last executing test programs: 21m18.325246013s ago: executing program 0 (id=19): ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) syz_emit_vhci(0x0, 0x0) r0 = socket(0x2b, 0x1, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) symlinkat(0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000001c0)=0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 21m16.865737966s ago: executing program 0 (id=21): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x840) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 21m16.262481278s ago: executing program 0 (id=26): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@l2tp6={0x1d, 0x0, 0x2, @ipv4}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="751edb18dbf46e8f09d97e5bbd402d11fea33f21e2", 0x15}, {&(0x7f00000001c0)="da", 0x1}, {&(0x7f0000000240)="6d5f67af894fc09d5500897cd5556770418b1b34525a7becaa1a13b103508a04d5cd215b761cd584cddde2539d4d465745d349805bf16f7bd8010d7104086c0e743d76d4de754ad1714e562adea566f259c4f224d9098cbd4b94b351de0ed58f1361f6920b4598be11b9f546e6ba23ba5075072ef9d7362c255f7797ff7f000000000000a5dc055389df4d7725ef8f4e391c9bcbc80b7a9397f2f484ddc09076e854b1ee0569277a48abb91df8c3d57555dd4ed07a395e7c78444c971401bb04a219d661d01158a497c68330c7a8878ad272b2fd9915717c58efd568017a16947f31", 0xe2}], 0x3}, 0x0) 21m15.684446308s ago: executing program 0 (id=31): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 21m15.252405479s ago: executing program 0 (id=34): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000840)={0x0, 0x0, 0x3}, 0x1) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) 21m14.92341985s ago: executing program 0 (id=37): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') socket$unix(0x1, 0x5, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000440)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x1, 0x0, 0x8b1}}, {@mpls_uc}}, 0x0) 20m59.257752521s ago: executing program 32 (id=37): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') socket$unix(0x1, 0x5, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000440)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x1, 0x0, 0x8b1}}, {@mpls_uc}}, 0x0) 10m20.96479688s ago: executing program 2 (id=2117): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x90, 0x0, 0x8, {0x4, 0x100000000001, 0x6, 0x0, 0x0, 0x3881fffc, {0x5, 0x400fff, 0x47ffff, 0x0, 0x3, 0x5, 0xb, 0x0, 0x10000, 0x2000, 0x8, 0x0, 0x0, 0x2, 0x8019}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x38, 0x0, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',g']) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 10m17.593721398s ago: executing program 2 (id=2128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 10m17.28332056s ago: executing program 5 (id=2130): r0 = socket$kcm(0xa, 0x3, 0x3a) recvmsg$kcm(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f00000003c0)=""/174, 0xae}, {&(0x7f0000000e40)=""/4096, 0x1000}], 0x2}, 0x22) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) 10m15.020529791s ago: executing program 5 (id=2136): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d19", 0x277}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 10m14.485041792s ago: executing program 2 (id=2137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24008801}, 0x8000) recvmsg(r1, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x40000102) 10m14.434250542s ago: executing program 5 (id=2139): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB="02c92012000e0005001d7f0a000800200181"], 0x17) write(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x161182) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e25, 0x2, @empty, 0x40003ff}, 0x1b) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r2 = socket(0x21, 0x6, 0x1000200) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff", @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x4084) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x1, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x7) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) 10m14.256424136s ago: executing program 4 (id=2140): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408b", 0x8e}], 0x2}}], 0x1, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080000000", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16=r1, @ANYRES32, @ANYRES32=r0, @ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e00000000000000000014000200697036677265746170300000000000003000018008000100", @ANYRES8, @ANYBLOB="080003000300", @ANYRES32=r0, @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10m13.066834792s ago: executing program 2 (id=2142): sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 10m12.616678785s ago: executing program 3 (id=2143): syz_emit_vhci(0x0, 0x0) 10m12.480531576s ago: executing program 4 (id=2144): sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x400c4d1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x8, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000540)=0x5) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, &(0x7f0000000180), {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x1, 0xf2d, 0xad5c, 'snmp\x00', 'syz1\x00', {0x40}}}}, {{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pimreg\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x6, 0x2, 0x2, 0x49}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0xfff, 0x1, 0x3, 'syz0\x00', 'syz1\x00', {0x10}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000f80)=""/102368, 0x18fe0) syz_ublk_setup_io_uring(0x40be, 0x0, &(0x7f00000002c0), &(0x7f0000000340), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04530000c8000912c8000200"], 0xce) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x528, 0xd0, 0xd0, 0xd0, 0x1a0, 0x388, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'vxcan1\x00', 'bond0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00', [], [0x0, 0x0, 0x0, 0xffffffff], 'batadv_slave_1\x00', 'wlan0\x00', {}, {}, 0x5e}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [0xffffffff, 0xff, 0xffffffff, 0xff], [0xff, 0xff, 0xffffff00, 0xff000000], 'wlan1\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x388}}, {{@ipv6={@mcast2, @dev, [], [0x0, 0xffffff00], 'vxcan1\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="611059000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) 10m11.35732641s ago: executing program 2 (id=2146): socket$igmp(0x2, 0x3, 0x2) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x2}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x40}], 0x18, 0x88010}], 0x1, 0x20000010) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r7, 0x32b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x2400c040) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r3) 10m11.101023114s ago: executing program 3 (id=2147): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'security.', ')\xc9)-%!,:)!C{\x00'}, 0x0, 0x0) 10m9.77534791s ago: executing program 4 (id=2149): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d19", 0x277}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 10m9.596979696s ago: executing program 3 (id=2150): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x8000005}, 0x94) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x8) 10m8.257617674s ago: executing program 2 (id=2151): unshare(0x60000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x1200, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef) 10m6.628539907s ago: executing program 3 (id=2153): socket(0x15, 0x5, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) io_uring_enter(0xffffffffffffffff, 0x4094, 0x7721, 0x16, 0x0, 0x0) 10m6.276310069s ago: executing program 4 (id=2154): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000200000000fddbdf257f0000010b9cf2065905b43b000000000000000000000000000000000000000000000004000000000a0060", @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff00"/88], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 10m5.429765044s ago: executing program 5 (id=2155): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827", 0x45}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e008000000008", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c000180080003000100000074000180140002007767320000000000000000000000000008000300020000001400020070696d36726567", @ANYRES32, @ANYRES32=r0, @ANYBLOB="400001801400020070696d3672656730"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10m4.406335686s ago: executing program 3 (id=2157): sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 10m3.962210152s ago: executing program 4 (id=2158): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@empty, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x9, 0x0, 0x0, 0x500, 0x0, 0x4d30356}) 10m3.925361791s ago: executing program 5 (id=2159): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000000000000a004e1f00000008ff010000000000000000000000000001dfab0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) 10m2.918235872s ago: executing program 3 (id=2161): socket$igmp(0x2, 0x3, 0x2) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x2}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x40}], 0x18, 0x88010}], 0x1, 0x20000010) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r6, 0x200, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x40800) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r3) 10m2.654100544s ago: executing program 5 (id=2162): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbca313a181002c000000000400000010", 0x1e}], 0x1}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28b80, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000040)=0x9) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r3) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000300)) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a"], 0x23c}}, 0x0) 10m2.281026773s ago: executing program 4 (id=2164): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x277}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 9m51.053019477s ago: executing program 33 (id=2151): unshare(0x60000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x1200, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef) 9m45.403502536s ago: executing program 34 (id=2162): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbca313a181002c000000000400000010", 0x1e}], 0x1}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28b80, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000040)=0x9) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r3) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000300)) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a"], 0x23c}}, 0x0) 9m44.804173709s ago: executing program 35 (id=2161): socket$igmp(0x2, 0x3, 0x2) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x2}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x40}], 0x18, 0x88010}], 0x1, 0x20000010) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r6, 0x200, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x40800) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r3) 9m44.165548198s ago: executing program 36 (id=2164): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x277}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 3m4.137334525s ago: executing program 6 (id=2746): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xe, {[@main=@item_012={0x1, 0x0, 0xb, "ae"}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x8, '\x00'}, @main=@item_4={0x3, 0x0, 0xb, "523757c6"}]}}, 0x0}, 0x0) 3m1.613414712s ago: executing program 6 (id=2750): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x3, @mcast2, 0x711}}, {{0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000000000000a004e1f00000008ff010000000000000000000000000001dfab00"/133], 0x110) 2m59.40330565s ago: executing program 6 (id=2753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073"], 0xf8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m56.505058333s ago: executing program 6 (id=2760): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xe, {[@main=@item_012={0x1, 0x0, 0xb, "ae"}, @local=@item_4={0x3, 0x2, 0x5, "45501821"}, @global=@item_012={0x1, 0x1, 0x8, '\x00'}, @main=@item_4={0x3, 0x0, 0xb, "523757c6"}]}}, 0x0}, 0x0) 2m53.500456825s ago: executing program 6 (id=2764): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/252, 0xfc}, {0x0}], 0x2) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0x2020) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) 2m50.237122252s ago: executing program 6 (id=2770): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sigaltstack(0x0, &(0x7f0000001280)={0x0}) bind$inet(r0, 