last executing test programs:

23m39.978305268s ago: executing program 32 (id=64):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad07fc26e4c91ea4feb931647fc5393de25000000000000f2ffff032e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b1596d35ebe1d34", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000008180)=[{&(0x7f0000005c40)="da530a86d8f32fb1b561374ff8814af4d8b8fa41fc170fa0760b050a4052c5e3ac1d7a3b311c2dda822756b0d2fad7da29e41ba399bd82cca1250d7a232970e2611913cc5fc67f3426476008793731f69fdf0583446e81c92d55b2ab209af9f89b5fac0f0cb468ecba18b6abd9760106069f51339729fe9f46e596629f3f33b1aded157d6ab8f03d78d9a5d14cd2a41606775ff87d3beffa687c2d14f52c6ef3063e7d552e2d19a797bf2be084589f1094a3663999075d885f55c884e8e4aefd4470ce134d", 0xc5}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x42810)
syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x4e, 0x26, 0xe2, 0x10, 0xeb1a, 0x5006, 0xc54f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x4, 0x40, 0x8, "", [{{0x9, 0x4, 0xe4, 0x8, 0x0, 0xa, 0x99, 0x16, 0x2}}]}}]}}, 0x0)
sendto$inet(r0, &(0x7f0000000a80)='\x00[', 0x2, 0x10008895, 0x0, 0x0)

22m40.551985857s ago: executing program 33 (id=155):
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00')
io_uring_setup(0x6a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x1, 0x4002)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000030500"/19, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373", @ANYRES32], 0x4c}}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/if_inet6\x00')
getdents64(r0, &(0x7f0000001f00)=""/4111, 0x100f)

17m4.673057737s ago: executing program 34 (id=662):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0x6)
syz_usb_connect(0x2, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec1392106d000008280b011a030109024700010000000009046900000e0100000824020102"], 0x0)

17m4.525396047s ago: executing program 35 (id=660):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000200000073113f000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
socket$packet(0x11, 0x3, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
eventfd2(0x1000006, 0x800)
epoll_create1(0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xffb8, 0x0, 0x4, 0x6})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

17m4.37661234s ago: executing program 36 (id=659):
r0 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x4}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x200)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b07007461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d097ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcef1bf1373669caaa2f19b9640000000000000000001200", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)

17m4.222548112s ago: executing program 37 (id=661):
io_uring_setup(0x183b, &(0x7f0000000680)={0x0, 0x8ab2, 0x800, 0x3, 0x263})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000000007, 0x282b, 0x20103, 0x7ffff, {0x200004, 0x10005c62, 0x203, 0x0, 0x83, 0xd612, 0x10000006, 0x6, 0x3, 0x4000, 0x0, 0xee00, 0xee00, 0x1d, 0x6}}, {0x0, 0x11}}}, 0xa0)
sendfile(r1, r1, &(0x7f0000000100)=0x4, 0x8000fffb)

17m4.074769087s ago: executing program 38 (id=658):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0xff}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

14m7.671786948s ago: executing program 39 (id=864):
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x1, 0x4002)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth1_to_batadv\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000030500"/19, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373", @ANYRES32=r5], 0x4c}}, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/if_inet6\x00')
lseek(r7, 0xfffd, 0x0)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, 0x0, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
getdents64(r0, &(0x7f0000001f00)=""/4111, 0x100f)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x58}, 0x48)

13m39.930711903s ago: executing program 40 (id=897):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57)
write$tun(r4, &(0x7f0000000280)=ANY=[], 0x19)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x24040080)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

6m37.257534742s ago: executing program 9 (id=1521):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @random=' \x00', 'sit0\x00'}}, 0x1e)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="cb889eb998ec", 'vlan0\x00'}}, 0x1e)

6m36.70961119s ago: executing program 9 (id=1524):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000b8000100000000000040000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007baaf8ff00000000b6090000e4b00000dbaaf8ffa0000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000001140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)

6m35.747509575s ago: executing program 9 (id=1527):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x13, &(0x7f00000007c0)=ANY=[@ANYBLOB="1802000017610000000000008000008018010000756c6c2500000000002020207b1ab8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6m35.393156632s ago: executing program 9 (id=1531):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0x2}, 0x1c)
syz_emit_ethernet(0x7e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60fa050000481100fe8000000000000000000000000000aaff0200000000000000000000000000014e200e2200489078030000000200000088c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28e138060072381f41e5fff9620915b6f78670dfaf9a195fcb2a79cf6b7931c9b41ef6bad20476b547f34d48267a47388550c56c411538e0fb34dc8c491170a0df0dc46156be6d66a0d79d1cf471b147d231c27a5055cd0efcfdd4b2a7cd46c70143e3ecbf765e7594e2d304c3efba69a40d9cc064d2"], 0x0)
sched_setscheduler(r0, 0x3, &(0x7f0000000200)=0x203)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="000c0d0000003b4bd897f048653f554ba8e523"], 0x0, 0x0, 0x0, 0x0, 0x0})
close(0xffffffffffffffff)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x11)

6m33.633606715s ago: executing program 9 (id=1540):
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x50)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000500)=0xf0f, 0x4)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000002c0)="ae", 0x1}], 0x1)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044)

6m32.743828749s ago: executing program 9 (id=1542):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x4}], 0xf905db2d12e721d0, 0x10100, 0x0)

6m17.459059976s ago: executing program 41 (id=1542):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x4}], 0xf905db2d12e721d0, 0x10100, 0x0)

2m0.234137661s ago: executing program 1 (id=2321):
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, r1, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}}, 0x0)

2m0.232433589s ago: executing program 2 (id=2322):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6(0xa, 0x80002, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x28)
fcntl$dupfd(r0, 0x0, r0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x121a03, 0x0)
socket$kcm(0x10, 0x2, 0x0)
fsopen(&(0x7f00000003c0)='sysfs\x00', 0x1)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000))

1m59.852003529s ago: executing program 1 (id=2326):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$TUNGETVNETLE(r0, 0x800454dd, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

1m59.848109815s ago: executing program 2 (id=2327):
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc17}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff1, 0xc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xd6c000}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x30000019})
r6 = fsopen(0x0, 0x1)
r7 = fsmount(r6, 0x0, 0x80)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendto$unix(r8, &(0x7f00000004c0)="04", 0x1, 0xd1, 0x0, 0x0)
recvfrom$unix(r9, 0x0, 0x0, 0x40010161, 0x0, 0x0)
openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200"/79], 0x0, 0x56}, 0x28)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r10, 0x0, 0x61, &(0x7f0000000b80)={'filter\x00', 0x4, "25cf96f2"}, &(0x7f0000000bc0)=0x2c)
getdents64(r0, 0xffffffffffffffff, 0x43)

1m57.279366323s ago: executing program 1 (id=2332):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)

1m57.23354709s ago: executing program 2 (id=2334):
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x400)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b})

1m56.995262007s ago: executing program 1 (id=2336):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0)

1m56.901173304s ago: executing program 2 (id=2337):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6(0xa, 0x80002, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x28)
fcntl$dupfd(r0, 0x0, r0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x121a03, 0x0)
socket$kcm(0x10, 0x2, 0x0)
fsopen(&(0x7f00000003c0)='sysfs\x00', 0x1)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000))

1m56.894456453s ago: executing program 8 (id=2338):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000cc0), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0)

1m56.888958042s ago: executing program 6 (id=2339):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044801}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m56.751325205s ago: executing program 1 (id=2340):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r3, &(0x7f0000000140), 0x12)

1m56.589105823s ago: executing program 8 (id=2341):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

1m56.587367305s ago: executing program 2 (id=2342):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$TUNGETVNETLE(r0, 0x800454dd, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

1m56.217254155s ago: executing program 1 (id=2343):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xef, 0x8, 0x5, 0xf, 0x3}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}}, 0x20008800)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f00000009c0)="f1", 0x1}], 0x1}, 0x24024024)

1m56.216873976s ago: executing program 8 (id=2344):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x2, 0x101, @mcast1}, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400004}, 0x0, {[0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x1]}}, 0x5c)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d69")
ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70})

1m55.898044881s ago: executing program 6 (id=2346):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)

1m55.677471513s ago: executing program 8 (id=2347):
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x400)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b})

1m55.490612658s ago: executing program 2 (id=2349):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0)

1m55.397677899s ago: executing program 6 (id=2350):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0)

1m55.397487672s ago: executing program 8 (id=2351):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000cc0), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0)

1m55.023387411s ago: executing program 6 (id=2353):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10)
syz_emit_ethernet(0x102, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x36, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast2, {[@cipso={0x86, 0x21, 0x3, [{0x0, 0x9, "8aaa706450befa"}, {0x2, 0x12, "f71373c8c495d25fef01a2f3a5388b49"}]}, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @cipso={0x86, 0x24, 0x3, [{0x6, 0x10, "71349dff1ad80bfec7a00dfca900"}, {0x2, 0x8, "f03d8a65e6e0"}, {0x2, 0x4, "a724"}, {0x7, 0x2}]}, @ssrr={0x89, 0xf, 0x0, [@private=0x4000, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private=0xa010100}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0)

1m54.926322385s ago: executing program 8 (id=2354):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0)
recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001740)=""/72, 0x48}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0xd3a7}, {{0x0, 0x0, 0x0}, 0xa9e5}], 0x5, 0x2000, 0x0)

1m54.685230528s ago: executing program 6 (id=2355):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
setpgid(0x0, r3)
fchdir(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')

1m53.369376337s ago: executing program 6 (id=2359):
r0 = syz_open_dev$loop(&(0x7f0000000040), 0xc6, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f00000008c0)='/', 0x1, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="010000", @ANYRES32], 0x50)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0)
write$vga_arbiter(r5, &(0x7f0000000340)=ANY=[], 0x15)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000008ec0)={0x0, 0x0, &(0x7f0000008e80)={&(0x7f0000008e40)={0x30, r6, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)

1m40.894982983s ago: executing program 42 (id=2343):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xef, 0x8, 0x5, 0xf, 0x3}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}}, 0x20008800)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f00000009c0)="f1", 0x1}], 0x1}, 0x24024024)

1m40.255727528s ago: executing program 43 (id=2349):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0)

1m39.158596796s ago: executing program 44 (id=2354):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0)
recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001740)=""/72, 0x48}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0xd3a7}, {{0x0, 0x0, 0x0}, 0xa9e5}], 0x5, 0x2000, 0x0)

1m37.896648438s ago: executing program 45 (id=2359):
r0 = syz_open_dev$loop(&(0x7f0000000040), 0xc6, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f00000008c0)='/', 0x1, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="010000", @ANYRES32], 0x50)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0)
write$vga_arbiter(r5, &(0x7f0000000340)=ANY=[], 0x15)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000008ec0)={0x0, 0x0, &(0x7f0000008e80)={&(0x7f0000008e40)={0x30, r6, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0})
socket$nl_xfrm(0x10, 0x3, 0x6)

42.810090522s ago: executing program 3 (id=2424):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r2=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="60060400"], 0x8)

41.748457892s ago: executing program 3 (id=2425):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002c0000000000000000000000070000"], 0x50}, 0x0)

41.295975201s ago: executing program 3 (id=2428):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
read$nci(r0, &(0x7f0000000200)=""/100, 0x64)

38.449612017s ago: executing program 3 (id=2434):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
ioctl$TCXONC(r1, 0x540a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
faccessat2(r2, &(0x7f0000000080)='./file0\x00', 0x40, 0x1000)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r3, r4, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30)
write$6lowpan_control(r2, &(0x7f00000007c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
write$FUSE_INIT(r2, &(0x7f00000004c0)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701)
ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, 0x0)

37.279785451s ago: executing program 7 (id=2441):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

34.611531285s ago: executing program 3 (id=2445):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r1, 0x0, 0x0)

34.549858696s ago: executing program 4 (id=2447):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x2000000d, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x0, 0x100000000003f89, 0x0, 0x18ab})
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r4, 0x5421, &(0x7f0000000440)=0x6)
connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
close(r0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x6e6bb8, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x2, 0x7}}, 0xe4)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)

34.549317299s ago: executing program 7 (id=2448):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000840)=ANY=[@ANYBLOB='\b\x00\b'], 0xfce)

34.398443536s ago: executing program 5 (id=2449):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000cc0), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={0x0}}, 0x0)

32.794823274s ago: executing program 4 (id=2451):
add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='n\f', 0x2, 0xffffffffffffffff)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001580)={0x2020}, 0x2020)

32.794409424s ago: executing program 3 (id=2452):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2)
openat$ppp(0xffffffffffffff9c, 0x0, 0xe9503, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0x2000, 0x1, 0x11}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, 0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40010)
syz_open_procfs(0xffffffffffffffff, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r6, 0xda90)
setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0)
accept4(r6, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r7 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x41, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0)

32.681534726s ago: executing program 5 (id=2453):
r0 = gettid()
timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = userfaultfd(0x80001)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x86}]}, 0x0}, 0x94)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xcdcd0a4b29aa478f, 0x0)
ioctl$sock_TIOCINQ(r3, 0x541b, 0x0)
read$FUSE(r3, &(0x7f0000002980)={0x2020}, 0x2020)
setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000200), 0x4)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000})

32.097289459s ago: executing program 7 (id=2455):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)

32.097081607s ago: executing program 4 (id=2456):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6(0xa, 0x80002, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x28)
fcntl$dupfd(r0, 0x0, r0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0)
socket$kcm(0x10, 0x2, 0x0)
fsopen(&(0x7f00000003c0)='sysfs\x00', 0x1)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000))

31.573925828s ago: executing program 7 (id=2457):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd29, 0x25dfdbff, {0x2, 0x10, 0x0, 0x4, 0x20, 0x0, 0x0, 0x5, 0x6}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x2c}, 0x1, 0xba01, 0x0, 0x4}, 0x0)

31.461328444s ago: executing program 4 (id=2459):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)

31.373676185s ago: executing program 5 (id=2460):
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000500)=0xf0f, 0x4)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000002c0)="ae", 0x1}], 0x1)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044)

31.016666367s ago: executing program 0 (id=2461):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r0, 0x0)

31.014404625s ago: executing program 7 (id=2462):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r0)
ioprio_set$uid(0x3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000340)='./file0\x00', 0x22)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_off}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x129e, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
linkat(r1, &(0x7f0000000240)='./bus\x00', r1, &(0x7f0000000280)='./file0\x00', 0x400)
shutdown(0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x6a, 0x10, 0x0, &(0x7f00000003c0)=0x54)
r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x2)
ioctl$VIDIOC_S_AUDIO(r4, 0x40345622, &(0x7f0000000080)={0x7, "0269439e7ba83e67378dd13c538333aba9d0c1ed02406db0517d31bf345d4ae9"})
openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xffff, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0)
sendfile(r1, r1, &(0x7f0000000080), 0x7f03)

30.930666708s ago: executing program 5 (id=2463):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875", 0x5}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x0)

29.201356272s ago: executing program 0 (id=2464):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="b800000043000701fefffffffcdbdf25037c00000400de80a00001809200d28080f1292b4baabb53e336c927d66e7a5c943c519737429792539bfad01db4255fe576d8accff159c4c0766fcc0cdb"], 0xb8}, 0x1, 0x0, 0x0, 0x40881}, 0x4000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="14000d00000093b0b9a0fab1946d000000000000080002"], 0x50}, 0x1, 0x0, 0x0, 0x4000805}, 0x2004c094)

29.138062155s ago: executing program 7 (id=2465):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r3=>0x0})
close(r2)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e00", 0xa}], 0x1}, 0x4005)

