last executing test programs: 23m47.891149096s ago: executing program 32 (id=182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x20000000) write$tun(r0, &(0x7f0000001200)=ANY=[@ANYRESDEC=r1], 0xfce) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000140)=[{'IMIX', @val={' \'', 'Master Capture'}}], 0x2b) 23m25.548524473s ago: executing program 4 (id=225): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x10000) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x2, 0x7ffffff7, 0x51424752, 0x2, 0x8, [{0x1000000, 0x40}, {0xc, 0x8}, {0xe, 0xa0}, {0x10000, 0xfffffff0}, {0x9, 0x3}, {0x7fffffff, 0x8}, {0xfb60, 0x7}, {0x7, 0x10001}], 0x6, 0x78, 0x2, 0x1, 0x6}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x4c, 0x0, 0x2}, 0x20) r4 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000}) syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') 23m23.466221957s ago: executing program 4 (id=228): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400000080090325"], 0x28}}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='P'], 0x14) 23m19.196138598s ago: executing program 4 (id=233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x20000000) write$tun(r0, &(0x7f0000001200)=ANY=[@ANYRESDEC=r1], 0xfce) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000140)=[{'IMIX', @val={' \'', 'Master Capture'}}], 0x2b) 23m8.611882345s ago: executing program 4 (id=245): openat$adsp1(0xffffffffffffff9c, 0x0, 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4001000010000100feffffff00010000fe8000000000080000008f735118d81cc0399493af4b480000000000000000aafc010000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff03000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700005b50000020001000000000000000000480003006465666c61746500"/235], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff000000000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 23m3.448462535s ago: executing program 4 (id=251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x4, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0xba48, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x6, 0xf, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfdf1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x201, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 22m55.434188057s ago: executing program 4 (id=261): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000380)={0xffffffffffffffff}) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000040)='./file0\x00', 0x43) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x40020000) 22m40.299006484s ago: executing program 33 (id=261): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000380)={0xffffffffffffffff}) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000040)='./file0\x00', 0x43) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x40020000) 12m39.510330619s ago: executing program 1 (id=1134): socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000fe010000020000000200000080000000", @ANYRES32, @ANYBLOB="060000000000000000d862010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000008500000002000000020000000000000000"], 0x50) r1 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000739d0000000000000004000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0xa5, &(0x7f0000000440)=""/165, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0xe, 0x7, 0xf81}, 0x10, 0x28035, 0xffffffffffffffff, 0x8, &(0x7f0000000600)=[r0, 0xffffffffffffffff, r0], &(0x7f0000000640)=[{0x2, 0x1, 0x7, 0x6}, {0x0, 0x2, 0x10, 0x8}, {0x2, 0x5, 0x9, 0x1}, {0x0, 0x3, 0xa, 0x1}, {0x4, 0x4, 0x0, 0x9}, {0x4, 0x5, 0x10}, {0x2, 0x5, 0x8b0, 0x6}, {0x5, 0x5, 0x10, 0x4}]}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c80, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x3d, &(0x7f00000000c0)=""/36, &(0x7f0000000140)=0x24) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, 0x0, 0x0) getsockopt$packet_buf(r6, 0x107, 0x6, 0x0, &(0x7f0000000000)) 12m36.931184786s ago: executing program 1 (id=1137): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f000000a300)={{0x80000000, 0x0, 0x5, [0x80000001, 0x4]}, {0x80000000, 0x0, 0x4, [0xc1b, 0x4]}, 0x0, [0x7e, 0x8]}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x51a9497) r2 = userfaultfd(0x80001) set_mempolicy(0x3, 0x0, 0x5) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 12m33.928923141s ago: executing program 1 (id=1139): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x2, 0x7ffffff7, 0x51424752, 0x2, 0x8, [{0x1000000, 0x40}, {0xc, 0x8}, {0xe, 0xa0}, {0x10000, 0xfffffff0}, {0x9, 0x3}, {0x7fffffff, 0x8}, {0xfb60, 0x7}, {0x7, 0x10001}], 0x6, 0x78, 0x2, 0x1, 0x6}}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000000)={0x10, {"2ac78e02ff04856af9fb71f0d3fe13be", "3d684d00005fac27a639f8524c40f977", "ffff00ff000800"}, 0x3, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x4c, 0x0, 0x2}, 0x20) 12m32.663710683s ago: executing program 1 (id=1143): prctl$PR_SET_MM(0x35, 0x6, &(0x7f0000f77000/0x4000)=nil) syz_emit_ethernet(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) close(r2) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x4, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x220}, 0x0) recvmsg$kcm(r4, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) capset(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f00000001c0)={0x20071026, r0}, &(0x7f0000000280)={0x0, 0x9, 0x3, 0x0, 0x4, 0x3}) r6 = socket$qrtr(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x0, 0xfffffffe}, 0xc) 12m25.828432719s ago: executing program 1 (id=1152): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x10000) ioctl$TIOCSSOFTCAR(r1, 0x541a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x2, 0x7ffffff7, 0x51424752, 0x2, 0x8, [{0x1000000, 0x40}, {0xc, 0x8}, {0xe, 0xa0}, {0x10000, 0xfffffff0}, {0x9, 0x3}, {0x7fffffff, 0x8}, {0xfb60, 0x7}, {0x7, 0x10001}], 0x6, 0x78, 0x2, 0x1, 0x6}}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000000)={0x10, {"2ac78e02ff04856af9fb71f0d3fe13be", "3d684d00005fac27a639f8524c40f977", "ffff00ff000800"}, 0x3, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x4c, 0x0, 0x2}, 0x20) 12m24.569684048s ago: executing program 1 (id=1155): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f0000000180)='./file1\x00') acct(0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_CAP_DISABLE_QUIRKS2(r8, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x10}) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f000030a000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtfilter={0x2b8, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x8, 0x4}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x288, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0x6}}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_BASIC_POLICE={0x24, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_BASIC_ACT={0x24c, 0x3, [@m_tunnel_key={0xb8, 0xf, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}]}, {0x3a, 0x6, "e55fa15b0676e00a9b9ea4fb92d15179da93faa8199989a09e79fed8b6b4af86c4d3dd924c74ca0b95768e2b5fc10c070dd5599a9d96"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0x50, 0x15, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3ff, 0x9ff, 0x5, 0x747, 0xb}}]}, {0xc, 0x6, "aa72702d77e3f4fd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x140, 0x10, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x80000001, 0x5, 0x4, 0x7, 0xc3ed}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x9, 0x1, 0x3, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffff7f, 0x0, 0x2, 0x4, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x20000000, 0x179}}, @TCA_DEF_DATA={0x6, 0x3, ')\x00'}, @TCA_DEF_DATA={0x6, 0x3, '/\x00'}]}, {0xa2, 0x6, "7260547954edc2452167c5e768d449cb703bef02e30d83861de410a2089fb5c29d97a6308c51c8ab335c44283a175719268edc35b48cd28e93326aaa636d12dcf20b829be2f00665a3dc3d6726874455dc857606c13ac68edff3468663df2b9340cc2e7ba025ca5961ec02616b640af41eeb67b49ec0f3234d4b2fc35ec19f1a7a8ca009277f0a2c324567aa2796fa21f12bd225143aacc287748ecc96ab"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 12m8.411056031s ago: executing program 34 (id=1155): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f0000000180)='./file1\x00') acct(0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_CAP_DISABLE_QUIRKS2(r8, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x10}) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f000030a000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtfilter={0x2b8, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x8, 0x4}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x288, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0x6}}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_BASIC_POLICE={0x24, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_BASIC_ACT={0x24c, 0x3, [@m_tunnel_key={0xb8, 0xf, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}]}, {0x3a, 0x6, "e55fa15b0676e00a9b9ea4fb92d15179da93faa8199989a09e79fed8b6b4af86c4d3dd924c74ca0b95768e2b5fc10c070dd5599a9d96"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0x50, 0x15, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3ff, 0x9ff, 0x5, 0x747, 0xb}}]}, {0xc, 0x6, "aa72702d77e3f4fd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x140, 0x10, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x80000001, 0x5, 0x4, 0x7, 0xc3ed}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x9, 0x1, 0x3, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffff7f, 0x0, 0x2, 0x4, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x20000000, 0x179}}, @TCA_DEF_DATA={0x6, 0x3, ')\x00'}, @TCA_DEF_DATA={0x6, 0x3, '/\x00'}]}, {0xa2, 0x6, "7260547954edc2452167c5e768d449cb703bef02e30d83861de410a2089fb5c29d97a6308c51c8ab335c44283a175719268edc35b48cd28e93326aaa636d12dcf20b829be2f00665a3dc3d6726874455dc857606c13ac68edff3468663df2b9340cc2e7ba025ca5961ec02616b640af41eeb67b49ec0f3234d4b2fc35ec19f1a7a8ca009277f0a2c324567aa2796fa21f12bd225143aacc287748ecc96ab"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 4m7.908756788s ago: executing program 0 (id=2032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x141000, 0x0) symlink(0x0, &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_bcm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="010000000301000000000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000002000000cbfc0b9af540340c"], 0x48}, 0x1, 0x0, 0x0, 0x20040011}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x0, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r3, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) ptrace$getsig(0x4202, r0, 0x7, &(0x7f0000000380)) read$sequencer(r6, &(0x7f0000000780)=""/35, 0x23) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) 4m2.893713175s ago: executing program 5 (id=2042): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) close(r6) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/272, 0x110}], 0x1, 0x4, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f0000000180)=[@increfs_done={0x40106308, 0x1}, @release], 0x0, 0x0, &(0x7f0000000240)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4m2.741923434s ago: executing program 0 (id=2043): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) sendmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x5}, 0x50) 4m1.299753587s ago: executing program 5 (id=2044): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x9) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20) 4m0.236897897s ago: executing program 0 (id=2046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r4 = dup(r3) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 3m58.181637028s ago: executing program 0 (id=2047): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$packet(0x11, 0xa, 0x300) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) epoll_create(0xff9) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io+me'], 0xc) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) 3m56.830890607s ago: executing program 6 (id=2051): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfffd}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003a80)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 3m55.224824063s ago: executing program 5 (id=2053): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 3m55.112671601s ago: executing program 0 (id=2054): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000100)={0x5, 0x1}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 3m55.055554006s ago: executing program 0 (id=2056): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x3, 0x101, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x4, 0xff, 0xcd8b}}, @TCA_NETEM_DELAY_DIST={0x6, 0x2, "0e4a"}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 3m54.773398801s ago: executing program 5 (id=2058): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 3m54.270605706s ago: executing program 5 (id=2060): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}], 0x20}, 0x0) 3m54.080482564s ago: executing program 5 (id=2061): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@private2, @in=@multicast2, 0x4e1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x2, 0x10000, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}}, 0xf0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x4c}}, 0x8000002) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 3m53.664626685s ago: executing program 6 (id=2062): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) shutdown(r4, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20) 3m53.136645492s ago: executing program 6 (id=2064): socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpid() close(0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r3) 3m52.024365116s ago: executing program 6 (id=2065): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000100)={0x5, 0x1}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 3m50.339267849s ago: executing program 6 (id=2070): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(0x0, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 3m49.923061354s ago: executing program 6 (id=2071): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfffd}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003a80)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 3m39.79817309s ago: executing program 35 (id=2056): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x3, 0x101, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x4, 0xff, 0xcd8b}}, @TCA_NETEM_DELAY_DIST={0x6, 0x2, "0e4a"}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 3m38.870407491s ago: executing program 36 (id=2061): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@private2, @in=@multicast2, 0x4e1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x2, 0x10000, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}}, 0xf0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x4c}}, 0x8000002) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 3m34.624243601s ago: executing program 37 (id=2071): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfffd}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003a80)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 19.926946008s ago: executing program 8 (id=2381): socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000003f40), 0x2b01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x113, 0x6}}, 0x20) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x40102) writev(r1, 0x0, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc3, 0xa1, 0xd7, 0x8, 0xccd, 0x99, 0x950d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbc, 0x71, 0xf9}}]}}]}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 15.222728439s ago: executing program 8 (id=2389): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x48) sendmsg(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r4, 0x0, '\x00', 0x0, r3, 0x0, 0x5}, 0x50) 10.484532958s ago: executing program 7 (id=2398): io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000120000", @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) 10.152664912s ago: executing program 8 (id=2400): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5416, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0xc, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000080), &(0x7f0000000380)=r2}, 0x20) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r6, 0xffffff7f, 0x1) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 10.10739386s ago: executing program 7 (id=2401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r0, 0x409, 0x1) getrandom(0x0, 0x0, 0xd86b31f1268e345c) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) getrandom(&(0x7f0000000100)=""/116, 0x74, 0x3) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) syz_emit_ethernet(0x85, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd60000000004f000000000000aaff0235c52c67d6e50000000000000000000000000001860090780000040000000000000000fe1c571a000307bd3e6d4706598080a8030037ffffff0100000024732472eefa45ad96000000008e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a00000000000000000000004344bcee0b9c9cffadf6d4"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) setrlimit(0x8, &(0x7f0000000040)={0x80000000, 0x7}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0xa541) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x4004550d, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, 0xffffffffffffffff, 0x26}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064d2, &(0x7f0000000240)={0x0, 0x0}) 9.894908017s ago: executing program 7 (id=2403): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={0x0}) 9.586449101s ago: executing program 7 (id=2405): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) read$FUSE(r2, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 8.417201224s ago: executing program 8 (id=2408): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000000800000018110000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_open_dev$usbfs(&(0x7f0000000180), 0x6, 0x800) r1 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000001c0)={0xfa, 0x3, 0x81}) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) request_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='GPL\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="02000000"], 0x48) r6 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r6) 8.380534757s ago: executing program 7 (id=2409): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x48) sendmsg(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r4, 0x0, '\x00', 0x0, r3, 0x0, 0x5}, 0x50) 7.266933387s ago: executing program 8 (id=2410): io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000120000", @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) 7.090229952s ago: executing program 2 (id=2411): syz_io_uring_submit(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000140)) write$tun(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0000dada64fe76a701d03aff00000000000000000000000000000001fc0000000000000000000000000000000200000000000000c2040000100000003c08040407480000fe8000000000000000000000000000bb0000000000000000000000000000000100000000000000000000000000000000fc0200000000000000000000000000012102018100000000ff02000000000000000000000000000129080404b540ef0000000000000000b182cf4c9221d6e344b900000000000000000000000000000000000000ffff6401010120010000000000000000000000000002fc01000000000000000000000000000001019078000000006a8c7ac401015c01fe880000000000000000000000000001fe8800000000000000000000000001012e0a010700000000ff023a609cd923f32e208dd11a0000000000000000000000000001fc0100000000000000000000000000012001000000000000000000000000000200000000000000000000000000000001fc0200000000000000000000000000008904040203400800fe8000000000000000000000000000bb0000000000000000000000000000000134fad0bbfbf43230830d1f7f0b07c8ff04c848ba7aa17e9f965d381049d5e23d9d77c443cb3f19d79c6c37ec10fbae86dbf7d22377ac88ce8d26b075f4e6c6a4a48cb9ae26461eef6b945259ca14f5a9a31bd645a699ac8a96c19c063930"], 0x1fc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) unshare(0x8040480) syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) add_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f0000000880)="1080", 0x2, 0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000200)={0x0, 0x2000000, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 7.031208509s ago: executing program 8 (id=2412): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x10000) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000000)={0x10, {"2ac78e02ff04856af9fb71f0d3fe13be", "3d684d00005fac27a639f8524c40f977", "ffff00ff000800"}, 0x3, 0x2}) r2 = socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r2, r3, 0x0) 5.368256009s ago: executing program 2 (id=2415): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x10, @local}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0xab852ebbeefbd445, 0x0, 0x0, 0x0, 0xe11, 0x0, 0x0, 0x3}) 3.168661379s ago: executing program 2 (id=2417): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f400000008000300"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.719439122s ago: executing program 2 (id=2419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)) r4 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f00000003c0), 0x0, 0x0) semop(0x0, &(0x7f0000000340)=[{0x2, 0x8001, 0x1000}], 0x1) semop(0x0, &(0x7f0000000300)=[{0x2, 0x0, 0x2000}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r6 = msgget$private(0x0, 0xafb0e20fef6483ff) msgsnd(r6, &(0x7f00000001c0)={0x3}, 0x4, 0x800) msgctl$MSG_STAT_ANY(r6, 0xd, &(0x7f0000000000)=""/49) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x0, 0x0, &(0x7f0000000040)}], 0x2}) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x78}}, 0x0) 2.490034432s ago: executing program 3 (id=2420): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2.097055647s ago: executing program 3 (id=2421): io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000120000", @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) 1.847817098s ago: executing program 7 (id=2422): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.692649684s ago: executing program 3 (id=2423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$addseals(r0, 0x409, 0x1) getrandom(0x0, 0x0, 0xd86b31f1268e345c) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) getrandom(&(0x7f0000000100)=""/116, 0x74, 0x3) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) syz_emit_ethernet(0x85, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd60000000004f000000000000aaff0235c52c67d6e50000000000000000000000000001860090780000040000000000000000fe1c571a000307bd3e6d4706598080a8030037ffffff0100000024732472eefa45ad96000000008e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a00000000000000000000004344bcee0b9c9cffadf6d4"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) setrlimit(0x8, &(0x7f0000000040)={0x80000000, 0x7}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0xa541) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x4004550d, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, 0xffffffffffffffff, 0x26}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064d2, &(0x7f0000000240)={0x0, 0x0}) 1.552395806s ago: executing program 3 (id=2424): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, 0x0}}], 0x1, 0x4c040) 477.325974ms ago: executing program 3 (id=2425): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={0x0}) 441.177705ms ago: executing program 2 (id=2426): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000120000", @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 274.903µs ago: executing program 3 (id=2427): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_socket_connect_nvme_tcp() symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$rds(r4, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 0s ago: executing program 2 (id=2428): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f400000008000300"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) kernel console output (not intermixed with test programs): 16.448664][T14153] hsr_slave_0: entered promiscuous mode [ 1216.450007][T14153] hsr_slave_1: entered promiscuous mode [ 1216.450901][T14153] debugfs: 'hsr0' already exists in 'hsr' [ 1216.450921][T14153] Cannot create hsr debugfs directory [ 1216.609627][T13958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1219.887016][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1219.891810][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1219.894680][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1219.896708][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1219.897479][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1226.460115][ T5805] Bluetooth: hci1: command tx timeout [ 1227.150220][T14433] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1561'. [ 1228.740041][ T5805] Bluetooth: hci1: command tx timeout [ 1228.812435][T14446] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1564'. [ 1229.601598][T14453] overlayfs: overlapping lowerdir path [ 1230.796226][ T5805] Bluetooth: hci1: command tx timeout [ 1231.062184][T14153] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1231.145825][T14153] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1231.210263][T14408] chnl_net:caif_netlink_parms(): no params data found [ 1231.215595][T14153] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1231.272989][T14153] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1232.347134][T14408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.347446][T14408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.347662][T14408] bridge_slave_0: entered allmulticast mode [ 1232.350182][T14408] bridge_slave_0: entered promiscuous mode [ 1232.576042][T14408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.576173][T14408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.576408][T14408] bridge_slave_1: entered allmulticast mode [ 1232.578909][T14408] bridge_slave_1: entered promiscuous mode [ 1233.502690][ T5805] Bluetooth: hci1: command tx timeout [ 1233.598411][T14487] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1570'. [ 1233.708164][ T12] bridge_slave_1: left allmulticast mode [ 1233.708190][ T12] bridge_slave_1: left promiscuous mode [ 1233.708331][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.899016][ T12] bridge_slave_0: left allmulticast mode [ 1233.899036][ T12] bridge_slave_0: left promiscuous mode [ 1233.899186][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.587988][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1236.633238][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1237.370454][ T12] bond0 (unregistering): Released all slaves [ 1237.389838][ T36] audit: type=1326 audit(1772228949.504:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14509 comm="syz.6.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cdafc799 code=0x7ffc0000 [ 1237.389888][ T36] audit: type=1326 audit(1772228949.504:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14509 comm="syz.6.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cdafc799 code=0x7ffc0000 [ 1237.390706][ T36] audit: type=1326 audit(1772228949.504:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14509 comm="syz.6.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f62cdafc799 code=0x7ffc0000 [ 1238.515723][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.515795][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.740380][T14408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1238.768614][T14408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1238.844611][T14408] team0: Port device team_slave_0 added [ 1238.866209][T14408] team0: Port device team_slave_1 added [ 1239.003807][T14408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1239.003826][T14408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1239.003852][T14408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1239.014298][T14408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.014314][T14408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1239.014340][T14408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.297086][T14408] hsr_slave_0: entered promiscuous mode [ 1239.298479][T14408] hsr_slave_1: entered promiscuous mode [ 1239.299481][T14408] debugfs: 'hsr0' already exists in 'hsr' [ 1239.299515][T14408] Cannot create hsr debugfs directory [ 1240.000653][ T12] hsr_slave_0: left promiscuous mode [ 1240.243357][ T12] hsr_slave_1: left promiscuous mode [ 1240.259766][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1240.444094][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.656403][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1241.681819][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1241.687763][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1241.688989][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1241.689658][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1241.943294][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1242.426743][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1243.616088][ T36] audit: type=1326 audit(1772228955.737:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14558 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac593c799 code=0x7ffc0000 [ 1243.616139][ T36] audit: type=1326 audit(1772228955.737:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14558 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac593c799 code=0x7ffc0000 [ 1243.616180][ T36] audit: type=1326 audit(1772228955.737:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14558 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5ac593c799 code=0x7ffc0000 [ 1243.664063][ T36] audit: type=1326 audit(1772228955.787:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14558 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac593c799 code=0x7ffc0000 [ 1243.664111][ T36] audit: type=1326 audit(1772228955.787:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14558 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac593c799 code=0x7ffc0000 [ 1243.664150][ T36] audit: type=1326 audit(1772228955.787:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14558 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5ac593c799 code=0x7ffc0000 [ 1243.664733][ T36] audit: type=1326 audit(1772228955.787:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14558 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac593c799 code=0x7ffc0000 [ 1243.664779][ T36] audit: type=1326 audit(1772228955.787:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14558 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac593c799 code=0x7ffc0000 [ 1243.664897][ T36] audit: type=1326 audit(1772228955.787:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14558 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5ac593c799 code=0x7ffc0000 [ 1243.665542][ T36] audit: type=1326 audit(1772228955.787:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14558 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac593c799 code=0x7ffc0000 [ 1243.890393][ T5805] Bluetooth: hci3: command tx timeout [ 1246.258073][ T5805] Bluetooth: hci3: command tx timeout [ 1248.316018][ T5805] Bluetooth: hci3: command tx timeout [ 1250.386757][ T5805] Bluetooth: hci3: command tx timeout [ 1251.369584][T14613] syz.0.1601 (14613): drop_caches: 2 [ 1254.069329][T14547] chnl_net:caif_netlink_parms(): no params data found [ 1258.534540][T14658] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1612'. [ 1258.535282][T14658] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1612'. [ 1258.698613][T14547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.722219][T14547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.722479][T14547] bridge_slave_0: entered allmulticast mode [ 1258.725723][T14547] bridge_slave_0: entered promiscuous mode [ 1258.751637][T14547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.751706][T14547] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.751876][T14547] bridge_slave_1: entered allmulticast mode [ 1258.778052][T14547] bridge_slave_1: entered promiscuous mode [ 1259.246453][T14547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1259.249409][T14547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.636407][T14547] team0: Port device team_slave_0 added [ 1259.654048][T14547] team0: Port device team_slave_1 added [ 1259.690583][T14662] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1262.284596][T14685] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1618'. [ 1262.410066][T14547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1262.410082][T14547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.410109][T14547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1262.457783][T14547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1262.457800][T14547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.457826][T14547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.758330][T14408] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1262.883733][T14547] hsr_slave_0: entered promiscuous mode [ 1262.884988][T14547] hsr_slave_1: entered promiscuous mode [ 1262.885829][T14547] debugfs: 'hsr0' already exists in 'hsr' [ 1262.885852][T14547] Cannot create hsr debugfs directory [ 1262.891996][T14408] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1263.786207][T14408] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1264.395878][T14700] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1621'. [ 1264.458388][T14408] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1267.177361][ T12] bridge_slave_1: left allmulticast mode [ 1267.177389][ T12] bridge_slave_1: left promiscuous mode [ 1267.177618][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.674875][ T12] bridge_slave_0: left allmulticast mode [ 1267.674897][ T12] bridge_slave_0: left promiscuous mode [ 1267.675078][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.658865][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1268.757785][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1268.819378][ T12] bond0 (unregistering): Released all slaves [ 1270.304959][T14762] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1632'. [ 1270.696374][ T12] hsr_slave_0: left promiscuous mode [ 1270.712644][T14760] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1632'. [ 1270.786242][ T12] hsr_slave_1: left promiscuous mode [ 1270.787260][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1270.877080][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1273.917301][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1273.990953][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1275.979438][T14408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1276.707793][T14408] 8021q: adding VLAN 0 to HW filter on device team0 [ 1276.716381][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.753450][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1276.922489][T14809] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1641'. [ 1277.015633][T14809] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1641'. [ 1278.725096][T14822] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1278.921034][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 1278.921150][ T36] audit: type=1326 audit(1772228990.114:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14817 comm="syz.0.