T13264] team0: Port device team_slave_0 added [ 1512.880487][T13264] team0: Port device team_slave_1 added [ 1514.139633][T13264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1514.228850][T13264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1514.349673][T13264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1514.414572][T13264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1514.461755][T13264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1514.593792][T13264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1515.047393][T13268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.117537][T13268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.125248][T13268] bridge_slave_0: entered allmulticast mode [ 1515.242201][T13268] bridge_slave_0: entered promiscuous mode [ 1515.487648][T13268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.497277][T13268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.506460][T13268] bridge_slave_1: entered allmulticast mode [ 1515.522941][T13268] bridge_slave_1: entered promiscuous mode [ 1515.729455][ T6441] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.176554][ T6441] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.396647][T13264] hsr_slave_0: entered promiscuous mode [ 1517.464745][T13264] hsr_slave_1: entered promiscuous mode [ 1517.643747][ T6441] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.728648][T13294] chnl_net:caif_netlink_parms(): no params data found [ 1517.849289][T13268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1517.923209][T13268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1518.003228][T13488] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1582'. [ 1518.133965][ T6441] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.258633][T13268] team0: Port device team_slave_0 added [ 1519.384892][T13268] team0: Port device team_slave_1 added [ 1521.572383][T13268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1521.579509][T13268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1521.793048][T13268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1522.058602][T13268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1522.081827][T13268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1522.199132][T13268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1522.896688][T13294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.904242][T13294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.912959][T13294] bridge_slave_0: entered allmulticast mode [ 1522.922781][T13294] bridge_slave_0: entered promiscuous mode [ 1522.939189][T13294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.946477][T13294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.955157][T13294] bridge_slave_1: entered allmulticast mode [ 1522.998240][T13294] bridge_slave_1: entered promiscuous mode [ 1523.262062][ T6441] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.574062][ T6441] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.756581][T13268] hsr_slave_0: entered promiscuous mode [ 1523.775491][T13268] hsr_slave_1: entered promiscuous mode [ 1523.816584][T13268] debugfs: 'hsr0' already exists in 'hsr' [ 1523.822508][T13268] Cannot create hsr debugfs directory [ 1524.047468][T13294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1526.366440][ T6441] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.641762][T13294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1526.749381][ T6441] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.459380][T13294] team0: Port device team_slave_0 added [ 1527.499409][T13294] team0: Port device team_slave_1 added [ 1527.994027][T13294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1528.013831][T13294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1528.073510][T13294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1528.553831][T13294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1528.589496][T13294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1528.673158][T13294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1530.287582][ T49] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 1530.294613][T13249] Bluetooth: hci2: command 0x0406 tx timeout [ 1530.675774][ T6441] bridge_slave_1: left allmulticast mode [ 1530.681611][ T6441] bridge_slave_1: left promiscuous mode [ 1530.750392][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1530.868186][ T6441] bridge_slave_0: left allmulticast mode [ 1530.909820][ T6441] bridge_slave_0: left promiscuous mode [ 1530.916363][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1530.977555][ T6441] bridge_slave_1: left allmulticast mode [ 1531.003302][ T6441] bridge_slave_1: left promiscuous mode [ 1531.698852][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1531.711972][ T6441] bridge_slave_0: left allmulticast mode [ 1531.717810][ T6441] bridge_slave_0: left promiscuous mode [ 1531.730675][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1534.971931][ T6441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1535.046479][ T6441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1535.084403][ T6441] bond0 (unregistering): Released all slaves [ 1535.709166][ T6441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1535.790514][ T6441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1535.839723][ T6441] bond0 (unregistering): Released all slaves [ 1535.945250][T13294] hsr_slave_0: entered promiscuous mode [ 1535.966651][T13294] hsr_slave_1: entered promiscuous mode [ 1536.005798][T13294] debugfs: 'hsr0' already exists in 'hsr' [ 1536.036496][T13294] Cannot create hsr debugfs directory [ 1537.697293][T13249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1537.706840][T13249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1537.715927][T13249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1537.732355][T13249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1537.750655][T13249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1540.017627][T13249] Bluetooth: hci0: command tx timeout [ 1541.017574][T13640] overlayfs: failed to clone lowerpath [ 1541.143802][ T6441] hsr_slave_0: left promiscuous mode [ 1541.173112][ T6441] hsr_slave_1: left promiscuous mode [ 1541.198392][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1541.233064][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1541.257983][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1541.285993][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1541.355749][ T6441] hsr_slave_0: left promiscuous mode [ 1541.374598][ T6441] hsr_slave_1: left promiscuous mode [ 1541.388101][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1541.397628][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1542.238375][T13249] Bluetooth: hci0: command tx timeout [ 1542.507155][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1542.589618][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1543.264138][ T6441] veth1_macvtap: left promiscuous mode [ 1543.270208][ T6441] veth0_macvtap: left promiscuous mode [ 1543.297667][ T6441] veth1_vlan: left promiscuous mode [ 1543.310940][ T6441] veth0_vlan: left promiscuous mode [ 1543.349042][ T6441] veth1_macvtap: left promiscuous mode [ 1543.354745][ T6441] veth0_macvtap: left promiscuous mode [ 1543.369966][ T6441] veth1_vlan: left promiscuous mode [ 1543.391186][ T6441] veth0_vlan: left promiscuous mode [ 1544.461409][T13249] Bluetooth: hci0: command tx timeout [ 1545.407887][ T6441] team0 (unregistering): Port device team_slave_1 removed [ 1545.472630][ T6441] team0 (unregistering): Port device team_slave_0 removed [ 1546.394267][ T6441] team0 (unregistering): Port device team_slave_1 removed [ 1546.451050][ T6441] team0 (unregistering): Port device team_slave_0 removed [ 1546.693030][T13249] Bluetooth: hci0: command tx timeout [ 1546.920529][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1546.941236][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1546.958665][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1546.978242][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1546.993616][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1549.188690][ T49] Bluetooth: hci3: command tx timeout [ 1551.384571][T13249] Bluetooth: hci3: command tx timeout [ 1551.426282][T13711] atomic_op ffff88801a0a4d28 conn xmit_atomic 0000000000000000 [ 1551.948793][T13621] chnl_net:caif_netlink_parms(): no params data found [ 1553.615662][T13249] Bluetooth: hci3: command tx timeout [ 1553.640482][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1553.672214][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1553.683509][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1553.705934][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1553.736186][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1555.838048][ T49] Bluetooth: hci3: command tx timeout [ 1556.312069][ T49] Bluetooth: hci4: command tx timeout [ 1557.398593][T13684] chnl_net:caif_netlink_parms(): no params data found [ 1557.947258][T13621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.954738][T13621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.480083][ T49] Bluetooth: hci4: command tx timeout [ 1558.978695][T13621] bridge_slave_0: entered allmulticast mode [ 1558.988191][T13621] bridge_slave_0: entered promiscuous mode [ 1559.016529][T13621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.111087][T13621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.153806][T13621] bridge_slave_1: entered allmulticast mode [ 1559.195964][T13621] bridge_slave_1: entered promiscuous mode [ 1559.572638][T13621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1559.643348][T13621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1559.921775][T13621] team0: Port device