28.947158113s ago: executing program 5 (id=2466):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000ea8f0000000000000500", @ANYRES32=r1, @ANYBLOB="9600000000000000b702000014000000a4030000000000008500000083000000bf0900000000000055090100000000009500400000000000bf91060000000000b7020000c7f7449cd144da15a95b18000000008500000085000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000100"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x2, 0x300)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x4)
write$UHID_INPUT(r3, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', <r5=>0x0})
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0)
r8 = gettid()
prctl$PR_MCE_KILL(0x21, 0x1, 0x1)
timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r9 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581)
ioctl$CEC_RECEIVE(r9, 0xc0386106, &(0x7f0000000000)={0x4, 0xb, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9e})
setrlimit(0x7, &(0x7f0000000000))
socket$inet(0x2, 0x2, 0x1)
ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000001c0)={0x5, "e5e81177028f350f360dbbd7a4da2ad0b62639ef9192617eff0af841cb3d8472", 0x1, 0xe, 0x200, 0x1, 0x8})
socket$nl_route(0x10, 0x3, 0x0)

28.808793741s ago: executing program 0 (id=2467):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r0, &(0x7f00000001c0), 0x4c, 0x24008015, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)
sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d)

27.377436178s ago: executing program 0 (id=2468):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)

24.116992011s ago: executing program 4 (id=2469):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6(0xa, 0x80002, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x28)
fcntl$dupfd(r0, 0x0, r0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0)
socket$kcm(0x10, 0x2, 0x0)
fsopen(&(0x7f00000003c0)='sysfs\x00', 0x1)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000))

20.701777008s ago: executing program 5 (id=2470):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
listen(0xffffffffffffffff, 0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
syz_open_dev$vcsn(0x0, 0x200, 0x420400)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
socket(0x2, 0xa, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000c0000000500000007000000c1000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000e2000000000000"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0)
openat$kvm(0xffffff9c, 0x0, 0x101880, 0x0)

20.454358591s ago: executing program 0 (id=2471):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48}, 0x20040000)

20.449820384s ago: executing program 4 (id=2472):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r3=>0x0})
close(r2)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, 0x0}, 0x4005)

19.485107354s ago: executing program 0 (id=2473):
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000500)=0xf0f, 0x4)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000002c0)="ae", 0x1}], 0x1)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044)

13.784870557s ago: executing program 46 (id=2452):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2)
openat$ppp(0xffffffffffffff9c, 0x0, 0xe9503, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0x2000, 0x1, 0x11}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, 0x0)
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40010)
syz_open_procfs(0xffffffffffffffff, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r6, 0xda90)
setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0)
accept4(r6, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r7 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x41, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0)

10.527415596s ago: executing program 47 (id=2465):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r3=>0x0})
close(r2)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e00", 0xa}], 0x1}, 0x4005)

1.81483631s ago: executing program 48 (id=2470):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
listen(0xffffffffffffffff, 0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
syz_open_dev$vcsn(0x0, 0x200, 0x420400)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
socket(0x2, 0xa, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000c0000000500000007000000c1000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000e2000000000000"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0)
openat$kvm(0xffffff9c, 0x0, 0x101880, 0x0)

547.806969ms ago: executing program 49 (id=2472):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r3=>0x0})
close(r2)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, 0x0}, 0x4005)

0s ago: executing program 50 (id=2473):
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000500)=0xf0f, 0x4)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000002c0)="ae", 0x1}], 0x1)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044)

kernel console output (not intermixed with test programs):