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac593c799 code=0x7ffc0000 [ 1278.921346][ T36] audit: type=1326 audit(1772228990.124:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14817 comm="syz.0.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac593c799 code=0x7ffc0000 [ 1278.921601][ T36] audit: type=1326 audit(1772228990.124:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14817 comm="syz.0.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5ac593c799 code=0x7ffc0000 [ 1280.072266][T14547] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1280.119045][T14547] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1280.156242][T14547] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1280.197625][T14547] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1280.997548][T14547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1281.299574][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1281.319481][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1281.320767][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1281.386479][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1281.398983][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1281.483951][T14883] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1646'. [ 1282.840371][T14884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1647'. [ 1284.095823][T14896] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1650'. [ 1284.792864][T14547] 8021q: adding VLAN 0 to HW filter on device team0 [ 1285.102554][ T6731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.102790][ T6731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1285.171228][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.171379][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1285.179332][ T5805] Bluetooth: hci1: command tx timeout [ 1287.714216][ T5805] Bluetooth: hci1: command tx timeout [ 1290.770649][ T5805] Bluetooth: hci1: command tx timeout [ 1290.942208][ T12] bridge_slave_1: left allmulticast mode [ 1290.942237][ T12] bridge_slave_1: left promiscuous mode [ 1290.942483][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.874324][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1659'. [ 1291.957088][ T12] bridge_slave_0: left allmulticast mode [ 1291.957117][ T12] bridge_slave_0: left promiscuous mode [ 1291.957369][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.577246][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1292.636081][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1292.682041][ T12] bond0 (unregistering): Released all slaves [ 1292.856378][ T5805] Bluetooth: hci1: command tx timeout [ 1293.109815][T14878] chnl_net:caif_netlink_parms(): no params data found [ 1294.596422][T14547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1295.624094][ T12] hsr_slave_0: left promiscuous mode [ 1296.432292][T14972] syz.3.1661 (14972): drop_caches: 2 [ 1296.488423][ T12] hsr_slave_1: left promiscuous mode [ 1296.490329][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1297.833493][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1299.662575][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1299.742631][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1299.824530][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.824601][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.399712][T14878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.399835][T14878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.400064][T14878] bridge_slave_0: entered allmulticast mode [ 1301.403038][T14878] bridge_slave_0: entered promiscuous mode [ 1301.456888][T14878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.457039][T14878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.457280][T14878] bridge_slave_1: entered allmulticast mode [ 1301.481068][T14878] bridge_slave_1: entered promiscuous mode [ 1301.602783][T14878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1301.606705][T14878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1301.882855][T14878] team0: Port device team_slave_0 added [ 1301.886755][T14878] team0: Port device team_slave_1 added [ 1302.061973][T14878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.061991][T14878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.062016][T14878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1302.073691][T14878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1302.073708][T14878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.073733][T14878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1302.679248][T15011] overlayfs: overlapping lowerdir path [ 1303.715593][T14878] hsr_slave_0: entered promiscuous mode [ 1303.721896][T14878] hsr_slave_1: entered promiscuous mode [ 1303.722759][T14878] debugfs: 'hsr0' already exists in 'hsr' [ 1303.722782][T14878] Cannot create hsr debugfs directory [ 1303.840773][ T5797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1303.859171][ T5797] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1303.864736][ T5797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1303.865860][ T5797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1303.866850][ T5797] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1305.949661][T15065] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 1305.958881][ T5805] Bluetooth: hci4: command tx timeout [ 1306.206624][T15074] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1675'. [ 1307.968224][T15108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1308.037552][ T5805] Bluetooth: hci4: command tx timeout [ 1308.248933][T15120] netlink: 'syz.6.1696': attribute type 16 has an invalid length. [ 1308.248954][T15120] netlink: 'syz.6.1696': attribute type 17 has an invalid length. [ 1308.637393][T15119] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.643060][T15119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.729420][T15139] kernel read not supported for file /!selinÛ¡¿Ùl×ÍÀuxseîÍÎ6¿ú;¹-a¸ïe¼žj¡q¢¥ ˜Š>º (pid: 15139 comm: syz.3.1701) [ 1308.748117][ T36] audit: type=1800 audit(1772229020.880:64): pid=15139 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1701" name=2173656C696EDBA102BFD96CD7CDC075787365EE0ECDCE36BFFA3BB92D61B8EF8D6514BC9E6AA171A2A509988A8F3EBA dev="mqueue" ino=52137 res=0 errno=0 [ 1308.819968][T15120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1308.993724][T15145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1704'. [ 1309.109123][T15150] option changes via remount are deprecated (pid=15149 comm=syz.3.1706) [ 1309.561902][T15025] chnl_net:caif_netlink_parms(): no params data found [ 1309.824018][ T12] bridge_slave_1: left allmulticast mode [ 1309.824047][ T12] bridge_slave_1: left promiscuous mode [ 1309.824283][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.903413][T15183] loop2: detected capacity change from 0 to 7 [ 1309.919771][ T12] bridge_slave_0: left allmulticast mode [ 1309.919801][ T12] bridge_slave_0: left promiscuous mode [ 1309.920059][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.005237][T15023] Dev loop2: unable to read RDB block 7 [ 1310.005300][T15023] loop2: unable to read partition table [ 1310.005555][T15023] loop2: partition table beyond EOD, truncated [ 1310.086859][T15183] Dev loop2: unable to read RDB block 7 [ 1310.086906][T15183] loop2: unable to read partition table [ 1310.087116][T15183] loop2: partition table beyond EOD, truncated [ 1310.087166][T15183] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1310.117203][ T5805] Bluetooth: hci4: command tx timeout [ 1311.976143][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1312.056758][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1312.079943][ T12] bond0 (unregistering): Released all slaves [ 1312.137368][T15210] veth1_to_bond: entered allmulticast mode [ 1312.195443][ T5805] Bluetooth: hci4: command tx timeout [ 1312.436523][T15209] veth1_to_bond: left allmulticast mode [ 1312.655477][ T12] hsr_slave_0: left promiscuous mode [ 1312.694167][ T12] hsr_slave_1: left promiscuous mode [ 1312.701082][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1312.725807][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1313.291174][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1313.346290][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1313.376560][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1732'. [ 1313.532085][T15025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.533405][T15025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.533621][T15025] bridge_slave_0: entered allmulticast mode [ 1313.561478][T15025] bridge_slave_0: entered promiscuous mode [ 1313.886591][T15025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.886682][T15025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.886843][T15025] bridge_slave_1: entered allmulticast mode [ 1313.888404][T15025] bridge_slave_1: entered promiscuous mode [ 1313.889290][T14878] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1313.980316][T14878] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1314.057364][T14878] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1314.124820][T15025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1314.143915][T14878] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1314.199582][T15025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.330087][T15025] team0: Port device team_slave_0 added [ 1314.347593][T15025] team0: Port device team_slave_1 added [ 1314.525725][T15025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1314.525740][T15025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1314.525759][T15025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1314.580468][T15025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1314.580485][T15025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1314.580513][T15025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1315.064066][ T5878] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1315.233732][ T5878] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1315.233761][ T5878] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1315.233779][ T5878] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1315.234055][ T5878] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1315.234093][ T5878] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1315.237526][ T5878] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1315.237553][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1315.237572][ T5878] usb 1-1: Product: syz [ 1315.237584][ T5878] usb 1-1: Manufacturer: syz [ 1315.292947][ T5878] cdc_wdm 1-1:1.0: skipping garbage [ 1315.292967][ T5878] cdc_wdm 1-1:1.0: skipping garbage [ 1315.373717][T15025] hsr_slave_0: entered promiscuous mode [ 1315.375042][T15025] hsr_slave_1: entered promiscuous mode [ 1315.375755][T15025] debugfs: 'hsr0' already exists in 'hsr' [ 1315.375774][T15025] Cannot create hsr debugfs directory [ 1315.421871][ T5878] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1315.421909][ T5878] cdc_wdm 1-1:1.0: Unknown control protocol [ 1315.691251][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1315.691487][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1315.692271][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1315.692293][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1315.692512][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1315.692531][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1315.692754][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1315.692773][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1315.692991][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1315.693011][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1315.693245][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1315.693264][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1315.694905][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1315.694927][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1315.695157][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1315.695183][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1315.695396][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1315.695414][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1315.695628][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1315.695645][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1315.851103][T15047] usb 1-1: USB disconnect, device number 12 [ 1315.851199][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1317.555970][T15307] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1744'. [ 1317.574718][T15297] netlink: 'syz.0.1742': attribute type 10 has an invalid length. [ 1317.757592][T15303] syz.3.1743 (15303) used greatest stack depth: 17888 bytes left [ 1317.869564][T15307] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1319.053497][T15297] team0: Port device netdevsim0 added [ 1319.973799][T14878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1320.239030][T14878] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.265997][ T6731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.266146][ T6731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1320.487222][ T6731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.487423][ T6731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1322.173477][T15025] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1322.343132][T15361] netlink: 'syz.3.1755': attribute type 11 has an invalid length. [ 1322.343155][T15361] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1755'. [ 1322.347256][T15025] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1323.061353][T15025] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1323.300487][T15025] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1323.640540][T15372] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1326.817952][T14878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1328.361724][T15025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.358936][T15025] 8021q: adding VLAN 0 to HW filter on device team0 [ 1329.370449][T12380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.378754][T12380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1329.381273][T12380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.381399][T12380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1329.406911][T15419] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1764'. [ 1332.289059][T15439] Malformed UNC in devname [ 1332.289059][T15439] [ 1332.289362][T15439] CIFS: VFS: Malformed UNC in devname [ 1334.261980][T14878] veth0_vlan: entered promiscuous mode [ 1334.271210][T14878] veth1_vlan: entered promiscuous mode [ 1334.381931][T14878] veth0_macvtap: entered promiscuous mode [ 1334.432397][T14878] veth1_macvtap: entered promiscuous mode [ 1334.481423][T14878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1334.495067][T14878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1334.527829][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.537018][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.537322][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.537567][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.742921][T15025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1334.903183][ T6731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.903204][ T6731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.056533][ T6986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.056554][ T6986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1336.283909][T15025] veth0_vlan: entered promiscuous mode [ 1336.293180][T15025] veth1_vlan: entered promiscuous mode [ 1336.359040][T15025] veth0_macvtap: entered promiscuous mode [ 1336.372305][T15025] veth1_macvtap: entered promiscuous mode [ 1336.572689][T15495] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1336.572742][T15495] UDF-fs: Scanning with blocksize 512 failed [ 1336.577926][T15495] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1336.577967][T15495] UDF-fs: Scanning with blocksize 1024 failed [ 1336.581018][T15495] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1336.581057][T15495] UDF-fs: Scanning with blocksize 2048 failed [ 1336.583463][T15495] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1336.583502][T15495] UDF-fs: Scanning with blocksize 4096 failed [ 1337.721216][T15488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1337.828482][T15488] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1337.963771][T15494] team0: Port device vlan1 added [ 1337.990680][T15025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1338.033184][T15025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1338.058349][ T6731] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.058625][ T6731] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.058857][ T6731] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.059472][ T6731] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.462430][ T993] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1338.495249][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1338.661639][T15524] Bluetooth: hci0: invalid len left 