team_slave_0 added [ 1559.977741][T13621] team0: Port device team_slave_1 added [ 1560.564572][T13621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1560.571688][T13621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1560.749902][T13621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1560.799026][ T49] Bluetooth: hci4: command tx timeout [ 1560.861071][T13621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1560.886218][T13621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1560.961379][T13621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1561.963087][ T6441] bridge_slave_1: left allmulticast mode [ 1561.980511][ T6441] bridge_slave_1: left promiscuous mode [ 1562.008228][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.045222][ T6441] bridge_slave_0: left allmulticast mode [ 1562.051883][ T6441] bridge_slave_0: left promiscuous mode [ 1562.058411][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.322377][ T6441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1562.366391][ T6441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1562.383292][ T6441] bond0 (unregistering): Released all slaves [ 1562.409042][T13684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1562.429434][T13684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.445100][T13684] bridge_slave_0: entered allmulticast mode [ 1562.490478][T13684] bridge_slave_0: entered promiscuous mode [ 1562.629743][T13684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1562.643648][T13684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.669694][T13684] bridge_slave_1: entered allmulticast mode [ 1562.689587][T13684] bridge_slave_1: entered promiscuous mode [ 1562.747899][ T6441] hsr_slave_0: left promiscuous mode [ 1562.791450][ T6441] hsr_slave_1: left promiscuous mode [ 1562.822898][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1562.859315][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1563.010963][ T49] Bluetooth: hci4: command tx timeout [ 1568.473877][ T6441] team0 (unregistering): Port device team_slave_1 removed [ 1568.580463][ T6441] team0 (unregistering): Port device team_slave_0 removed [ 1569.419633][T13621] hsr_slave_0: entered promiscuous mode [ 1569.458246][T13621] hsr_slave_1: entered promiscuous mode [ 1569.489163][T13726] chnl_net:caif_netlink_parms(): no params data found [ 1569.835914][T13684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1569.969025][T13845] tmpfs: Bad value for 'mpol' [ 1570.067426][T13684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1575.008071][T13684] team0: Port device team_slave_0 added [ 1575.125554][T13684] team0: Port device team_slave_1 added [ 1575.669049][T13684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1575.690000][T13684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.791263][T13684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1576.032170][T13684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1576.075745][T13684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1576.175313][T13684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1576.295018][T13726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.304168][T13726] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.311925][T13726] bridge_slave_0: entered allmulticast mode [ 1576.358980][T13726] bridge_slave_0: entered promiscuous mode [ 1576.581374][T13726] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.644117][T13726] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.674271][T13726] bridge_slave_1: entered allmulticast mode [ 1576.718902][T13726] bridge_slave_1: entered promiscuous mode [ 1577.428082][T13684] hsr_slave_0: entered promiscuous mode [ 1577.441018][T13684] hsr_slave_1: entered promiscuous mode [ 1577.492806][T13684] debugfs: 'hsr0' already exists in 'hsr' [ 1577.498734][T13684] Cannot create hsr debugfs directory [ 1577.585137][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1577.592290][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1577.677680][T13726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1577.754388][T13726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1579.793424][T13726] team0: Port device team_slave_0 added [ 1580.562687][T13726] team0: Port device team_slave_1 added [ 1581.035631][T13726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1581.069187][T13726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1581.146519][T13726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1581.163062][T13726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1581.192934][T13726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1581.259379][T13726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1582.079355][T13726] hsr_slave_0: entered promiscuous mode [ 1582.119621][T13726] hsr_slave_1: entered promiscuous mode [ 1582.140118][T13726] debugfs: 'hsr0' already exists in 'hsr' [ 1582.146186][T13726] Cannot create hsr debugfs directory [ 1582.162022][ T6441] bridge_slave_1: left allmulticast mode [ 1582.178439][ T6441] bridge_slave_1: left promiscuous mode [ 1582.200936][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.240608][ T6441] bridge_slave_0: left allmulticast mode [ 1582.248692][ T6441] bridge_slave_0: left promiscuous mode [ 1582.255209][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.284402][ T6441] bridge_slave_1: left allmulticast mode [ 1582.293014][ T6441] bridge_slave_1: left promiscuous mode [ 1582.306483][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.326433][ T6441] bridge_slave_0: left allmulticast mode [ 1582.339771][ T6441] bridge_slave_0: left promiscuous mode [ 1582.351077][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.931361][ T6441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1584.020780][ T6441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1584.054341][ T6441] bond0 (unregistering): Released all slaves [ 1584.413482][ T6441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1584.485469][ T6441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1584.514971][ T6441] bond0 (unregistering): Released all slaves [ 1585.080227][ T6441] hsr_slave_0: left promiscuous mode [ 1585.105869][ T6441] hsr_slave_1: left promiscuous mode [ 1585.117333][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1585.193473][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1585.274362][ T6441] hsr_slave_0: left promiscuous mode [ 1585.312465][ T6441] hsr_slave_1: left promiscuous mode [ 1585.325885][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1585.367737][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1586.335182][ T6441] team0 (unregistering): Port device team_slave_1 removed [ 1586.398669][ T6441] team0 (unregistering): Port device team_slave_0 removed [ 1587.249279][ T6441] team0 (unregistering): Port device team_slave_1 removed [ 1587.286801][ T6441] team0 (unregistering): Port device team_slave_0 removed [ 1588.583260][T13621] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1588.622601][T13621] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1588.685718][T13621] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1588.885437][T13621] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1590.558640][T13684] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1590.668784][T13684] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1590.757140][T13684] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1590.820429][T13684] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1591.728534][T14027] netlink: 'syz.4.1685': attribute type 1 has an invalid length. [ 1592.120486][T14027] bond3: entered promiscuous mode [ 1592.131898][T14027] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1592.235603][T13621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1593.481384][T13726] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1593.608340][T13726] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1595.902204][T13726] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1598.595378][T13726] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1599.721358][T13621] 8021q: adding VLAN 0 to HW filter on device team0 [ 1600.050385][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.057842][ T6452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1600.292490][ T6452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.300268][ T6452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1601.077650][T14054] netlink: 'syz.4.1695': attribute type 1 has an invalid length. [ 1601.247809][T13684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1601.310716][T14054] bond4: entered promiscuous mode [ 1601.321715][T14054] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1602.105352][T13249] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1602.114829][T13249] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1602.124603][T13249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1602.138184][T13249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1602.160893][T13249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1602.695929][T13684] 8021q: adding VLAN 0 to HW filter on device team0 [ 1603.048882][ T6447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.056498][ T6447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1603.269466][ T6463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1603.277010][ T6463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1604.386926][T13249] Bluetooth: hci1: command tx timeout [ 1604.568754][T13726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1606.610452][T13249] Bluetooth: hci1: command tx timeout [ 1606.964410][T13249] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 1607.153389][T13726] 8021q: adding VLAN 0 to HW filter on device team0 [ 1607.432443][ T6447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.439994][ T6447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1607.658944][ T6459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1607.666444][ T6459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1607.848038][T14062] chnl_net:caif_netlink_parms(): no params data found [ 1608.345918][T13684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1608.832394][T13249] Bluetooth: hci1: command tx timeout [ 1608.984012][ T6441] bridge_slave_1: left allmulticast mode [ 1608.989865][ T6441] bridge_slave_1: left promiscuous mode [ 1609.047061][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1609.097518][ T6441] bridge_slave_0: left allmulticast mode [ 1609.118148][ T6441] bridge_slave_0: left promiscuous mode [ 1609.132722][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1609.712378][ T6441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1609.729190][ T6441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1609.759184][ T6441] bond0 (unregistering): Released all slaves [ 1610.133810][T14062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.175676][T14062] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.211391][T14062] bridge_slave_0: entered allmulticast mode [ 1610.244510][T14062] bridge_slave_0: entered promiscuous mode [ 1610.362203][ T6441] hsr_slave_0: left promiscuous mode [ 1610.407866][ T6441] hsr_slave_1: left promiscuous mode [ 1610.439605][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1611.058653][T13249] Bluetooth: hci1: command tx timeout [ 1611.529919][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1612.029144][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1612.553992][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1612.573668][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1612.738567][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1612.884900][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1614.368085][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 1615.448965][ T5779] Bluetooth: hci0: command tx timeout [ 1617.030456][ T6441] team0 (unregistering): Port device team_slave_1 removed [ 1617.109964][ T6441] team0 (unregistering): Port device team_slave_0 removed [ 1617.564699][T14062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.604817][T14062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.638186][ T5779] Bluetooth: hci0: command tx timeout [ 1617.647705][T14062] bridge_slave_1: entered allmulticast mode [ 1617.672812][T14062] bridge_slave_1: entered promiscuous mode [ 1618.141720][ T49] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1618.151980][ T49] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1618.162024][ T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1618.182931][ T49] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1618.198858][ T49] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1618.926378][T14062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1619.935976][ T5779] Bluetooth: hci0: command tx timeout [ 1619.994046][T14062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1621.817002][ T5779] Bluetooth: hci6: command tx timeout [ 1622.067597][T14062] team0: Port device team_slave_0 added [ 1622.093655][ T5779] Bluetooth: hci0: command tx timeout [ 1622.156784][T14062] team0: Port device team_slave_1 added [ 1622.687978][T14062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1622.706933][T14062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1622.752242][T14062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1622.818318][T14062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1622.830383][T14062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1622.879737][T14062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1623.906758][T14062] hsr_slave_0: entered promiscuous mode [ 1623.920422][T14062] hsr_slave_1: entered promiscuous mode [ 1623.966819][ T5779] Bluetooth: hci6: command tx timeout [ 1625.133907][T14128] chnl_net:caif_netlink_parms(): no params data found [ 1625.372814][T14199] netlink: 'syz.0.1733': attribute type 6 has an invalid length. [ 1625.390409][T14199] netlink: 1068 bytes leftover after parsing attributes in process `syz.0.1733'. [ 1625.424129][T14199] netlink: 'syz.0.1733': attribute type 1 has an invalid length. [ 1626.186858][ T5779] Bluetooth: hci6: command tx timeout [ 1626.723573][ T6469] bridge_slave_1: left allmulticast mode [ 1626.729416][ T6469] bridge_slave_1: left promiscuous mode [ 1626.768475][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.807157][ T6469] bridge_slave_0: left allmulticast mode [ 1626.824585][ T6469] bridge_slave_0: left promiscuous mode [ 1626.840892][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.470905][ T6469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1627.492375][ T6469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1627.507663][ T6469] bond0 (unregistering): Released all slaves [ 1627.765204][T14147] chnl_net:caif_netlink_parms(): no params data found [ 1628.162616][ T6469] hsr_slave_0: left promiscuous mode [ 1628.171931][ T6469] hsr_slave_1: left promiscuous mode [ 1628.183622][ T6469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1628.210476][ T6469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1628.858263][ T5779] Bluetooth: hci6: command tx timeout [ 1632.167088][ T6469] team0 (unregistering): Port device team_slave_1 removed [ 1632.201815][ T6469] team0 (unregistering): Port device team_slave_0 removed [ 1632.249625][ T8883] tipc: Subscription rejected, illegal request [ 1637.603582][T14128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1637.623437][T14128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.632360][T14128] bridge_slave_0: entered allmulticast mode [ 1637.655832][T14128] bridge_slave_0: entered promiscuous mode [ 1637.711207][T14128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.721355][T14128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1637.768404][T14128] bridge_slave_1: entered allmulticast mode [ 1637.778948][T14128] bridge_slave_1: entered promiscuous mode [ 1638.450971][T14128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1638.580368][T14128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1639.075152][T14128] team0: Port device team_slave_0 added [ 1639.129970][T14128] team0: Port device team_slave_1 added [ 1639.463510][T14147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.480599][T14147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.499749][T14147] bridge_slave_0: entered allmulticast mode [ 1639.534893][T14147] bridge_slave_0: entered promiscuous mode [ 1639.577411][T14147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.584891][T14147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.604182][T14147] bridge_slave_1: entered allmulticast mode [ 1639.622185][T14147] bridge_slave_1: entered promiscuous mode [ 1640.188442][T14147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1640.251540][T14147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1640.559598][T14128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1640.584209][T14128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1640.655483][T14128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1640.795671][T14147] team0: Port device team_slave_0 added [ 1640.884949][T14128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1640.905299][T14128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1641.008568][T14128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1641.068651][T14147] team0: Port device team_slave_1 added [ 1641.390407][T14062] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1641.480478][T14147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1641.513668][T14147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1641.597430][T14147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1641.630735][T14062] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1641.711425][T14062] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1641.785052][T14147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1641.831184][T14147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1641.866668][T14147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1641.899545][T14062] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1642.214838][T14128] hsr_slave_0: entered promiscuous mode [ 1642.244582][T14128] hsr_slave_1: entered promiscuous mode [ 1642.254089][T14128] debugfs: 'hsr0' already exists in 'hsr' [ 1642.268666][T14128] Cannot create hsr debugfs directory [ 1642.419268][T14147] hsr_slave_0: entered promiscuous mode [ 1642.440559][T14147] hsr_slave_1: entered promiscuous mode [ 1642.449284][T14147] debugfs: 'hsr0' already exists in 'hsr' [ 1642.456722][T14147] Cannot create hsr debugfs directory [ 1643.364461][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1643.374391][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1643.649150][T14271] openvswitch: netlink: Message has 8 unknown bytes. [ 1643.838197][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801b9bb400: rx timeout, send abort [ 1644.084183][ T6469] bridge_slave_1: left allmulticast mode [ 1644.105025][ T6469] bridge_slave_1: left promiscuous mode [ 1644.117635][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.143627][ T6469] bridge_slave_0: left allmulticast mode [ 1644.150053][ T6469] bridge_slave_0: left promiscuous mode [ 1644.157111][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.374422][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888094521e00: rx timeout, send abort [ 1644.382960][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801b9bb400: abort rx timeout. Force session deactivation [ 1644.917247][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888094521e00: abort rx timeout. Force session deactivation [ 1644.966399][ T6469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1645.034619][ T6469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1645.075274][ T6469] bond0 (unregistering): Released all slaves [ 1646.574507][ T6469] hsr_slave_0: left promiscuous mode [ 1646.609370][ T6469] hsr_slave_1: left promiscuous mode [ 1646.637481][ T6469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1646.659369][ T6469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1647.995389][ T6469] team0 (unregistering): Port device team_slave_1 removed [ 1648.028330][ T6469] team0 (unregistering): Port device team_slave_0 removed [ 1654.980231][T14062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1655.340509][T14062] 8021q: adding VLAN 0 to HW filter on device team0 [ 1655.551641][ T6459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1655.559230][ T6459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1655.727300][ T6459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1655.734930][ T6459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1655.813813][T14128] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1655.968521][T14128] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1656.048325][T14128] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1656.171663][T14128] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1657.722589][T14147] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1657.797665][T14147] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1657.896447][T14147] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1658.000167][T14147] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1658.508137][T14128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1658.863573][T14128] 8021q: adding VLAN 0 to HW filter on device team0 [ 1659.076818][ T6465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1659.084340][ T6465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1659.497337][T14326] openvswitch: netlink: Message has 8 unknown bytes. [ 1659.604402][ T6465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1659.612081][ T6465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1659.709019][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880554d8200: rx timeout, send abort [ 1660.244891][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801b98c600: rx timeout, send abort [ 1660.254001][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880554d8200: abort rx timeout. Force session deactivation [ 1660.318469][T14062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1660.788718][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801b98c600: abort rx timeout. Force session deactivation [ 1661.101563][T14147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1661.164909][ T5779] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 1661.276226][T14147] 8021q: adding VLAN 0 to HW filter on device team0 [ 1661.451318][ T6469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1661.458858][ T6469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1661.620757][ T6465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1661.628363][ T6465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1665.281248][T14128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1667.155939][T14147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1667.608844][T14387] openvswitch: netlink: Message has 8 unknown bytes. [ 1667.764392][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88804ebba200: rx timeout, send abort [ 1667.769063][T14147] veth0_vlan: entered promiscuous mode [ 1667.946840][T14147] veth1_vlan: entered promiscuous mode [ 1668.285904][T14147] veth0_macvtap: entered promiscuous mode [ 1668.300506][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88804ebbb800: rx timeout, send abort [ 1668.309025][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88804ebba200: abort rx timeout. Force session deactivation [ 1668.382032][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1668.398846][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1668.416091][T14147] veth1_macvtap: entered promiscuous mode [ 1668.451087][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1668.467184][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1668.482697][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1668.715094][T14147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1668.843303][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88804ebbb800: abort rx timeout. Force session deactivation [ 1668.957933][T14147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1669.108005][T14128] veth0_vlan: entered promiscuous mode [ 1672.746450][ T49] Bluetooth: hci3: command tx timeout [ 1673.487534][ T6443] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.619031][ T6443] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.664557][ T6443] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.673565][ T6443] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.757096][T14128] veth1_vlan: entered promiscuous mode [ 1674.917379][ T49] Bluetooth: hci3: command tx timeout [ 1676.130511][T14441] openvswitch: netlink: Message has 8 unknown bytes. [ 1676.152650][ T8883] bridge_slave_1: left allmulticast mode [ 1676.200330][ T8883] bridge_slave_1: left promiscuous mode [ 1676.206912][ T8883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.314627][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888026deda00: rx timeout, send abort [ 1676.343020][ T8883] bridge_slave_0: left allmulticast mode [ 1676.362206][ T8883] bridge_slave_0: left promiscuous mode [ 1676.370115][ T8883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.372584][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1676.389908][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1676.406482][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1676.420288][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1676.434379][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1676.850826][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888055588a00: rx timeout, send abort [ 1676.859365][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888026deda00: abort rx timeout. Force session deactivation [ 1677.137506][ T49] Bluetooth: hci3: command tx timeout [ 1677.271377][ T8883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1677.337415][ T8883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1677.374664][ T8883] bond0 (unregistering): Released all slaves [ 1677.394633][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888055588a00: abort rx timeout. Force session deactivation [ 1677.565187][T14394] chnl_net:caif_netlink_parms(): no params data found [ 1678.000735][ T8883] hsr_slave_0: left promiscuous mode [ 1678.053033][ T8883] hsr_slave_1: left promiscuous mode [ 1678.061116][ T8883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1678.154615][ T8883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1678.676516][ T49] Bluetooth: hci1: command tx timeout [ 1679.217309][ T8883] team0 (unregistering): Port device team_slave_1 removed [ 1679.256467][ T8883] team0 (unregistering): Port device team_slave_0 removed [ 1679.360565][ T49] Bluetooth: hci3: command tx timeout [ 1680.904213][ T49] Bluetooth: hci1: command tx timeout [ 1681.181955][T14394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1681.244224][T14394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.273759][T14394] bridge_slave_0: entered allmulticast mode [ 1681.320028][T14394] bridge_slave_0: entered promiscuous mode [ 1681.374731][T14394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1681.422823][T14394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1681.430498][T14394] bridge_slave_1: entered allmulticast mode [ 1681.469034][T14394] bridge_slave_1: entered promiscuous mode [ 1682.105484][T14394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1682.264141][T14394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1682.778475][T14394] team0: Port device team_slave_0 added [ 1682.850873][T14394] team0: Port device team_slave_1 added [ 1683.123476][ T49] Bluetooth: hci1: command tx timeout [ 1683.134133][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1683.149345][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1683.169761][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1683.187203][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1683.218269][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1683.245853][T14394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1683.312481][T14394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1683.380735][T14394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1683.415501][T14394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1683.431700][T14394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1683.537229][T14394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1683.634184][T14445] chnl_net:caif_netlink_parms(): no params data found [ 1683.763023][T14518] openvswitch: netlink: Message has 8 unknown bytes. [ 1683.936612][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880263fd000: rx timeout, send abort [ 1684.472647][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801b9a4600: rx timeout, send abort [ 1684.481985][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880263fd000: abort rx timeout. Force session deactivation [ 1684.537695][T14394] hsr_slave_0: entered promiscuous mode [ 1684.552359][T14394] hsr_slave_1: entered promiscuous mode [ 1684.614644][ T8883] bridge_slave_1: left allmulticast mode [ 1684.633930][ T8883] bridge_slave_1: left promiscuous mode [ 1684.647892][ T8883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.015611][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801b9a4600: abort rx timeout. Force session deactivation [ 1688.967716][ T5779] Bluetooth: hci1: command tx timeout [ 1688.967777][ T49] Bluetooth: hci0: command tx timeout [ 1689.034382][ T8883] bridge_slave_0: left allmulticast mode [ 1689.040214][ T8883] bridge_slave_0: left promiscuous mode [ 1689.097294][ T8883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.764566][ T8883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1689.808740][ T8883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1689.838392][ T8883] bond0 (unregistering): Released all slaves [ 1690.491153][ T8883] hsr_slave_0: left promiscuous mode [ 1690.550861][ T8883] hsr_slave_1: left promiscuous mode [ 1690.565379][ T8883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1690.576946][ T8883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1690.656006][ T8883] veth1_vlan: left promiscuous mode [ 1690.661566][ T8883] veth0_vlan: left promiscuous mode [ 1691.157701][T13249] Bluetooth: hci0: command tx timeout [ 1691.510191][ T8883] team0 (unregistering): Port device team_slave_1 removed [ 1691.555434][ T8883] team0 (unregistering): Port device team_slave_0 removed [ 1692.683078][T14557] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1692.791365][T14445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.812999][T14445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.823115][T14445] bridge_slave_0: entered allmulticast mode [ 1692.849862][T14445] bridge_slave_0: entered promiscuous mode [ 1692.951320][T14445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1692.963887][T14445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.971558][T14445] bridge_slave_1: entered allmulticast mode [ 1692.999127][T14445] bridge_slave_1: entered promiscuous mode [ 1693.364940][T14565] openvswitch: netlink: Message has 8 unknown bytes. [ 1693.378050][ T8883] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.389334][T13249] Bluetooth: hci0: command tx timeout [ 1693.492114][T14445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1693.553327][ T8883] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.599632][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888026369e00: rx timeout, send abort [ 1693.605327][T14445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1693.740075][ T8883] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.898246][T14445] team0: Port device team_slave_0 added [ 1693.957704][ T8883] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.018619][T14445] team0: Port device team_slave_1 added [ 1694.135787][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888026368c00: rx timeout, send abort [ 1694.144506][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888026369e00: abort rx timeout. Force session deactivation [ 1694.194931][T14445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1694.202390][T14445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.232378][T14445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1694.439062][T14445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1694.481694][T14445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.535506][T14445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1694.678689][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888026368c00: abort rx timeout. Force session deactivation [ 1695.062354][T14510] chnl_net:caif_netlink_parms(): no params data found [ 1695.273811][T14445] hsr_slave_0: entered promiscuous mode [ 1695.286372][T14445] hsr_slave_1: entered promiscuous mode [ 1695.296570][T14445] debugfs: 'hsr0' already exists in 'hsr' [ 1695.302483][T14445] Cannot create hsr debugfs directory [ 1695.367039][ T8883] bridge_slave_1: left allmulticast mode [ 1695.383932][ T8883] bridge_slave_1: left promiscuous mode [ 1695.396904][ T8883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.411915][ T8883] bridge_slave_0: left allmulticast mode [ 1695.417765][ T8883] bridge_slave_0: left promiscuous mode [ 1695.430301][ T8883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.613845][T13249] Bluetooth: hci0: command tx timeout [ 1696.181405][ T8883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1696.224327][ T8883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1696.261891][ T8883] bond0 (unregistering): Released all slaves [ 1696.386795][T14608] openvswitch: netlink: Message has 8 unknown bytes. [ 1696.601213][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802638ca00: rx timeout, send abort [ 1696.677933][ T8883] hsr_slave_0: left promiscuous mode [ 1696.691783][ T8883] hsr_slave_1: left promiscuous mode [ 1696.704785][ T8883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1696.712344][ T8883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1696.724579][ T8883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1696.739255][ T8883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1696.763702][ T8883] veth1_macvtap: left promiscuous mode [ 1696.769790][ T8883] veth0_macvtap: left promiscuous mode [ 1696.775497][ T8883] veth1_vlan: left promiscuous mode [ 1696.782258][ T8883] veth0_vlan: left promiscuous mode [ 1697.137048][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888026eed800: rx timeout, send abort [ 1697.145641][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802638ca00: abort rx timeout. Force session deactivation [ 1697.436541][ T8883] team0 (unregistering): Port device team_slave_1 removed [ 1697.529955][ T8883] team0 (unregistering): Port device team_slave_0 removed [ 1697.679873][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888026eed800: abort rx timeout. Force session deactivation [ 1698.583202][T14394] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1698.734094][T14394] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1698.911444][T14394] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1698.946197][T14394] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1699.190237][T14510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.210782][T14510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1699.223904][T14510] bridge_slave_0: entered allmulticast mode [ 1699.239635][T14510] bridge_slave_0: entered promiscuous mode [ 1699.333153][T14510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.363210][T14510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.387758][T14510] bridge_slave_1: entered allmulticast mode [ 1699.409480][T14510] bridge_slave_1: entered promiscuous mode [ 1699.784800][T14647] netlink: 'syz.0.1831': attribute type 83 has an invalid length. [ 1699.830106][T14510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1699.883982][T14510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1700.236211][T14510] team0: Port device team_slave_0 added [ 1700.333720][T14651] openvswitch: netlink: Message has 8 unknown bytes. [ 1700.382359][T14510] team0: Port device team_slave_1 added [ 1700.515720][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888026394600: rx timeout, send abort [ 1700.659567][T14510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1700.696765][T14510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1700.745193][T14510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1700.813102][T14510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1700.823547][T14510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1700.854759][T14510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1700.925111][T14445] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1701.048974][T14445] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1701.051711][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888026387e00: rx timeout, send abort [ 1701.064769][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888026394600: abort rx timeout. Force session deactivation [ 1701.274698][T14510] hsr_slave_0: entered promiscuous mode [ 1701.289799][T14510] hsr_slave_1: entered promiscuous mode [ 1701.309864][T14510] debugfs: 'hsr0' already exists in 'hsr' [ 1701.315769][T14510] Cannot create hsr debugfs directory [ 1701.356710][T14445] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1701.435525][T14445] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1701.598768][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888026387e00: abort rx timeout. Force session deactivation [ 1701.760561][T14394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1702.083616][T14394] 8021q: adding VLAN 0 to HW filter on device team0 [ 1702.355833][T11632] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.363502][T11632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1702.540159][ T6443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.547605][ T6443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1703.834416][T14445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1703.862433][T14687] netlink: 'syz.4.1840': attribute type 83 has an invalid length. [ 1703.987237][T14692] openvswitch: netlink: Message has 8 unknown bytes. [ 1704.086054][T14510] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1704.165705][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888026ebb600: rx timeout, send abort [ 1704.186735][T14445] 8021q: adding VLAN 0 to HW filter on device team0 [ 1704.230239][T14510] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1704.353278][T14510] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1704.407795][ T6474] bridge0: port 1(bridge_slave_0) entered blocking state [ 1704.415410][ T6474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1704.483805][T14510] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1704.605039][ T6474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.612612][ T6474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1704.701752][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880ad3e5800: rx timeout, send abort [ 1704.710934][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888026ebb600: abort rx timeout. Force session deactivation [ 1705.244704][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880ad3e5800: abort rx timeout. Force session deactivation [ 1705.255063][T14394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1706.220869][T14510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1706.405209][T14510] 8021q: adding VLAN 0 to HW filter on device team0 [ 1706.534111][ T6447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1706.541675][ T6447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1706.647142][ T6441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1706.654701][ T6441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1707.233742][T14737] openvswitch: netlink: Message has 8 unknown bytes. [ 1707.455202][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801b9b3600: rx timeout, send abort [ 1707.990931][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888055559c00: rx timeout, send abort [ 1708.009492][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801b9b3600: abort rx timeout. Force session deactivation [ 1708.533846][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888055559c00: abort rx timeout. Force session deactivation [ 1708.899741][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1708.906765][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1709.929132][T14445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1710.185088][T14394] veth0_vlan: entered promiscuous mode [ 1710.341152][T14394] veth1_vlan: entered promiscuous mode [ 1711.302752][T14757] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1711.311830][T14757] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1711.323582][T14757] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1715.349286][T14394] veth0_macvtap: entered promiscuous mode [ 1715.501163][T14394] veth1_macvtap: entered promiscuous mode [ 1715.752589][T14394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1715.927495][T14394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1716.052099][T14510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1716.084743][ T6469] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.111048][ T6474] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.196562][ T6474] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.248486][ T6474] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.271924][T14775] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1857'. [ 1719.632931][T14445] veth0_vlan: entered promiscuous mode [ 1719.839587][T14510] veth0_vlan: entered promiscuous mode [ 1719.883289][T14445] veth1_vlan: entered promiscuous mode [ 1719.955313][T14510] veth1_vlan: entered promiscuous mode [ 1720.404476][T14445] veth0_macvtap: entered promiscuous mode [ 1720.510610][T14445] veth1_macvtap: entered promiscuous mode [ 1720.572856][T14510] veth0_macvtap: entered promiscuous mode [ 1720.729029][T14510] veth1_macvtap: entered promiscuous mode [ 1720.797417][T14806] openvswitch: netlink: Message has 8 unknown bytes. [ 1720.816820][T14445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1720.959595][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880554f4e00: rx timeout, send abort [ 1720.980837][T14445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1721.139333][ T6441] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.154393][ T6441] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.192585][ T6441] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.276390][T14510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1721.303179][ T6441] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.407990][T14510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1721.495455][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880554f4c00: rx timeout, send abort [ 1721.504008][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880554f4e00: abort rx timeout. Force session deactivation [ 1721.531480][T11632] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.585366][T11632] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.681525][T11632] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.730019][ T6474] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1722.038297][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880554f4c00: abort rx timeout. Force session deactivation [ 1723.995928][ T6474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1724.003951][ T6474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1725.406810][ T6452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1725.482143][ T6452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1726.592011][T14882] openvswitch: netlink: Message has 8 unknown bytes. [ 1726.756575][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880556c3e00: rx timeout, send abort [ 1727.292811][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880556c3000: rx timeout, send abort [ 1727.302326][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880556c3e00: abort rx timeout. Force session deactivation [ 1727.835802][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880556c3000: abort rx timeout. Force session deactivation [ 1734.411840][T11632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1734.554048][T11632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1734.832341][ T6447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1734.863599][ T6447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.385846][ T6447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.556570][ T6447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.942305][ T6443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1737.046622][ T6443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1746.365068][ T795] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1746.368303][T15034] ======================================================= [ 1746.368303][T15034] WARNING: The mand mount option has been deprecated and [ 1746.368303][T15034] and is ignored by this kernel. Remove the mand [ 1746.368303][T15034] option from the mount to silence this warning. [ 1746.368303][T15034] ======================================================= [ 1746.458270][T15034] overlay: Unknown parameter '/pcmC#D#c' [ 1746.555413][T15035] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1909'. [ 1747.394277][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 1747.394353][ T29] audit: type=1326 audit(1771724927.392:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15031 comm="syz.9.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9549b9c629 code=0x7ffc0000 [ 1750.072370][ T29] audit: type=1326 audit(1771724927.392:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15031 comm="syz.9.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9549b9c629 code=0x7ffc0000 [ 1750.304745][ T29] audit: type=1326 audit(1771724927.392:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15031 comm="syz.9.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9549b5cece code=0x7ffc0000 [ 1750.516009][ T29] audit: type=1326 audit(1771724927.392:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15031 comm="syz.9.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9549b9d957 code=0x7ffc0000 [ 1750.643375][ T29] audit: type=1326 audit(1771724927.402:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15031 comm="syz.9.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9549b9c629 code=0x7ffc0000 [ 1750.815532][ T29] audit: type=1326 audit(1771724927.402:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15031 comm="syz.9.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9549b9d957 code=0x7ffc0000 [ 1750.816243][ T29] audit: type=1326 audit(1771724927.402:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15031 comm="syz.9.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9549b5cece code=0x7ffc0000 [ 1750.816961][ T29] audit: type=1326 audit(1771724927.402:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15031 comm="syz.9.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9549b9c629 code=0x7ffc0000 [ 1750.851915][ T29] audit: type=1326 audit(1771724927.402:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15031 comm="syz.9.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9549b9c629 code=0x7ffc0000 [ 1750.852139][ T29] audit: type=1326 audit(1771724927.402:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15031 comm="syz.9.1909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9549b9dec7 code=0x7ffc0000 [ 1754.392464][ T795] usb 3-1: device descriptor read/all, error -71 [ 1756.115402][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 1756.115477][ T29] audit: type=1326 audit(1771724936.264:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15085 comm="syz.4.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7b39c629 code=0x7ffc0000 [ 1756.183555][T15097] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1927'. [ 1756.233001][T15091] mmap: syz.4.1924 (15091) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1756.313763][ T29] audit: type=1326 audit(1771724936.283:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15085 comm="syz.4.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7b39c629 code=0x7ffc0000 [ 1756.359576][T13249] Bluetooth: hci1: hcon ffff88801bb2e000 sent 1 < count 5 [ 1756.367296][T13249] Bluetooth: hci1: hcon ffff88813f7c5000 sent 1 < count 42 [ 1756.379626][T13249] Bluetooth: hci1: hcon ffff88801bb2e000 sent 0 < count 12 [ 1756.387440][T13249] Bluetooth: hci1: hcon ffff88813f7c5000 sent 0 < count 2047 [ 1756.397241][T13249] Bluetooth: hci1: hcon ffff88813f7c5000 sent 0 < count 14 [ 1756.404663][T13249] Bluetooth: hci1: hcon ffff88801bb2e000 sent 0 < count 3 [ 1756.478585][ T29] audit: type=1326 audit(1771724936.451:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15085 comm="syz.4.