41.380708][ T8675] bridge_slave_0: left promiscuous mode
[  941.380961][ T8675] bridge0: port 1(bridge_slave_0) entered disabled state
[  941.447784][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1128'.
[  944.062165][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  944.118379][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  944.127351][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  944.143215][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  944.168314][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  944.343935][ T8675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  944.394645][ T8675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  944.417725][ T8675] bond0 (unregistering): Released all slaves
[  944.527048][T11709] hsr_slave_0: entered promiscuous mode
[  944.530346][T11709] hsr_slave_1: entered promiscuous mode
[  944.534622][T11709] debugfs: 'hsr0' already exists in 'hsr'
[  944.534711][T11709] Cannot create hsr debugfs directory
[  944.701838][ T5264] 8021q: adding VLAN 0 to HW filter on device eth24
[  945.346782][T11938] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1131'.
[  946.302544][ T7919] Bluetooth: hci2: command tx timeout
[  946.303444][T11942] netlink: zone id is out of range
[  946.303457][T11942] netlink: zone id is out of range
[  946.303466][T11942] netlink: zone id is out of range
[  946.303475][T11942] netlink: zone id is out of range
[  946.303484][T11942] netlink: zone id is out of range
[  946.303493][T11942] netlink: zone id is out of range
[  946.303502][T11942] netlink: zone id is out of range
[  946.303510][T11942] netlink: zone id is out of range
[  946.303519][T11942] netlink: zone id is out of range
[  946.303528][T11942] netlink: zone id is out of range
[  946.365926][ T8675] hsr_slave_0: left promiscuous mode
[  946.424279][ T8675] hsr_slave_1: left promiscuous mode
[  946.425317][ T8675] batman_adv: batadv0: Removing interface: batadv_slave_0
[  946.463311][ T8675] batman_adv: batadv0: Removing interface: batadv_slave_1
[  947.890210][ T8675] team0 (unregistering): Port device team_slave_1 removed
[  947.988810][ T8675] team0 (unregistering): Port device team_slave_0 removed
[  948.382563][ T7919] Bluetooth: hci2: command tx timeout
[  951.307556][ T5625] Bluetooth: hci2: command tx timeout
[  953.342806][ T5625] Bluetooth: hci2: command tx timeout
[  954.374851][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1141'.
[  956.533410][T12006] netlink: 'syz.7.1143': attribute type 1 has an invalid length.
[  958.268118][ T5264] 8021q: adding VLAN 0 to HW filter on device eth15
[  958.276429][T11921] bridge0: port 1(bridge_slave_0) entered blocking state
[  958.276746][T11921] bridge0: port 1(bridge_slave_0) entered disabled state
[  958.277392][T11921] bridge_slave_0: entered allmulticast mode
[  958.336014][T11921] bridge_slave_0: entered promiscuous mode
[  958.363608][T11921] bridge0: port 2(bridge_slave_1) entered blocking state
[  958.363872][T11921] bridge0: port 2(bridge_slave_1) entered disabled state
[  958.377248][T11921] bridge_slave_1: entered allmulticast mode
[  958.402117][T11921] bridge_slave_1: entered promiscuous mode
[  958.717907][T12039] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1147'.
[  962.741480][T11921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  962.902332][T11921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  963.068899][T12051] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1150'.
[  963.156785][T11921] team0: Port device team_slave_0 added
[  963.383430][T11921] team0: Port device team_slave_1 added
[  963.685561][T11709] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  963.771441][T11709] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  963.878985][T11709] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  964.018613][T11709] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  964.020068][T11921] batman_adv: batadv0: Adding interface: batadv_slave_0
[  964.020083][T11921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  964.020115][T11921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  966.486865][T11921] batman_adv: batadv0: Adding interface: batadv_slave_1
[  966.486889][T11921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  966.486918][T11921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  966.489318][T11709] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  966.614558][T11709] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  966.658762][T11709] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  966.717960][T11709] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  969.790688][T11921] hsr_slave_0: entered promiscuous mode
[  969.805537][T11921] hsr_slave_1: entered promiscuous mode
[  969.811100][T11921] debugfs: 'hsr0' already exists in 'hsr'
[  969.811131][T11921] Cannot create hsr debugfs directory
[  970.138463][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1159'.
[  971.243999][ T8675] bridge_slave_1: left allmulticast mode
[  971.244035][ T8675] bridge_slave_1: left promiscuous mode
[  971.244368][ T8675] bridge0: port 2(bridge_slave_1) entered disabled state
[  971.420708][ T8675] bridge_slave_0: left allmulticast mode
[  971.420747][ T8675] bridge_slave_0: left promiscuous mode
[  971.441936][ T8675] bridge0: port 1(bridge_slave_0) entered disabled state
[  972.622059][ T8675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  972.736076][ T8675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  972.847038][ T8675] bond0 (unregistering): Released all slaves
[  973.998540][ T8675] hsr_slave_0: left promiscuous mode
[  974.069842][ T8675] hsr_slave_1: left promiscuous mode
[  974.070614][ T8675] batman_adv: batadv0: Removing interface: batadv_slave_0
[  974.135716][ T8675] batman_adv: batadv0: Removing interface: batadv_slave_1
[  974.201992][T12129] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1161'.
[  974.526737][ T7919] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  974.580149][ T7919] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  974.603615][ T7919] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  974.624591][ T7919] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  974.627761][ T7919] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  976.905669][ T5625] Bluetooth: hci3: command tx timeout
[  977.461101][ T8675] team0 (unregistering): Port device team_slave_1 removed
[  977.586945][ T8675] team0 (unregistering): Port device team_slave_0 removed
[  978.942562][ T5625] Bluetooth: hci3: command tx timeout
[  981.046988][ T5625] Bluetooth: hci3: command tx timeout
[  983.103328][ T5625] Bluetooth: hci3: command tx timeout
[  993.857949][T12133] bridge0: port 1(bridge_slave_0) entered blocking state
[  993.858079][T12133] bridge0: port 1(bridge_slave_0) entered disabled state
[  993.858277][T12133] bridge_slave_0: entered allmulticast mode
[  993.861140][T12133] bridge_slave_0: entered promiscuous mode
[  993.916122][T12133] bridge0: port 2(bridge_slave_1) entered blocking state
[  993.916285][T12133] bridge0: port 2(bridge_slave_1) entered disabled state
[  993.916534][T12133] bridge_slave_1: entered allmulticast mode
[  993.999796][T12133] bridge_slave_1: entered promiscuous mode
[  996.750796][T12133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  996.787166][T12133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  997.085096][T12133] team0: Port device team_slave_0 added
[  997.138388][T12133] team0: Port device team_slave_1 added
[  997.209310][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1
[  997.209683][T11921] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  997.249124][T11921] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  997.331430][T11921] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  997.408210][T11921] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  997.409759][T12133] batman_adv: batadv0: Adding interface: batadv_slave_0
[  997.409776][T12133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  997.409805][T12133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  997.761333][T12288] scsi_nl_rcv_msg: discarding partial skb
[  998.133051][T11921] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  998.286180][T11921] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  998.287895][T12133] batman_adv: batadv0: Adding interface: batadv_slave_1
[  998.287911][T12133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  998.287941][T12133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  998.304289][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  998.304347][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  998.429257][T11921] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  998.535563][T11921] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  999.274341][T12133] hsr_slave_0: entered promiscuous mode
[  999.280069][T12133] hsr_slave_1: entered promiscuous mode
[  999.281106][T12133] debugfs: 'hsr0' already exists in 'hsr'
[  999.281135][T12133] Cannot create hsr debugfs directory
[  999.614662][ T8675] bridge_slave_1: left allmulticast mode
[  999.614699][ T8675] bridge_slave_1: left promiscuous mode
[  999.614963][ T8675] bridge0: port 2(bridge_slave_1) entered disabled state
[  999.658554][T12303] kvm: user requested TSC rate below hardware speed
[ 1000.026970][ T8675] bridge_slave_0: left allmulticast mode
[ 1000.027007][ T8675] bridge_slave_0: left promiscuous mode
[ 1000.027323][ T8675] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1002.293481][ T8675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1002.369386][ T8675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1002.413529][ T8675] bond0 (unregistering): Released all slaves
[ 1003.708897][ T8675] hsr_slave_0: left promiscuous mode
[ 1003.774570][ T8675] hsr_slave_1: left promiscuous mode
[ 1003.906130][ T8675] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1003.967479][ T8675] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1004.128509][ T7919] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1004.201817][ T7919] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1004.206980][ T7919] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1004.218516][ T7919] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1004.236862][ T7919] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1006.317808][ T7919] Bluetooth: hci1: command tx timeout
[ 1007.097589][ T8675] team0 (unregistering): Port device team_slave_1 removed
[ 1007.254634][ T8675] team0 (unregistering): Port device team_slave_0 removed
[ 1008.322900][ T5264] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1008.392511][ T7919] Bluetooth: hci1: command tx timeout
[ 1011.927662][ T7919] Bluetooth: hci1: command tx timeout
[ 1013.983741][ T7919] Bluetooth: hci1: command tx timeout
[ 1016.173083][T12389] kvm: user requested TSC rate below hardware speed
[ 1018.334267][T12412] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4)
[ 1018.334300][T12412] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1018.457052][T12412] vhci_hcd vhci_hcd.0: Device attached
[ 1018.682499][ T5738] usb 51-1: new high-speed USB device number 2 using vhci_hcd
[ 1019.439499][T12413] vhci_hcd: connection reset by peer
[ 1019.536635][ T8685] vhci_hcd vhci_hcd.9: stop threads
[ 1019.585646][ T8685] vhci_hcd vhci_hcd.9: release socket
[ 1019.621699][ T8685] vhci_hcd vhci_hcd.9: disconnect device
[ 1020.517444][T12320] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1020.517563][T12320] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1020.517752][T12320] bridge_slave_0: entered allmulticast mode
[ 1020.529667][T12320] bridge_slave_0: entered promiscuous mode
[ 1020.597841][T12320] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1020.598011][T12320] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1020.598201][T12320] bridge_slave_1: entered allmulticast mode
[ 1020.629035][T12320] bridge_slave_1: entered promiscuous mode
[ 1022.431614][T12320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1022.459991][T12320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1022.464666][T12133] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1022.608849][T12133] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1022.903713][T12133] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1022.947949][T12133] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1023.037683][T12133] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1023.081045][T12133] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1023.094752][T12320] team0: Port device team_slave_0 added
[ 1023.303468][T12133] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1023.341610][T12133] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1023.375590][T12320] team0: Port device team_slave_1 added
[ 1023.660882][T12453] syzkaller0: entered promiscuous mode
[ 1023.660913][T12453] syzkaller0: entered allmulticast mode
[ 1025.730506][ T5738] vhci_hcd vhci_hcd.9: vhci_device speed not set
[ 1025.891448][T12320] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1025.891466][T12320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1025.891497][T12320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1026.012858][T12320] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1026.012877][T12320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1026.012908][T12320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1026.263178][ T8675] bridge_slave_1: left allmulticast mode
[ 1026.263216][ T8675] bridge_slave_1: left promiscuous mode
[ 1026.263500][ T8675] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1026.452294][ T8675] bridge_slave_0: left allmulticast mode
[ 1026.452665][ T8675] bridge_slave_0: left promiscuous mode
[ 1026.452956][ T8675] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1026.623981][T12475] kvm: user requested TSC rate below hardware speed
[ 1028.148590][ T8675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1028.275165][ T8675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1028.357904][ T8675] bond0 (unregistering): Released all slaves
[ 1028.666511][T12320] hsr_slave_0: entered promiscuous mode
[ 1028.712756][T12320] hsr_slave_1: entered promiscuous mode
[ 1028.715844][T12320] debugfs: 'hsr0' already exists in 'hsr'
[ 1028.715912][T12320] Cannot create hsr debugfs directory
[ 1030.573426][ T8675] hsr_slave_0: left promiscuous mode
[ 1030.612601][ T8675] hsr_slave_1: left promiscuous mode
[ 1030.615194][ T8675] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1030.661632][ T8675] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1033.733364][ T8675] team0 (unregistering): Port device team_slave_1 removed
[ 1033.813331][ T8675] team0 (unregistering): Port device team_slave_0 removed
[ 1034.787848][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1034.814197][T12512] syzkaller0: entered promiscuous mode
[ 1034.814226][T12512] syzkaller0: entered allmulticast mode
[ 1034.857986][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1034.861755][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1034.867245][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1034.885267][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1036.251639][ T5264] 8021q: adding VLAN 0 to HW filter on device eth11
[ 1038.203606][ T7919] Bluetooth: hci2: command tx timeout
[ 1039.056534][T12548] kvm: user requested TSC rate below hardware speed
[ 1040.223221][ T7919] Bluetooth: hci2: command tx timeout
[ 1041.533599][ T7919] Bluetooth: hci6: ACL packet for unknown connection handle 0
[ 1042.304324][ T7919] Bluetooth: hci2: command tx timeout
[ 1043.979803][T12583] syzkaller0: entered promiscuous mode
[ 1043.979832][T12583] syzkaller0: entered allmulticast mode
[ 1044.384185][ T7919] Bluetooth: hci2: command tx timeout
[ 1044.393436][    C0] net_ratelimit: 1 callbacks suppressed
[ 1044.393458][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[ 1051.564075][T12513] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1051.571969][T12513] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1051.572220][T12513] bridge_slave_0: entered allmulticast mode
[ 1051.632735][T12513] bridge_slave_0: entered promiscuous mode
[ 1051.667964][T12513] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1051.668069][T12513] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1051.668232][T12513] bridge_slave_1: entered allmulticast mode
[ 1051.685831][T12513] bridge_slave_1: entered promiscuous mode
[ 1051.714525][T12320] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1051.771020][T12320] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1052.082059][T12320] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1052.118273][T12320] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1052.200219][T12320] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1052.255253][T12320] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1052.420233][T12513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1052.421015][T12320] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1052.466818][T12320] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1052.481044][T12513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1052.708154][ T8683] bridge_slave_1: left allmulticast mode
[ 1052.708192][ T8683] bridge_slave_1: left promiscuous mode
[ 1052.708470][ T8683] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1054.185625][ T8683] bridge_slave_0: left allmulticast mode
[ 1054.185662][ T8683] bridge_slave_0: left promiscuous mode
[ 1054.185950][ T8683] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1055.345222][ T8683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1055.478704][ T8683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1055.563050][ T8683] bond0 (unregistering): Released all slaves
[ 1055.832703][ T6166] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[ 1055.855779][T12513] team0: Port device team_slave_0 added
[ 1055.861303][T12513] team0: Port device team_slave_1 added
[ 1056.024573][ T6166] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1056.024605][ T6166] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1056.030857][T12513] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1056.030875][T12513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1056.030905][T12513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1056.150906][T12513] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1056.150919][T12513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1056.150940][T12513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1056.238564][ T6166] usb 10-1: config 0 descriptor??
[ 1056.384069][ T6166] cp210x 10-1:0.0: cp210x converter detected
[ 1058.096648][T12513] hsr_slave_0: entered promiscuous mode
[ 1058.121741][T12513] hsr_slave_1: entered promiscuous mode
[ 1058.137952][T12513] debugfs: 'hsr0' already exists in 'hsr'
[ 1058.137982][T12513] Cannot create hsr debugfs directory
[ 1058.251441][ T6166] usb 10-1: cp210x converter now attached to ttyUSB0
[ 1058.367576][ T8683] hsr_slave_0: left promiscuous mode
[ 1058.404994][ T8683] hsr_slave_1: left promiscuous mode
[ 1058.405718][ T8683] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1058.449393][ T8683] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1059.407431][ T6166] usb 10-1: USB disconnect, device number 2
[ 1059.514930][ T6166] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1059.725142][ T8683] team0 (unregistering): Port device team_slave_1 removed
[ 1059.725364][ T6166] cp210x 10-1:0.0: device disconnected
[ 1059.747204][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1059.756891][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1059.895448][ T8683] team0 (unregistering): Port device team_slave_0 removed
[ 1060.169763][ T5264] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1060.759685][T12320] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1060.857180][T12320] 8021q: adding VLAN 0 to HW filter on device team0
[ 1060.892794][ T8670] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1060.892936][ T8670] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1060.942095][ T8670] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1060.951122][ T8670] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1061.159789][T12320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1062.080695][ T5264] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1064.468068][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1064.526058][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1064.550604][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1064.587317][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1064.592538][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1065.789375][T12750] binder: 12747:12750 unknown command 0
[ 1065.789449][T12750] binder: 12747:12750 ioctl c0306201 200000000080 returned -22
[ 1066.725987][ T7919] Bluetooth: hci3: command tx timeout
[ 1068.952472][ T7919] Bluetooth: hci3: command tx timeout
[ 1071.035642][ T7919] Bluetooth: hci3: command tx timeout
[ 1072.522752][T12513] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1072.641465][T12513] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1072.730327][T12819] binder: 12815:12819 unknown command 0
[ 1072.730422][T12819] binder: 12815:12819 ioctl c0306201 200000000080 returned -22
[ 1073.102619][ T7919] Bluetooth: hci3: command tx timeout
[ 1074.492510][T12513] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1074.637474][T12513] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1074.697071][T12513] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1074.829288][T12513] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1074.885298][T12513] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1074.961515][T12513] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1077.172661][ T1518] bridge_slave_1: left allmulticast mode
[ 1077.172698][ T1518] bridge_slave_1: left promiscuous mode
[ 1077.173004][ T1518] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1077.364371][ T1518] bridge_slave_0: left allmulticast mode