7, exp >= 111 [ 1339.875096][ T993] usb 1-1: Using ep0 maxpacket: 16 [ 1339.876857][ T993] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1339.876888][ T993] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1339.876914][ T993] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1339.876932][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.882949][ T993] usb 1-1: config 0 descriptor?? [ 1339.891595][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1339.913045][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1339.913074][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.913093][ T10] usb 6-1: Product: syz [ 1339.913106][ T10] usb 6-1: Manufacturer: syz [ 1339.913119][ T10] usb 6-1: SerialNumber: syz [ 1339.918003][ T10] usb 6-1: config 0 descriptor?? [ 1341.291985][ T10] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1341.295276][ T10] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1341.295345][ T993] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1341.338380][ T10] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1341.338473][ T10] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1341.345273][ T10] usb 6-1: USB disconnect, device number 2 [ 1341.463748][ T6731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1341.463779][ T6731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1341.547695][ T993] usb 1-1: USB disconnect, device number 13 [ 1341.792566][T15553] fido_id[15553]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1341.984964][ T6743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1341.984989][ T6743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.847086][T15590] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1343.847147][T15590] UDF-fs: Scanning with blocksize 512 failed [ 1343.852033][T15590] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1343.852076][T15590] UDF-fs: Scanning with blocksize 1024 failed [ 1343.855215][T15590] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1343.855253][T15590] UDF-fs: Scanning with blocksize 2048 failed [ 1343.857641][T15590] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1343.857679][T15590] UDF-fs: Scanning with blocksize 4096 failed [ 1346.068603][ T993] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1346.576280][ T993] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 1346.576992][ T993] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1346.633415][ T993] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1346.656559][ T993] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1346.656588][ T993] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1346.656608][ T993] usb 8-1: Product: syz [ 1346.656622][ T993] usb 8-1: Manufacturer: syz [ 1346.656635][ T993] usb 8-1: SerialNumber: syz [ 1346.706032][ T993] usb 8-1: config 0 descriptor?? [ 1346.940746][ T993] usb 8-1: selecting invalid altsetting 0 [ 1347.368361][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1348.269665][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1348.274663][ T10] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 1348.274697][ T10] usb 1-1: config 0 has no interface number 0 [ 1348.274741][ T10] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1348.274768][ T10] usb 1-1: config 0 interface 85 has no altsetting 0 [ 1348.409227][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1348.409291][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.409312][ T10] usb 1-1: Product: syz [ 1348.409325][ T10] usb 1-1: Manufacturer: syz [ 1348.409340][ T10] usb 1-1: SerialNumber: syz [ 1348.626887][ T10] usb 1-1: config 0 descriptor?? [ 1349.533546][ T10] appletouch 1-1:0.85: Geyser mode initialized. [ 1349.597770][ T993] usb 8-1: USB disconnect, device number 2 [ 1349.718723][ T10] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input5 [ 1350.874543][ T10] usb 1-1: USB disconnect, device number 14 [ 1350.874718][ C1] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 1351.090815][T15519] udevd[15519]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1351.322822][ T10] appletouch 1-1:0.85: input: appletouch disconnected [ 1355.114004][T13979] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1355.312171][T13979] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1355.312200][T13979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.312219][T13979] usb 1-1: Product: syz [ 1355.312230][T13979] usb 1-1: Manufacturer: syz [ 1355.312242][T13979] usb 1-1: SerialNumber: syz [ 1355.363128][T13979] usb 1-1: config 0 descriptor?? [ 1355.427795][T15703] ieee802154 phy0 wpan0: encryption failed: -22 [ 1356.363191][T15701] netlink: 'syz.6.1828': attribute type 10 has an invalid length. [ 1356.363447][T15701] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1828'. [ 1356.585287][T13979] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1356.759945][T15707] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1356.796356][T15707] 9pnet_virtio: no channels available for device syz [ 1356.888795][T13979] gspca_stk1135: reg_w 0x0 err -71 [ 1356.889973][T13979] gspca_stk1135: serial bus timeout: status=0x00 [ 1356.889987][T13979] gspca_stk1135: Sensor write failed [ 1356.890035][T13979] gspca_stk1135: serial bus timeout: status=0x00 [ 1356.890046][T13979] gspca_stk1135: Sensor write failed [ 1356.890068][T13979] gspca_stk1135: serial bus timeout: status=0x00 [ 1356.890077][T13979] gspca_stk1135: Sensor read failed [ 1356.890103][T13979] gspca_stk1135: serial bus timeout: status=0x00 [ 1356.890112][T13979] gspca_stk1135: Sensor read failed [ 1356.890118][T13979] gspca_stk1135: Detected sensor type unknown (0x0) [ 1356.890143][T13979] gspca_stk1135: serial bus timeout: status=0x00 [ 1356.890151][T13979] gspca_stk1135: Sensor read failed [ 1356.890174][T13979] gspca_stk1135: serial bus timeout: status=0x00 [ 1356.890183][T13979] gspca_stk1135: Sensor read failed [ 1356.890206][T13979] gspca_stk1135: serial bus timeout: status=0x00 [ 1356.890215][T13979] gspca_stk1135: Sensor write failed [ 1356.890238][T13979] gspca_stk1135: serial bus timeout: status=0x00 [ 1356.890246][T13979] gspca_stk1135: Sensor write failed [ 1356.890340][T13979] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 1357.529454][T13979] usb 1-1: USB disconnect, device number 15 [ 1360.088132][T15755] tipc: Started in network mode [ 1360.088155][T15755] tipc: Node identity 4, cluster identity 4711 [ 1360.088168][T15755] tipc: Node number set to 4 [ 1360.212756][T15757] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1360.212784][T15757] CIFS mount error: No usable UNC path provided in device string! [ 1360.212784][T15757] [ 1360.213032][T15757] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1361.298531][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.298600][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.507584][T15765] evm: overlay not supported [ 1365.483134][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1859'. [ 1365.483159][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1859'. [ 1366.381407][ T36] audit: type=1326 audit(1772229078.569:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15827 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cdafc799 code=0x7ffc0000 [ 1366.381722][ T36] audit: type=1326 audit(1772229078.569:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15827 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cdafc799 code=0x7ffc0000 [ 1366.410058][ T36] audit: type=1326 audit(1772229078.599:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15827 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f62cdafc799 code=0x7ffc0000 [ 1366.410109][ T36] audit: type=1326 audit(1772229078.599:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15827 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cdafc799 code=0x7ffc0000 [ 1366.410148][ T36] audit: type=1326 audit(1772229078.599:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15827 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f62cdabcfce code=0x7ffc0000 [ 1366.410186][ T36] audit: type=1326 audit(1772229078.599:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15827 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cdafc799 code=0x7ffc0000 [ 1366.415946][ T36] audit: type=1326 audit(1772229078.599:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15827 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cdafc799 code=0x7ffc0000 [ 1366.415995][ T36] audit: type=1326 audit(1772229078.599:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15827 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f62cdafc799 code=0x7ffc0000 [ 1366.416034][ T36] audit: type=1326 audit(1772229078.599:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15827 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62cdafc799 code=0x7ffc0000 [ 1366.422147][ T36] audit: type=1326 audit(1772229078.609:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15827 comm="syz.6.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f62cdafc799 code=0x7ffc0000 [ 1366.498353][T15047] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1366.728614][T15047] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1366.728645][T15047] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1366.728657][T15047] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.732799][T15047] usb 8-1: config 0 descriptor?? [ 1367.389020][T15836] syz.0.1870 (15836): /proc/15834/oom_adj is deprecated, please use /proc/15834/oom_score_adj instead. [ 1368.266138][T15047] usbhid 8-1:0.0: can't add hid device: -71 [ 1368.266252][T15047] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1368.271604][T15047] usb 8-1: USB disconnect, device number 3 [ 1368.348402][T15840] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1872'. [ 1369.017089][ T808] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1369.167116][ T808] usb 8-1: Using ep0 maxpacket: 32 [ 1369.169467][ T808] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.169512][ T808] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1369.169534][ T808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.225780][ T808] usb 8-1: config 0 descriptor?? [ 1369.235864][ T808] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1369.268995][ T808] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1369.617538][ T5878] usb 8-1: USB disconnect, device number 4 [ 1369.645139][ T5878] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 1369.832764][ T12] bond0: (slave bond_slave_0): interface is now down [ 1369.832795][ T12] bond0: (slave bond_slave_1): interface is now down [ 1369.852753][T15861] netlink: 'syz.5.1874': attribute type 10 has an invalid length. [ 1369.853000][ T12] bond0: (slave bond_slave_0): interface is now down [ 1369.853018][ T12] bond0: (slave bond_slave_1): interface is now down [ 1369.869616][ T12] bond0: (slave bond_slave_0): interface is now down [ 1369.869640][ T12] bond0: (slave bond_slave_1): interface is now down [ 1369.933533][ T6311] bond0: (slave bond_slave_0): interface is now down [ 1369.933557][ T6311] bond0: (slave bond_slave_1): interface is now down [ 1369.952249][ T6743] bond0: (slave bond_slave_0): interface is now down [ 1369.952274][ T6743] bond0: (slave bond_slave_1): interface is now down [ 1369.970275][ T6743] bond0: (slave bond_slave_0): interface is now down [ 1369.970297][ T6743] bond0: (slave bond_slave_1): interface is now down [ 1369.990360][ T6311] bond0: (slave bond_slave_0): interface is now down [ 1369.990381][ T6311] bond0: (slave bond_slave_1): interface is now down [ 1370.017049][ T12] bond0: (slave bond_slave_0): interface is now down [ 1370.017071][ T12] bond0: (slave bond_slave_1): interface is now down [ 1370.036761][ T6311] bond0: (slave bond_slave_0): interface is now down [ 1370.036783][ T6311] bond0: (slave bond_slave_1): interface is now down [ 1370.066527][ T6743] bond0: (slave bond_slave_0): interface is now down [ 1370.066553][ T6743] bond0: (slave bond_slave_1): interface is now down [ 1370.092426][ T6748] bond0: (slave bond_slave_0): interface is now down [ 1370.092448][ T6748] bond0: (slave bond_slave_1): interface is now down [ 1370.110842][ T6311] bond0: (slave bond_slave_0): interface is now down [ 1370.110863][ T6311] bond0: (slave bond_slave_1): interface is now down [ 1370.136491][ T12] bond0: (slave bond_slave_0): interface is now down [ 1370.136515][ T12] bond0: (slave bond_slave_1): interface is now down [ 1370.160515][ T12] bond0: (slave bond_slave_0): interface is now down [ 1370.160535][ T12] bond0: (slave bond_slave_1): interface is now down [ 1370.184100][ T6743] bond0: (slave bond_slave_0): interface is now down [ 1370.184122][ T6743] bond0: (slave bond_slave_1): interface is now down [ 1370.209336][ T12] bond0: (slave bond_slave_0): interface is now down [ 1370.209360][ T12] bond0: (slave bond_slave_1): interface is now down [ 1370.248396][ T12] bond0: (slave bond_slave_0): interface is now down [ 1370.248418][ T12] bond0: (slave bond_slave_1): interface is now down [ 1370.259116][T15861] syz_tun: entered promiscuous mode [ 1370.286452][ T6311] bond0: (slave bond_slave_0): interface is now down [ 1370.286473][ T6311] bond0: (slave bond_slave_1): interface is now down [ 1370.308800][ T12] bond0: (slave bond_slave_0): interface is now down [ 1370.308823][ T12] bond0: (slave bond_slave_1): interface is now down [ 1370.326443][ T6743] bond0: (slave bond_slave_0): interface is now down [ 1370.326466][ T6743] bond0: (slave bond_slave_1): interface is now down [ 1370.349836][ T6748] bond0: (slave bond_slave_0): interface is now down [ 1370.349857][ T6748] bond0: (slave bond_slave_1): interface is now down [ 1370.366352][ T6986] bond0: (slave bond_slave_0): interface is now down [ 1370.366380][ T6986] bond0: (slave bond_slave_1): interface is now down [ 1370.388507][ T6986] bond0: (slave bond_slave_0): interface is now down [ 1370.388529][ T6986] bond0: (slave bond_slave_1): interface is now down [ 1370.400812][T15861] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1370.407836][ T6743] bond0: (slave bond_slave_0): interface is now down [ 1370.407859][ T6743] bond0: (slave bond_slave_1): interface is now down [ 1370.407872][ T6743] bond0: (slave syz_tun): interface is now down [ 1370.474562][ T6743] bond0: now running without any active interface! [ 1371.708959][ T5805] Bluetooth: hci4: link tx timeout [ 1371.709357][ T5805] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1373.743614][T15895] faux_driver vkms: [drm] Unknown color mode 524; guessing buffer size. [ 1373.764883][ T5797] Bluetooth: hci4: command 0x0406 tx timeout [ 1375.192922][T15908] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1895'. [ 1376.781259][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 1376.781276][ T36] audit: type=1326 audit(1772229088.964:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15924 comm="syz.3.1902" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa70a9dc799 code=0x0 [ 1380.200484][ T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1381.171007][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 1381.176183][ T31] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1381.176212][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.176230][ T31] usb 7-1: Product: syz [ 1381.176244][ T31] usb 7-1: Manufacturer: syz [ 1381.176258][ T31] usb 7-1: SerialNumber: syz [ 1381.302929][ T31] usb 7-1: config 0 descriptor?? [ 1381.518803][ T31] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1381.519844][ T31] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1381.550056][ T31] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1381.550153][ T31] dvb_usb_af9035 7-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1381.574914][ T31] usb 7-1: USB disconnect, device number 4 [ 1382.597175][T15992] syzkaller1: entered promiscuous mode [ 1382.597200][T15992] syzkaller1: entered allmulticast mode [ 1389.754014][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1389.896629][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1389.901483][ T10] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1389.901512][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.901531][ T10] usb 7-1: Product: syz [ 1389.901545][ T10] usb 7-1: Manufacturer: syz [ 1389.901558][ T10] usb 7-1: SerialNumber: syz [ 1389.968850][ T10] usb 7-1: config 0 descriptor?? [ 1390.211228][ T10] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1390.212264][ T10] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1390.227460][ T10] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1390.227558][ T10] dvb_usb_af9035 7-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1390.275654][ T10] usb 7-1: USB disconnect, device number 5 [ 1391.141576][T16054] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1392.535386][ T808] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1392.886015][ T808] usb 4-1: Using ep0 maxpacket: 32 [ 1393.092327][ T808] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1393.118258][ T808] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.121048][ T808] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1393.121074][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.121093][ T808] usb 4-1: Product: syz [ 1393.121106][ T808] usb 4-1: Manufacturer: syz [ 1393.121120][ T808] usb 4-1: SerialNumber: syz [ 1394.270024][ T808] usb 4-1: Cannot retrieve CPort count: -32 [ 1394.270072][ T808] usb 4-1: Cannot retrieve CPort count: -32 [ 1394.270107][ T808] es2_ap_driver 4-1:7.0: probe with driver es2_ap_driver failed with error -32 [ 1394.324901][T13979] usb 4-1: USB disconnect, device number 14 [ 1394.444234][T16094] netlink: 5364 bytes leftover after parsing attributes in process `syz.7.1957'. [ 1394.553103][T16098] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1396.944200][T16119] ieee802154 phy0 wpan0: encryption failed: -22 [ 1398.972646][T16150] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1401.104967][T16179] ieee802154 phy0 wpan0: encryption failed: -22 [ 1401.265571][ T5805] Bluetooth: Wrong link type (-22) [ 1402.325861][T16203] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1987'. [ 1402.472242][T16203] dvmrp6: entered allmulticast mode [ 1402.641778][T16217] binder: BINDER_SET_CONTEXT_MGR already set [ 1402.641788][T16217] binder: 16216:16217 ioctl 4018620d 200000004a80 returned -16 [ 1403.158116][T16227] ieee802154 phy0 wpan0: encryption failed: -22 [ 1403.179282][T16229] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1406.297139][T16261] binder: BINDER_SET_CONTEXT_MGR already set [ 1406.297155][T16261] binder: 16259:16261 ioctl 4018620d 200000004a80 returned -16 [ 1409.521844][ T9772] Bluetooth: hci1: command 0x0406 tx timeout [ 1411.029630][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1411.412823][ T10] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1411.412857][ T10] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1411.412896][ T10] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1411.412922][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.508077][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1411.509467][ T10] usb 8-1: invalid MIDI out EP 0 [ 1411.794358][T15466] udevd[15466]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1411.861069][ T10] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1413.706836][ T31] usb 8-1: USB disconnect, device number 5 [ 1415.714406][T16363] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1416.117592][T16372] befs: (nbd7): No write support. Marking filesystem read-only [ 1420.820918][T16404] binder: 16403:16404 ioctl c0306201 0 returned -14 [ 1421.484177][T16405] binder: 16403:16405 ioctl 4018620d 0 returned -22 [ 1422.626255][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.626350][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.655052][ T9772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1423.237109][ T9772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1423.251668][ T9772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1423.252949][ T9772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1423.256621][ T9772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1425.663071][ T9772] Bluetooth: hci3: command tx timeout [ 1428.285135][ T9772] Bluetooth: hci3: command tx timeout [ 1428.702225][ T6741] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.566081][ T6741] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.723585][T16480] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2061'. [ 1429.779715][T16472] syzkaller0: entered promiscuous mode [ 1429.779735][T16472] syzkaller0: entered allmulticast mode [ 1430.405005][ T9772] Bluetooth: hci3: command tx timeout [ 1432.465382][ T9772] Bluetooth: hci3: command tx timeout [ 1444.200382][T16561] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2087'. [ 1444.353463][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1444.375073][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1444.376544][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1444.381222][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1444.398863][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1445.000288][ T9772] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1445.003131][ T9772] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1445.006414][ T9772] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1445.007989][ T9772] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1445.008663][ T9772] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1446.150675][T16580] binder_alloc: 16579: binder_alloc_buf, no vma [ 1447.257958][ T9772] Bluetooth: hci0: command tx timeout [ 1447.257970][ T5805] Bluetooth: hci6: command tx timeout [ 1447.871497][T16588] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1447.936860][T16588] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1448.403237][T16588] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 1448.404611][T16588] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 1448.432883][T16588] overlayfs: d_ino too big (79, ino=9223372036854776233, xinobits=3) [ 1448.444958][T16588] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 1448.451865][T16588] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 1448.455383][T16588] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 1448.463442][T16588] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 1448.466862][T16588] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 1448.475606][T16588] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 1448.482627][T16588] overlayfs: d_ino too big (io.pressure, ino=4611686018427387915, xinobits=3) [ 1449.207481][ T5805] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1449.214990][ T5805] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1449.252011][ T5805] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1449.253048][ T5805] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1449.253729][ T5805] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1449.338679][ T9772] Bluetooth: hci0: command tx timeout [ 1449.338711][ T9772] Bluetooth: hci6: command tx timeout [ 1451.003356][T16604] binder_alloc: 16603: binder_alloc_buf, no vma [ 1451.327362][ T5805] Bluetooth: hci7: command tx timeout [ 1451.406015][ T5805] Bluetooth: hci6: command tx timeout [ 1451.406044][ T5805] Bluetooth: hci0: command tx timeout [ 1453.430573][ T9772] Bluetooth: hci7: command tx timeout [ 1453.486401][ T9772] Bluetooth: hci0: command tx timeout [ 1453.486435][ T9772] Bluetooth: hci6: command tx timeout [ 1454.699739][T16622] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2106'. [ 1455.484505][ T9772] Bluetooth: hci7: command tx timeout [ 1457.579532][ T9772] Bluetooth: hci7: command tx timeout [ 1458.749047][T16479] vlan2: entered allmulticast mode [ 1458.749061][T16479] bond0: entered allmulticast mode [ 1458.749068][T16479] bond_slave_0: entered allmulticast mode [ 1458.749079][T16479] bond_slave_1: entered allmulticast mode [ 1458.749088][T16479] syz_tun: entered allmulticast mode [ 1458.972672][T16480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1458.992541][T16480] bond_slave_0: left allmulticast mode [ 1459.033143][T16480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1459.052249][T16480] bond_slave_1: left allmulticast mode [ 1459.093118][T16480] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 1459.142503][T16480] syz_tun: left allmulticast mode [ 1459.183632][T16480] bond0 (unregistering): Released all slaves [ 1460.502246][ T6741] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.771194][ T993] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1460.941129][ T993] usb 8-1: Using ep0 maxpacket: 8 [ 1460.948684][ T993] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1460.948713][ T993] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.948732][ T993] usb 8-1: Product: syz [ 1460.948745][ T993] usb 8-1: Manufacturer: syz [ 1460.948759][ T993] usb 8-1: SerialNumber: syz [ 1460.987855][ T993] usb 8-1: config 0 descriptor?? [ 1461.209392][ T993] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1461.210433][ T993] dvb_usb_af9015 8-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1461.231045][ T993] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1461.231134][ T993] dvb_usb_af9035 8-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1461.235894][ T993] usb 8-1: USB disconnect, device number 6 [ 1461.566372][ T6741] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.703439][ T6741] bridge_slave_1: left allmulticast mode [ 1463.703468][ T6741] bridge_slave_1: left promiscuous mode [ 1463.703690][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.780979][ T6741] bridge_slave_0: left allmulticast mode [ 1463.781001][ T6741] bridge_slave_0: left promiscuous mode [ 1463.781164][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.530811][ T6741] bond0 (unregistering): left promiscuous mode [ 1464.530828][ T6741] bond_slave_0: left promiscuous mode [ 1464.530987][ T6741] bond_slave_1: left promiscuous mode [ 1464.569938][ T6741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1464.656825][ T6741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1464.691164][ T6741] bond0 (unregistering): Released all slaves [ 1464.909747][T16409] chnl_net:caif_netlink_parms(): no params data found [ 1465.823742][T16590] chnl_net:caif_netlink_parms(): no params data found [ 1465.833532][T16562] chnl_net:caif_netlink_parms(): no params data found [ 1465.922056][T16573] chnl_net:caif_netlink_parms(): no params data found [ 1466.702246][T16409] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.760143][T16409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.760407][T16409] bridge_slave_0: entered allmulticast mode [ 1466.763322][T16409] bridge_slave_0: entered promiscuous mode [ 1469.020655][T16409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.062722][T16409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.066483][T16409] bridge_slave_1: entered allmulticast mode [ 1469.105115][T16409] bridge_slave_1: entered promiscuous mode [ 1469.443980][T16679] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2114'. [ 1470.133101][T16409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1470.226502][T16409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1470.227174][T16590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.227294][T16590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.227494][T16590] bridge_slave_0: entered allmulticast mode [ 1470.236087][T16590] bridge_slave_0: entered promiscuous mode [ 1470.256506][T16562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.256623][T16562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.257165][T16562] bridge_slave_0: entered allmulticast mode [ 1470.271597][T16562] bridge_slave_0: entered promiscuous mode [ 1470.539300][T16590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.539401][T16590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.539626][T16590] bridge_slave_1: entered allmulticast mode [ 1470.571826][T16590] bridge_slave_1: entered promiscuous mode [ 1470.587665][T16684] ieee802154 phy0 wpan0: encryption failed: -22 [ 1470.613802][T16562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.613876][T16562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.614061][T16562] bridge_slave_1: entered allmulticast mode [ 1470.615702][T16562] bridge_slave_1: entered promiscuous mode [ 1470.639801][T16573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.639922][T16573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.640187][T16573] bridge_slave_0: entered allmulticast mode [ 1470.650477][T16573] bridge_slave_0: entered promiscuous mode [ 1470.820116][T16573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.825412][T16573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.825687][T16573] bridge_slave_1: entered allmulticast mode [ 1470.829747][T16573] bridge_slave_1: entered promiscuous mode [ 1470.843236][T16409] team0: Port device team_slave_0 added [ 1470.958169][T16409] team0: Port device team_slave_1 added [ 1470.975036][T16562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1470.984104][T16590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1471.046262][T16590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1471.050522][T16562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1471.157204][T16573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1471.237895][T16573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1471.241177][T16409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1471.241194][T16409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1471.241220][T16409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1471.469342][T16409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1471.469359][T16409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1471.469386][T16409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1473.437797][T16590] team0: Port device team_slave_0 added [ 1473.442119][T16562] team0: Port device team_slave_0 added [ 1473.491115][T16590] team0: Port device team_slave_1 added [ 1473.493432][T16562] team0: Port device team_slave_1 added [ 1473.568065][T16573] team0: Port device team_slave_0 added [ 1473.661129][T16573] team0: Port device team_slave_1 added [ 1473.914784][T16590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1473.914802][T16590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1473.914828][T16590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1474.070764][T16562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1474.070781][T16562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1474.070813][T16562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1474.074110][T16590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1474.074124][T16590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1474.074149][T16590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1474.112218][T16562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1474.112234][T16562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1474.112260][T16562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1474.113517][T16573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1474.113529][T16573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1474.113554][T16573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1474.162061][T16409] hsr_slave_0: entered promiscuous mode [ 1474.174522][T16409] hsr_slave_1: entered promiscuous mode [ 1474.175547][T16409] debugfs: 'hsr0' already exists in 'hsr' [ 1474.175569][T16409] Cannot create hsr debugfs directory [ 1474.200167][T16573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1474.200183][T16573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1474.200209][T16573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1474.809578][T16590] hsr_slave_0: entered promiscuous mode [ 1474.810905][T16590] hsr_slave_1: entered promiscuous mode [ 1474.811808][T16590] debugfs: 'hsr0' already exists in 'hsr' [ 1474.811832][T16590] Cannot create hsr debugfs directory [ 1475.399433][T16562] hsr_slave_0: entered promiscuous mode [ 1475.400802][T16562] hsr_slave_1: entered promiscuous mode [ 1475.401735][T16562] debugfs: 'hsr0' already exists in 'hsr' [ 1475.401757][T16562] Cannot create hsr debugfs directory [ 1475.420916][T16573] hsr_slave_0: entered promiscuous mode [ 1475.422204][T16573] hsr_slave_1: entered promiscuous mode [ 1475.423038][T16573] debugfs: 'hsr0' already exists in 'hsr' [ 1475.423060][T16573] Cannot create hsr debugfs directory [ 1477.103228][ T6741] batadv0: left promiscuous mode [ 1477.204615][T16727] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2121'. [ 1478.152635][ T6741] hsr_slave_0: left promiscuous mode [ 1478.174108][ T6741] hsr_slave_1: left promiscuous mode [ 1478.174756][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1478.174772][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1478.209122][T16731] ieee802154 phy0 wpan0: encryption failed: -22 [ 1478.219814][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1478.219841][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1478.284951][ T6741] veth1_macvtap: left promiscuous mode [ 1478.285053][ T6741] veth0_macvtap: left promiscuous mode [ 1478.285294][ T6741] veth1_vlan: left promiscuous mode [ 1478.285460][ T6741] veth0_vlan: left promiscuous mode [ 1479.272948][ T6741] team0 (unregistering): Port device team_slave_1 removed [ 1479.315286][ T6741] team0 (unregistering): Port device team_slave_0 removed [ 1480.938572][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1480.953938][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1480.957260][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1480.972967][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1480.973862][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1483.613776][ T9772] Bluetooth: hci1: command tx timeout [ 1484.032790][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.032873][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.565777][T16789] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2128'. [ 1486.125055][ T9772] Bluetooth: hci1: command tx timeout [ 1486.594777][T16795] ieee802154 phy0 wpan0: encryption failed: -22 [ 1486.750391][T16737] chnl_net:caif_netlink_parms(): no params data found [ 1487.295483][ T6741] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.624984][ T6741] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.187619][ T9772] Bluetooth: hci1: command tx timeout [ 1488.258773][T16590] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1488.292768][T16737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.292956][T16737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.293151][T16737] bridge_slave_0: entered allmulticast mode [ 1488.294516][T16737] bridge_slave_0: entered promiscuous mode [ 1488.298003][T16590] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1488.473785][ T6741] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.518612][T16737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.518743][T16737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.518999][T16737] bridge_slave_1: entered allmulticast mode [ 1488.522134][T16737] bridge_slave_1: entered promiscuous mode [ 1488.525644][T16590] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1488.651396][T16590] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1488.919333][ T6741] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.972397][T16737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1489.016109][T16737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1489.134985][T16737] team0: Port device team_slave_0 added [ 1489.166120][T16737] team0: Port device team_slave_1 added [ 1489.651756][T16562] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1490.353438][ T9772] Bluetooth: hci1: command tx timeout [ 1490.400797][T16737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1490.400815][T16737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1490.400842][T16737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1490.402052][T16562] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1490.490314][T16737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1490.490330][T16737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1490.490345][T16737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1490.491199][T16562] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1490.651832][T16562] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1491.406052][T16737] hsr_slave_0: entered promiscuous mode [ 1491.415048][T16737] hsr_slave_1: entered promiscuous mode [ 1491.777940][T16573] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1492.234920][ T6741] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.308482][T16573] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1492.470245][T16573] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1492.592317][T16573] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1492.841543][ T6741] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.162856][ T6741] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.303338][T16590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1495.417528][ T6741] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.743895][T16936] ieee802154 phy0 wpan0: encryption failed: -22 [ 1496.304754][T16590] 8021q: adding VLAN 0 to HW filter on device team0 [ 1496.348846][ T5805] Bluetooth: hci4: command 0x0406 tx timeout [ 1497.024936][ T6731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1497.025301][ T6731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1498.476710][ T6731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.476919][ T6731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1498.855304][ T6741] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.315044][ T6741] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.373358][T16562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1499.691294][ T6741] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.857737][T16562] 8021q: adding VLAN 0 to HW filter on device team0 [ 1500.063156][ T6741] team0: Port device netdevsim0 removed [ 1500.069190][ T6741] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.137096][T16573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1500.157452][ T1750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.157530][ T1750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1500.236307][T16737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1500.290967][ T6731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.291559][ T6731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1500.299925][T16737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1500.375924][T16737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1500.437549][T16737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1500.511072][T16573] 8021q: adding VLAN 0 to HW filter on device team0 [ 1500.666757][ T6743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.667781][ T6743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1500.781957][ T1750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.782031][ T1750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1500.821659][ T6741] bridge_slave_1: left allmulticast mode [ 1500.821677][ T6741] bridge_slave_1: left promiscuous mode [ 1500.821818][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.904179][ T6741] bridge_slave_0: left allmulticast mode [ 1500.904198][ T6741] bridge_slave_0: left promiscuous mode [ 1500.904361][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.993257][ T6741] bridge_slave_1: left allmulticast mode [ 1500.993277][ T6741] bridge_slave_1: left promiscuous mode [ 1500.993422][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.082220][ T6741] bridge_slave_0: left allmulticast mode [ 1501.082238][ T6741] bridge_slave_0: left promiscuous mode [ 1501.082389][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.183311][ T6741] bridge_slave_1: left allmulticast mode [ 1501.183331][ T6741] bridge_slave_1: left promiscuous mode [ 1501.183480][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.273595][ T6741] bridge_slave_0: left allmulticast mode [ 1501.273614][ T6741] bridge_slave_0: left promiscuous mode [ 1501.273757][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.355320][ T6741] bridge_slave_1: left allmulticast mode [ 1501.355341][ T6741] bridge_slave_1: left promiscuous mode [ 1501.355483][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.444413][ T6741] bridge_slave_0: left allmulticast mode [ 1501.444441][ T6741] bridge_slave_0: left promiscuous mode [ 1501.444713][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.582596][T17050] ieee802154 phy0 wpan0: encryption failed: -22 [ 1503.930045][ T6741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1504.013645][ T6741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1504.071557][ T6741] bond0 (unregistering): Released all slaves [ 1504.343112][ T6741] dvmrp6 (unregistering): left allmulticast mode [ 1504.469456][ T6741] bond0 (unregistering): left promiscuous mode [ 1504.469482][ T6741] bond_slave_0: left promiscuous mode [ 1504.469731][ T6741] bond_slave_1: left promiscuous mode [ 1504.520621][ T6741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1504.599954][ T6741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1504.642767][ T6741] bond0 (unregistering): Released all slaves [ 1504.675438][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1504.678310][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1504.719320][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1504.728535][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1504.744780][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1505.478856][ T6741] bond0 (unregistering): left promiscuous mode [ 1505.478879][ T6741] bond_slave_0: left promiscuous mode [ 1505.479117][ T6741] bond_slave_1: left promiscuous mode [ 1505.529244][ T6741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1505.590905][ T6741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1505.632051][ T6741] bond0 (unregistering): Released all slaves [ 1505.722305][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1505.772176][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1505.778158][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1505.812785][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1505.815728][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1505.874946][T16590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1506.414091][ T6741] tipc: Left network mode [ 1506.554280][ T6741] tipc: Left network mode [ 1506.715329][ T6741] tipc: Left network mode [ 1506.818735][ T5805] Bluetooth: hci2: command tx timeout [ 1507.947601][ T5805] Bluetooth: hci3: command tx timeout [ 1508.213557][T16590] veth0_vlan: entered promiscuous mode [ 1508.740670][T16590] veth1_vlan: entered promiscuous mode [ 1508.742119][T17054] chnl_net:caif_netlink_parms(): no params data found [ 1508.897224][ T5805] Bluetooth: hci2: command tx timeout [ 1508.915059][T16737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1509.289738][T17057] chnl_net:caif_netlink_parms(): no params data found [ 1510.029891][ T5805] Bluetooth: hci3: command tx timeout [ 1510.305263][ T9772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1510.325633][ T9772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1510.334525][ T9772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1510.335588][ T9772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1510.360113][ T9772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1510.518267][T17054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.518387][T17054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.518649][T17054] bridge_slave_0: entered allmulticast mode [ 1510.521368][T17054] bridge_slave_0: entered promiscuous mode [ 1510.598849][T16737] 8021q: adding VLAN 0 to HW filter on device team0 [ 1510.757269][T17054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.757390][T17054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.757631][T17054] bridge_slave_1: entered allmulticast mode [ 1510.763719][T17054] bridge_slave_1: entered promiscuous mode [ 1511.186316][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.186452][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1511.215545][T17054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1511.308496][T17106] ieee802154 phy0 wpan0: encryption failed: -22 [ 1511.442305][T17057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.442431][T17057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.442711][T17057] bridge_slave_0: entered allmulticast mode [ 1511.478277][T17057] bridge_slave_0: entered promiscuous mode [ 1511.484793][T17054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1511.585618][ T9772] Bluetooth: hci2: command tx timeout [ 1511.655259][T17057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.655384][T17057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.655830][T17057] bridge_slave_1: entered allmulticast mode [ 1511.658376][T17057] bridge_slave_1: entered promiscuous mode [ 1511.743490][ T9148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.743739][ T9148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1512.035108][T17054] team0: Port device team_slave_0 added [ 1512.100669][ T9772] Bluetooth: hci3: command tx timeout [ 1512.104609][T17057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1512.415759][ T9772] Bluetooth: hci0: command tx timeout [ 1512.454045][T17054] team0: Port device team_slave_1 added [ 1512.586712][T17057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1512.931731][T17054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1512.931747][T17054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1512.931773][T17054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1512.984062][T17057] team0: Port device team_slave_0 added [ 1513.083266][T17054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1513.083284][T17054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1513.083318][T17054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1513.119671][T17057] team0: Port device team_slave_1 added [ 1513.406972][T17057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1513.406989][T17057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1513.407010][T17057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1513.478619][T17057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1513.478631][T17057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1513.478645][T17057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1513.614728][ T9772] Bluetooth: hci2: command tx timeout [ 1513.886182][T17054] hsr_slave_0: entered promiscuous mode [ 1513.887902][T17054] hsr_slave_1: entered promiscuous mode [ 1513.888891][T17054] debugfs: 'hsr0' already exists in 'hsr' [ 1513.888917][T17054] Cannot create hsr debugfs directory [ 1514.184554][ T9772] Bluetooth: hci3: command tx timeout [ 1514.306658][T17057] hsr_slave_0: entered promiscuous mode [ 1514.308097][T17057] hsr_slave_1: entered promiscuous mode [ 1514.309383][T17057] debugfs: 'hsr0' already exists in 'hsr' [ 1514.309408][T17057] Cannot create hsr debugfs directory [ 1514.504710][ T9772] Bluetooth: hci0: command tx timeout [ 1515.006780][T17102] chnl_net:caif_netlink_parms(): no params data found [ 1517.022907][ T9772] Bluetooth: hci0: command tx timeout [ 1517.088593][T17172] ieee802154 phy0 wpan0: encryption failed: -22 [ 1517.567558][T17102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.567679][T17102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.567947][T17102] bridge_slave_0: entered allmulticast mode [ 1517.571036][T17102] bridge_slave_0: entered promiscuous mode [ 1517.864309][T17102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.864378][T17102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.864579][T17102] bridge_slave_1: entered allmulticast mode [ 1517.866051][T17102] bridge_slave_1: entered promiscuous mode [ 1518.089780][T16737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1518.455795][T17102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.598343][T17102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1519.063207][ T9772] Bluetooth: hci0: command tx timeout [ 1519.071016][T17102] team0: Port device team_slave_0 added [ 1519.206984][T17102] team0: Port device team_slave_1 added [ 1519.470173][T17102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1519.470191][T17102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1519.470216][T17102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1520.168136][T17102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1520.168150][T17102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1520.168164][T17102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1521.154190][T17197] ieee802154 phy0 wpan0: encryption failed: -22 [ 1522.924976][T17102] hsr_slave_0: entered promiscuous mode [ 1522.925863][T17102] hsr_slave_1: entered promiscuous mode [ 1522.926419][T17102] debugfs: 'hsr0' already exists in 'hsr' [ 1522.926434][T17102] Cannot create hsr debugfs directory [ 1523.847335][T16737] veth0_vlan: entered promiscuous mode [ 1524.358654][T16737] veth1_vlan: entered promiscuous mode [ 1524.498498][T17233] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2167'. [ 1525.279784][T17054] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1526.805880][T17247] ieee802154 phy0 wpan0: encryption failed: -22 [ 1527.331444][T17054] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1527.395441][T17054] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1527.548822][T17054] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1527.978423][T16737] veth0_macvtap: entered promiscuous mode [ 1528.198343][ T6741] hsr_slave_0: left promiscuous mode [ 1528.218757][ T6741] hsr_slave_1: left promiscuous mode [ 1528.222468][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1528.268236][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1528.347653][ T6741] batadv0: left promiscuous mode [ 1528.467328][ T6741] hsr_slave_0: left promiscuous mode [ 1528.508649][ T6741] hsr_slave_1: left promiscuous mode [ 1528.509992][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1528.510008][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1528.548346][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1528.548373][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1528.687156][ T6741] hsr_slave_0: left promiscuous mode [ 1528.707126][ T6741] hsr_slave_1: left promiscuous mode [ 1528.707794][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1528.707810][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1528.748361][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1528.748390][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1528.817199][ T6741] batadv0: left promiscuous mode [ 1528.937107][ T6741] hsr_slave_0: left promiscuous mode [ 1528.959103][ T6741] hsr_slave_1: left promiscuous mode [ 1528.959789][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1528.959811][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1529.018454][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1529.018483][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1529.081266][ T6741] veth1_macvtap: left promiscuous mode [ 1529.081332][ T6741] veth0_macvtap: left promiscuous mode [ 1529.081468][ T6741] veth1_vlan: left promiscuous mode [ 1529.081510][ T6741] veth0_vlan: left promiscuous mode [ 1529.227511][ T6741] veth1_macvtap: left promiscuous mode [ 1529.227573][ T6741] veth0_macvtap: left promiscuous mode [ 1529.227720][ T6741] veth1_vlan: left promiscuous mode [ 1529.227838][ T6741] veth0_vlan: left promiscuous mode [ 1529.347115][ T6741] veth1_macvtap: left promiscuous mode [ 1529.347179][ T6741] veth0_macvtap: left promiscuous mode [ 1529.347318][ T6741] veth1_vlan: left promiscuous mode [ 1529.347417][ T6741] veth0_vlan: left promiscuous mode [ 1530.036945][ T6741] team0 (unregistering): Port device team_slave_1 removed [ 1530.057061][ T6741] team0 (unregistering): Port device team_slave_0 removed [ 1530.218649][ T6741] team0 (unregistering): Port device vlan1 removed [ 1530.597278][ T6741] team0 (unregistering): Port device