0x0, 0x0) io_setup(0x4, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x7, 0x4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r7, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6fc}}, 0x40) syz_emit_ethernet(0x1514, &(0x7f0000001c80)=ANY=[], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20040768, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpid() 2m33.676213192s ago: executing program 37 (id=2770): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sigaltstack(0x0, &(0x7f0000001280)={0x0}) bind$inet(r0, 0x0, 0x0) io_setup(0x4, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x7, 0x4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r7, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6fc}}, 0x40) syz_emit_ethernet(0x1514, &(0x7f0000001c80)=ANY=[], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20040768, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpid() 47.865407903s ago: executing program 7 (id=2934): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x418, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r3, &(0x7f0000002340), 0x3fffff7, 0x0) 45.277810799s ago: executing program 7 (id=2937): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000000180)) 42.435772425s ago: executing program 7 (id=2940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x418, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r3, &(0x7f0000002340), 0x3fffff7, 0x0) 40.050816444s ago: executing program 7 (id=2944): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) socket$inet6(0xa, 0x80000, 0xe6a2) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wlan0\x00'}) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) 34.703749754s ago: executing program 7 (id=2948): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) rename(0x0, &(0x7f0000000280)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 31.977609216s ago: executing program 7 (id=2951): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000034}, 0x20004000) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) socket$inet6(0xa, 0x1, 0xffd) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='bfs\x00', 0x8000, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x20, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044055}, 0x804) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000c00)=ANY=[@ANYRES16=r5, @ANYBLOB="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"], 0x28c}, 0x1, 0x0, 0x0, 0x4050}, 0x1dcd46349eefe6ba) 25.885972372s ago: executing program 1 (id=2956): io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800}) 21.375193594s ago: executing program 8 (id=2960): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}) 20.41196904s ago: executing program 9 (id=2961): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="18030000ffffffff00000000041000001800e4ffffff00000000000002000000650000000000000018000000000000000000000000000000950000000000000084030000000500009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000005c0), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000100)="126873159fca3f", 0x7}], 0x2}, 0x40000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 18.365176736s ago: executing program 8 (id=2962): syz_clone3(&(0x7f00000002c0)={0x41000, 0x0, 0x0, 0x0, {0x27}, &(0x7f0000000180)=""/162, 0xa2, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) r0 = syz_io_uring_complete(0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c90002"], 0x22) 17.820404546s ago: executing program 9 (id=2963): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0xc2b, @dev={0xac, 0x14, 0x14, 0x33}}, 0x1f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 15.227066028s ago: executing program 38 (id=2951): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000034}, 0x20004000) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) socket$inet6(0xa, 0x1, 0xffd) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='bfs\x00', 0x8000, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x20, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044055}, 0x804) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000c00)=ANY=[@ANYRES16=r5, @ANYBLOB="000229bd7000ffdbdf2501000000c0000c800c000b8008000900d579166c24000b8008000a001262000008000900e47f587d080009008f130b3608000a003d6b00001c000b8008000900d705f41708000900cd7eef7408000900252c837314000b8008000a00e86a00000800090008e3af060c000b8008000a0097f4000044000b8008000900adb9320008000a00197c000008000a0054d700000800090043b0205708000900b93fc4730800090043dbff6008000a00d1850000080009002ba91a310c000b8008000a00e4220000b80108803400078008000500c93dae4b080006002c00000008000600a2000000080006004c00000008000500ecc3fd17080006008f0000002400078008000600620000000800060003000000080006008400000008000600480000000c00078008000600df0000005400078008000600870000000800050019f608170800050073861b5a0800050048c1c752080006003e000000080006005500000008000500b4ba041408000600ce00000008000600d7000000080005005e38f41234000780080005009c273d14080006007400000008000600020000000800050000ab921d08000500bb9c3765080005007f69ab1e5400078008000500c6a8b721080006003700000008000600610000000800060037000000080005001816330708000500addb395e080005002e06d012080006005c00000008000500e2567b10080005001fe934763c000780080005008a865656080006002300000008000600f800000008000600e9000000080006001f0000000800050061be2e3908000600c60000001c00078008000600a6000000080005001689474f080005005f59c8051c00078008000500101c8a60080006005a0000000800060043000000"], 0x28c}, 0x1, 0x0, 0x0, 0x4050}, 0x1dcd46349eefe6ba) 15.185315441s ago: executing program 1 (id=2965): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_udp(0xa, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 15.185109188s ago: executing program 9 (id=2966): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x2, 0x7}}, 0xe4) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 14.832255458s ago: executing program 8 (id=2967): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 12.705734696s ago: executing program 1 (id=2968): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3, 0x1200) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xfffffffffffffff5, 0x1, {0x7, 0x2d, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r3, 0x1000) unshare(0x22020600) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x4}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 12.303811364s ago: executing program 8 (id=2969): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0xe8, 0x0, 0x9, 0x0, 0x0, 0x9e25, 0x9}, 0x0, 0x0) 12.303275546s ago: executing program 9 (id=2970): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 10.019763769s ago: executing program 1 (id=2971): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 9.452411146s ago: executing program 8 (id=2972): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f0000bfd000/0x400000)=nil) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1, 0x1) mlock2(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x0) shmctl$SHM_LOCK(r2, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)=[{0x0, 0xfffffffffffffed7}], 0x1}, 0x24000000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000700000000000000000000009500000000f8ff00"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000200)=""/185, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00010002"], 0x8) 9.299449712s ago: executing program 9 (id=2973): io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800}) 8.143915226s ago: executing program 1 (id=2974): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x2, 0xb}, {0xf, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.773624396s ago: executing program 8 (id=2975): syz_clone3(&(0x7f00000002c0)={0x41000, 0x0, 0x0, 0x0, {0x27}, &(0x7f0000000180)=""/162, 0xa2, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) r0 = syz_io_uring_complete(0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c90002"], 0x22) 3.375443274s ago: executing program 1 (id=2976): socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000000000029000000", @ANYRES16=r0], 0x18}, 0x0) 0s ago: executing program 9 (id=2977): add_key$keyring(0x0, &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x10185000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) kernel console output (not intermixed with test programs): 0c38 length: 249 > 2 [ 861.886127][ T4913] Bluetooth: hci1: command tx timeout [ 862.405671][ T4913] Bluetooth: hci3: command tx timeout [ 863.880260][ T4913] Bluetooth: hci2: command tx timeout [ 863.967893][ T4913] Bluetooth: hci4: command tx timeout [ 864.139714][ T4913] Bluetooth: hci1: command tx timeout [ 864.656075][T12369] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.663158][T12369] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.664099][T12369] bridge_slave_0: entered allmulticast mode [ 864.665890][ T4913] Bluetooth: hci3: command tx timeout [ 864.693821][T12369] bridge_slave_0: entered promiscuous mode [ 864.781097][T12369] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.781260][T12369] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.781843][T12369] bridge_slave_1: entered allmulticast mode [ 864.787413][T12369] bridge_slave_1: entered promiscuous mode [ 864.975919][T12369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.031335][T12369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.229941][T12369] team0: Port device team_slave_0 added [ 865.282673][T12369] team0: Port device team_slave_1 added [ 865.545007][T12369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.545025][T12369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.545049][T12369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.134194][ T4913] Bluetooth: hci2: command tx timeout [ 866.220944][ T4913] Bluetooth: hci4: command tx timeout [ 866.969831][ T4913] Bluetooth: hci3: command tx timeout [ 867.001424][T12369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.001440][T12369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.001473][T12369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.917526][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.056912][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5 [ 868.388174][ T4913] Bluetooth: hci2: command tx timeout [ 868.474373][ T4913] Bluetooth: hci4: command tx timeout [ 869.176186][ T4913] Bluetooth: hci3: command tx timeout [ 870.974113][ T4913] Bluetooth: hci4: command tx timeout [ 871.363080][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.530201][T12386] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.530406][T12386] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.530587][T12386] bridge_slave_0: entered allmulticast mode [ 871.533586][T12386] bridge_slave_0: entered promiscuous mode [ 871.604769][T12369] hsr_slave_0: entered promiscuous mode [ 871.623048][T12369] hsr_slave_1: entered promiscuous mode [ 871.623986][T12369] debugfs: 'hsr0' already exists in 'hsr' [ 871.624008][T12369] Cannot create hsr debugfs directory [ 871.656945][T12386] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.657086][T12386] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.657278][T12386] bridge_slave_1: entered allmulticast mode [ 871.691743][T12386] bridge_slave_1: entered promiscuous mode [ 871.928892][T12480] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2209'. [ 872.165196][T12386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.278055][T12386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.551253][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.787953][T12391] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.788152][T12391] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.788328][T12391] bridge_slave_0: entered allmulticast mode [ 872.795250][T12391] bridge_slave_0: entered promiscuous mode [ 872.863497][T12391] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.863638][T12391] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.863812][T12391] bridge_slave_1: entered allmulticast mode [ 872.868836][T12391] bridge_slave_1: entered promiscuous mode [ 874.064317][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.157044][T12386] team0: Port device team_slave_0 added [ 874.212653][ T5258] 8021q: adding VLAN 0 to HW filter on device eth6 [ 874.215429][T12386] team0: Port device team_slave_1 added [ 