[ 1077.364412][ T1518] bridge_slave_0: left promiscuous mode
[ 1077.364717][ T1518] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1078.849617][T12878] netlink: 'syz.8.1286': attribute type 10 has an invalid length.
[ 1078.921864][T12881] binder: 12879:12881 unknown command 0
[ 1078.921882][T12881] binder: 12879:12881 ioctl c0306201 200000000080 returned -22
[ 1079.179452][ T1518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1079.779141][ T1518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1079.816654][ T1518] bond0 (unregistering): Released all slaves
[ 1079.894856][ T5264] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1079.984227][T12878] 8021q: adding VLAN 0 to HW filter on device team0
[ 1079.988199][T12878] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1080.328917][T12732] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1080.329061][T12732] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1080.329214][T12732] bridge_slave_0: entered allmulticast mode
[ 1080.331077][T12732] bridge_slave_0: entered promiscuous mode
[ 1080.410027][T12732] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1080.410145][T12732] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1080.410402][T12732] bridge_slave_1: entered allmulticast mode
[ 1080.439541][T12732] bridge_slave_1: entered promiscuous mode
[ 1080.533511][T12893] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1291'.
[ 1080.642597][ T1518] hsr_slave_0: left promiscuous mode
[ 1080.662612][ T1518] hsr_slave_1: left promiscuous mode
[ 1080.663669][ T1518] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1080.704853][ T1518] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1081.502067][T12908] binder: 12906:12908 unknown command 0
[ 1081.502145][T12908] binder: 12906:12908 ioctl c0306201 200000000080 returned -22
[ 1082.289392][ T1518] team0 (unregistering): Port device team_slave_1 removed
[ 1082.383440][ T1518] team0 (unregistering): Port device team_slave_0 removed
[ 1082.491839][T12911] netlink: 'syz.7.1298': attribute type 10 has an invalid length.
[ 1083.661908][T12732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1083.695478][T12732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1083.816306][T12732] team0: Port device team_slave_0 added
[ 1083.891486][T12513] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1083.906199][T12732] team0: Port device team_slave_1 added
[ 1083.997442][T12732] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1083.997456][T12732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1083.997476][T12732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1084.001347][T12732] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1084.001370][T12732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1084.001391][T12732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1084.287741][T12513] 8021q: adding VLAN 0 to HW filter on device team0
[ 1084.454599][T12732] hsr_slave_0: entered promiscuous mode
[ 1084.458504][T12732] hsr_slave_1: entered promiscuous mode
[ 1084.459237][T12732] debugfs: 'hsr0' already exists in 'hsr'
[ 1084.459256][T12732] Cannot create hsr debugfs directory
[ 1084.507517][ T8675] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1084.507760][ T8675] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1084.510498][ T8675] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1084.510634][ T8675] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1085.668271][T12931] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1090.588959][T12513] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1091.670137][T12513] veth0_vlan: entered promiscuous mode
[ 1091.696989][T12513] veth1_vlan: entered promiscuous mode
[ 1091.727234][T12992] netlink: 'syz.9.1320': attribute type 15 has an invalid length.
[ 1091.727261][T12992] netlink: 168 bytes leftover after parsing attributes in process `syz.9.1320'.
[ 1092.973944][T12513] veth0_macvtap: entered promiscuous mode
[ 1093.003388][T12513] veth1_macvtap: entered promiscuous mode
[ 1093.205987][T12513] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1093.313733][T12513] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1093.389528][ T8673] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1093.391038][ T8673] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1093.391161][ T8673] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1093.391202][ T8673] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1093.486354][T12732] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1093.525326][T12732] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1093.637845][T12732] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1093.803450][T12732] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1093.811020][T12732] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1093.926942][T12732] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1094.070293][T12732] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1094.139091][T12732] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1095.245697][T12732] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1095.343960][T12732] 8021q: adding VLAN 0 to HW filter on device team0
[ 1095.381389][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1095.381548][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1095.459624][ T8675] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1095.459773][ T8675] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1095.610381][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1095.665136][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1095.685141][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1095.692477][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1095.702209][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1097.822994][ T7919] Bluetooth: hci1: command tx timeout
[ 1098.646726][ T8675] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1099.682759][ T8675] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1099.905522][ T7919] Bluetooth: hci1: command tx timeout
[ 1100.067130][T12732] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1100.739629][ T8675] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1101.989280][ T7919] Bluetooth: hci1: command tx timeout
[ 1102.028735][ T8675] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1102.190128][T12732] veth0_vlan: entered promiscuous mode
[ 1102.237831][T12732] veth1_vlan: entered promiscuous mode
[ 1102.571028][T12732] veth0_macvtap: entered promiscuous mode
[ 1102.664310][T12732] veth1_macvtap: entered promiscuous mode
[ 1102.827371][T13038] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1102.827580][T13038] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1102.827817][T13038] bridge_slave_0: entered allmulticast mode
[ 1102.831021][T13038] bridge_slave_0: entered promiscuous mode
[ 1102.878928][T13038] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1102.879050][T13038] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1102.879280][T13038] bridge_slave_1: entered allmulticast mode
[ 1102.924635][T13038] bridge_slave_1: entered promiscuous mode
[ 1103.394644][T13038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1103.490424][T13038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1104.337616][ T7919] Bluetooth: hci1: command tx timeout
[ 1104.508145][T12732] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1104.972801][ T8675] bridge_slave_1: left allmulticast mode
[ 1104.972839][ T8675] bridge_slave_1: left promiscuous mode
[ 1104.973111][ T8675] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1105.137351][ T8675] bridge_slave_0: left allmulticast mode
[ 1105.137387][ T8675] bridge_slave_0: left promiscuous mode
[ 1105.137660][ T8675] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1106.934139][ T8675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1106.994766][ T8675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1107.018478][ T8675] bond0 (unregistering): Released all slaves
[ 1107.238490][T13038] team0: Port device team_slave_0 added
[ 1108.220475][T13038] team0: Port device team_slave_1 added
[ 1108.374479][T12732] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1108.647038][T13038] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1108.647053][T13038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1108.647073][T13038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1108.648187][ T8673] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1108.650018][ T8673] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1108.650878][T13038] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1108.650889][T13038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1108.650909][T13038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1108.797999][ T8673] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1108.821478][ T8673] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1109.954944][T13038] hsr_slave_0: entered promiscuous mode
[ 1109.978205][T13038] hsr_slave_1: entered promiscuous mode
[ 1109.981772][T13038] debugfs: 'hsr0' already exists in 'hsr'
[ 1109.981803][T13038] Cannot create hsr debugfs directory
[ 1110.419213][ T8675] hsr_slave_0: left promiscuous mode
[ 1110.469935][ T8675] hsr_slave_1: left promiscuous mode
[ 1110.471696][ T8675] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1110.471721][ T8675] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1110.524820][ T8675] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1110.524857][ T8675] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1110.609575][ T8675] veth1_macvtap: left promiscuous mode
[ 1110.609651][ T8675] veth0_macvtap: left promiscuous mode
[ 1110.609815][ T8675] veth1_vlan: left promiscuous mode
[ 1110.609930][ T8675] veth0_vlan: left promiscuous mode
[ 1112.965794][ T8675] team0 (unregistering): Port device team_slave_1 removed
[ 1114.610231][ T8675] team0 (unregistering): Port device team_slave_0 removed
[ 1114.998810][T13240] gretap1: left promiscuous mode
[ 1115.290550][ T9543] ip6_tunnel: ip6gretap0: Local routing loop detected!
[ 1115.970773][ T8672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1115.970796][ T8672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1116.231040][   T31] ip6_tunnel: ip6gretap0: Local routing loop detected!
[ 1116.772498][ T8681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1116.772522][ T8681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1118.442650][T13262] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1377'.
[ 1120.402550][T13276] Bluetooth: MGMT ver 1.23
[ 1121.187216][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1121.187292][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1121.579502][ T5264] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1126.874276][   T37] audit: type=1326 audit(1780412057.706:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13315 comm="syz.1.1387" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78fe73ce59 code=0x0
[ 1128.228493][T13327] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1389'.
[ 1130.358557][T13038] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1130.410275][T13038] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1130.416615][T13038] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1130.466544][T13038] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1130.471101][T13038] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1130.617368][T13038] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1130.634217][T13038] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1131.853932][T13038] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1132.609002][T13038] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1132.662143][T13038] 8021q: adding VLAN 0 to HW filter on device team0
[ 1132.689146][ T8672] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1132.689600][ T8672] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1132.727238][ T8672] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1132.727533][ T8672] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1134.309943][T13038] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1135.474761][T13038] veth0_vlan: entered promiscuous mode
[ 1135.501364][T13038] veth1_vlan: entered promiscuous mode
[ 1135.667553][T13038] veth0_macvtap: entered promiscuous mode
[ 1135.696135][T13038] veth1_macvtap: entered promiscuous mode
[ 1135.786696][T13038] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1135.815331][T13038] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1135.835925][ T8672] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1135.837779][ T8672] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1135.837845][ T8672] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1135.837886][ T8672] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.992481][ T8681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1138.992504][ T8681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1139.419704][T13458] tipc: Started in network mode
[ 1139.419741][T13458] tipc: Node identity 7f000001, cluster identity 4711
[ 1139.456747][T13458] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1139.494226][ T8672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1139.494249][ T8672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1139.623110][T13458] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[ 1139.628650][T13458] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1140.659308][  T821] tipc: Node number set to 2130706433
[ 1152.896855][T13617] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1163.340589][T13689] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1163.862566][T12121] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[ 1164.047673][T12121] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1164.047705][T12121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1164.117296][T12121] usb 2-1: config 0 descriptor??
[ 1164.150244][T12121] cp210x 2-1:0.0: cp210x converter detected
[ 1164.401956][T12121] usb 2-1: cp210x converter now attached to ttyUSB0
[ 1164.530490][ T5613] usb 2-1: USB disconnect, device number 22
[ 1164.628925][ T5613] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1164.717506][ T5613] cp210x 2-1:0.0: device disconnected
[ 1171.310215][T13760] tipc: Started in network mode
[ 1171.310251][T13760] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[ 1171.353871][T13760] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[ 1171.356252][T13760] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1173.187700][ T5738] tipc: Node number set to 1
[ 1175.466657][T13782] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1175.544872][T13788] kvm: user requested TSC rate below hardware speed
[ 1177.514439][T13812] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1177.514623][T13813] netlink: 'syz.7.1502': attribute type 16 has an invalid length.
[ 1177.514642][T13813] netlink: 'syz.7.1502': attribute type 17 has an invalid length.
[ 1177.517882][T13812] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1177.536150][ T5718] ip6_tunnel: ip6gretap0: Local routing loop detected!
[ 1177.805266][ T5718] ip6_tunnel: ip6gretap0: Local routing loop detected!
[ 1177.868834][T13813] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1177.868988][T13813] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1177.881176][T13813] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1177.881583][T13813] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1178.104248][T13820] veth0: entered promiscuous mode
[ 1178.104348][T13821] bond0: entered promiscuous mode
[ 1178.104364][T13821] bond_slave_0: entered promiscuous mode
[ 1178.104568][T13821] bond_slave_1: entered promiscuous mode
[ 1178.110414][T13819] bond0: left promiscuous mode
[ 1178.110434][T13819] bond_slave_0: left promiscuous mode
[ 1178.110802][T13819] bond_slave_1: left promiscuous mode
[ 1178.199080][T13819] veth0: left promiscuous mode
[ 1178.615978][   T10] ip6_tunnel: ip6gretap0: Local routing loop detected!
[ 1179.229458][T13833] kvm: user requested TSC rate below hardware speed
[ 1180.320899][T13844] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[ 1182.737651][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1182.737712][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1183.349398][T13888] kvm: user requested TSC rate below hardware speed
[ 1187.600680][T13933] capability: warning: `syz.1.1546' uses 32-bit capabilities (legacy support in use)
[ 1188.389543][T13948] program syz.8.1553 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1189.952423][ T5625] Bluetooth: hci3: command 0x0406 tx timeout
[ 1192.370655][T13978] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1200.272427][  T821] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[ 1200.456668][  T821] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1200.456708][  T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1200.533587][  T821] usb 2-1: config 0 descriptor??
[ 1200.570909][  T821] cp210x 2-1:0.0: cp210x converter detected
[ 1201.014934][  T821] usb 2-1: cp210x converter now attached to ttyUSB0
[ 1201.144282][ T5613] usb 2-1: USB disconnect, device number 23
[ 1201.289502][ T5613] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1201.595117][ T5613] cp210x 2-1:0.0: device disconnected
[ 1201.750798][T12517] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1201.794798][T12517] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1201.796505][T12517] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1201.798868][T12517] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1201.801050][T12517] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1203.985134][ T7919] Bluetooth: hci2: command tx timeout
[ 1204.943651][ T8678] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1205.363997][ T8678] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1205.964685][ T8678] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1206.062546][ T7919] Bluetooth: hci2: command tx timeout
[ 1208.142436][ T7919] Bluetooth: hci2: command tx timeout
[ 1208.209912][ T8678] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1208.291690][T14118] Bluetooth: MGMT ver 1.23
[ 1209.031648][T14055] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1209.032233][T14055] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1209.048886][T14055] bridge_slave_0: entered allmulticast mode
[ 1209.058462][T14055] bridge_slave_0: entered promiscuous mode
[ 1209.068838][T14055] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1209.069054][T14055] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1209.069303][T14055] bridge_slave_1: entered allmulticast mode
[ 1209.114556][T14055] bridge_slave_1: entered promiscuous mode
[ 1209.533087][T14055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1209.570595][T14055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1210.020375][T14055] team0: Port device team_slave_0 added
[ 1210.065339][T14055] team0: Port device team_slave_1 added
[ 1210.115042][T14151] syzkaller0: entered promiscuous mode
[ 1210.115069][T14151] syzkaller0: entered allmulticast mode
[ 1210.222665][ T7919] Bluetooth: hci2: command tx timeout
[ 1211.591864][T14055] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1211.591880][T14055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1211.591904][T14055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1211.774411][T14055] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1211.774430][T14055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1211.774461][T14055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1212.072908][ T8678] bridge_slave_1: left allmulticast mode
[ 1212.072944][ T8678] bridge_slave_1: left promiscuous mode
[ 1212.073203][ T8678] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1213.916131][ T8678] bridge_slave_0: left allmulticast mode
[ 1213.916167][ T8678] bridge_slave_0: left promiscuous mode
[ 1213.916437][ T8678] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1214.791507][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1632'.
[ 1216.033248][ T8678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1216.114615][ T8678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1216.155728][ T8678] bond0 (unregistering): Released all slaves
[ 1216.530246][T14209] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1216.545961][T14055] hsr_slave_0: entered promiscuous mode
[ 1216.551118][T14055] hsr_slave_1: entered promiscuous mode
[ 1216.562580][T14055] debugfs: 'hsr0' already exists in 'hsr'
[ 1216.562657][T14055] Cannot create hsr debugfs directory
[ 1216.700774][T14199] tipc: Disabling bearer <eth:syzkaller0>
[ 1219.273849][T14227] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1220.945296][ T5264] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1220.975518][T14266] team0: Device xfrm0 is of different type
[ 1221.045909][T14268] tipc: Enabled bearer <eth:team0>, priority 0
[ 1221.107417][ T7919] Bluetooth: hci1: command 0x0406 tx timeout
[ 1223.542837][T14313] netlink: 'syz.6.1661': attribute type 1 has an invalid length.
[ 1224.345461][T14313] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1224.795405][ T5264] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1226.532491][ T8678] hsr_slave_0: left promiscuous mode
[ 1226.612439][ T8678] hsr_slave_1: left promiscuous mode
[ 1226.613455][ T8678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1226.613482][ T8678] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1226.767428][ T8678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1226.767459][ T8678] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1226.934279][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1673'.
[ 1226.936292][ T8678] veth1_macvtap: left promiscuous mode
[ 1226.936375][ T8678] veth0_macvtap: left promiscuous mode
[ 1226.941385][ T8678] veth1_vlan: left promiscuous mode
[ 1226.941569][ T8678] veth0_vlan: left promiscuous mode
[ 1226.988850][T14352] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1673'.