team_slave_1 removed [ 1530.637705][ T6741] team0 (unregistering): Port device team_slave_0 removed [ 1531.202123][ T6741] team0 (unregistering): Port device team_slave_1 removed [ 1531.257112][ T6741] team0 (unregistering): Port device team_slave_0 removed [ 1531.786746][ T6741] team0 (unregistering): Port device team_slave_1 removed [ 1531.826206][ T6741] team0 (unregistering): Port device team_slave_0 removed [ 1532.050170][T16737] veth1_macvtap: entered promiscuous mode [ 1532.119454][T17057] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1532.210206][T17057] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1532.303626][T17279] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2174'. [ 1532.623271][T17057] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1532.661511][T17057] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1534.048769][T16737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1535.299395][T16737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1535.589469][ T6748] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1535.638576][ T6748] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1535.650856][ T6748] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1535.656765][ T6748] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1535.954780][T17308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1537.052963][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.052982][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.199418][T17054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1537.253389][T17102] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1537.309789][T17322] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2181'. [ 1537.328356][ T1750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.328377][ T1750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.335480][T17102] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1537.387629][T17102] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1537.466120][T17054] 8021q: adding VLAN 0 to HW filter on device team0 [ 1537.470651][T17102] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1537.938232][ T6748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.938349][ T6748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1538.307825][ T6742] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.307949][ T6742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1538.505394][T17057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1539.573235][T17057] 8021q: adding VLAN 0 to HW filter on device team0 [ 1540.261603][T17354] ieee802154 phy0 wpan0: encryption failed: -22 [ 1540.813489][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.813688][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1540.885753][ T6311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.886017][ T6311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1541.010930][ T5878] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1541.171412][ T5878] usb 8-1: Using ep0 maxpacket: 8 [ 1541.176677][ T5878] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1541.176706][ T5878] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.176732][ T5878] usb 8-1: Product: syz [ 1541.176745][ T5878] usb 8-1: Manufacturer: syz [ 1541.176758][ T5878] usb 8-1: SerialNumber: syz [ 1541.190678][ T5878] usb 8-1: config 0 descriptor?? [ 1541.363439][T17102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1541.466304][ T5878] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1541.467355][ T5878] dvb_usb_af9015 8-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1541.471336][ T5878] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1541.471436][ T5878] dvb_usb_af9035 8-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1541.533519][ T5878] usb 8-1: USB disconnect, device number 7 [ 1541.664324][T17102] 8021q: adding VLAN 0 to HW filter on device team0 [ 1541.704453][ T6986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.704643][ T6986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1541.798043][ T9148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1541.798167][ T9148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1542.009227][T17054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1542.424967][T17057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1543.320081][T17102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1543.814147][T17054] veth0_vlan: entered promiscuous mode [ 1543.876569][ T6741] bridge_slave_1: left allmulticast mode [ 1543.876596][ T6741] bridge_slave_1: left promiscuous mode [ 1543.876818][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1543.950404][ T6741] bridge_slave_0: left allmulticast mode [ 1543.950426][ T6741] bridge_slave_0: left promiscuous mode [ 1543.950588][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.051014][ T6741] bridge_slave_1: left allmulticast mode [ 1544.051043][ T6741] bridge_slave_1: left promiscuous mode [ 1544.051276][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.135078][ T6741] bridge_slave_0: left allmulticast mode [ 1544.135098][ T6741] bridge_slave_0: left promiscuous mode [ 1544.135273][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.223416][ T6741] bridge_slave_1: left allmulticast mode [ 1544.223435][ T6741] bridge_slave_1: left promiscuous mode [ 1544.223579][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.290702][ T6741] bridge_slave_0: left allmulticast mode [ 1544.290722][ T6741] bridge_slave_0: left promiscuous mode [ 1544.290875][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.657901][T17437] ieee802154 phy0 wpan0: encryption failed: -22 [ 1547.803977][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1547.804051][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.779958][ T6741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1548.857932][ T6741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1548.882692][ T6741] bond0 (unregistering): Released all slaves [ 1549.327815][ T6741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1549.408136][ T6741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1549.471494][ T6741] bond0 (unregistering): Released all slaves [ 1550.628384][ T6741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1550.709971][ T6741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1550.759206][ T6741] bond0 (unregistering): Released all slaves [ 1550.838123][T17054] veth1_vlan: entered promiscuous mode [ 1551.070202][T17102] veth0_vlan: entered promiscuous mode [ 1551.110200][T17054] veth0_macvtap: entered promiscuous mode [ 1551.112554][T17057] veth0_vlan: entered promiscuous mode [ 1551.132628][T17102] veth1_vlan: entered promiscuous mode [ 1551.159552][T17054] veth1_macvtap: entered promiscuous mode [ 1551.187169][T17057] veth1_vlan: entered promiscuous mode [ 1551.999372][T17054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1552.093001][T17054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1552.185742][ T70] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.207582][ T70] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.209904][T17102] veth0_macvtap: entered promiscuous mode [ 1552.212671][ T70] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.214860][ T70] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.313487][T17102] veth1_macvtap: entered promiscuous mode [ 1552.322190][T17057] veth0_macvtap: entered promiscuous mode [ 1552.398973][T17057] veth1_macvtap: entered promiscuous mode [ 1553.215630][T17102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1554.491893][ T6741] hsr_slave_0: left promiscuous mode [ 1554.544896][ T6741] hsr_slave_1: left promiscuous mode [ 1554.546722][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1554.605508][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1555.065203][ T6741] hsr_slave_0: left promiscuous mode [ 1555.104005][ T6741] hsr_slave_1: left promiscuous mode [ 1555.104968][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1555.235474][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1556.652697][ T6741] hsr_slave_0: left promiscuous mode [ 1556.693196][ T6741] hsr_slave_1: left promiscuous mode [ 1556.694127][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1556.756566][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1556.857048][ T6741] veth1_vlan: left promiscuous mode [ 1556.857241][ T6741] veth0_vlan: left promiscuous mode [ 1557.038160][T17508] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2212'. [ 1557.617266][ T6741] team0 (unregistering): Port device team_slave_1 removed [ 1557.664245][ T6741] team0 (unregistering): Port device team_slave_0 removed [ 1558.315082][ T6741] team0 (unregistering): Port device team_slave_1 removed [ 1558.362969][ T6741] team0 (unregistering): Port device team_slave_0 removed [ 1558.786012][ T6741] team0 (unregistering): Port device team_slave_1 removed [ 1558.832586][ T6741] team0 (unregistering): Port device team_slave_0 removed [ 1559.048505][T17057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1559.069586][T17102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1559.090360][ T6739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.090382][ T6739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.135724][T17057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1559.161369][T12380] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.173337][ T134] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.189933][ T134] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.209956][ T134] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.251593][ T134] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.290719][ T134] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.338760][ T134] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.462236][ T134] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.374065][ T6739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1560.374092][ T6739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1563.829331][T17558] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2220'. [ 1564.589004][ T6743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1564.604182][ T6743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1564.639228][ T9148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1564.639247][ T9148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1565.060527][ T1750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1565.060548][ T1750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1565.199983][ T1750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1565.200003][ T1750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1567.807356][ T36] audit: type=1326 audit(1772229279.869:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17587 comm="syz.7.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6888bfc799 code=0x7ffc0000 [ 1567.808371][ T36] audit: type=1326 audit(1772229279.869:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17587 comm="syz.7.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6888bfc799 code=0x7ffc0000 [ 1567.808749][ T36] audit: type=1326 audit(1772229279.879:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17587 comm="syz.7.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6888bfc799 code=0x7ffc0000 [ 1568.200187][T17591] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 1568.655051][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1568.717250][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1568.729737][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1568.763690][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1568.769891][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1571.203515][ T9772] Bluetooth: hci5: command tx timeout [ 1573.264894][ T9772] Bluetooth: hci5: command tx timeout [ 1574.925939][ T5878] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1574.987892][T17643] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2237'. [ 1575.191598][ T5878] usb 8-1: Using ep0 maxpacket: 8 [ 1575.344610][ T5878] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1575.344642][ T5878] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.344660][ T5878] usb 8-1: Product: syz [ 1575.344674][ T5878] usb 8-1: Manufacturer: syz [ 1575.344688][ T5878] usb 8-1: SerialNumber: syz [ 1575.348597][ T5805] Bluetooth: hci5: command tx timeout [ 1575.438892][ T5878] usb 8-1: config 0 descriptor?? [ 1575.863767][ T5878] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1575.864826][ T5878] dvb_usb_af9015 8-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1575.870859][ T5878] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1575.870953][ T5878] dvb_usb_af9035 8-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1575.991864][T17654] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2238'. [ 1576.301715][ T5878] usb 8-1: USB disconnect, device number 8 [ 1576.542562][T17598] chnl_net:caif_netlink_parms(): no params data found [ 1576.793178][ T5805] Bluetooth: hci3: command 0x1003 tx timeout [ 1576.793498][ T9772] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1577.806211][T17665] syz.8.2239 (17665): drop_caches: 2 [ 1577.863726][ T9772] Bluetooth: hci5: command tx timeout [ 1578.684341][T17598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.744469][T17598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.744728][T17598] bridge_slave_0: entered allmulticast mode [ 1578.746395][T17598] bridge_slave_0: entered promiscuous mode [ 1579.588386][T17598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.588504][T17598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.588737][T17598] bridge_slave_1: entered allmulticast mode [ 1579.591291][T17598] bridge_slave_1: entered promiscuous mode [ 1579.794358][T17598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1580.011491][T17598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1581.268908][T17696] ieee802154 phy0 wpan0: encryption failed: -22 [ 1581.839375][T17598] team0: Port device team_slave_0 added [ 1581.903228][T17598] team0: Port device team_slave_1 added [ 1582.220624][T17598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1582.220641][T17598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1582.220666][T17598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1582.228706][T17598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1582.228723][T17598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1582.228749][T17598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1582.294173][ T9772] Bluetooth: hci1: unexpected event 0x3e length: 490 > 260 [ 1582.467194][T11117] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1583.291744][T11117] usb 3-1: Using ep0 maxpacket: 8 [ 1583.311792][T11117] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1583.311834][T11117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.311866][T11117] usb 3-1: Product: syz [ 1583.311893][T11117] usb 3-1: Manufacturer: syz [ 1583.311919][T11117] usb 3-1: SerialNumber: syz [ 1583.976807][T11117] usb 3-1: config 0 descriptor?? [ 1584.012539][T17598] hsr_slave_0: entered promiscuous mode [ 1584.028253][T17598] hsr_slave_1: entered promiscuous mode [ 1584.254098][T17598] debugfs: 'hsr0' already exists in 'hsr' [ 1584.254127][T17598] Cannot create hsr debugfs directory [ 1585.286300][T17726] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2255'. [ 1585.506429][T11117] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1585.534672][T11117] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1585.556938][T11117] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1585.557035][T11117] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1585.583076][T11117] usb 3-1: USB disconnect, device number 2 [ 1585.656952][T17737] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2256'. [ 1586.691563][ T6741] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.904147][ T9772] Bluetooth: hci0: unexpected event 0x3e length: 490 > 260 [ 1589.092553][ T6741] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.207354][T17769] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2266'. [ 1589.283759][T17771] ieee802154 phy0 wpan0: encryption failed: -22 [ 1589.582922][ T6741] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.588375][T15940] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1589.886479][T15940] usb 8-1: Using ep0 maxpacket: 8 [ 1589.906964][T15940] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1589.906995][T15940] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.907015][T15940] usb 8-1: Product: syz [ 1589.907030][T15940] usb 8-1: Manufacturer: syz [ 1589.907044][T15940] usb 8-1: SerialNumber: syz [ 1589.925583][T15940] usb 8-1: config 0 descriptor?? [ 1591.661333][ T6741] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.771601][T15940] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1592.772694][T15940] dvb_usb_af9015 8-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1592.807593][T15940] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1592.807697][T15940] dvb_usb_af9035 8-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1592.917563][T15940] usb 8-1: USB disconnect, device number 9 [ 1593.892442][T17805] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2277'. [ 1595.192984][ T6741] bridge_slave_1: left allmulticast mode [ 1595.193014][ T6741] bridge_slave_1: left promiscuous mode [ 