874.345084][T12391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.452148][T12391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.545256][T12386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.545272][T12386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.545295][T12386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.676975][T12386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.676991][T12386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.677016][T12386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.892107][T12391] team0: Port device team_slave_0 added [ 874.961348][T12391] team0: Port device team_slave_1 added [ 874.961770][T12397] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.961960][T12397] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.962146][T12397] bridge_slave_0: entered allmulticast mode [ 874.964699][T12397] bridge_slave_0: entered promiscuous mode [ 875.048887][T12397] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.049020][T12397] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.049533][T12397] bridge_slave_1: entered allmulticast mode [ 875.076178][T12397] bridge_slave_1: entered promiscuous mode [ 875.308713][T12391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.308729][T12391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.308755][T12391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.402897][T12386] hsr_slave_0: entered promiscuous mode [ 875.404202][T12386] hsr_slave_1: entered promiscuous mode [ 875.405940][T12386] debugfs: 'hsr0' already exists in 'hsr' [ 875.405962][T12386] Cannot create hsr debugfs directory [ 875.579852][T12391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.579868][T12391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.579893][T12391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.646337][T12397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.165064][T12397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.375341][T12397] team0: Port device team_slave_0 added [ 876.470494][T12397] team0: Port device team_slave_1 added [ 876.705783][T12391] hsr_slave_0: entered promiscuous mode [ 876.707123][T12391] hsr_slave_1: entered promiscuous mode [ 876.708090][T12391] debugfs: 'hsr0' already exists in 'hsr' [ 876.708113][T12391] Cannot create hsr debugfs directory [ 877.824762][ T5258] 8021q: adding VLAN 0 to HW filter on device eth7 [ 878.075693][T12397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.075710][T12397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.075735][T12397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.480170][T12397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.480185][T12397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.480211][T12397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.744215][T12397] hsr_slave_0: entered promiscuous mode [ 885.764500][T12397] hsr_slave_1: entered promiscuous mode [ 885.766593][T12397] debugfs: 'hsr0' already exists in 'hsr' [ 885.766618][T12397] Cannot create hsr debugfs directory [ 886.521187][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.267722][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.989891][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.050187][ T5258] 8021q: adding VLAN 0 to HW filter on device eth8 [ 889.682113][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.751090][T12386] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 890.086852][T12386] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 890.103301][T12386] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 890.458674][T12386] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 890.499117][T12386] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 890.590812][T12386] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 891.135356][T12386] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 891.728262][T12386] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 892.211206][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9 [ 893.735926][T12391] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 893.960299][T12391] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 894.343680][T12391] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 894.389952][T12391] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 894.464716][T12391] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 894.556152][T12391] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 894.603168][T12391] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 894.630933][T12391] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 895.003252][ T13] bridge_slave_1: left allmulticast mode [ 895.003287][ T13] bridge_slave_1: left promiscuous mode [ 895.011219][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.167854][ T13] bridge_slave_0: left allmulticast mode [ 895.167889][ T13] bridge_slave_0: left promiscuous mode [ 895.168118][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.590124][ T13] bridge_slave_1: left allmulticast mode [ 895.590158][ T13] bridge_slave_1: left promiscuous mode [ 895.590408][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.729876][ T13] bridge_slave_0: left allmulticast mode [ 895.729909][ T13] bridge_slave_0: left promiscuous mode [ 895.730142][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.444863][T12613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2231'. [ 896.445387][T12613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2231'. [ 897.245564][ T13] bridge_slave_1: left allmulticast mode [ 897.245598][ T13] bridge_slave_1: left promiscuous mode [ 897.245911][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.333539][ T13] bridge_slave_0: left allmulticast mode [ 897.333574][ T13] bridge_slave_0: left promiscuous mode [ 897.333815][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.720889][ T13] bond0 (unregistering): (slave 30): Releasing backup interface [ 898.774166][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.787434][ T13] bond0 (unregistering): Released all slaves [ 899.426507][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.468214][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.491665][ T13] bond0 (unregistering): Released all slaves [ 900.247919][ T13] bond0 (unregistering): (slave 30): Releasing backup interface [ 900.302627][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.325297][ T13] bond0 (unregistering): Released all slaves [ 901.272162][ T13] tipc: Left network mode [ 901.532021][ T13] tipc: Left network mode [ 902.095777][ T13] tipc: Left network mode [ 902.720955][T12369] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 903.434507][T12369] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 903.464529][T12369] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 903.718198][T12369] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 903.748327][ T5258] 8021q: adding VLAN 0 to HW filter on device eth10 [ 903.822995][T12369] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 903.980120][T12369] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 904.124354][T12369] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 904.209328][T12369] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 904.510594][T12386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.565432][T12649] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2235'. [ 905.229966][T12386] 8021q: adding VLAN 0 to HW filter on device team0 [ 905.654536][T12397] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 905.865065][T12397] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 906.745826][ T8432] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.746048][ T8432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 906.814460][T12397] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 907.022623][T12397] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 907.148712][ T5258] 8021q: adding VLAN 0 to HW filter on device eth11 [ 907.166881][T12397] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 907.297945][T12397] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 907.381866][T12391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.386488][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.386615][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.387192][T12397] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 907.580085][T12397] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 908.888908][T12391] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.975114][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.975363][ T5846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.040347][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.041087][ T5846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.606591][T12369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.009753][T12369] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.094939][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.096436][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.238662][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.240440][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.454222][T12397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 911.096355][T12397] 8021q: adding VLAN 0 to HW filter on device team0 [ 911.193926][ T6654] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.194132][ T6654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.275095][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.276968][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.707706][T12386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.335168][T12391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.209711][T12369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.326335][T12397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.374157][T12386] veth0_vlan: entered promiscuous mode [ 915.555196][T12386] veth1_vlan: entered promiscuous mode [ 915.783076][T12391] veth0_vlan: entered promiscuous mode [ 916.002324][T12391] veth1_vlan: entered promiscuous mode [ 916.110453][T12386] veth0_macvtap: entered promiscuous mode [ 916.194769][T12386] veth1_macvtap: entered promiscuous mode [ 916.662258][T12386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 916.753062][ T5258] 8021q: adding VLAN 0 to HW filter on device eth12 [ 916.946365][T12386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.066340][T12391] veth0_macvtap: entered promiscuous mode [ 917.214878][ T3050] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.233917][ T3050] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.320077][T12391] veth1_macvtap: entered promiscuous mode [ 917.396861][ T3050] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.416937][ T3050] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.013349][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 918.069570][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 918.071078][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 918.088086][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 918.088903][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 920.403572][ T4913] Bluetooth: hci5: command tx timeout [ 921.719398][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 921.796094][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 921.797788][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 921.798943][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 921.799982][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 922.657401][ T4913] Bluetooth: hci5: command tx timeout [ 922.866198][T12391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.980460][T12391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.054757][ T91] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.078938][ T91] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.098088][ T91] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.116236][ T91] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.589740][ T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 923.659019][ T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 923.660460][ T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 923.661567][ T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 923.662562][ T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 923.987336][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 923.987407][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 924.131555][ T60] Bluetooth: hci1: command tx timeout [ 924.352752][ T5258] 8021q: adding VLAN 0 to HW filter on device eth13 [ 924.741668][ T4913] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 