[ 1226.988882][T14352] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1673'.
[ 1227.840210][T14360] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1230.556396][ T8678] team0 (unregistering): Port device team_slave_1 removed
[ 1230.643399][ T8678] team0 (unregistering): Port device team_slave_0 removed
[ 1232.059250][T14365] gretap1: entered allmulticast mode
[ 1232.145443][T14365] team0: Port device gretap1 added
[ 1232.269121][T14379] syzkaller0: entered promiscuous mode
[ 1232.269151][T14379] syzkaller0: entered allmulticast mode
[ 1232.690068][T14385] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1233.029637][T14378] tipc: Resetting bearer <eth:syzkaller0>
[ 1233.575268][T14378] tipc: Disabling bearer <eth:syzkaller0>
[ 1235.138515][ T5264] 8021q: adding VLAN 0 to HW filter on device eth11
[ 1236.078906][T14055] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1236.136579][T14055] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1236.140212][T14055] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1236.225979][T14055] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1236.235324][T14055] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1236.426904][T14055] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1236.524358][T14055] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1236.597617][T14055] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1237.496020][T14055] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1237.789626][T14055] 8021q: adding VLAN 0 to HW filter on device team0
[ 1237.819747][ T8680] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1237.819890][ T8680] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1237.883076][ T8678] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1237.883275][ T8678] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1242.134682][ T5264] 8021q: adding VLAN 0 to HW filter on device eth12
[ 1243.392597][T14055] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1243.829357][T14055] veth0_vlan: entered promiscuous mode
[ 1243.961397][T14055] veth1_vlan: entered promiscuous mode
[ 1244.042478][   T31] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[ 1244.068892][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1244.068972][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1244.178261][T14055] veth0_macvtap: entered promiscuous mode
[ 1244.207372][   T31] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1244.207406][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1244.232045][T14055] veth1_macvtap: entered promiscuous mode
[ 1244.330969][   T31] usb 2-1: config 0 descriptor??
[ 1244.350155][   T31] cp210x 2-1:0.0: cp210x converter detected
[ 1244.938179][T14055] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1245.050398][T14055] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1245.457917][   T31] usb 2-1: cp210x converter now attached to ttyUSB0
[ 1245.510702][   T31] usb 2-1: USB disconnect, device number 24
[ 1245.566232][ T8680] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1245.568311][ T1286] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1245.568709][ T1286] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1245.624007][ T8680] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1245.668227][   T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1246.808386][   T31] cp210x 2-1:0.0: device disconnected
[ 1248.036986][T13692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1248.037008][T13692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1248.114315][T14505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1706'.
[ 1248.629769][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1248.629786][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1249.081756][T14506] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[ 1250.806416][T14545] tipc: Started in network mode
[ 1250.806451][T14545] tipc: Node identity 7f000001, cluster identity 4711
[ 1250.851114][T14545] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1250.868448][T14545] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[ 1250.999391][T14545] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1251.140252][T14551] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1251.967063][ T9382] tipc: Node number set to 2130706433
[ 1255.917151][T14611] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1255.953883][T14611] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1255.976211][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1726'.
[ 1256.833534][T14626] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1260.010392][T14684] syzkaller0: entered promiscuous mode
[ 1260.010420][T14684] syzkaller0: entered allmulticast mode
[ 1260.257200][T14688] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1260.322758][T14683] tipc: Resetting bearer <eth:syzkaller0>
[ 1260.616588][T14683] tipc: Disabling bearer <eth:syzkaller0>
[ 1261.680090][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1749'.
[ 1266.214622][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1763'.
[ 1272.124662][T14842] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1777'.
[ 1277.314273][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1791'.
[ 1286.946514][T15040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1824'.
[ 1290.432536][  T821] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[ 1290.615073][  T821] usb 7-1: device descriptor read/64, error -71
[ 1291.586633][  T821] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[ 1291.732525][  T821] usb 7-1: device descriptor read/64, error -71
[ 1291.873971][  T821] usb usb7-port1: attempt power cycle
[ 1293.085224][T15131] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1293.122448][  T821] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[ 1293.303177][  T821] usb 7-1: device descriptor read/8, error -71
[ 1298.355222][T15175] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1298.624250][T15179] serio: Serial port ttyS3
[ 1298.692398][ T9382] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[ 1298.952563][ T9382] usb 7-1: device descriptor read/64, error -71
[ 1299.192361][ T9382] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[ 1299.352521][ T9382] usb 7-1: device descriptor read/64, error -71
[ 1299.462828][ T9382] usb usb7-port1: attempt power cycle
[ 1300.782404][ T9382] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[ 1300.804745][ T9382] usb 7-1: device descriptor read/8, error -71
[ 1301.908529][ T9382] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[ 1302.342629][ T9382] usb 7-1: device descriptor read/8, error -71
[ 1302.349925][T15217] tipc: Started in network mode
[ 1302.349960][T15217] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[ 1302.383815][T15217] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[ 1302.384321][T15217] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1302.462894][ T9382] usb usb7-port1: unable to enumerate USB device
[ 1303.390711][T15150] tipc: Node number set to 1
[ 1305.738944][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1305.739018][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1306.089697][T15264] binder: 15261:15264 unknown command 0
[ 1306.089883][T15264] binder: 15261:15264 ioctl c0306201 200000000080 returned -22
[ 1317.704502][T15368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1905'.
[ 1322.748181][T15431] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1921'.
[ 1326.310710][T15468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1935'.
[ 1328.142437][T12517] Bluetooth: hci2: command 0x0406 tx timeout
[ 1339.392428][ T5613] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[ 1339.578566][ T5613] usb 3-1: no configurations
[ 1339.578601][ T5613] usb 3-1: can't read configurations, error -22
[ 1340.243857][ T5613] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[ 1340.403124][ T5613] usb 3-1: no configurations
[ 1340.403144][ T5613] usb 3-1: can't read configurations, error -22
[ 1340.403641][ T5613] usb usb3-port1: attempt power cycle
[ 1340.403677][T15576] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1969'.
[ 1340.742469][ T5613] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[ 1340.763811][ T5613] usb 3-1: no configurations
[ 1340.763831][ T5613] usb 3-1: can't read configurations, error -22
[ 1342.362510][ T5613] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[ 1342.384108][ T5613] usb 3-1: no configurations
[ 1342.384131][ T5613] usb 3-1: can't read configurations, error -22
[ 1342.384517][ T5613] usb usb3-port1: unable to enumerate USB device
[ 1347.421546][T15617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1985'.
[ 1353.345196][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2003'.
[ 1353.941342][T15676] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1357.108479][T15706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2014'.
[ 1358.163559][T15739] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1362.321306][T15770] veth0: entered promiscuous mode
[ 1362.328256][T15770] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2035'.
[ 1362.454303][T15770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1362.633608][T15770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1362.690300][T15770] bond0 (unregistering): Released all slaves
[ 1362.932372][T15769] veth0: left promiscuous mode
[ 1367.117255][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1367.117312][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1368.804249][ T9543] IPVS: starting estimator thread 0...
[ 1368.893413][T15835] IPVS: using max 9 ests per chain, 21600 per kthread
[ 1371.709781][T15862] netlink: 1024 bytes leftover after parsing attributes in process `syz.6.2068'.
[ 1373.757172][T15874] batman_adv: batadv0: Adding interface: dummy0
[ 1373.757191][T15874] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1373.757226][T15874] batman_adv: batadv0: Interface activated: dummy0
[ 1374.899919][T15877] batadv0: mtu less than device minimum
[ 1374.927795][T15877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1374.964394][T15877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1375.010849][T15877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1375.045206][T15877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1375.059174][T15877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1375.087264][T15877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1375.106440][T15877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1375.111682][T15877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1375.143912][T15877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1379.253252][T15941] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2089'.
[ 1380.755047][ T8675] nci: nci_add_new_protocol: the target found does not have the desired protocol
[ 1382.658932][T15974] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2100'.
[ 1383.513315][T15946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1387.189260][T16010] syzkaller0: entered promiscuous mode
[ 1387.189285][T16010] syzkaller0: entered allmulticast mode
[ 1387.210500][T16010] tipc: Started in network mode
[ 1387.210523][T16010] tipc: Node identity 7632b1fedfbc, cluster identity 4711
[ 1387.242749][T16010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1387.274181][T16009] tipc: Resetting bearer <eth:syzkaller0>
[ 1387.332505][   T31] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[ 1387.434248][T16009] tipc: Disabling bearer <eth:syzkaller0>
[ 1387.485664][   T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1387.485694][   T31] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1387.485733][   T31] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1387.485764][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1387.492044][   T31] usb 2-1: config 0 descriptor??
[ 1388.161575][T16029] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2120'.
[ 1390.034301][T16052] netlink: 'syz.7.2127': attribute type 13 has an invalid length.
[ 1390.130620][T12121] usb 2-1: USB disconnect, device number 25
[ 1390.325797][T15150] net_ratelimit: 10 callbacks suppressed
[ 1390.325817][T15150] ip6_tunnel: ip6gretap0: Local routing loop detected!
[ 1391.263307][ T9543] ip6_tunnel: ip6gretap0: Local routing loop detected!
[ 1391.723394][T16061] syzkaller0: entered promiscuous mode
[ 1391.723421][T16061] syzkaller0: entered allmulticast mode
[ 1391.725460][T16072] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1391.995773][T16073] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1393.403346][ T9543] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[ 1393.478911][T16106] netlink: zone id is out of range
[ 1393.478922][T16106] netlink: zone id is out of range
[ 1393.478928][T16106] netlink: zone id is out of range
[ 1393.478934][T16106] netlink: zone id is out of range
[ 1393.478940][T16106] netlink: zone id is out of range
[ 1393.478945][T16106] netlink: zone id is out of range
[ 1393.478951][T16106] netlink: zone id is out of range
[ 1393.481558][T16106] openvswitch: netlink: IP tunnel TTL not specified.
[ 1393.556292][ T9543] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1393.556319][ T9543] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1393.556359][ T9543] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1393.556383][ T9543] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1393.620169][ T9543] usb 7-1: config 0 descriptor??
[ 1394.295615][T16119] syzkaller0: entered promiscuous mode
[ 1394.295643][T16119] syzkaller0: entered allmulticast mode
[ 1394.384244][T16119] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1394.429836][T16116] tipc: Resetting bearer <eth:syzkaller0>
[ 1394.644925][T16116] tipc: Disabling bearer <eth:syzkaller0>
[ 1396.440511][ T9543] usb 7-1: USB disconnect, device number 12
[ 1398.961632][T16156] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1399.660961][T16175] net_ratelimit: 8 callbacks suppressed
[ 1399.660985][T16175] netlink: zone id is out of range
[ 1399.660995][T16175] netlink: zone id is out of range
[ 1399.661003][T16175] netlink: zone id is out of range
[ 1399.661011][T16175] netlink: zone id is out of range
[ 1399.661020][T16175] netlink: zone id is out of range
[ 1399.665951][T16175] openvswitch: netlink: IP tunnel TTL not specified.
[ 1401.505204][T16196] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1401.756061][T16187] tipc: Disabling bearer <eth:syzkaller0>
[ 1403.878503][T16211] syzkaller0: entered promiscuous mode
[ 1403.878531][T16211] syzkaller0: entered allmulticast mode
[ 1404.026430][T16213] netlink: zone id is out of range
[ 1404.026447][T16213] netlink: zone id is out of range
[ 1404.026455][T16213] netlink: zone id is out of range
[ 1404.026464][T16213] netlink: zone id is out of range
[ 1405.932792][T16233] syzkaller0: entered promiscuous mode
[ 1405.932817][T16233] syzkaller0: entered allmulticast mode
[ 1407.897735][T16244] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2191'.
[ 1408.129025][    C1] vcan0: j1939_tp_rxtimer: 0xffff888027af1800: rx timeout, send abort
[ 1408.455549][T16249] net_ratelimit: 2 callbacks suppressed
[ 1408.455568][T16249] netlink: zone id is out of range
[ 1408.455578][T16249] netlink: zone id is out of range
[ 1408.455587][T16249] netlink: zone id is out of range
[ 1408.455595][T16249] netlink: zone id is out of range
[ 1408.455603][T16249] netlink: zone id is out of range
[ 1408.496312][T16249] openvswitch: netlink: IP tunnel TTL not specified.
[ 1408.842364][   T31] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[ 1409.211827][   T31] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1409.211873][   T31] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1409.211896][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1409.928130][   T31] usb 3-1: config 0 descriptor??
[ 1413.292613][   T31] usb 3-1: USB disconnect, device number 14
[ 1413.694295][T16296] netlink: zone id is out of range
[ 1413.694306][T16296] netlink: zone id is out of range
[ 1413.694312][T16296] netlink: zone id is out of range
[ 1413.694318][T16296] netlink: zone id is out of range
[ 1413.694323][T16296] netlink: zone id is out of range
[ 1413.697414][T16296] openvswitch: netlink: IP tunnel TTL not specified.
[ 1417.696203][T16291] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1418.531889][T16328] netlink: zone id is out of range
[ 1418.531906][T16328] netlink: zone id is out of range
[ 1418.531990][T16328] netlink: zone id is out of range
[ 1418.532000][T16328] netlink: zone id is out of range
[ 1420.179184][T16337] syzkaller0: entered promiscuous mode
[ 1420.179214][T16337] syzkaller0: entered allmulticast mode
[ 1423.558678][T12121] IPVS: starting estimator thread 0...
[ 1423.573255][T16366] net_ratelimit: 2 callbacks suppressed
[ 1423.573277][T16366] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1423.652517][T16371] IPVS: using max 12 ests per chain, 28800 per kthread
[ 1425.506273][T16386] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2239'.
[ 1425.585759][T16387] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2239'.
[ 1427.987291][T16386] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1427.989802][T16386] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1428.384888][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1428.384958][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1428.436246][T16387] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1428.436358][T16387] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1428.436601][T16387] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1428.436692][T16387] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1428.680859][T16387] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2239'.
[ 1428.735321][T16387] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1428.736988][T16387] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1428.784163][T16397] syzkaller0: entered promiscuous mode
[ 1428.784190][T16397] syzkaller0: entered allmulticast mode
[ 1430.049517][T16412] vcan0: tx address claim with different name
[ 1435.765094][T16449] syzkaller0: entered promiscuous mode
[ 1435.765114][T16449] syzkaller0: entered allmulticast mode
[ 1444.176848][T16506] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1444.397206][T16510] netlink: 'syz.6.2278': attribute type 13 has an invalid length.
[ 1446.277420][T16504] tipc: Disabling bearer <eth:syzkaller0>
[ 1448.612445][T16511] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1448.621872][T16511] syzkaller0: entered promiscuous mode
[ 1448.621894][T16511] syzkaller0: entered allmulticast mode
[ 1451.067079][T16572] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1452.254929][T16571] tipc: Disabling bearer <eth:syzkaller0>
[ 1454.435491][T16602] vlan0: entered promiscuous mode
[ 1454.466866][T16603] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2304'.
[ 1454.585667][T16602] team0: Port device vlan0 added
[ 1454.792788][T16605] syzkaller0: entered promiscuous mode
[ 1454.792817][T16605] syzkaller0: entered allmulticast mode
[ 1458.363263][T16644] syzkaller0: entered promiscuous mode
[ 1458.363290][T16644] syzkaller0: entered allmulticast mode
[ 1462.456974][T16710] syzkaller0: entered promiscuous mode
[ 1462.457002][T16710] syzkaller0: entered allmulticast mode
[ 1463.447297][T16736] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2349'.
[ 1478.025743][T12517] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1478.080704][T12517] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1478.101753][T12517] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1478.163298][T12517] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1478.165067][T12517] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1478.610278][ T7919] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1478.697045][ T7919] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1478.719541][ T7919] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1478.720724][ T7919] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1478.721372][ T7919] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1479.907656][ T7919] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1479.921889][ T7919] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1479.931075][ T7919] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1479.962990][ T7919] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1480.055545][ T7919] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1480.330642][ T7919] Bluetooth: hci4: command tx timeout
[ 1480.871662][ T7919] Bluetooth: hci5: command tx timeout
[ 1481.089555][ T7919] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1481.204158][ T7919] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1481.249260][ T7919] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1481.266670][ T7919] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1481.331597][ T7919] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1482.276268][T12517] Bluetooth: hci7: command tx timeout
[ 1482.382496][T12517] Bluetooth: hci4: command tx timeout
[ 1482.999136][T12517] Bluetooth: hci5: command tx timeout
[ 1483.423799][T12517] Bluetooth: hci8: command tx timeout
[ 1483.814148][ T1286] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1484.188787][T16829] netlink: 'syz.7.2368': attribute type 21 has an invalid length.
[ 1484.188884][T16829] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2368'.
[ 1484.302970][T12517] Bluetooth: hci7: command tx timeout
[ 1484.462457][T12517] Bluetooth: hci4: command tx timeout
[ 1484.741095][T16829] netlink: 'syz.7.2368': attribute type 21 has an invalid length.
[ 1484.741116][T16829] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2368'.
[ 1484.959880][ T1286] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1485.021084][ T8683] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1485.022402][T12517] Bluetooth: hci5: command tx timeout
[ 1485.071812][ T8683] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1485.111114][ T8673] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1485.140987][ T8673] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1485.439695][ T1286] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1485.512360][T12517] Bluetooth: hci8: command tx timeout