1595.193283][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.362360][T17833] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2273'. [ 1595.438810][ T6741] bridge_slave_0: left allmulticast mode [ 1595.438837][ T6741] bridge_slave_0: left promiscuous mode [ 1595.439071][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.003550][ T5878] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1596.163389][ T5878] usb 9-1: Using ep0 maxpacket: 8 [ 1596.167513][ T5878] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1596.167544][ T5878] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.167561][ T5878] usb 9-1: Product: syz [ 1596.167568][ T5878] usb 9-1: Manufacturer: syz [ 1596.167576][ T5878] usb 9-1: SerialNumber: syz [ 1596.171217][ T5878] usb 9-1: config 0 descriptor?? [ 1597.120236][ T6741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1597.172947][ T5805] Bluetooth: hci3: command 0x1003 tx timeout [ 1597.176583][ T9772] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1597.233670][ T6741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1597.486879][ T6741] bond0 (unregistering): Released all slaves [ 1598.380629][ T5878] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1598.381657][ T5878] dvb_usb_af9015 9-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1598.401596][ T5878] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1598.401689][ T5878] dvb_usb_af9035 9-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1598.466551][ T5878] usb 9-1: USB disconnect, device number 2 [ 1598.573527][T17852] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2290'. [ 1599.369488][T17868] ieee802154 phy0 wpan0: encryption failed: -22 [ 1600.766240][T17878] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2296'. [ 1602.579417][T17892] binder: 17890:17892 ioctl 4018620d 0 returned -22 [ 1604.110803][T17904] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2301'. [ 1604.293779][ T9772] Bluetooth: hci1: command 0x0406 tx timeout [ 1604.559254][ T31] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1605.978494][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 1605.985318][ T31] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1605.985336][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.985347][ T31] usb 8-1: Product: syz [ 1605.985354][ T31] usb 8-1: Manufacturer: syz [ 1605.985361][ T31] usb 8-1: SerialNumber: syz [ 1606.135283][ T31] usb 8-1: config 0 descriptor?? [ 1606.793923][ T31] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1606.794976][ T31] dvb_usb_af9015 8-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1606.801941][ T31] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1606.802033][ T31] dvb_usb_af9035 8-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1607.639386][ T31] usb 8-1: USB disconnect, device number 10 [ 1610.294339][ T6741] hsr_slave_0: left promiscuous mode [ 1610.375701][ T6741] hsr_slave_1: left promiscuous mode [ 1610.376749][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1610.376774][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1610.430298][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1610.430326][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1610.500870][ T6741] veth1_macvtap: left promiscuous mode [ 1610.500937][ T6741] veth0_macvtap: left promiscuous mode [ 1610.501071][ T6741] veth1_vlan: left promiscuous mode [ 1610.501163][ T6741] veth0_vlan: left promiscuous mode [ 1613.089689][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.089756][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.596124][ T6741] team0 (unregistering): Port device team_slave_1 removed [ 1613.646415][ T6741] team0 (unregistering): Port device team_slave_0 removed [ 1614.574654][T17598] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1614.639753][T17598] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1615.843551][T17598] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1616.159192][T17598] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1616.653042][T17989] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2322'. [ 1618.418278][T17598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1618.665723][T17598] 8021q: adding VLAN 0 to HW filter on device team0 [ 1620.235069][T17338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1620.235315][T17338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1620.247476][ T1750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1620.293674][ T1750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1621.737420][T17598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1621.737437][T17598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1623.352015][T17598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1628.760847][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1628.788423][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1628.789792][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1628.791064][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1628.792596][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1629.440110][ T9772] Bluetooth: hci2: command 0x0406 tx timeout [ 1631.009366][ T5805] Bluetooth: hci3: command tx timeout [ 1633.230265][ T5805] Bluetooth: hci3: command tx timeout [ 1634.176397][T18097] chnl_net:caif_netlink_parms(): no params data found [ 1635.491405][ T5797] Bluetooth: hci0: command 0x0406 tx timeout [ 1635.491700][ T5797] Bluetooth: hci3: command tx timeout [ 1635.574173][ T31] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1637.579732][ T9772] Bluetooth: hci3: command tx timeout [ 1638.216304][ T31] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1638.216335][ T31] usb 9-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1638.216354][ T31] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1638.216421][ T31] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1638.420577][ T31] usb 9-1: string descriptor 0 read error: -71 [ 1638.420679][ T31] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1638.420702][ T31] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1638.468513][ T31] usb 9-1: can't set config #1, error -71 [ 1638.478609][ T31] usb 9-1: USB disconnect, device number 3 [ 1639.383987][T18097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.384101][T18097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.384334][T18097] bridge_slave_0: entered allmulticast mode [ 1639.405346][T18097] bridge_slave_0: entered promiscuous mode [ 1639.410849][T18097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.421210][T18097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.421463][T18097] bridge_slave_1: entered allmulticast mode [ 1639.446557][T18097] bridge_slave_1: entered promiscuous mode [ 1643.623733][T18097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1643.679367][T18097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1644.171943][T10603] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1644.499015][T18097] team0: Port device team_slave_0 added [ 1644.566403][T18097] team0: Port device team_slave_1 added [ 1644.739048][T10603] usb 9-1: Using ep0 maxpacket: 8 [ 1644.744792][T10603] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 1644.744816][T10603] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.744826][T10603] usb 9-1: Product: syz [ 1644.744833][T10603] usb 9-1: Manufacturer: syz [ 1644.744841][T10603] usb 9-1: SerialNumber: syz [ 1644.816936][T10603] usb 9-1: config 0 descriptor?? [ 1646.438956][T10603] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1646.449252][T18097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1646.449268][T18097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1646.449293][T18097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1646.483232][T18097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1646.483250][T18097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1646.483277][T18097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1646.562522][T10603] dvb_usb_af9015 9-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1646.564648][T10603] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1646.564705][T10603] dvb_usb_af9035 9-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1646.624878][T10603] usb 9-1: USB disconnect, device number 4 [ 1650.159980][T18097] hsr_slave_0: entered promiscuous mode [ 1650.160729][T18097] hsr_slave_1: entered promiscuous mode [ 1650.161206][T18097] debugfs: 'hsr0' already exists in 'hsr' [ 1650.161220][T18097] Cannot create hsr debugfs directory [ 1650.177038][ T6748] bridge_slave_1: left allmulticast mode [ 1650.177066][ T6748] bridge_slave_1: left promiscuous mode [ 1650.177304][ T6748] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.287659][ T6748] bridge_slave_0: left allmulticast mode [ 1650.287686][ T6748] bridge_slave_0: left promiscuous mode [ 1650.287933][ T6748] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.206325][ T6748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1655.055277][ T6748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1655.100211][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2406'. [ 1655.116096][ T6748] bond0 (unregistering): Released all slaves [ 1657.325054][ T6748] hsr_slave_0: left promiscuous mode [ 1657.344248][ T6748] hsr_slave_1: left promiscuous mode [ 1657.345429][ T6748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1657.388161][ T6748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1657.903683][ T6748] team0 (unregistering): Port device team_slave_1 removed [ 1657.973482][ T6748] team0 (unregistering): Port device team_slave_0 removed [ 1660.770141][T18412] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2417'. [ 1661.340795][ T5842] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 1661.550817][ T5842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1661.550844][ T5842] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1661.550892][ T5842] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1661.550914][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.568403][ T5842] usb 3-1: config 0 descriptor?? [ 1661.585898][ T5842] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1661.586416][ T5842] dvb-usb: bulk message failed: -22 (3/0) [ 1661.775223][T18419] dvb-usb: bulk message failed: -22 (2/0) [ 1661.828431][ T5842] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1661.829326][ T5842] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1661.829459][ T5842] usb 3-1: media controller created [ 1661.863463][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1663.168454][ T5842] dvb-usb: bulk message failed: -22 (6/0) [ 1663.168703][ T5842] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1663.183768][ T5842] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 1663.360811][ T5842] dvb-usb: schedule remote query interval to 150 msecs. [ 1663.360836][ T5842] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1663.392269][ T5842] usb 3-1: USB disconnect, device number 3 [ 1663.771970][T18456] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2428'.[ 1663.771970][T18456] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2428'. [ 1664.475944][T18459] ODEBUG: Out of memory. ODEBUG disabled [ 1664.640413][T18459] syz.3.2427 (18459): drop_caches: 2 [ 1664.663503][ C0] ------------[ cut here ]------------ [ 1664.663513][ C0] 1 [ 1664.663529][ C0] WARNING: kernel/time/timer.c:716 at stub_timer+0xa/0x20, CPU#0: ktimers/0/16 [ 1664.663556][ C0] Modules linked in: [ 1664.663579][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1664.663594][ C0] Tainted: [L]=SOFTLOCKUP [ 1664.663598][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1664.663608][ C0] RIP: 0010:stub_timer+0xa/0x20 [ 1664.663619][ C0] Code: 0f 94 c0 5b 41 5e e9 05 0d 75 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 1664.663629][ C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246 [ 1664.663639][ C0] RAX: ffffffff81b09639 RBX: 0000000080000000 RCX: ffff88801caa8000 [ 1664.663647][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1664.663654][ C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100 [ 1664.663661][ C0] R10: dffffc0000000000 R11: ffffffff81b09630 R12: 0000000000000000 [ 1664.663668][ C0] R13: 000000010002147f R14: 1ffff9200002af4c R15: ffffffff9999a460 [ 1664.663677][ C0] FS: 0000000000000000(0000) GS:ffff888126342000(0000) knlGS:0000000000000000 [ 1664.663686][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1664.663693][ C0] CR2: 0000001b3320fff8 CR3: 000000000dbba000 CR4: 00000000003526f0 [ 1664.663703][ C0] Call Trace: [ 1664.663711][ C0] [ 1664.663716][ C0] call_timer_fn+0x192/0x640 [ 1664.663729][ C0] ? __pfx_stub_timer+0x10/0x10 [ 1664.663738][ C0] ? call_timer_fn+0xd4/0x640 [ 1664.663748][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1664.663757][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1664.663778][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1664.663793][ C0] ? __pfx_stub_timer+0x10/0x10 [ 1664.663804][ C0] __run_timer_base+0x6a3/0x9f0 [ 1664.663828][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1664.663842][ C0] ? rt_spin_lock+0x1e0/0x400 [ 1664.663863][ C0] run_timer_softirq+0xb7/0x170 [ 1664.663879][ C0] handle_softirqs+0x1de/0x6f0 [ 1664.663900][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1664.663917][ C0] run_ktimerd+0x69/0x100 [ 1664.663933][ C0] smpboot_thread_fn+0x541/0xa50 [ 1664.663950][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1664.663971][ C0] kthread+0x388/0x470 [ 1664.663983][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1664.663998][ C0] ? __pfx_kthread+0x10/0x10 [ 1664.664010][ C0] ret_from_fork+0x51e/0xb90 [ 1664.664028][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1664.664042][ C0] ? __switch_to+0xc7d/0x1450 [ 1664.664060][ C0] ? __pfx_kthread+0x10/0x10 [ 1664.664110][ C0] ret_from_fork_asm+0x1a/0x30 [ 1664.664132][ C0] [ 1664.664145][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1664.664154][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1664.664169][ C0] Tainted: [L]=SOFTLOCKUP [ 1664.664173][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1664.664179][ C0] Call Trace: [ 1664.664184][ C0] [ 1664.664188][ C0] vpanic+0x56c/0xa60 [ 1664.664205][ C0] ? __pfx__printk+0x10/0x10 [ 1664.664217][ C0] ? __pfx_vpanic+0x10/0x10 [ 1664.664231][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1664.664247][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1664.664265][ C0] panic+0xc5/0xd0 [ 1664.664281][ C0] ? __pfx_panic+0x10/0x10 [ 1664.664301][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1664.664314][ C0] __warn+0x315/0x4f0 [ 1664.664329][ C0] ? stub_timer+0xa/0x20 [ 1664.664340][ C0] ? stub_timer+0xa/0x20 [ 1664.664349][ C0] __report_bug+0x29a/0x540 [ 1664.664368][ C0] ? stub_timer+0xa/0x20 [ 1664.664378][ C0] ? __pfx___report_bug+0x10/0x10 [ 1664.664391][ C0] ? add_lock_to_list+0xc7/0x100 [ 1664.664405][ C0] ? lockdep_unlock+0x5d/0xd0 [ 1664.664419][ C0] ? __lock_acquire+0x146e/0x2cf0 [ 1664.664432][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1664.664448][ C0] ? stub_timer+0xa/0x20 [ 1664.664458][ C0] report_bug+0x16a/0x220 [ 1664.664472][ C0] ? stub_timer+0xa/0x20 [ 1664.664480][ C0] ? stub_timer+0xc/0x20 [ 1664.664489][ C0] handle_bug+0x98/0x200 [ 1664.664505][ C0] exc_invalid_op+0x1a/0x50 [ 1664.664526][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1664.664538][ C0] RIP: 0010:stub_timer+0xa/0x20 [ 1664.664547][ C0] Code: 0f 94 c0 5b 41 5e e9 05 0d 75 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 1664.664556][ C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246 [ 1664.664566][ C0] RAX: ffffffff81b09639 RBX: 0000000080000000 RCX: ffff88801caa8000 [ 1664.664574][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1664.664581][ C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100 [ 1664.664588][ C0] R10: dffffc0000000000 R11: ffffffff81b09630 R12: 0000000000000000 [ 1664.664596][ C0] R13: 000000010002147f R14: 1ffff9200002af4c R15: ffffffff9999a460 [ 1664.664606][ C0] ? __pfx_stub_timer+0x10/0x10 [ 1664.664616][ C0] ? stub_timer+0x9/0x20 [ 1664.664629][ C0] ? stub_timer+0x9/0x20 [ 1664.664637][ C0] call_timer_fn+0x192/0x640 [ 1664.664648][ C0] ? __pfx_stub_timer+0x10/0x10 [ 1664.664657][ C0] ? call_timer_fn+0xd4/0x640 [ 1664.664666][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1664.664676][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1664.664695][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1664.664709][ C0] ? __pfx_stub_timer+0x10/0x10 [ 1664.664720][ C0] __run_timer_base+0x6a3/0x9f0 [ 1664.664743][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1664.664757][ C0] ? rt_spin_lock+0x1e0/0x400 [ 1664.664777][ C0] run_timer_softirq+0xb7/0x170 [ 1664.664793][ C0] handle_softirqs+0x1de/0x6f0 [ 1664.664813][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1664.664829][ C0] run_ktimerd+0x69/0x100 [ 1664.664845][ C0] smpboot_thread_fn+0x541/0xa50 [ 1664.664862][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1664.664883][ C0] kthread+0x388/0x470 [ 1664.664894][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1664.664910][ C0] ? __pfx_kthread+0x10/0x10 [ 1664.664922][ C0] ret_from_fork+0x51e/0xb90 [ 1664.664938][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1664.664952][ C0] ? __switch_to+0xc7d/0x1450 [ 1664.664968][ C0] ? __pfx_kthread+0x10/0x10 [ 1664.664979][ C0] ret_from_fork_asm+0x1a/0x30 [ 1664.664998][ C0] [ 1664.665167][ C0] Kernel Offset: disabled