924.796076][ T4913] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 924.833440][ T4913] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 924.848218][ T4913] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 924.849254][ T4913] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 924.917468][ T4913] Bluetooth: hci5: command tx timeout [ 925.951280][ T60] Bluetooth: hci6: command tx timeout [ 926.405983][ T60] Bluetooth: hci1: command tx timeout [ 927.165140][ T60] Bluetooth: hci5: command tx timeout [ 927.252762][ T60] Bluetooth: hci7: command tx timeout [ 928.205485][ T60] Bluetooth: hci6: command tx timeout [ 928.648324][ T60] Bluetooth: hci1: command tx timeout [ 929.542773][ T60] Bluetooth: hci7: command tx timeout [ 930.462377][ T60] Bluetooth: hci6: command tx timeout [ 930.935443][ T60] Bluetooth: hci1: command tx timeout [ 931.760428][ T60] Bluetooth: hci7: command tx timeout [ 932.713892][ T60] Bluetooth: hci6: command tx timeout [ 932.837448][ T5258] 8021q: adding VLAN 0 to HW filter on device eth14 [ 934.016735][ T60] Bluetooth: hci7: command tx timeout [ 934.626582][T12765] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.626714][T12765] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.626913][T12765] bridge_slave_0: entered allmulticast mode [ 934.629958][T12765] bridge_slave_0: entered promiscuous mode [ 936.285334][T12765] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.285483][T12765] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.285710][T12765] bridge_slave_1: entered allmulticast mode [ 936.318147][T12765] bridge_slave_1: entered promiscuous mode [ 936.368383][ T5258] 8021q: adding VLAN 0 to HW filter on device eth15 [ 937.678262][T12765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.170420][T12765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.290376][ T37] audit: type=1326 audit(1779246295.579:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12904 comm="syz.1.2254" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f741754ce59 code=0x0 [ 938.754431][T12765] team0: Port device team_slave_0 added [ 938.941488][T12765] team0: Port device team_slave_1 added [ 939.613408][ T13] hsr_slave_0: left promiscuous mode [ 939.689997][ T13] hsr_slave_1: left promiscuous mode [ 939.707325][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 939.707353][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.746828][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 939.746855][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.005387][ T13] hsr_slave_0: left promiscuous mode [ 940.039878][ T13] hsr_slave_1: left promiscuous mode [ 940.042460][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 940.042486][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.254989][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 940.255031][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.445828][ T13] hsr_slave_0: left promiscuous mode [ 940.462443][ T13] hsr_slave_1: left promiscuous mode [ 940.463572][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 940.463596][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.498794][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 940.498820][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.840258][ T13] veth1_macvtap: left promiscuous mode [ 940.840372][ T13] veth0_macvtap: left promiscuous mode [ 940.854421][ T13] veth1_vlan: left promiscuous mode [ 940.854602][ T13] veth0_vlan: left promiscuous mode [ 941.436906][ T13] veth1_macvtap: left promiscuous mode [ 941.437007][ T13] veth0_macvtap: left promiscuous mode [ 941.437247][ T13] veth1_vlan: left promiscuous mode [ 941.440486][ T13] veth0_vlan: left promiscuous mode [ 942.141567][ T13] veth1_macvtap: left promiscuous mode [ 942.141668][ T13] veth0_macvtap: left promiscuous mode [ 942.141915][ T13] veth1_vlan: left promiscuous mode [ 942.142080][ T13] veth0_vlan: left promiscuous mode [ 942.954369][ T13] team0 (unregistering): Port device team_slave_1 removed [ 942.997779][ T13] team0 (unregistering): Port device team_slave_0 removed [ 943.528995][ T13] team0 (unregistering): Port device team_slave_1 removed [ 943.572096][ T13] team0 (unregistering): Port device team_slave_0 removed [ 944.265983][ T13] team0 (unregistering): Port device team_slave_1 removed [ 944.308957][ T13] team0 (unregistering): Port device team_slave_0 removed [ 944.588924][T12765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.588938][T12765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.588967][T12765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.690112][T12765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.690123][T12765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.690138][T12765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.777696][T12788] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.777811][T12788] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.777938][T12788] bridge_slave_0: entered allmulticast mode [ 944.779345][T12788] bridge_slave_0: entered promiscuous mode [ 944.813251][T12788] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.813351][T12788] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.813495][T12788] bridge_slave_1: entered allmulticast mode [ 944.814930][T12788] bridge_slave_1: entered promiscuous mode [ 944.836365][T12808] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.836478][T12808] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.836679][T12808] bridge_slave_0: entered allmulticast mode [ 944.843860][T12808] bridge_slave_0: entered promiscuous mode [ 944.924371][T12808] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.924494][T12808] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.924658][T12808] bridge_slave_1: entered allmulticast mode [ 944.946803][T12808] bridge_slave_1: entered promiscuous mode [ 945.055313][T12788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.055550][T12815] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.055741][T12815] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.055932][T12815] bridge_slave_0: entered allmulticast mode [ 945.087451][T12815] bridge_slave_0: entered promiscuous mode [ 945.119681][T12765] hsr_slave_0: entered promiscuous mode [ 945.126914][T12765] hsr_slave_1: entered promiscuous mode [ 945.128821][T12765] debugfs: 'hsr0' already exists in 'hsr' [ 945.128843][T12765] Cannot create hsr debugfs directory [ 945.164326][T12788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.175856][T12815] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.175961][T12815] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.176146][T12815] bridge_slave_1: entered allmulticast mode [ 945.180258][T12815] bridge_slave_1: entered promiscuous mode [ 945.239598][T12808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.316000][T12808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.532722][T12788] team0: Port device team_slave_0 added [ 945.563921][T12815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.599337][T12788] team0: Port device team_slave_1 added [ 945.659606][T12815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.719327][T12808] team0: Port device team_slave_0 added [ 946.218216][T12808] team0: Port device team_slave_1 added [ 946.252680][ T5258] 8021q: adding VLAN 0 to HW filter on device eth16 [ 946.280252][T12815] team0: Port device team_slave_0 added [ 946.284571][T12788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.284585][T12788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.284608][T12788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.328990][T12815] team0: Port device team_slave_1 added [ 946.330580][T12788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.330592][T12788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.330616][T12788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.345117][T12808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.345133][T12808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.345156][T12808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.408435][T12808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.408451][T12808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.408474][T12808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.459312][T12815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.459328][T12815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.459352][T12815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.537389][T12815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.537406][T12815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.537429][T12815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.829559][T12788] hsr_slave_0: entered promiscuous mode [ 946.831017][T12788] hsr_slave_1: entered promiscuous mode [ 946.832045][T12788] debugfs: 'hsr0' already exists in 'hsr' [ 946.832068][T12788] Cannot create hsr debugfs directory [ 946.862255][T12808] hsr_slave_0: entered promiscuous mode [ 946.863651][T12808] hsr_slave_1: entered promiscuous mode [ 946.864598][T12808] debugfs: 'hsr0' already exists in 'hsr' [ 946.864620][T12808] Cannot create hsr debugfs directory [ 947.078220][T12815] hsr_slave_0: entered promiscuous mode [ 947.079706][T12815] hsr_slave_1: entered promiscuous mode [ 947.080715][T12815] debugfs: 'hsr0' already exists in 'hsr' [ 947.080737][T12815] Cannot create hsr debugfs directory [ 950.529752][T13003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2263'. [ 950.530368][T13003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2263'. [ 951.932324][T12808] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.134991][ T13] IPVS: stop unused estimator thread 0... [ 952.485685][T12808] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.886219][T12808] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.342119][T12808] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.308335][T12788] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.791858][T12788] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.306756][T12788] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.765488][T12788] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.543857][ T13] bridge_slave_1: left allmulticast mode [ 957.543889][ T13] bridge_slave_1: left promiscuous mode [ 957.544136][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.747260][ T13] bridge_slave_0: left allmulticast mode [ 957.747283][ T13] bridge_slave_0: left promiscuous mode [ 957.747429][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.923557][ T13] bridge_slave_1: left allmulticast mode [ 958.923579][ T13] bridge_slave_1: left promiscuous mode [ 958.923730][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.068786][ T13] bridge_slave_0: left allmulticast mode [ 959.068808][ T13] bridge_slave_0: left promiscuous mode [ 959.068968][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.524999][ T13] bridge_slave_1: left allmulticast mode [ 959.525029][ T13] bridge_slave_1: left promiscuous mode [ 959.525173][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.676070][ T13] bridge_slave_0: left allmulticast mode [ 959.676092][ T13] bridge_slave_0: left promiscuous mode [ 959.676241][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.958007][ T13] bridge_slave_1: left allmulticast mode [ 959.958030][ T13] bridge_slave_1: left promiscuous mode [ 959.958177][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.130747][ T13] bridge_slave_0: left allmulticast mode [ 960.130769][ T13] bridge_slave_0: left promiscuous mode [ 960.130928][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.346776][ T13] bridge_slave_1: left allmulticast mode [ 960.346800][ T13] bridge_slave_1: left promiscuous mode [ 960.346960][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.466709][ T13] bridge_slave_0: left allmulticast mode [ 960.466731][ T13] bridge_slave_0: left promiscuous mode [ 960.466883][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.683069][ T13] bridge_slave_1: left allmulticast mode [ 960.683093][ T13] bridge_slave_1: left promiscuous mode [ 960.683243][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.859005][ T13] bridge_slave_0: left allmulticast mode [ 960.859038][ T13] bridge_slave_0: left promiscuous mode [ 960.859269][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.137966][ T13] bridge_slave_1: left allmulticast mode [ 961.137991][ T13] bridge_slave_1: left promiscuous mode [ 