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf7b39c629 code=0x7ffc0000 [ 1756.713002][ T29] audit: type=1326 audit(1771724936.451:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15085 comm="syz.4.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7b39c629 code=0x7ffc0000 [ 1756.834123][ T29] audit: type=1326 audit(1771724936.451:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15085 comm="syz.4.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7b39c629 code=0x7ffc0000 [ 1756.867877][ T29] audit: type=1326 audit(1771724936.451:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15085 comm="syz.4.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fdf7b39c629 code=0x7ffc0000 [ 1756.894076][ T29] audit: type=1326 audit(1771724936.451:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15085 comm="syz.4.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7b39c629 code=0x7ffc0000 [ 1757.164463][ T29] audit: type=1326 audit(1771724936.451:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15085 comm="syz.4.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdf7b39c629 code=0x7ffc0000 [ 1757.677044][ T29] audit: type=1326 audit(1771724936.460:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15085 comm="syz.4.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7b39c629 code=0x7ffc0000 [ 1757.704136][ T29] audit: type=1326 audit(1771724936.460:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15085 comm="syz.4.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7b39c629 code=0x7ffc0000 [ 1760.441581][T15126] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1936'. [ 1761.169909][T13249] Bluetooth: unknown link type 251 [ 1761.176508][T13249] Bluetooth: hci1: connection err: -111 [ 1771.420437][ T8431] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1771.654375][T15189] netlink: 'syz.2.1954': attribute type 10 has an invalid length. [ 1773.498163][T15189] team0: Port device dummy0 added [ 1773.807487][ T8431] usb 6-1: Using ep0 maxpacket: 16 [ 1774.571550][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1774.591127][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1775.138514][ T8431] usb 6-1: device descriptor read/all, error -71 [ 1776.280245][ T5779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1776.296034][ T5779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1776.721588][ T5779] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1776.744606][ T5779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1776.777473][ T5779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1779.042117][ T5779] Bluetooth: hci4: command tx timeout [ 1780.093999][T15211] chnl_net:caif_netlink_parms(): no params data found [ 1781.091922][T15246] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1969'. [ 1781.264519][ T5779] Bluetooth: hci4: command tx timeout [ 1781.357578][ T5779] Bluetooth: hci3: hcon ffff88801b903000 sent 1 < count 5 [ 1781.365884][ T5779] Bluetooth: hci3: hcon ffff88811862b000 sent 1 < count 42 [ 1781.375626][ T5779] Bluetooth: hci3: hcon ffff88801b903000 sent 0 < count 12 [ 1781.384043][ T5779] Bluetooth: hci3: hcon ffff88811862b000 sent 0 < count 2047 [ 1781.399302][ T5779] Bluetooth: hci3: hcon ffff88811862b000 sent 0 < count 14 [ 1781.409919][ T5779] Bluetooth: hci3: hcon ffff88801b903000 sent 0 < count 3 [ 1783.488147][ T5779] Bluetooth: hci4: command tx timeout [ 1785.803150][ T5779] Bluetooth: hci4: command tx timeout [ 1792.848477][T15211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1792.900580][T15211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.915297][T15211] bridge_slave_0: entered allmulticast mode [ 1792.988317][T15211] bridge_slave_0: entered promiscuous mode [ 1793.073472][T15211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1793.113366][T15211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1793.151127][T15211] bridge_slave_1: entered allmulticast mode [ 1793.210141][T15211] bridge_slave_1: entered promiscuous mode [ 1793.699105][T15211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1793.801938][T15211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1794.228261][T15296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1982'. [ 1796.290970][ T5779] Bluetooth: hci0: hcon ffff888055447000 sent 1 < count 5 [ 1796.415069][ T5779] Bluetooth: hci0: hcon ffff88808c343000 sent 1 < count 42 [ 1796.427322][ T5779] Bluetooth: hci0: hcon ffff888055447000 sent 0 < count 12 [ 1796.434968][ T5779] Bluetooth: hci0: hcon ffff88808c343000 sent 0 < count 2047 [ 1796.455791][ T5779] Bluetooth: hci0: hcon ffff88808c343000 sent 0 < count 14 [ 1796.463661][ T5779] Bluetooth: hci0: hcon ffff888055447000 sent 0 < count 3 [ 1796.819747][T15211] team0: Port device team_slave_0 added [ 1796.906240][T15211] team0: Port device team_slave_1 added [ 1797.353402][T15211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1797.461025][T15211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1797.653394][T15211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1797.756004][T15211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1797.804459][T15211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1797.868453][T15211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1798.824118][T15211] hsr_slave_0: entered promiscuous mode [ 1798.974673][T15211] hsr_slave_1: entered promiscuous mode [ 1799.450725][T15211] debugfs: 'hsr0' already exists in 'hsr' [ 1799.456631][T15211] Cannot create hsr debugfs directory [ 1800.294843][T15333] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1996'. [ 1808.353171][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 1810.499702][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 1812.367770][T13249] Bluetooth: hci1: hcon ffff88813f7c5000 sent 0 < count 42 [ 1812.376671][T13249] Bluetooth: hci1: hcon ffff88813f7c5000 sent 0 < count 2047 [ 1812.391655][T13249] Bluetooth: hci1: hcon ffff88813f7c5000 sent 0 < count 14 [ 1815.047873][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 1820.357908][T13249] Bluetooth: hci3: hcon ffff88811862b000 sent 0 < count 42 [ 1820.371213][T13249] Bluetooth: hci3: hcon ffff88811862b000 sent 0 < count 2047 [ 1820.380939][T13249] Bluetooth: hci3: hcon ffff88811862b000 sent 0 < count 14 [ 1820.583910][T15211] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1821.066951][T15211] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1821.251448][T15211] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1821.574830][ T6465] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1821.685001][T15211] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1821.948820][ T6465] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.348693][ T6465] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.617439][ T5821] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1822.736269][ T6465] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.844197][ T5821] usb 3-1: config 0 has an invalid descriptor of length 236, skipping remainder of the config [ 1822.914137][ T5821] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1822.937366][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 114, changing to 10 [ 1822.996990][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 50047, setting to 1024 [ 1823.076214][ T5821] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1823.186357][ T5821] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1823.238044][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.246698][ T5821] usb 3-1: Product: syz [ 1823.275088][ T5821] usb 3-1: Manufacturer: syz [ 1823.311778][ T5821] usb 3-1: SerialNumber: syz [ 1823.369391][ T5821] usb 3-1: config 0 descriptor?? [ 1823.426579][ T5821] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected [ 1823.527012][ T5821] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1823.651554][ T5821] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1823.791710][ T5821] usb 3-1: USB disconnect, device number 6 [ 1823.837529][ T5821] garmin_gps 3-1:0.0: device disconnected [ 1824.394307][ T6465] bridge_slave_1: left allmulticast mode [ 1824.531356][ T6465] bridge_slave_1: left promiscuous mode [ 1824.592139][ T6465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1825.116887][ T6465] bridge_slave_0: left allmulticast mode [ 1825.233006][ T6465] bridge_slave_0: left promiscuous mode [ 1825.320734][ T6465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1826.984325][ T6465] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1827.019976][ T6465] bridge1 (unregistering): left promiscuous mode [ 1827.436719][ T6465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1827.528719][ T6465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1827.589395][ T6465] bond0 (unregistering): Released all slaves [ 1827.637225][ T6465] bond1 (unregistering): Released all slaves [ 1827.670790][ T6465] bond2 (unregistering): Released all slaves [ 1827.784558][ T6465] bond3 (unregistering): Released all slaves [ 1827.878055][ T6465] bond4 (unregistering): Released all slaves [ 1828.518925][T15211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1828.739542][T15211] 8021q: adding VLAN 0 to HW filter on device team0 [ 1828.873452][ T6459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1828.881311][ T6459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1829.203420][ T6452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1829.211433][ T6452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1829.873183][ T6465] hsr_slave_0: left promiscuous mode [ 1829.948452][ T6465] hsr_slave_1: left promiscuous mode [ 1829.980186][ T6465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1830.016126][ T6465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1830.516412][ T6465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1830.525785][ T6465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1832.216006][ T6465] veth1_macvtap: left promiscuous mode [ 1832.259934][ T6465] veth0_macvtap: left promiscuous mode [ 1832.295400][ T6465] veth1_vlan: left promiscuous mode [ 1832.335412][ T6465] veth0_vlan: left promiscuous mode [ 1834.395227][ T6465] team0 (unregistering): Port device team_slave_1 removed [ 1834.504432][ T6465] team0 (unregistering): Port device team_slave_0 removed [ 1836.477167][ T5821] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1836.694603][ T5821] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1836.739343][ T5821] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1836.832846][ T5821] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1836.876825][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1836.910961][ T5821] usb 6-1: Product: syz [ 1836.950933][ T5821] usb 6-1: Manufacturer: syz [ 1836.972168][ T5821] usb 6-1: SerialNumber: syz [ 1837.007425][ T5821] usb 6-1: config 0 descriptor?? [ 1837.140725][ T5821] usb 6-1: selecting invalid altsetting 0 [ 1837.895671][ T5821] usb 6-1: USB disconnect, device number 5 [ 1838.092296][T15398] udevd[15398]: setting mode of /dev/bus/usb/006/005 to 020664 failed: No such file or directory [ 1838.122123][T15211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1838.147904][T15398] udevd[15398]: setting owner of /dev/bus/usb/006/005 to uid=0, gid=0 failed: No such file or directory [ 1838.318173][T15396] udevd[15396]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1840.219698][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1840.226321][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1840.958523][ T5779] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1840.967930][ T5779] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1840.977196][ T5779] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1841.007093][ T5779] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1841.030105][ T5779] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1843.242541][ T5779] Bluetooth: hci5: command tx timeout [ 1843.941172][T15554] chnl_net:caif_netlink_parms(): no params data found [ 1844.576365][T15582] ===================================================== [ 1844.584216][T15582] BUG: KMSAN: uninit-value in erspan_build_header+0x167/0x2f0 [ 1844.592315][T15582] erspan_build_header+0x167/0x2f0 [ 1844.597790][T15582] erspan_xmit+0x12e8/0x1ed0 [ 1844.602643][T15582] dev_hard_start_xmit+0x24e/0xad0 [ 1844.608249][T15582] sch_direct_xmit+0x3b2/0xcf0 [ 1844.613625][T15582] __dev_queue_xmit+0x3016/0x5a50 [ 1844.618869][T15582] __bpf_redirect+0x162e/0x1760 [ 1844.624229][T15582] bpf_clone_redirect+0x4a6/0x6c0 [ 1844.629591][T15582] ___bpf_prog_run+0x12af/0xeb60 [ 1844.635042][T15582] __bpf_prog_run32+0xc2/0xf0 [ 1844.639880][T15582] bpf_test_run+0x493/0xdf0 [ 1844.644915][T15582] bpf_prog_test_run_skb+0x22a5/0x3050 [ 1844.650682][T15582] bpf_prog_test_run+0x5bb/0x9f0 [ 1844.656070][T15582] __sys_bpf+0x925/0xee0 [ 1844.660460][T15582] __x64_sys_bpf+0xa4/0xf0 [ 1844.665306][T15582] x64_sys_call+0x13d0/0x3ea0 [ 1844.670328][T15582] do_syscall_64+0x134/0xf80 [ 1844.675501][T15582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1844.681615][T15582] [ 1844.684144][T15582] Uninit was created at: [ 1844.688778][T15582] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 1844.695234][T15582] pskb_expand_head+0x2ef/0x1fb0 [ 1844.700600][T15582] erspan_xmit+0x9c3/0x1ed0 [ 1844.705372][T15582] dev_hard_start_xmit+0x24e/0xad0 [ 1844.710665][T15582] sch_direct_xmit+0x3b2/0xcf0 [ 1844.715795][T15582] __dev_queue_xmit+0x3016/0x5a50 [ 1844.721012][T15582] __bpf_redirect+0x162e/0x1760 [ 1844.726105][T15582] bpf_clone_redirect+0x4a6/0x6c0 [ 1844.731463][T15582] ___bpf_prog_run+0x12af/0xeb60 [ 1844.736566][T15582] __bpf_prog_run32+0xc2/0xf0 [ 1844.741512][T15582] bpf_test_run+0x493/0xdf0 [ 1844.746231][T15582] bpf_prog_test_run_skb+0x22a5/0x3050 [ 1844.752166][T15582] bpf_prog_test_run+0x5bb/0x9f0 [ 1844.757286][T15582] __sys_bpf+0x925/0xee0 [ 1844.761912][T15582] __x64_sys_bpf+0xa4/0xf0 [ 1844.766491][T15582] x64_sys_call+0x13d0/0x3ea0 [ 1844.771450][T15582] do_syscall_64+0x134/0xf80 [ 1844.776331][T15582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1844.782495][T15582] [ 1844.784891][T15582] CPU: 0 UID: 0 PID: 15582 Comm: syz.2.2075 Not tainted syzkaller #0 PREEMPT(full) [ 1844.795258][T15582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1844.805561][T15582] ===================================================== [ 1844.812717][T15582] Disabling lock debugging due to kernel taint [ 1844.819021][T15582] Kernel panic - not syncing: kmsan.panic set ... [ 1844.825554][T15582] CPU: 0 UID: 0 PID: 15582 Comm: syz.2.2075 Tainted: G B syzkaller #0 PREEMPT(full) [ 1844.836747][T15582] Tainted: [B]=BAD_PAGE [ 1844.840978][T15582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1844.851454][T15582] Call Trace: [ 1844.855018][T15582] [ 1844.858033][T15582] __dump_stack+0x26/0x30 [ 1844.862600][T15582] dump_stack_lvl+0x50/0x1c0 [ 1844.867346][T15582] ? dump_stack+0x12/0x25 [ 1844.871833][T15582] dump_stack+0x1e/0x25 [ 1844.876339][T15582] vpanic+0x7b4/0x1430 [ 1844.880535][T15582] panic+0x15d/0x160 [ 1844.884575][T15582] kmsan_report+0x31a/0x320 [ 1844.889201][T15582] ? __msan_warning+0x1b/0x30 [ 1844.893999][T15582] ? erspan_build_header+0x167/0x2f0 [ 1844.899398][T15582] ? erspan_xmit+0x12e8/0x1ed0 [ 1844.904266][T15582] ? dev_hard_start_xmit+0x24e/0xad0 [ 1844.909888][T15582] ? sch_direct_xmit+0x3b2/0xcf0 [ 1844.914933][T15582] ? __dev_queue_xmit+0x3016/0x5a50 [ 1844.920241][T15582] ? __bpf_redirect+0x162e/0x1760 [ 1844.925378][T15582] ? bpf_clone_redirect+0x4a6/0x6c0 [ 1844.930696][T15582] ? ___bpf_prog_run+0x12af/0xeb60 [ 1844.936070][T15582] ? __bpf_prog_run32+0xc2/0xf0 [ 1844.941004][T15582] ? bpf_test_run+0x493/0xdf0 [ 1844.945780][T15582] ? bpf_prog_test_run_skb+0x22a5/0x3050 [ 1844.951550][T15582] ? bpf_prog_test_run+0x5bb/0x9f0 [ 1844.956756][T15582] ? __sys_bpf+0x925/0xee0 [ 1844.961243][T15582] ? __x64_sys_bpf+0xa4/0xf0 [ 1844.965913][T15582] ? x64_sys_call+0x13d0/0x3ea0 [ 1844.970866][T15582] ? do_syscall_64+0x134/0xf80 [ 1844.975737][T15582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1844.981900][T15582] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1844.988101][T15582] ? kfree+0x793/0x1130 [ 1844.992363][T15582] ? pskb_expand_head+0x823/0x1fb0 [ 1844.997602][T15582] ? kmsan_get_metadata+0xf1/0x160 [ 1845.002839][T15582] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1845.009044][T15582] ? pskb_expand_head+0x1ce4/0x1fb0 [ 1845.014484][T15582] ? kmsan_get_metadata+0xf1/0x160 [ 1845.019719][T15582] __msan_warning+0x1b/0x30 [ 1845.024326][T15582] erspan_build_header+0x167/0x2f0 [ 1845.029551][T15582] erspan_xmit+0x12e8/0x1ed0 [ 1845.034356][T15582] ? __pfx_erspan_xmit+0x10/0x10 [ 1845.039485][T15582] dev_hard_start_xmit+0x24e/0xad0 [ 1845.044910][T15582] ? kmsan_get_metadata+0xf1/0x160 [ 1845.050135][T15582] sch_direct_xmit+0x3b2/0xcf0 [ 1845.054994][T15582] ? kmsan_get_metadata+0x146/0x160 [ 1845.060397][T15582] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1845.066839][T15582] __dev_queue_xmit+0x3016/0x5a50 [ 1845.072062][T15582] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1845.078526][T15582] ? kmsan_get_metadata+0xf1/0x160 [ 1845.083827][T15582] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1845.089769][T15582] ? __dev_queue_xmit+0x280/0x5a50 [ 1845.095261][T15582] __bpf_redirect+0x162e/0x1760 [ 1845.100941][T15582] ? kmsan_get_metadata+0xf1/0x160 [ 1845.106201][T15582] bpf_clone_redirect+0x4a6/0x6c0 [ 1845.111402][T15582] ___bpf_prog_run+0x12af/0xeb60 [ 1845.116476][T15582] __bpf_prog_run32+0xc2/0xf0 [ 1845.121260][T15582] ? kmsan_get_metadata+0xf1/0x160 [ 1845.126601][T15582] ? __pfx___bpf_prog_run32+0x10/0x10 [ 1845.132074][T15582] ? __pfx___bpf_prog_run32+0x10/0x10 [ 1845.137663][T15582] bpf_test_run+0x493/0xdf0 [ 1845.142441][T15582] ? csum_partial+0x424/0x480 [ 1845.147512][T15582] ? kmsan_get_metadata+0xf1/0x160 [ 1845.152770][T15582] ? bpf_test_run+0x2f4/0xdf0 [ 1845.157619][T15582] ? kmsan_get_metadata+0xf1/0x160 [ 1845.162869][T15582] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1845.168825][T15582] bpf_prog_test_run_skb+0x22a5/0x3050 [ 1845.174549][T15582] ? kmsan_get_metadata+0xf1/0x160 [ 1845.179820][T15582] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1845.185857][T15582] bpf_prog_test_run+0x5bb/0x9f0 [ 1845.190965][T15582] __sys_bpf+0x925/0xee0 [ 1845.195332][T15582] __x64_sys_bpf+0xa4/0xf0 [ 1845.199837][T15582] x64_sys_call+0x13d0/0x3ea0 [ 1845.204637][T15582] do_syscall_64+0x134/0xf80 [ 1845.209364][T15582] ? clear_bhb_loop+0x50/0xa0 [ 1845.214320][T15582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.220489][T15582] RIP: 0033:0x7f20dd79c629 [ 1845.225074][T15582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1845.244848][T15582] RSP: 002b:00007f20de636028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1845.253361][T15582] RAX: ffffffffffffffda RBX: 00007f20dda15fa0 RCX: 00007f20dd79c629 [ 1845.261414][T15582] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1845.269454][T15582] RBP: 00007f20dd832b39 R08: 0000000000000000 R09: 0000000000000000 [ 1845.277855][T15582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1845.285984][T15582] R13: 00007f20dda16038 R14: 00007f20dda15fa0 R15: 00007ffc03494568 [ 1845.294389][T15582] [ 1845.298034][T15582] Kernel Offset: disabled [ 1845.302504][T15582] Rebooting in 86400 seconds..