[ 1485.880490][ T1286] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1486.382358][T12517] Bluetooth: hci7: command tx timeout
[ 1486.542476][T12517] Bluetooth: hci4: command tx timeout
[ 1486.974800][T16778] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1486.975289][T16778] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1486.975783][T16778] bridge_slave_0: entered allmulticast mode
[ 1486.978113][T16778] bridge_slave_0: entered promiscuous mode
[ 1487.075857][T16778] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1487.076200][T16778] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1487.076333][T16778] bridge_slave_1: entered allmulticast mode
[ 1487.078080][T16778] bridge_slave_1: entered promiscuous mode
[ 1487.079595][T16795] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1487.079720][T16795] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1487.079863][T16795] bridge_slave_0: entered allmulticast mode
[ 1487.081639][T16795] bridge_slave_0: entered promiscuous mode
[ 1487.102353][T12517] Bluetooth: hci5: command tx timeout
[ 1487.181806][T16795] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1487.181934][T16795] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1487.182287][T16795] bridge_slave_1: entered allmulticast mode
[ 1487.190205][T16795] bridge_slave_1: entered promiscuous mode
[ 1487.472669][ T1286] bridge_slave_1: left allmulticast mode
[ 1487.472696][ T1286] bridge_slave_1: left promiscuous mode
[ 1487.472880][ T1286] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1487.574909][ T1286] bridge_slave_0: left allmulticast mode
[ 1487.574944][ T1286] bridge_slave_0: left promiscuous mode
[ 1487.575195][ T1286] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1487.582598][T12517] Bluetooth: hci8: command tx timeout
[ 1488.462365][T12517] Bluetooth: hci7: command tx timeout
[ 1488.554237][ T1286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1488.633117][ T1286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1488.674762][ T1286] bond0 (unregistering): Released all slaves
[ 1488.746575][T16784] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1488.746680][T16784] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1488.746842][T16784] bridge_slave_0: entered allmulticast mode
[ 1488.748975][T16784] bridge_slave_0: entered promiscuous mode
[ 1488.825099][T16778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1488.861327][T16789] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1488.861431][T16789] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1488.861569][T16789] bridge_slave_0: entered allmulticast mode
[ 1488.872796][T16789] bridge_slave_0: entered promiscuous mode
[ 1488.894534][T16784] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1488.894639][T16784] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1488.894787][T16784] bridge_slave_1: entered allmulticast mode
[ 1488.937317][T16784] bridge_slave_1: entered promiscuous mode
[ 1488.964529][T16778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1488.969194][T16795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1488.970834][T16789] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1488.970970][T16789] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1488.971124][T16789] bridge_slave_1: entered allmulticast mode
[ 1488.988244][T16789] bridge_slave_1: entered promiscuous mode
[ 1489.086370][T16795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1489.120230][ T1286] tipc: Left network mode
[ 1489.169930][T16784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1489.177512][T16778] team0: Port device team_slave_0 added
[ 1489.214492][T16789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1489.218035][T16784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1489.221099][T16778] team0: Port device team_slave_1 added
[ 1489.232034][T16795] team0: Port device team_slave_0 added
[ 1489.256511][T16789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1489.323074][T16795] team0: Port device team_slave_1 added
[ 1489.474246][T16784] team0: Port device team_slave_0 added
[ 1489.475137][T16778] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1489.475152][T16778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1489.475182][T16778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1489.547271][T16784] team0: Port device team_slave_1 added
[ 1489.549663][T16789] team0: Port device team_slave_0 added
[ 1489.550597][T16778] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1489.550612][T16778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1489.550643][T16778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1489.610740][T16795] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1489.610754][T16795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1489.610777][T16795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1489.619275][T16789] team0: Port device team_slave_1 added
[ 1489.662430][T12517] Bluetooth: hci8: command tx timeout
[ 1489.836484][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1489.836541][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1489.864884][T16795] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1489.864898][T16795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1489.864919][T16795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1489.867649][T16784] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1489.867671][T16784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1489.867692][T16784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1490.304822][T16784] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1490.304837][T16784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1490.304858][T16784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1490.361748][T16789] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1490.361766][T16789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1490.361790][T16789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1490.497746][T16789] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1490.497760][T16789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1490.497779][T16789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1490.596181][T16778] hsr_slave_0: entered promiscuous mode
[ 1490.597219][T16778] hsr_slave_1: entered promiscuous mode
[ 1490.597907][T16778] debugfs: 'hsr0' already exists in 'hsr'
[ 1490.597925][T16778] Cannot create hsr debugfs directory
[ 1490.767903][T16795] hsr_slave_0: entered promiscuous mode
[ 1490.768832][T16795] hsr_slave_1: entered promiscuous mode
[ 1490.769524][T16795] debugfs: 'hsr0' already exists in 'hsr'
[ 1490.769541][T16795] Cannot create hsr debugfs directory
[ 1490.924319][T16784] hsr_slave_0: entered promiscuous mode
[ 1490.925660][T16784] hsr_slave_1: entered promiscuous mode
[ 1490.926379][T16784] debugfs: 'hsr0' already exists in 'hsr'
[ 1490.926396][T16784] Cannot create hsr debugfs directory
[ 1490.987585][T16789] hsr_slave_0: entered promiscuous mode
[ 1490.988603][T16789] hsr_slave_1: entered promiscuous mode
[ 1490.989273][T16789] debugfs: 'hsr0' already exists in 'hsr'
[ 1490.989290][T16789] Cannot create hsr debugfs directory
[ 1491.322703][ T1286] hsr_slave_0: left promiscuous mode
[ 1491.362601][ T1286] hsr_slave_1: left promiscuous mode
[ 1491.363726][ T1286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1491.363743][ T1286] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1491.403320][ T1286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1491.403348][ T1286] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1491.483443][ T1286] veth1_macvtap: left promiscuous mode
[ 1491.483510][ T1286] veth0_macvtap: left promiscuous mode
[ 1491.483685][ T1286] veth1_vlan: left promiscuous mode
[ 1492.093029][ T1286] team0 (unregistering): Port device vlan0 removed
[ 1492.213026][ T1286] team0 (unregistering): Port device team_slave_1 removed
[ 1492.273526][ T1286] team0 (unregistering): Port device team_slave_0 removed
[ 1492.760599][T16871] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1494.115249][ T5264] 8021q: adding VLAN 0 to HW filter on device eth17
[ 1495.118224][ T5264] 8021q: adding VLAN 0 to HW filter on device eth18
[ 1495.363302][T16921] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2378'.
[ 1495.511876][ T1286] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1496.007801][ T5264] 8021q: adding VLAN 0 to HW filter on device eth19
[ 1496.237185][ T1286] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1496.907822][ T1286] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1497.449395][ T5264] 8021q: adding VLAN 0 to HW filter on device eth20
[ 1497.740149][ T1286] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1501.050345][ T1286] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1501.611628][ T1286] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1502.441816][ T1286] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1503.119050][ T1286] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1504.842634][ T1286] bridge_slave_1: left allmulticast mode
[ 1504.842672][ T1286] bridge_slave_1: left promiscuous mode
[ 1504.842993][ T1286] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1505.006563][ T1286] bridge_slave_0: left allmulticast mode
[ 1505.006600][ T1286] bridge_slave_0: left promiscuous mode
[ 1505.006878][ T1286] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1506.312560][ T1286] bridge_slave_1: left allmulticast mode
[ 1506.312588][ T1286] bridge_slave_1: left promiscuous mode
[ 1506.312788][ T1286] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1506.453598][ T1286] bridge_slave_0: left allmulticast mode
[ 1506.453636][ T1286] bridge_slave_0: left promiscuous mode
[ 1506.453835][ T1286] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1507.653239][ T1286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1507.733061][ T1286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1507.754576][ T1286] bond0 (unregistering): Released all slaves
[ 1509.282707][ T1286] tipc: Disabling bearer <udp:syz2>
[ 1509.285172][ T1286] tipc: Disabling bearer <udp:syz0>
[ 1509.285450][ T1286] tipc: Left network mode
[ 1509.454528][T17126] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2394'.
[ 1509.905575][ T1286] tipc: Disabling bearer <udp:syz0>
[ 1509.905774][ T1286] tipc: Left network mode
[ 1512.647878][T16778] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1512.710064][T16778] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1512.726534][T16778] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1512.756361][T16778] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1512.786158][T16778] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1512.827625][T16778] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1513.111783][T16778] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1513.156497][T16778] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1513.626083][T16795] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1513.731190][T16795] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1513.798169][T16795] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1513.900582][T16795] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1514.080386][T16795] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1514.131936][T16795] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1514.284333][T16795] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1514.347356][T16795] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1514.704240][ T1286] hsr_slave_0: left promiscuous mode
[ 1514.743947][ T1286] hsr_slave_1: left promiscuous mode
[ 1514.745005][ T1286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1514.745031][ T1286] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1514.803442][ T1286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1514.803470][ T1286] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1515.012386][ T1286] hsr_slave_0: left promiscuous mode
[ 1515.052397][ T1286] hsr_slave_1: left promiscuous mode
[ 1515.053542][ T1286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1515.053569][ T1286] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1515.113983][ T1286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1515.114008][ T1286] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1515.336894][ T1286] veth1_macvtap: left promiscuous mode
[ 1515.336984][ T1286] veth0_macvtap: left promiscuous mode
[ 1515.337217][ T1286] veth1_vlan: left promiscuous mode
[ 1515.337364][ T1286] veth0_vlan: left promiscuous mode
[ 1515.514284][ T1286] veth1_macvtap: left promiscuous mode
[ 1515.514393][ T1286] veth0_macvtap: left promiscuous mode
[ 1515.514654][ T1286] veth1_vlan: left promiscuous mode
[ 1515.514830][ T1286] veth0_vlan: left promiscuous mode
[ 1516.995443][ T1286] team0 (unregistering): Port device team_slave_1 removed
[ 1517.073443][ T1286] team0 (unregistering): Port device team_slave_0 removed
[ 1518.137552][ T1286] team0 (unregistering): Port device team_slave_1 removed
[ 1518.225448][ T1286] team0 (unregistering): Port device team_slave_0 removed
[ 1519.274228][T16784] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1519.324900][T16784] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1519.334251][T16784] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1519.384334][T16784] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1519.451661][T16784] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1519.498666][T16784] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1519.654592][T16784] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1519.753698][T16784] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1520.367616][T16778] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1520.519669][T16789] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1520.558956][T16789] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1520.575389][T16789] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1520.666972][T16789] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1520.721224][T16789] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1520.780259][T16789] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1520.904545][T16789] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1520.958868][T16789] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1521.025072][T16778] 8021q: adding VLAN 0 to HW filter on device team0
[ 1521.086791][ T8685] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1521.087001][ T8685] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1521.145834][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1521.145987][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1521.151564][T16795] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1521.457998][T16784] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1521.462473][T16795] 8021q: adding VLAN 0 to HW filter on device team0
[ 1521.665301][ T8683] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1521.665428][ T8683] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1521.806937][ T8673] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1521.807080][ T8673] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1521.830226][T16784] 8021q: adding VLAN 0 to HW filter on device team0
[ 1521.989375][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1521.989565][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1523.668434][T13696] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1523.668559][T13696] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1524.000651][T16789] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1524.158978][T16789] 8021q: adding VLAN 0 to HW filter on device team0
[ 1524.274712][ T1518] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1524.275873][ T1518] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1524.390257][ T1286] IPVS: stop unused estimator thread 0...
[ 1524.411220][ T8672] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1524.411380][ T8672] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1527.553104][T16778] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1527.868586][T16795] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1527.916578][T16784] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1527.934179][T16778] veth0_vlan: entered promiscuous mode
[ 1527.982076][T16778] veth1_vlan: entered promiscuous mode
[ 1528.243914][T16778] veth0_macvtap: entered promiscuous mode
[ 1528.274839][T16778] veth1_macvtap: entered promiscuous mode
[ 1528.402980][T16778] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1528.448465][T16778] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1528.509700][ T8683] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1528.511339][ T8683] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1528.531622][ T8683] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1528.546202][ T8683] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1528.728152][T16789] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1528.825434][ T5264] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1529.724207][ T8673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1529.724229][ T8673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1529.855866][T16795] veth0_vlan: entered promiscuous mode
[ 1529.861501][ T8677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1529.861522][ T8677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1529.870284][T16784] veth0_vlan: entered promiscuous mode
[ 1529.909219][T16789] veth0_vlan: entered promiscuous mode
[ 1529.952230][T16795] veth1_vlan: entered promiscuous mode
[ 1529.972023][T16784] veth1_vlan: entered promiscuous mode
[ 1530.011638][T16789] veth1_vlan: entered promiscuous mode
[ 1530.376953][T16784] veth0_macvtap: entered promiscuous mode
[ 1530.398846][T16795] veth0_macvtap: entered promiscuous mode
[ 1530.421734][T16789] veth0_macvtap: entered promiscuous mode
[ 1530.440985][T16784] veth1_macvtap: entered promiscuous mode
[ 1530.461886][T16795] veth1_macvtap: entered promiscuous mode
[ 1530.475557][T16789] veth1_macvtap: entered promiscuous mode
[ 1530.655148][T16784] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1530.693341][T16795] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1530.736341][T16789] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1530.756170][T16784] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1530.783334][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[ 1530.798020][T16795] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1530.947905][T17457] netlink: 'syz.7.2420': attribute type 2 has an invalid length.
[ 1530.949150][T17457] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2420'.
[ 1531.064230][T16789] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1531.069225][T17457] batman_adv: batadv0: Interface deactivated: dummy0
[ 1531.113291][T17457] batman_adv: batadv0: Removing interface: dummy0
[ 1531.230649][ T8685] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1531.252058][ T5264] 8021q: adding VLAN 0 to HW filter on device eth7
[ 1531.259322][ T8685] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1531.274804][ T8685] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1531.296552][ T8685] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1531.319303][ T8685] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1531.351522][ T8685] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1531.379443][ T8685] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1531.391745][ T8685] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1531.569081][ T8685] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1531.607340][ T8685] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1531.717128][ T8685] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1531.818222][ T8678] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1532.692679][T17476] overlayfs: missing 'lowerdir'
[ 1536.102954][ T8675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1536.102975][ T8675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1536.300529][ T8677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1536.300552][ T8677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1536.372030][ T8675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1536.372051][ T8675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1536.594948][ T8672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1536.594970][ T8672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1537.033921][ T8672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1537.033942][ T8672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1537.226116][ T8685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1537.226136][ T8685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1538.617406][T17540] syzkaller0: entered promiscuous mode
[ 1538.651337][T17540] syzkaller0: entered allmulticast mode
[ 1541.207642][T12517] Bluetooth: hci8: link tx timeout
[ 1541.207886][T12517] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.337681][ T7919] Bluetooth: hci8: link tx timeout
[ 1541.337700][ T7919] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.383337][ T7919] Bluetooth: hci8: link tx timeout
[ 1541.383356][ T7919] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.448014][T17577] Bluetooth: hci8: link tx timeout
[ 1541.448075][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.448394][T17577] Bluetooth: hci8: link tx timeout
[ 1541.448455][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.448923][T17577] Bluetooth: hci8: link tx timeout
[ 1541.448986][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.463162][T17577] Bluetooth: hci8: link tx timeout
[ 1541.463184][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.476094][T17577] Bluetooth: hci8: link tx timeout
[ 1541.476114][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.478688][T17577] Bluetooth: hci8: link tx timeout
[ 1541.478705][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.555232][T17577] Bluetooth: hci8: link tx timeout