961.138152][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.290338][ T13] bridge_slave_0: left allmulticast mode [ 961.290361][ T13] bridge_slave_0: left promiscuous mode [ 961.290515][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.427629][ T13] bridge_slave_1: left allmulticast mode [ 962.427653][ T13] bridge_slave_1: left promiscuous mode [ 962.427836][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.613091][ T13] bridge_slave_0: left allmulticast mode [ 962.613113][ T13] bridge_slave_0: left promiscuous mode [ 962.613256][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.028672][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.115248][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 965.160336][ T13] bond0 (unregistering): Released all slaves [ 965.754742][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.841917][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 965.888511][ T13] bond0 (unregistering): Released all slaves [ 966.589080][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 966.676879][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.698893][ T13] bond0 (unregistering): Released all slaves [ 967.326070][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.403171][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.425908][ T13] bond0 (unregistering): Released all slaves [ 967.727547][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.813570][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.879501][ T13] bond0 (unregistering): Released all slaves [ 968.182159][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.268736][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.336242][ T13] bond0 (unregistering): Released all slaves [ 968.658931][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.767197][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.834040][ T13] bond0 (unregistering): Released all slaves [ 969.113981][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 969.201342][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 969.288202][ T13] bond0 (unregistering): Released all slaves [ 969.316696][ T5258] 8021q: adding VLAN 0 to HW filter on device eth17 [ 972.321177][ T13] hsr_slave_0: left promiscuous mode [ 972.364465][ T13] hsr_slave_1: left promiscuous mode [ 972.365255][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 972.365270][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 972.391034][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 972.391059][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 972.592039][ T13] hsr_slave_0: left promiscuous mode [ 972.613670][ T13] hsr_slave_1: left promiscuous mode [ 972.614383][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 972.670371][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 972.819540][ T13] hsr_slave_0: left promiscuous mode [ 972.864189][ T13] hsr_slave_1: left promiscuous mode [ 972.864933][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 972.864955][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 972.907003][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 972.907023][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.058020][ T13] hsr_slave_0: left promiscuous mode [ 973.079636][ T13] hsr_slave_1: left promiscuous mode [ 973.080815][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.125273][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.274736][ T13] hsr_slave_0: left promiscuous mode [ 973.296378][ T13] hsr_slave_1: left promiscuous mode [ 973.297000][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.340901][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.426432][ T13] hsr_slave_0: left promiscuous mode [ 973.469800][ T13] hsr_slave_1: left promiscuous mode [ 973.470611][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.503740][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.588994][ T13] hsr_slave_0: left promiscuous mode [ 973.610696][ T13] hsr_slave_1: left promiscuous mode [ 973.611677][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.665389][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.773128][ T13] hsr_slave_0: left promiscuous mode [ 973.796593][ T13] hsr_slave_1: left promiscuous mode [ 973.797208][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.839059][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.927656][ T13] veth1_macvtap: left promiscuous mode [ 973.927719][ T13] veth0_macvtap: left promiscuous mode [ 973.927886][ T13] veth1_vlan: left promiscuous mode [ 973.927978][ T13] veth0_vlan: left promiscuous mode [ 974.065961][ T13] veth1_macvtap: left promiscuous mode [ 974.066021][ T13] veth0_macvtap: left promiscuous mode [ 974.066151][ T13] veth1_vlan: left promiscuous mode [ 974.066244][ T13] veth0_vlan: left promiscuous mode [ 975.117678][ T13] team0 (unregistering): Port device team_slave_1 removed [ 975.161027][ T13] team0 (unregistering): Port device team_slave_0 removed [ 975.605054][ T13] team0 (unregistering): Port device team_slave_1 removed [ 975.651407][ T13] team0 (unregistering): Port device team_slave_0 removed [ 976.235763][ T13] team0 (unregistering): Port device team_slave_1 removed [ 976.276894][ T13] team0 (unregistering): Port device team_slave_0 removed [ 976.732217][ T13] team0 (unregistering): Port device team_slave_1 removed [ 976.775339][ T13] team0 (unregistering): Port device team_slave_0 removed [ 977.176810][ T13] team0 (unregistering): Port device team_slave_1 removed [ 977.198169][ T13] team0 (unregistering): Port device team_slave_0 removed [ 977.479958][ T13] team0 (unregistering): Port device team_slave_1 removed [ 977.523374][ T13] team0 (unregistering): Port device team_slave_0 removed [ 977.785492][ T13] team0 (unregistering): Port device team_slave_1 removed [ 977.815863][ T13] team0 (unregistering): Port device team_slave_0 removed [ 978.111356][ T13] team0 (unregistering): Port device team_slave_1 removed [ 978.162458][ T13] team0 (unregistering): Port device team_slave_0 removed [ 978.436256][T12765] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 978.521027][T12765] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 978.522062][T12765] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 978.584392][T12765] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 978.590959][T12765] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 978.668385][T12765] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 978.683053][T12765] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 978.723981][T12765] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 978.868333][T13177] fuse: fd is not a fuse device [ 979.343651][T12765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.480660][T12765] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.484238][T12808] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 979.548184][T12808] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 979.614335][T12808] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 979.641604][T12808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 979.671582][T12079] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.671788][T12079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.672435][T12808] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 979.946428][T12808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 980.826784][T12808] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 981.047495][T12808] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 981.177521][ T3050] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.177731][ T3050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 981.505722][T12788] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 982.574221][T12788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 982.589610][T12788] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 982.733872][T12788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 983.395051][T12788] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 983.670780][T11725] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 983.808873][T12788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 983.817067][T11725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 983.861444][T11725] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 983.878476][T11725] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 983.885541][T11725] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 983.956662][T12788] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 984.042915][T12788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 986.174874][T12815] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 986.207992][T12815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 986.211183][T12815] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 986.218965][ T60] Bluetooth: hci2: command tx timeout [ 986.262491][T12815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 986.419814][T13278] fuse: fd is not a fuse device [ 986.431873][T12815] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 986.621066][T12815] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 986.665099][T12815] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 986.695213][T12815] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 987.077799][T11725] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 987.127325][T11725] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 987.196399][T11725] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 987.222415][T11725] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 987.227245][T11725] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 987.259835][T12808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 987.628070][T12808] 8021q: adding VLAN 0 to HW filter on device team0 [ 987.775326][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.776139][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.934708][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.934902][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.253567][T13320] fuse: fd is not a fuse device [ 988.459580][ T60] Bluetooth: hci2: command tx timeout [ 988.844956][T11725] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 988.917510][T11725] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 988.918924][T11725] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 988.920348][T11725] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 988.921086][T11725] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 990.000410][ T4913] Bluetooth: hci3: command tx timeout [ 990.542295][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 990.542362][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 990.712287][ T60] Bluetooth: hci2: command tx timeout [ 990.854236][T11725] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 990.925968][T11725] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 990.956482][T11725] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 991.009422][T11725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 991.012933][T11725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 991.201628][T13231] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.201742][T13231] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.202279][T13231] bridge_slave_0: entered allmulticast mode [ 991.215400][T13231] bridge_slave_0: entered promiscuous mode [ 991.310213][T13231] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.310407][T13231] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.310638][T13231] bridge_slave_1: entered allmulticast mode [ 991.313374][T13231] bridge_slave_1: entered promiscuous mode [ 992.966612][ T60] Bluetooth: hci3: command tx timeout [ 992.966675][ T60] Bluetooth: hci1: command tx timeout [ 992.967231][ T60] Bluetooth: hci2: command tx timeout [ 993.154868][T13231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.342769][T11725] Bluetooth: hci4: command tx timeout [ 993.463215][T13380] fuse: fd is not a fuse device [ 993.501457][T13231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.657333][T13231] team0: Port device team_slave_0 added [ 993.695608][T13231] team0: Port device team_slave_1 added [ 994.233523][T13231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.233539][T13231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.233564][T13231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.362800][T13231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.362817][T13231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.362841][T13231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.719114][T13404] fuse: fd is not a fuse device [ 994.918166][T13231] hsr_slave_0: entered promiscuous mode [ 994.919513][T13231] hsr_slave_1: entered promiscuous mode [ 994.920577][T13231] debugfs: 'hsr0' already exists in 'hsr' [ 994.920601][T13231] Cannot create hsr debugfs directory [ 995.229521][T11725] Bluetooth: hci1: command tx timeout [ 995.229553][T11725] Bluetooth: hci3: command tx timeout [ 995.565516][ T60] Bluetooth: hci4: command tx timeout [ 996.691333][T13294] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.691456][T13294] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.691672][T13294] bridge_slave_0: entered allmulticast mode [ 996.750093][T13294] bridge_slave_0: entered promiscuous mode [ 996.820246][T13294] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.820356][T13294] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.820547][T13294] bridge_slave_1: entered allmulticast mode [ 996.828364][T13294] bridge_slave_1: entered promiscuous mode [ 996.966493][T13294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.000908][T13294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.476237][T13294] team0: Port device team_slave_0 added [ 997.484060][ T60] Bluetooth: hci3: command tx timeout [ 997.484089][ T60] Bluetooth: hci1: command tx timeout [ 997.671597][T13294] team0: Port device team_slave_1 added [ 997.728838][T13328] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.729065][T13328] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.729253][T13328] bridge_slave_0: entered allmulticast mode [ 997.731784][T13328] bridge_slave_0: entered promiscuous mode [ 997.819519][T11725] Bluetooth: hci4: command tx timeout [ 999.022411][T13328] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.022533][T13328] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.023137][T13328] bridge_slave_1: entered allmulticast mode [ 999.025810][T13328] bridge_slave_1: entered promiscuous mode [ 999.072823][T13294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.072838][T13294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.072858][T13294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.179656][T13294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.179668][T13294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.179682][T13294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.249231][T13328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.275099][T13328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.598876][T13328] team0: Port device team_slave_0 added [ 999.619970][T13294] hsr_slave_0: entered promiscuous mode [ 999.621411][T13294] hsr_slave_1: entered promiscuous mode [ 999.622385][T13294] debugfs: 'hsr0' already exists in 'hsr' [ 999.622409][T13294] Cannot create hsr debugfs directory [ 999.622775][T13348] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.622970][T13348] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.623159][T13348] bridge_slave_0: entered allmulticast mode [ 999.624578][T13348] bridge_slave_0: entered promiscuous mode [ 999.636387][T13328] team0: Port device team_slave_1 added [ 999.665144][T13348] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.665259][T13348] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.665546][T13348] bridge_slave_1: entered allmulticast mode [ 999.668548][T13348] bridge_slave_1: entered promiscuous mode [ 999.726770][T11725] Bluetooth: hci1: command tx timeout [ 1000.035069][T13328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.035080][T13328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.035094][T13328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.073593][T11725] Bluetooth: hci4: command tx timeout [ 1000.075313][T13348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.097580][T13328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.097595][T13328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.097619][T13328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.101652][T13348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.673825][T13458] fuse: fd is not a fuse device [ 1000.737040][T13348] team0: Port device team_slave_0 added [ 1000.775636][T13348] team0: Port device team_slave_1 added [ 1002.554461][T13328] hsr_slave_0: entered promiscuous mode [ 1002.563716][T13328] hsr_slave_1: entered promiscuous mode [ 1002.565644][T13328] debugfs: 'hsr0' already exists in 'hsr' [ 1002.565668][T13328] Cannot create hsr debugfs directory [ 1002.759342][T13348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.759353][T13348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.759367][T13348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.804748][T13348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.804765][T13348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.804789][T13348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1003.028732][T13348] hsr_slave_0: entered promiscuous mode [ 1003.030164][T13348] hsr_slave_1: entered promiscuous mode [ 1003.030706][T13348] debugfs: 'hsr0' already exists in 'hsr' [ 1003.030721][T13348] Cannot create hsr debugfs directory [ 1003.416496][T13231] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1003.473072][T13231] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1003.528745][T13231] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1003.555466][T13231] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1003.882997][T13231] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1003.923254][T13231] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1004.560710][T13231] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1004.588297][T13231] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1005.141463][T13231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1005.212110][T13231] 8021q: adding VLAN 0 to HW filter on device team0 [ 1005.228036][ T1772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.228230][ T1772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1005.245134][ T1772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.249427][ T1772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1008.425441][T13498] fuse: fd is not a fuse device [ 1008.974783][T13231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1009.859271][T13505] batadv_slave_1: entered promiscuous mode [ 1009.861177][T13508] batadv_slave_1: left promiscuous mode [ 1010.437764][T13231] veth0_vlan: entered promiscuous mode [ 1010.484487][T13231] veth1_vlan: entered promiscuous mode [ 1011.767459][T13231] veth0_macvtap: entered promiscuous mode [ 1011.793334][T13231] veth1_macvtap: entered promiscuous mode [ 1011.823840][T13231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1011.841717][T13231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1011.910629][ T6654] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.911783][ T6654] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.911822][ T6654] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.911854][ T6654] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.611725][ T13] bridge_slave_1: left allmulticast mode [ 1012.611760][ T13] bridge_slave_1: left promiscuous mode [ 1012.612057][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.798112][ T13] bridge_slave_0: left allmulticast mode [ 1012.798145][ T13] bridge_slave_0: left promiscuous mode [ 1012.798363][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.175525][ T13] bridge_slave_1: left allmulticast mode [ 1013.175557][ T13] bridge_slave_1: left promiscuous mode [ 1013.175823][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.317030][ T13] bridge_slave_0: left allmulticast mode [ 1013.317052][ T13] bridge_slave_0: left promiscuous mode [ 1013.317203][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.978518][ T13] bridge_slave_1: left allmulticast mode [ 1013.978551][ T13] bridge_slave_1: left promiscuous mode [ 1013.978720][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.098664][ T13] bridge_slave_0: left allmulticast mode [ 1014.098687][ T13] bridge_slave_0: left promiscuous mode [ 1014.098833][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.345517][ T13] bridge_slave_1: left allmulticast mode [ 1014.345552][ T13] bridge_slave_1: left promiscuous mode [ 1014.345805][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.553445][ T13] bridge_slave_0: left allmulticast mode [ 1014.553468][ T13] bridge_slave_0: left promiscuous mode [ 1014.553611][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.790651][T13551] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2328'. [ 1017.185053][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.272395][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1017.337741][ T13] bond0 (unregistering): Released all slaves [ 1017.921924][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.030296][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.096209][ T13] bond0 (unregistering): Released all slaves [ 1018.453027][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.561404][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.648818][ T13] bond0 (unregistering): Released all slaves [ 1019.190013][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1019.276644][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1019.300689][ T13] bond0 (unregistering): Released all slaves [ 1019.370721][ T5258] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1020.487670][ T5846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.487691][ T5846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.948802][ T5846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.948822][ T5846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.172439][ T13] hsr_slave_0: left promiscuous mode [ 1021.194066][ T13] hsr_slave_1: left promiscuous mode [ 1021.195163][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.246664][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.475773][ T13] hsr_slave_0: left promiscuous mode [ 1021.506591][ T13] hsr_slave_1: left promiscuous mode [ 1021.507650][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.553063][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.748912][ T13] hsr_slave_0: left promiscuous mode [ 1021.790050][ T13] hsr_slave_1: left promiscuous mode [ 1021.791034][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.845695][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.061627][ T13] hsr_slave_0: left promiscuous mode [ 1022.104376][ T13] hsr_slave_1: left promiscuous mode [ 1022.105018][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.292636][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.711687][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1022.756742][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1023.136640][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1023.188474][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1023.557034][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1023.601469][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1023.940257][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1023.981054][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1024.748422][ T821] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1024.954738][ T821] usb 7-1: Using ep0 maxpacket: 8 [ 1024.959503][ T821] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1024.959530][ T821] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1024.963366][ T821] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1024.963391][ T821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.963409][ T821] usb 7-1: Product: syz [ 1024.963421][ T821] usb 7-1: Manufacturer: syz [ 1024.963434][ T821] usb 7-1: SerialNumber: syz [ 1025.297639][ T821] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 1025.297684][ T821] cdc_ncm 7-1:1.0: bind() failure [ 1025.327854][ T821] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1025.327911][ T821] cdc_ncm 7-1:1.1: bind() failure [ 1025.385472][ T821] usb 7-1: USB disconnect, device number 2 [ 1026.679203][T13294] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1026.778397][T13294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1026.793000][T13294] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1027.705023][T13294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1027.725089][T13294] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1027.777936][T13294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1027.890352][T13625] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2335'. [ 