[ 1541.555284][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.737532][T17577] Bluetooth: hci8: link tx timeout
[ 1541.737635][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.740529][T17577] Bluetooth: hci8: link tx timeout
[ 1541.740586][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.746798][T17577] Bluetooth: hci8: link tx timeout
[ 1541.746869][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.747504][T17577] Bluetooth: hci8: link tx timeout
[ 1541.747589][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.749355][T17577] Bluetooth: hci8: link tx timeout
[ 1541.749405][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.750084][T17577] Bluetooth: hci8: link tx timeout
[ 1541.750142][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.751022][T17577] Bluetooth: hci8: link tx timeout
[ 1541.751037][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.752965][T17577] Bluetooth: hci8: link tx timeout
[ 1541.753039][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.755775][T17577] Bluetooth: hci8: link tx timeout
[ 1541.755853][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.756282][T17577] Bluetooth: hci8: link tx timeout
[ 1541.756336][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.758066][T17577] Bluetooth: hci8: link tx timeout
[ 1541.758130][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.759604][T17577] Bluetooth: hci8: link tx timeout
[ 1541.759618][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.762884][T17577] Bluetooth: hci8: link tx timeout
[ 1541.762960][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.787274][T17577] Bluetooth: hci8: link tx timeout
[ 1541.787370][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.789616][T17577] Bluetooth: hci8: link tx timeout
[ 1541.789682][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.790260][T17577] Bluetooth: hci8: link tx timeout
[ 1541.790275][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.790969][T17577] Bluetooth: hci8: link tx timeout
[ 1541.790983][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.793173][T17577] Bluetooth: hci8: link tx timeout
[ 1541.793243][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.821217][T17577] Bluetooth: hci8: link tx timeout
[ 1541.822224][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.831180][T17577] Bluetooth: hci8: link tx timeout
[ 1541.831264][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.831817][T17577] Bluetooth: hci8: link tx timeout
[ 1541.831866][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.833096][T17577] Bluetooth: hci8: link tx timeout
[ 1541.833170][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.833232][T17577] Bluetooth: hci8: link tx timeout
[ 1541.833281][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.833940][T17577] Bluetooth: hci8: link tx timeout
[ 1541.833954][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.835090][T17577] Bluetooth: hci8: link tx timeout
[ 1541.835160][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.835650][T17577] Bluetooth: hci8: link tx timeout
[ 1541.835701][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.836290][T17577] Bluetooth: hci8: link tx timeout
[ 1541.836342][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.836773][T17577] Bluetooth: hci8: link tx timeout
[ 1541.836827][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.837951][T17577] Bluetooth: hci8: link tx timeout
[ 1541.838020][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.841611][T17577] Bluetooth: hci8: link tx timeout
[ 1541.841675][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.842271][T17577] Bluetooth: hci8: link tx timeout
[ 1541.842286][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.842909][T17577] Bluetooth: hci8: link tx timeout
[ 1541.842974][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.846915][T17577] Bluetooth: hci8: link tx timeout
[ 1541.846990][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.847899][T17577] Bluetooth: hci8: link tx timeout
[ 1541.847960][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.848516][T17577] Bluetooth: hci8: link tx timeout
[ 1541.848570][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.849428][T17577] Bluetooth: hci8: link tx timeout
[ 1541.849501][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.850235][T17577] Bluetooth: hci8: link tx timeout
[ 1541.850287][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.850877][T17577] Bluetooth: hci8: link tx timeout
[ 1541.850943][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.851610][T17577] Bluetooth: hci8: link tx timeout
[ 1541.851623][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.852552][T17577] Bluetooth: hci8: link tx timeout
[ 1541.852632][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.852657][T17577] Bluetooth: hci8: link tx timeout
[ 1541.852668][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.853320][T17577] Bluetooth: hci8: link tx timeout
[ 1541.853378][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.853938][T17577] Bluetooth: hci8: link tx timeout
[ 1541.854004][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.854619][T17577] Bluetooth: hci8: link tx timeout
[ 1541.854665][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.863628][T17577] Bluetooth: hci8: link tx timeout
[ 1541.863692][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.864605][T17577] Bluetooth: hci8: link tx timeout
[ 1541.864668][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.865220][T17577] Bluetooth: hci8: link tx timeout
[ 1541.865274][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.865860][T17577] Bluetooth: hci8: link tx timeout
[ 1541.865909][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.866491][T17577] Bluetooth: hci8: link tx timeout
[ 1541.866545][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.868035][T17577] Bluetooth: hci8: link tx timeout
[ 1541.868124][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.869378][T17577] Bluetooth: hci8: link tx timeout
[ 1541.869437][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.870390][T17577] Bluetooth: hci8: link tx timeout
[ 1541.870447][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.871536][T17577] Bluetooth: hci8: link tx timeout
[ 1541.871593][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.877188][T17577] Bluetooth: hci8: link tx timeout
[ 1541.877257][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.883783][T17577] Bluetooth: hci8: link tx timeout
[ 1541.883801][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.884814][T17577] Bluetooth: hci8: link tx timeout
[ 1541.884914][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.886136][T17577] Bluetooth: hci8: link tx timeout
[ 1541.886150][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.887180][T17577] Bluetooth: hci8: link tx timeout
[ 1541.887243][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.888088][T17577] Bluetooth: hci8: link tx timeout
[ 1541.888159][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.895705][T17577] Bluetooth: hci8: link tx timeout
[ 1541.895724][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.896245][T17577] Bluetooth: hci8: link tx timeout
[ 1541.896315][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.896803][T17577] Bluetooth: hci8: link tx timeout
[ 1541.896868][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.897275][T17577] Bluetooth: hci8: link tx timeout
[ 1541.897328][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.897886][T17577] Bluetooth: hci8: link tx timeout
[ 1541.897940][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.899441][T17577] Bluetooth: hci8: link tx timeout
[ 1541.899509][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.900029][T17577] Bluetooth: hci8: link tx timeout
[ 1541.900044][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.900503][T17577] Bluetooth: hci8: link tx timeout
[ 1541.900568][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.901490][T17577] Bluetooth: hci8: link tx timeout
[ 1541.901557][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.902466][T17577] Bluetooth: hci8: link tx timeout
[ 1541.902480][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.903901][T17577] Bluetooth: hci8: link tx timeout
[ 1541.903980][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.904833][T17577] Bluetooth: hci8: link tx timeout
[ 1541.904894][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.905497][T17577] Bluetooth: hci8: link tx timeout
[ 1541.905750][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.907582][T17577] Bluetooth: hci8: link tx timeout
[ 1541.907629][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.908085][T17577] Bluetooth: hci8: link tx timeout
[ 1541.908132][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.908919][T17577] Bluetooth: hci8: link tx timeout
[ 1541.908988][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.909939][T17577] Bluetooth: hci8: link tx timeout
[ 1541.910005][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.910832][T17577] Bluetooth: hci8: link tx timeout
[ 1541.910915][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.913571][T17577] Bluetooth: hci8: link tx timeout
[ 1541.913631][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.919046][T17577] Bluetooth: hci8: link tx timeout
[ 1541.919102][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.919355][T17577] Bluetooth: hci8: link tx timeout
[ 1541.919418][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.920412][T17577] Bluetooth: hci8: link tx timeout
[ 1541.920428][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.921181][T17577] Bluetooth: hci8: link tx timeout
[ 1541.921260][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.922506][T17577] Bluetooth: hci8: link tx timeout
[ 1541.922564][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.923290][T17577] Bluetooth: hci8: link tx timeout
[ 1541.923345][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.929332][T17577] Bluetooth: hci8: link tx timeout
[ 1541.929402][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.930086][T17577] Bluetooth: hci8: link tx timeout
[ 1541.930158][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.931388][T17577] Bluetooth: hci8: link tx timeout
[ 1541.931456][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.932542][T17577] Bluetooth: hci8: link tx timeout
[ 1541.932594][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.932675][T17577] Bluetooth: hci8: link tx timeout
[ 1541.932721][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.940544][T17577] Bluetooth: hci8: link tx timeout
[ 1541.941086][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.941259][T17577] Bluetooth: hci8: link tx timeout
[ 1541.941329][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.941579][T17577] Bluetooth: hci8: link tx timeout
[ 1541.941656][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.942955][T17577] Bluetooth: hci8: link tx timeout
[ 1541.943011][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.944398][T17577] Bluetooth: hci8: link tx timeout
[ 1541.944448][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.945000][T17577] Bluetooth: hci8: link tx timeout
[ 1541.945085][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.945799][T17577] Bluetooth: hci8: link tx timeout
[ 1541.945891][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.946390][T17577] Bluetooth: hci8: link tx timeout
[ 1541.946458][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.947141][T17577] Bluetooth: hci8: link tx timeout
[ 1541.947232][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.948426][T17577] Bluetooth: hci8: link tx timeout
[ 1541.948493][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.949263][T17577] Bluetooth: hci8: link tx timeout
[ 1541.949397][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.951195][T17577] Bluetooth: hci8: link tx timeout
[ 1541.951287][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.951462][T17577] Bluetooth: hci8: link tx timeout
[ 1541.951475][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.952678][T17577] Bluetooth: hci8: link tx timeout
[ 1541.952747][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.953461][T17577] Bluetooth: hci8: link tx timeout
[ 1541.953522][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.954387][T17577] Bluetooth: hci8: link tx timeout
[ 1541.954452][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.954968][T17577] Bluetooth: hci8: link tx timeout
[ 1541.955025][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.955906][T17577] Bluetooth: hci8: link tx timeout
[ 1541.955971][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.956337][T17577] Bluetooth: hci8: link tx timeout
[ 1541.956352][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.957955][T17577] Bluetooth: hci8: link tx timeout
[ 1541.958017][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.958559][T17577] Bluetooth: hci8: link tx timeout
[ 1541.958616][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1541.982508][T17577] Bluetooth: hci8: link tx timeout
[ 1541.982528][T17577] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1542.075403][T17579] Bluetooth: hci8: link tx timeout
[ 1542.075471][T17579] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1542.075595][T17579] Bluetooth: hci8: link tx timeout
[ 1542.075608][T17579] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1542.135256][T17579] Bluetooth: hci8: link tx timeout
[ 1542.135314][T17579] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1543.342384][T17579] Bluetooth: hci8: command 0x0406 tx timeout
[ 1546.183817][T17623] netlink: zone id is out of range
[ 1546.183832][T17623] netlink: zone id is out of range
[ 1546.183852][T17623] netlink: zone id is out of range
[ 1546.183860][T17623] netlink: zone id is out of range
[ 1546.444754][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1547.091010][   T37] audit: type=1326 audit(1780412477.960:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17617 comm="syz.3.2452" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b5d9ece59 code=0x0
[ 1547.650094][T17659] overlayfs: missing 'lowerdir'
[ 1548.132509][T17666] overlayfs: missing 'lowerdir'
[ 1549.686713][T17677] netlink: zone id is out of range
[ 1549.686724][T17677] netlink: zone id is out of range
[ 1549.686729][T17677] netlink: zone id is out of range
[ 1549.686734][T17677] netlink: zone id is out of range
[ 1550.381706][T17687] syzkaller0: entered promiscuous mode
[ 1550.381736][T17687] syzkaller0: entered allmulticast mode
[ 1551.613679][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1554.495648][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1558.010163][ T5264] 8021q: adding VLAN 0 to HW filter on device eth8
[ 1574.148307][T17579] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1574.211581][T17579] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1574.227664][T17579] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1574.254854][T17579] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1574.271696][T17579] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1577.606428][T12517] Bluetooth: hci1: command tx timeout
[ 1578.487214][T17579] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1578.708239][T17579] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1578.743392][T17579] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1578.789959][T17579] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1578.871290][T17579] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1579.858995][T17579] Bluetooth: hci1: command tx timeout
[ 1581.591514][T12517] Bluetooth: hci2: command tx timeout
[ 1582.122860][T12517] Bluetooth: hci1: command tx timeout
[ 1583.932920][T12517] Bluetooth: hci2: command tx timeout
[ 1584.364922][T17579] Bluetooth: hci1: command tx timeout
[ 1586.184366][T12517] Bluetooth: hci2: command tx timeout
[ 1586.244072][T12517] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1586.862983][T17577] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1587.227587][T17577] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1587.369033][T12517] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1587.394112][T17577] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1587.581826][T12517] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1587.717159][T17577] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1587.721194][T17577] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1588.437249][T17579] Bluetooth: hci2: command tx timeout
[ 1588.904902][T12517] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1588.951129][T17577] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1589.085775][T17577] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1589.107285][T17577] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1589.139871][T17577] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1589.160379][T17577] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1589.555740][T12517] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1590.280472][ T7919] Bluetooth: hci6: command tx timeout
[ 1591.690970][T12517] Bluetooth: hci9: command tx timeout
[ 1592.518683][T12517] Bluetooth: hci6: command tx timeout
[ 1593.513069][T17713] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1594.250374][ T7919] Bluetooth: hci9: command tx timeout
[ 1594.763226][ T7919] Bluetooth: hci6: command tx timeout
[ 1595.109683][ T7919] Bluetooth: hci3: command tx timeout
[ 1596.929521][ T7919] Bluetooth: hci9: command tx timeout
[ 1597.026923][ T7919] Bluetooth: hci6: command tx timeout
[ 1597.362752][ T7919] Bluetooth: hci3: command tx timeout
[ 1599.184252][ T7919] Bluetooth: hci9: command tx timeout
[ 1599.615623][ T7919] Bluetooth: hci3: command tx timeout
[ 1601.868793][ T7919] Bluetooth: hci3: command tx timeout
[ 1609.246401][T17782] Bluetooth: hci4: command 0x0406 tx timeout
[ 1609.246447][T17782] Bluetooth: hci5: command 0x0406 tx timeout
[ 1609.321670][T17796] Bluetooth: hci7: command 0x0406 tx timeout
[ 1617.998412][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1618.002461][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1622.545993][T17713] usb 6-1: device descriptor read/64, error -110
[ 1635.087763][ T7919] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1635.181089][ T7919] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1635.183367][ T7919] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1635.236601][ T7919] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1635.239748][ T7919] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1635.530851][T17577] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1635.589461][T17577] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1635.618834][T17577] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1635.628750][T17577] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1635.650333][T17577] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1637.661927][T17579] Bluetooth: hci11: command tx timeout
[ 1638.102099][T17579] Bluetooth: hci10: command tx timeout
[ 1639.921864][T17579] Bluetooth: hci11: command tx timeout
[ 1640.456420][T17579] Bluetooth: hci10: command tx timeout
[ 1642.185154][T17579] Bluetooth: hci11: command tx timeout
[ 1642.683291][T17579] Bluetooth: hci10: command tx timeout
[ 1643.221626][T17577] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1643.285430][T17577] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1643.298273][T17577] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1643.299954][T17577] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1643.301627][T17577] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1644.066629][T17579] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 1644.131998][T17579] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 1644.198238][T17579] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 1644.201865][T17579] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 1644.203251][T17579] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1644.417005][T17577] Bluetooth: hci11: command tx timeout
[ 1644.837888][T17579] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 1644.915671][T17579] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 1644.918959][T17579] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 1644.922940][T17579] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 1644.923980][T17579] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 1644.939876][T17579] Bluetooth: hci10: command tx timeout
[ 1645.550622][T17577] Bluetooth: hci5: command tx timeout
[ 1646.427961][T17577] Bluetooth: hci12: command tx timeout
[ 1647.189340][T17577] Bluetooth: hci13: command tx timeout
[ 1647.795911][T17577] Bluetooth: hci5: command tx timeout
[ 1648.760690][T17577] Bluetooth: hci12: command tx timeout
[ 1649.453498][T17577] Bluetooth: hci13: command tx timeout
[ 1650.049150][T17577] Bluetooth: hci5: command tx timeout
[ 1651.013821][T17577] Bluetooth: hci12: command tx timeout
[ 1651.695313][T17577] Bluetooth: hci13: command tx timeout
[ 1651.984628][T17713] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1652.302598][T17577] Bluetooth: hci5: command tx timeout
[ 1653.255500][T17577] Bluetooth: hci12: command tx timeout
[ 1653.993847][T17577] Bluetooth: hci13: command tx timeout
[ 1660.710893][T17713] usb 6-1: device descriptor read/64, error -32
[ 1665.004122][T17713] usb usb6-port1: attempt power cycle
[ 1675.543355][T17579] Bluetooth: hci8: command 0x0406 tx timeout
[ 1684.462648][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1684.462730][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1687.708998][T17713] raw-gadget.0 gadget.5: failed to queue resume event
[ 1690.645676][T17713] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1694.626256][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[ 1694.748829][T17713] usb 6-1: device descriptor read/8, error -32
[ 1697.208665][T17713] raw-gadget.0 gadget.5: failed to queue suspend event
[ 1698.042118][T17579] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[ 1698.403394][T17579] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[ 1698.420869][T17579] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[ 1698.430994][T17579] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[ 1698.448723][T17579] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[ 1700.915603][T17579] Bluetooth: hci14: command tx timeout
[ 1701.011695][T17579] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[ 1701.070168][T17579] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[ 1701.100314][T17579] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[ 1701.106277][T17579] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[ 1701.116971][T17579] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[ 1703.168654][T17577] Bluetooth: hci14: command tx timeout
[ 1703.515307][T17577] Bluetooth: hci15: command tx timeout
[ 1703.715825][T17713] raw-gadget.0 gadget.5: failed to queue reset event
[ 1705.421771][T17577] Bluetooth: hci14: command tx timeout
[ 1705.768232][T17577] Bluetooth: hci15: command tx timeout
[ 1707.072302][T17713] raw-gadget.0 gadget.5: failed to queue resume event
[ 1707.685498][T17577] Bluetooth: hci14: command tx timeout
[ 1708.032059][T17577] Bluetooth: hci15: command tx timeout
[ 1708.440009][ T7919] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[ 1708.545259][ T7919] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[ 1708.547421][ T7919] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[ 1708.551697][ T7919] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[ 1708.576406][ T7919] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[ 1708.816166][ T7919] Bluetooth: hci1: command 0x0406 tx timeout
[ 1709.765312][T17796] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[ 1710.069636][T17796] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[ 1710.084919][T17796] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[ 1710.098903][T17796] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[ 1710.123658][T17796] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[ 1710.274419][T17796] Bluetooth: hci15: command tx timeout
[ 1710.705023][T17782] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[ 1710.801672][T17782] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[ 1710.851587][T17782] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[ 1710.870075][T17782] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[ 1710.873914][T17782] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[ 1713.095911][T17713] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1714.451977][T17796] Bluetooth: hci2: command 0x0406 tx timeout
[ 1714.797764][ T7919] Bluetooth: hci16: command tx timeout
[ 1714.808293][T17796] Bluetooth: hci18: command tx timeout
[ 1714.888597][T17579] Bluetooth: hci17: command tx timeout
[ 1717.131129][ T7919] Bluetooth: hci18: command tx timeout
[ 1717.141200][T17782] Bluetooth: hci17: command tx timeout
[ 1717.390222][T17782] Bluetooth: hci16: command tx timeout
[ 1719.177503][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[ 1719.200446][T17713] usb 6-1: device descriptor read/8, error -32
[ 1719.373099][ T7919] Bluetooth: hci18: command tx timeout
[ 1719.377203][T17782] Bluetooth: hci17: command tx timeout
[ 1719.635208][T17782] Bluetooth: hci16: command tx timeout
[ 1720.414122][   T38] INFO: task kworker/0:2:821 blocked for more than 143 seconds.
[ 1720.414165][   T38]       Not tainted syzkaller #0
[ 1720.414177][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1720.414189][   T38] task:kworker/0:2     state:D stack:19288 pid:821   tgid:821   ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1720.414261][   T38] Workqueue: events netdev_rx_mode_work
[ 1720.414297][   T38] Call Trace:
[ 1720.414305][   T38]  <TASK>
[ 1720.414334][   T38]  __schedule+0x16ec/0x5620
[ 1720.415354][   T38]  ? __lock_acquire+0x6b5/0x2cf0
[ 1720.415509][   T38]  ? __pfx___schedule+0x10/0x10
[ 1720.415561][   T38]  rt_mutex_schedule+0x76/0xf0
[ 1720.415593][   T38]  rt_mutex_slowlock_block+0x508/0x680
[ 1720.415644][   T38]  rt_mutex_slowlock+0x2dc/0x780
[ 1720.415676][   T38]  ? rt_mutex_slowlock+0x1fd/0x780
[ 1720.415706][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1720.415746][   T38]  ? netdev_rx_mode_work+0x1c/0x450
[ 1720.415784][   T38]  ? netdev_rx_mode_work+0x1c/0x450
[ 1720.415806][   T38]  mutex_lock_nested+0x168/0x1d0
[ 1720.415836][   T38]  ? process_scheduled_works+0xa70/0x1860
[ 1720.415864][   T38]  netdev_rx_mode_work+0x1c/0x450
[ 1720.415887][   T38]  ? process_scheduled_works+0xa70/0x1860
[ 1720.415911][   T38]  ? process_scheduled_works+0xa70/0x1860
[ 1720.415938][   T38]  process_scheduled_works+0xb5d/0x1860
[ 1720.415998][   T38]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1720.416032][   T38]  ? assign_work+0x3d5/0x5e0
[ 1720.416070][   T38]  worker_thread+0xa53/0xfc0
[ 1720.416127][   T38]  kthread+0x388/0x470
[ 1720.416158][   T38]  ? __pfx_worker_thread+0x10/0x10
[ 1720.416182][   T38]  ? __pfx_kthread+0x10/0x10
[ 1720.416215][   T38]  ret_from_fork+0x514/0xb70
[ 1720.416247][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1720.416273][   T38]  ? __switch_to+0xc79/0x1410
[ 1720.416311][   T38]  ? __pfx_kthread+0x10/0x10
[ 1720.416345][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1720.416408][   T38]  </TASK>
[ 1720.416620][   T38] INFO: task dhcpcd:5264 blocked for more than 143 seconds.
[ 1720.416639][   T38]       Not tainted syzkaller #0
[ 1720.416651][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1720.416662][   T38] task:dhcpcd          state:D stack:21464 pid:5264  tgid:5264  ppid:5263   task_flags:0x400140 flags:0x00080000
[ 1720.416726][   T38] Call Trace:
[ 1720.416734][   T38]  <TASK>
[ 1720.416748][   T38]  __schedule+0x16ec/0x5620
[ 1720.416815][   T38]  ? __pfx___schedule+0x10/0x10
[ 1720.416876][   T38]  rt_mutex_schedule+0x76/0xf0
[ 1720.416899][   T38]  rt_mutex_slowlock_block+0x508/0x680
[ 1720.416946][   T38]  rt_mutex_slowlock+0x2dc/0x780
[ 1720.416975][   T38]  ? rt_mutex_slowlock+0x1fd/0x780
[ 1720.417003][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1720.417029][   T38]  ? is_bpf_text_address+0x26/0x2b0
[ 1720.417078][   T38]  ? inet6_rtm_deladdr+0x23d/0x370
[ 1720.417109][   T38]  ? inet6_rtm_deladdr+0x23d/0x370
[ 1720.417142][   T38]  ? inet6_rtm_deladdr+0x23d/0x370
[ 1720.417166][   T38]  mutex_lock_nested+0x168/0x1d0
[ 1720.417200][   T38]  inet6_rtm_deladdr+0x23d/0x370
[ 1720.417247][   T38]  ? __pfx_inet6_rtm_deladdr+0x10/0x10
[ 1720.417292][   T38]  ? __pfx_inet6_rtm_deladdr+0x10/0x10
[ 1720.417319][   T38]  rtnetlink_rcv_msg+0x7d5/0xbe0
[ 1720.417348][   T38]  ? kasan_save_track+0x3e/0x80
[ 1720.417377][   T38]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1720.417407][   T38]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1720.417439][   T38]  ? __lock_acquire+0x6b5/0x2cf0
[ 1720.417484][   T38]  netlink_rcv_skb+0x232/0x4b0
[ 1720.417520][   T38]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1720.417566][   T38]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1720.417703][   T38]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1720.417737][   T38]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1720.417777][   T38]  netlink_unicast+0x780/0x920
[ 1720.417821][   T38]  netlink_sendmsg+0x813/0xb40
[ 1720.417867][   T38]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1720.417917][   T38]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1720.417946][   T38]  ____sys_sendmsg+0x94c/0x9c0
[ 1720.417987][   T38]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1720.418033][   T38]  ? import_iovec+0x73/0xa0
[ 1720.418083][ [ 1720.418083][   T38]  ___sys_sendmsg+0x2a5/0x360
[ 1720.418123][   T38]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1720.418165][   T38]  ? count_memcg_event_mm+0x21/0x260
[ 1720.418224][   T38]  ? handle_mm_fault+0xec/0x1400
[ 1720.418252][   T38]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1720.418287][   T38]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 1720.418327][   T38]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1720.418376][   T38]  ? do_user_addr_fault+0xc6f/0x1340
[ 1720.418412][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1720.418439][   T38]  do_syscall_64+0x174/0x580
[ 1720.418520][   T38]  ? trace_irq_disable+0x3b/0x140
[ 1720.418548][   T38]  ? clear_bhb_loop+0x40/0x90
[ 1720.418577][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1720.418622][   T38] RIP: 0033:0x7f0120ee5407
[ 1720.418648][   T38] RSP: 002b:00007fff226f51d0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e
[ 1720.418763][   T38] RAX: ffffffffffffffda RBX: 00007f0120e5b780 RCX: 00007f0120ee5407
[ 1720.418782][   T38] RDX: 0000000000000000 RSI: 00007fff227093b0 RDI: 0000000000000004
[ 1720.418798][   T38] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1720.418813][   T38] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff227195e0
[ 1720.418828][   T38] R13: 00007f0120e5b708 R14: 000000000000002c R15: 00007fff227093b0
[ 1720.418865][   T38]  </TASK>
[ 1720.418914][   T38] INFO: task kworker/u8:3:13695 blocked for more than 143 seconds.
[ 1720.418932][   T38]       Not tainted syzkaller #0
[ 1720.418944][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1720.418954][   T38] task:kworker/u8:3    state:D stack:22296 pid:13695 tgid:13695 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1720.419016][   T38] Workqueue: events_unbound linkwatch_event
[ 1720.419040][   T38] Call Trace:
[ 1720.419048][   T38]  <TASK>
[ 1720.419069][   T38]  __schedule+0x16ec/0x5620
[ 1720.419136][   T38]  ? __pfx___schedule+0x10/0x10
[ 1720.419186][   T38]  rt_mutex_schedule+0x76/0xf0
[ 1720.419210][   T38]  rt_mutex_slowlock_block+0x508/0x680
[ 1720.419258][   T38]  rt_mutex_slowlock+0x2dc/0x780
[ 1720.419290][   T38]  ? rt_mutex_slowlock+0x1fd/0x780
[ 1720.419320][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1720.419360][   T38]  ? linkwatch_event+0xe/0x60
[ 1720.419397][   T38]  ? linkwatch_event+0xe/0x60
[ 1720.419417][   T38]  mutex_lock_nested+0x168/0x1d0
[ 1720.419446][   T38]  ? process_scheduled_works+0xa70/0x1860
[ 1720.419474][   T38]  linkwatch_event+0xe/0x60
[ 1720.419495][   T38]  process_scheduled_works+0xb5d/0x1860
[ 1720.419556][   T38]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1720.419589][   T38]  ? assign_work+0x3d5/0x5e0
[ 1720.419625][   T38]  worker_thread+0xa53/0xfc0
[ 1720.419696][   T38]  kthread+0x388/0x470
[ 1720.419728][   T38]  ? __pfx_worker_thread+0x10/0x10
[ 1720.419853][   T38]  ? __pfx_kthread+0x10/0x10
[ 1720.419888][   T38]  ret_from_fork+0x514/0xb70
[ 1720.419919][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1720.419944][   T38]  ? __switch_to+0xc79/0x1410
[ 1720.419983][   T38]  ? __pfx_kthread+0x10/0x10
[ 1720.420017][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1720.420071][   T38]  </TASK>
[ 1720.420146][   T38] 
[ 1720.420146][   T38] Showing all locks held in the system:
[ 1720.420159][   T38] 3 locks held by rcuc/1/28:
[ 1720.420173][   T38] 4 locks held by ktimers/1/29:
[ 1720.420186][   T38] 3 locks held by kworker/1:0/31:
[ 1720.420199][   T38]  #0: ffff88801a037938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1720.420263][   T38]  #1: ffffc90000a5fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1720.420321][   T38]  #2: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[ 1720.420390][   T38] 1 lock held by khungtaskd/38:
[ 1720.420403][   T38]  #0: ffffffff8dfc8000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1720.420472][   T38] 3 locks held by kworker/0:2/821:
[ 1720.420485][   T38]  #0: ffff88801a037938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1720.420542][   T38]  #1: ffffc900051cfc40 (rx_mode_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1720.420598][   T38]  #2: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: netdev_rx_mode_work+0x1c/0x450
[ 1720.420669][   T38] 1 lock held by dhcpcd/5264:
[ 1720.420682][   T38]  #0: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_deladdr+0x23d/0x370
[ 1720.420740][   T38] 2 locks held by getty/5354:
[ 1720.420752][   T38]  #0: ffff8880374a60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1720.420822][   T38]  #1: ffffc90003cb32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0
[ 1720.420979][   T38] 11 locks held by kworker/1:5/5738:
[ 1720.420993][   T38] 2 locks held by kworker/1:6/5739:
[ 1720.421007][   T38] 6 locks held by kworker/1:8/8054:
[ 1720.421023][   T38] 3 locks held by kworker/1:9/9543:
[ 1720.421036][   T38]  #0: ffff88801a036538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1720.421102][   T38]  #1: ffffc9000480fc40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1720.421159][   T38]  #2: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xab/0x1090
[ 1720.421230][   T38] 3 locks held by kworker/u8:3/13695:
[ 1720.421243][   T38]  #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1720.421301][   T38]  #1: ffffc900051bfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1720.421357][   T38]  #2: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 1720.421415][   T38] 12 locks held by kworker/1:7/17548:
[ 1720.421430][   T38] 1 lock held by syz.7.2465/17679:
[ 1720.421443][   T38]  #0: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0
[ 1720.421508][   T38] 1 lock held by syz.5.2470/17706:
[ 1720.421521][   T38]  #0: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0
[ 1720.421586][   T38] 1 lock held by syz.4.2472/17709:
[ 1720.421600][   T38]  #0: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0
[ 1720.421663][   T38] 1 lock held by syz.4.2472/17712:
[ 1720.421676][   T38]  #0: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0
[ 1720.421740][   T38] 1 lock held by syz.4.2472/17717:
[ 1720.421752][   T38]  #0: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[ 1720.421813][   T38] 9 locks held by kworker/1:11/17713:
[ 1720.421827][   T38] 2 locks held by syz.0.2473/17719:
[ 1720.421839][   T38]  #0: ffffffff8f3bfc40 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1720.421907][   T38]  #1: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x8a0
[ 1720.422054][   T38] 1 lock held by syz-executor/17730:
[ 1720.422075][   T38]  #0: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1720.422140][   T38] 1 lock held by syz-executor/17734:
[ 1720.422154][   T38]  #0: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1720.422218][   T38] 3 locks held by kworker/u8:8/17754:
[ 1720.422231][   T38]  #0: ffff888032c47938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1720.422288][   T38]  #1: ffffc900043afc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1720.422347][   T38]  #2: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[ 1720.422400][   T38] 2 locks held by kworker/1:12/17756:
[ 1720.422414][   T38] 1 lock held by syz-executor/17775:
[ 1720.422426][   T38]  #0: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1720.422489][   T38] 1 lock held by syz-executor/17777:
[ 1720.422502][   T38]  #0: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1720.422564][   T38] 1 lock held by syz-executor/17780:
[ 1720.422577][   T38]  #0: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1720.422641][   T38] 1 lock held by syz-executor/17800:
[ 1720.422653][   T38]  #0: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1720.422715][   T38] 1 lock held by syz-executor/17801:
[ 1720.422729][   T38]  #0: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1720.422792][   T38] 1 lock held by syz-executor/17814:
[ 1720.422805][   T38]  #0: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1720.422868][   T38] 1 lock held by syz-executor/17820:
[ 1720.422881][   T38]  #0: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1720.422958][   T38] 1 lock held by syz-executor/17824:
[ 1720.422971][   T38]  #0: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1720.423130][   T38] 1 lock held by syz-executor/17833:
[ 1720.423144][   T38]  #0: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1720.423208][   T38] 1 lock held by syz-executor/17839:
[ 1720.423222][   T38]  #0: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1720.423284][   T38] 1 lock held by syz-executor/17845:
[ 1720.423297][   T38]  #0: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1720.423361][   T38] 1 lock held by syz-executor/17852:
[ 1720.423374][   T38]  #0: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1720.423437][   T38] 1 lock held by syz-executor/17857:
[ 1720.423451][   T38]  #0: ffffffff8f34fb78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[ 1720.677704][   T38] 1 lock held by udevd/17862:
[ 1720.677721][   T38] 
[ 1720.677727][   T38] =============================================
[ 1720.677727][   T38] 
[ 1720.677751][   T38] NMI backtrace for cpu 0
[ 1720.677783][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1720.677807][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1720.677818][   T38] Call Trace:
[ 1720.677826][   T38]  <TASK>
[ 1720.677835][   T38]  dump_stack_lvl+0xe8/0x150
[ 1720.677861][   T38]  nmi_cpu_backtrace+0x274/0x2d0
[ 1720.677973][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1720.677998][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1720.678026][   T38]  sys_info+0x135/0x170
[ 1720.678054][   T38]  watchdog+0xfd3/0x1030
[ 1720.678086][   T38]  ? watchdog+0x1c9/0x1030
[ 1720.678117][   T38]  kthread+0x388/0x470
[ 1720.678146][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1720.678168][   T38]  ? __pfx_kthread+0x10/0x10
[ 1720.678198][   T38]  ret_from_fork+0x514/0xb70
[ 1720.678224][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1720.678248][   T38]  ? __switch_to+0xc79/0x1410
[ 1720.678283][   T38]  ? __pfx_kthread+0x10/0x10
[ 1720.678313][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1720.678355][   T38]  </TASK>
[ 1720.678380][   T38] Sending NMI from CPU 0 to CPUs 1:
[ 1720.678411][    C1] NMI backtrace for cpu 1
[ 1720.678426][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1720.678446][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1720.678457][    C1] RIP: 0010:irqentry_exit+0x866/0x8b0
[ 1720.678487][    C1] Code: 00 0f 84 6e f9 ff ff be 0c 00 00 00 e8 43 cd 91 f6 e8 8e 84 95 f6 e9 5a f9 ff ff 90 0f 0b 90 a9 00 10 00 00 0f 84 ad f9 ff ff <be> 0c 00 00 00 e8 20 cd 91 f6 e8 6b 84 95 f6 e9 99 f9 ff ff 49 89
[ 1720.678503][    C1] RSP: 0000:ffffc90000a3fb80 EFLAGS: 00000006
[ 1720.678518][    C1] RAX: 0000000000081000 RBX: 0000000000000000 RCX: 0000000000000000
[ 1720.678530][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88801da9bd80
[ 1720.678549][    C1] RBP: 0000000000000000 R08: 0000000000010000 R09: 0000000000010100
[ 1720.678561][    C1] R10: dffffc0000000000 R11: fffffbfff1f10c7f R12: 0000000000000000
[ 1720.678573][    C1] R13: 0000000000000000 R14: ffffc90000a3fbd8 R15: 0000000000000000
[ 1720.678585][    C1] FS:  0000000000000000(0000) GS:ffff888126283000(0000) knlGS:0000000000000000
[ 1720.678599][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1720.678612][    C1] CR2: 00007f77bda32000 CR3: 0000000038346000 CR4: 00000000003526f0
[ 1720.678627][    C1] Call Trace:
[ 1720.678633][    C1]  <TASK>
[ 1720.678640][    C1]  ? trace_irq_disable+0x3b/0x140
[ 1720.678664][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1720.678683][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[ 1720.678750][    C1] Code: f7 e8 2d e1 81 f6 f7 c3 00 02 00 00 74 05 e8 50 8c ad f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 34 6d 74 f6 65 8b 05 fd bf 4a 07 85 c0 74 18 5b 41 5e c3 cc cc
[ 1720.678766][    C1] RSP: 0000:ffffc90000a3fc80 EFLAGS: 00000206
[ 1720.678783][    C1] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 0000000080000001
[ 1720.678795][    C1] RDX: 0000000000000002 RSI: ffffffff8d601921 RDI: 0000000000000001
[ 1720.678807][    C1] RBP: ffff8880b89287e8 R08: ffffffff8f8863f7 R09: 1ffffffff1f10c7e
[ 1720.678820][    C1] R10: dffffc0000000000 R11: fffffbfff1f10c7f R12: 7fffffffffffffff
[ 1720.678834][    C1] R13: 0000000000000246 R14: ffff8880b8928540 R15: dffffc0000000000
[ 1720.678857][    C1]  hrtimer_run_softirq+0x212/0x260
[ 1720.678879][    C1]  handle_softirqs+0x1de/0x6d0
[ 1720.678903][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[ 1720.678923][    C1]  run_ktimerd+0x69/0x100
[ 1720.678944][    C1]  smpboot_thread_fn+0x541/0xa50
[ 1720.678965][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[ 1720.678990][    C1]  kthread+0x388/0x470
[ 1720.679013][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1720.679032][    C1]  ? __pfx_kthread+0x10/0x10
[ 1720.679057][    C1]  ret_from_fork+0x514/0xb70
[ 1720.679077][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1720.679096][    C1]  ? __switch_to+0xc79/0x1410
[ 1720.679124][    C1]  ? __pfx_kthread+0x10/0x10
[ 1720.679147][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1720.679178][    C1]  </TASK>
[ 1720.835253][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[ 1720.835276][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1720.835303][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1720.835318][   T38] Call Trace:
[ 1720.835330][   T38]  <TASK>
[ 1720.835339][   T38]  vpanic+0x56c/0xa60
[ 1720.835372][   T38]  ? __pfx___schedule+0x10/0x10
[ 1720.835405][   T38]  ? __pfx_vpanic+0x10/0x10
[ 1720.835444][   T38]  panic+0xc5/0xd0
[ 1720.835471][   T38]  ? __pfx_panic+0x10/0x10
[ 1720.835501][   T38]  ? preempt_schedule_thunk+0x16/0x30
[ 1720.835540][   T38]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1720.835573][   T38]  watchdog+0x102c/0x1030
[ 1720.835607][   T38]  ? watchdog+0x1c9/0x1030
[ 1720.835639][   T38]  kthread+0x388/0x470
[ 1720.835676][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1720.835700][   T38]  ? __pfx_kthread+0x10/0x10
[ 1720.835732][   T38]  ret_from_fork+0x514/0xb70
[ 1720.835760][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1720.835786][   T38]  ? __switch_to+0xc79/0x1410
[ 1720.835825][   T38]  ? __pfx_kthread+0x10/0x10
[ 1720.835856][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1720.835899][   T38]  </TASK>
[ 1720.836502][   T38] Kernel Offset: disabled