1027.982098][T13294] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1028.025444][T13294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1028.339181][T13294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.439162][T13328] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1028.501275][T13328] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1028.518519][T13328] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1028.566422][T13328] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1028.622223][T13294] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.639781][T13328] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1028.676498][T13328] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1028.841440][T13328] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1028.915463][T13328] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1029.071480][ T1772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.071684][ T1772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.367261][ T1772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.367392][ T1772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.576111][T13348] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1029.744362][T13348] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1029.748973][T13348] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1029.792357][T13348] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1029.851777][T13348] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1029.892857][T13348] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1029.898947][T13348] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1029.939876][T13348] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1030.618529][T13656] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1030.844113][T13328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.911937][T13348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.913676][T13328] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.960775][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.960854][ T5846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.002021][T13348] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.004914][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.005128][ T5846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.059876][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.059974][ T5846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.202686][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.202814][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.636221][T13294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.727338][T13676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2342'. [ 1031.786594][T13679] fuse: Unknown parameter 'grou00000000000000000000' [ 1032.663498][T13294] veth0_vlan: entered promiscuous mode [ 1032.687418][T13294] veth1_vlan: entered promiscuous mode [ 1033.643593][T13294] veth0_macvtap: entered promiscuous mode [ 1033.659687][T13294] veth1_macvtap: entered promiscuous mode [ 1033.830328][T13294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1033.908779][T13294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1033.961706][ T157] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.963960][ T3050] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.964329][ T3050] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.964682][ T3050] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.175670][T13328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.285949][T13348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.518867][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.518886][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.793386][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.793406][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.831325][T13328] veth0_vlan: entered promiscuous mode [ 1035.918509][T13348] veth0_vlan: entered promiscuous mode [ 1035.928989][T13328] veth1_vlan: entered promiscuous mode [ 1036.033122][T13348] veth1_vlan: entered promiscuous mode [ 1036.211330][T13328] veth0_macvtap: entered promiscuous mode [ 1036.609918][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.660826][T13328] veth1_macvtap: entered promiscuous mode [ 1036.692329][T13348] veth0_macvtap: entered promiscuous mode [ 1036.714386][T13328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1036.757706][T13348] veth1_macvtap: entered promiscuous mode [ 1036.815829][T13328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1036.858250][ T1175] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.902344][ T1175] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.903396][ T1175] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.903624][ T1175] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.913562][T13348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.107102][T13738] netlink: 204 bytes leftover after parsing attributes in process `syz.7.2351'. [ 1037.250116][T13740] fuse: fd is not a fuse device [ 1037.284383][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.370631][T13348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.516668][ T58] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.517977][ T58] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.661434][ T58] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.235998][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.250846][ T5717] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1039.211723][ T58] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.280308][ T5717] usb 8-1: Using ep0 maxpacket: 8 [ 1039.296815][ T5717] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1039.296844][ T5717] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1039.299555][ T5717] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1039.299579][ T5717] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.299596][ T5717] usb 8-1: Product: syz [ 1039.299608][ T5717] usb 8-1: Manufacturer: syz [ 1039.299620][ T5717] usb 8-1: SerialNumber: syz [ 1039.452453][T13750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.452472][T13750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.600627][ T5717] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 1039.600674][ T5717] cdc_ncm 8-1:1.0: bind() failure [ 1039.657149][ T5717] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1039.657192][ T5717] cdc_ncm 8-1:1.1: bind() failure [ 1039.746874][ T5717] usb 8-1: USB disconnect, device number 2 [ 1040.141585][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.351545][ T3075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.351567][ T3075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.985625][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.985645][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.379775][ T3050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.379795][ T3050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.511463][T13767] fuse: fd is not a fuse device [ 1042.122724][T13774] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2362'. [ 1042.272781][ T36] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1042.433708][ T36] usb 8-1: Using ep0 maxpacket: 32 [ 1042.435958][ T36] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1042.435981][ T36] usb 8-1: config 0 has no interface number 0 [ 1042.440483][ T36] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1042.440508][ T36] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.440525][ T36] usb 8-1: Product: syz [ 1042.440537][ T36] usb 8-1: Manufacturer: syz [ 1042.440549][ T36] usb 8-1: SerialNumber: syz [ 1042.687373][ T36] usb 8-1: config 0 descriptor?? [ 1043.850481][ T36] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1043.850509][ T36] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1043.966109][ T13] bridge_slave_1: left allmulticast mode [ 1043.966142][ T13] bridge_slave_1: left promiscuous mode [ 1043.966417][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.051916][T13795] netlink: 'syz.8.2367': attribute type 10 has an invalid length. [ 1044.214185][ T13] bridge_slave_0: left allmulticast mode [ 1044.214220][ T13] bridge_slave_0: left promiscuous mode [ 1044.214476][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.448759][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1044.509972][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1044.512748][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1044.561592][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1044.583251][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1045.235525][ T36] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1045.235840][ T36] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -61 [ 1045.300409][T13815] fuse: Unknown parameter 'group_i00000000000000000000' [ 1045.468412][ T36] usb 8-1: USB disconnect, device number 3 [ 1047.234420][T11725] Bluetooth: hci5: command tx timeout [ 1047.281780][T13826] netlink: 204 bytes leftover after parsing attributes in process `syz.7.2375'. [ 1048.117803][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1048.269400][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1048.408107][ T13] bond0 (unregistering): Released all slaves [ 1048.693047][T13795] team0: Port device dummy0 added [ 1048.710651][ T5258] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1049.498007][T11725] Bluetooth: hci5: command tx timeout [ 1049.893085][T13854] fuse: fd is not a fuse device [ 1050.052115][T13850] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1051.766013][T11725] Bluetooth: hci5: command tx timeout [ 1051.910808][ T5258] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1052.060483][T13883] netlink: 204 bytes leftover after parsing attributes in process `syz.7.2388'. [ 1052.061501][T13881] netlink: 'syz.6.2387': attribute type 10 has an invalid length. [ 1052.125760][T13888] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2389'. [ 1052.346157][T13881] team0: Port device dummy0 added [ 1052.831801][T13907] fuse: fd is not a fuse device [ 1053.026728][ T13] hsr_slave_0: left promiscuous mode [ 1053.066487][ T13] hsr_slave_1: left promiscuous mode [ 1053.068206][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1053.068231][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.121314][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.121356][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.228859][ T13] veth1_macvtap: left promiscuous mode [ 1053.228959][ T13] veth0_macvtap: left promiscuous mode [ 1053.229193][ T13] veth1_vlan: left promiscuous mode [ 1053.229352][ T13] veth0_vlan: left promiscuous mode [ 1053.997277][T11725] Bluetooth: hci5: command tx timeout [ 1054.109081][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2401'. [ 1054.436178][T13936] netlink: 'syz.6.2403': attribute type 10 has an invalid length. [ 1054.475618][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1054.521472][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1054.736340][T13941] fuse: Unknown parameter 'group_id00000000000000000000' [ 1054.802874][ T5258] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1055.205521][T13804] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.205706][T13804] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.205897][T13804] bridge_slave_0: entered allmulticast mode [ 1055.208348][T13804] bridge_slave_0: entered promiscuous mode [ 1055.242146][T13804] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.249737][T13804] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.249954][T13804] bridge_slave_1: entered allmulticast mode [ 1055.252790][T13804] bridge_slave_1: entered promiscuous mode [ 1055.317884][T13804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.331318][T13804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.384238][T13804] team0: Port device team_slave_0 added [ 1055.387889][T13804] team0: Port device team_slave_1 added [ 1055.476647][T13804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.476676][T13804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.476697][T13804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.478915][T13804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.478927][T13804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.478947][T13804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.841804][T13804] hsr_slave_0: entered promiscuous mode [ 1055.844042][T13804] hsr_slave_1: entered promiscuous mode [ 1056.349065][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2413'. [ 1056.478057][ T36] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1056.528796][ T5258] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1056.686463][ T36] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.686493][ T36] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.686514][ T36] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1056.686552][ T36] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1056.686573][ T36] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.764357][ T36] usb 8-1: config 0 descriptor?? [ 1057.124986][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1057.125067][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.439656][ T36] usbhid 8-1:0.0: can't add hid device: -71 [ 1057.439779][ T36] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1057.461481][ T36] usb 8-1: USB disconnect, device number 4 [ 1057.998018][T14005] netlink: 'syz.8.2419': attribute type 10 has an invalid length. [ 1058.233253][T14010] fuse: fd is not a fuse device [ 1058.312026][T14012] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2423'. [ 1059.286152][ T13] bridge_slave_1: left allmulticast mode [ 1059.286185][ T13] bridge_slave_1: left promiscuous mode [ 1059.286434][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.462609][ T13] bridge_slave_0: left allmulticast mode [ 1059.462630][ T13] bridge_slave_0: left promiscuous mode [ 1059.462784][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.265153][T14048] netlink: 'syz.7.2432': attribute type 10 has an invalid length. [ 1065.626468][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1065.716099][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1065.756057][ T13] bond0 (unregistering): Released all slaves [ 1066.026972][T14048] team0: Port device dummy0 added [ 1066.062002][ T13] tipc: Left network mode [ 1067.126403][T13804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1067.266883][T13804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1067.327367][T13804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1067.442529][T13804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1067.443741][T13804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1067.517269][T13804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1067.518300][T13804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1067.625472][T13804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1068.561355][T13804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.715616][T13804] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.025658][ T3075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.025802][ T3075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1069.052714][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.052857][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.285264][T13804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1071.152874][ T13] hsr_slave_0: left promiscuous mode [ 1071.215718][ T13] hsr_slave_1: left promiscuous mode [ 1071.218435][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1071.268616][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1071.964062][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1072.010022][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1073.112338][ T5585] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1073.296614][ T5585] usb 8-1: Using ep0 maxpacket: 16 [ 1073.299052][ T5585] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.299108][ T5585] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1073.299133][ T5585] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1073.299152][ T5585] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1073.299173][ T5585] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1073.300678][ T5585] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1073.300702][ T5585] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1073.300719][ T5585] usb 8-1: Manufacturer: syz [ 1074.365427][ T5585] usb 8-1: config 0 descriptor?? [ 1074.831155][ T5585] rc_core: IR keymap rc-hauppauge not found [ 1074.831176][ T5585] Registered IR keymap rc-empty [ 1074.831321][ T5585] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1074.847155][ T5585] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1074.871664][ T5585] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1074.876053][ T5585] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input25 [ 1074.882426][ T5585] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1074.900283][ T5585] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1075.011568][ T5585] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1075.033772][ T5585] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1075.086699][ T5585] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1075.106832][ T5585] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1075.129672][ T5585] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1075.150720][ T5585] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1075.171092][ T5585] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1075.184646][T13804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.200081][ T5585] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1075.304639][ T5585] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1075.304663][ T5585] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1075.393869][ T5585] usb 8-1: USB disconnect, device number 5 [ 1075.869815][T13804] veth0_vlan: entered promiscuous mode [ 1076.011302][T13804] veth1_vlan: entered promiscuous mode [ 1076.053422][ T37] audit: type=1326 audit(1779246422.713:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14207 comm="syz.8.2474" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccee26ce59 code=0x0 [ 1076.058058][T13804] veth0_macvtap: entered promiscuous mode [ 1076.145309][T13804] veth1_macvtap: entered promiscuous mode [ 1076.174727][T13804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1076.191211][T13804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1076.227258][ T8432] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.231008][ T8432] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.254085][ T8432] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.268968][ T8432] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.214931][ T1021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.214950][ T1021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.331790][ T1021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.331810][ T1021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.836632][T14240] lo speed is unknown, defaulting to 1000 [ 1078.837748][T14240] lo speed is unknown, defaulting to 1000 [ 1078.881843][T14240] lo speed is unknown, defaulting to 1000 [ 1078.885428][T14240] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1078.885460][T14240] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1078.885497][T14240] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1078.892315][T14240] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1078.908683][T14240] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1079.557211][T14240] lo speed is unknown, defaulting to 1000 [ 1079.560918][T14240] lo speed is unknown, defaulting to 1000 [ 1079.563463][T14240] lo speed is unknown, defaulting to 1000 [ 1079.565914][T14240] lo speed is unknown, defaulting to 1000 [ 1079.568369][T14240] lo speed is unknown, defaulting to 1000 [ 1091.570629][T12173] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1091.816553][T12173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.816584][T12173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.816605][T12173] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1091.816645][T12173] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1091.816665][T12173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.922763][T12173] usb 2-1: config 0 descriptor?? [ 1092.594024][T12173] usbhid 2-1:0.0: can't add hid device: -71 [ 1092.594140][T12173] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1092.628984][T12173] usb 2-1: USB disconnect, device number 15 [ 1103.443085][T14421] overlayfs: failed to clone upperpath [ 1110.258382][T14469] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1114.359621][T14518] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1114.375738][T14518] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1120.672714][ T4913] Bluetooth: hci3: command 0x0406 tx timeout [ 1120.672756][ T4913] Bluetooth: hci2: command 0x0406 tx timeout [ 1121.281444][ T60] Bluetooth: hci5: command 0x0405 tx timeout [ 1123.783366][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1123.783408][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.965809][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 1125.965831][T11725] Bluetooth: hci4: command 0x0406 tx timeout [ 1147.154178][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2641'. [ 1147.441374][T14719] 9p: Could not find request transport: fd [ 1153.825845][T14767] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2658'. [ 1166.246360][T14836] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2674'. [ 1166.285226][T14839] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2680'. [ 1168.810108][ T5807] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1168.972506][ T5807] usb 8-1: Using ep0 maxpacket: 16 [ 1168.975229][ T5807] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.975289][ T5807] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1168.975317][ T5807] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1168.975337][ T5807] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1168.975357][ T5807] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1168.976993][ T5807] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1168.977018][ T5807] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1168.977036][ T5807] usb 8-1: Manufacturer: syz [ 1169.085230][ T5807] usb 8-1: config 0 descriptor?? [ 1169.406356][ T5807] rc_core: IR keymap rc-hauppauge not found [ 1169.406377][ T5807] Registered IR keymap rc-empty [ 1169.408658][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1169.439754][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1169.462443][ T5807] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1169.466451][ T5807] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input26 [ 1169.516668][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1169.536087][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1169.558825][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1169.571237][ C0] rc rc0: IR event FIFO is full! [ 1169.571259][ C0] rc rc0: IR event FIFO is full! [ 1169.571272][ C0] rc rc0: IR event FIFO is full! [ 1169.571506][ C0] rc rc0: IR event FIFO is full! [ 1169.571520][ C0] rc rc0: IR event FIFO is full! [ 1169.571533][ C0] rc rc0: IR event FIFO is full! [ 1169.571546][ C0] rc rc0: IR event FIFO is full! [ 1169.571566][ C0] rc rc0: IR event FIFO is full! [ 1169.571799][ C0] rc rc0: IR event FIFO is full! [ 1169.571813][ C0] rc rc0: IR event FIFO is full! [ 1169.571825][ C0] rc rc0: IR event FIFO is full! [ 1169.571851][ C0] rc rc0: IR event FIFO is full! [ 1169.571870][ C0] rc rc0: IR event FIFO is full! [ 1169.571886][ C0] rc rc0: IR event FIFO is full! [ 1169.571899][ C0] rc rc0: IR event FIFO is full! [ 1169.571912][ C0] rc rc0: IR event FIFO is full! [ 1169.571925][ C0] rc rc0: IR event FIFO is full! [ 1169.571938][ C0] rc rc0: IR event FIFO is full! [ 1169.572213][ C0] rc rc0: IR event FIFO is full! [ 1169.572227][ C0] rc rc0: IR event FIFO is full! [ 1169.572465][ C0] rc rc0: IR event FIFO is full! [ 1169.572479][ C0] rc rc0: IR event FIFO is full! [ 1169.572492][ C0] rc rc0: IR event FIFO is full! [ 1169.572504][ C0] rc rc0: IR event FIFO is full! [ 1169.572517][ C0] rc rc0: IR event FIFO is full! [ 1169.572530][ C0] rc rc0: IR event FIFO is full! [ 1169.572542][ C0] rc rc0: IR event FIFO is full! [ 1169.572771][ C0] rc rc0: IR event FIFO is full! [ 1169.572784][ C0] rc rc0: IR event FIFO is full! [ 1169.572797][ C0] rc rc0: IR event FIFO is full! [ 1169.572810][ C0] rc rc0: IR event FIFO is full! [ 1169.573048][ C0] rc rc0: IR event FIFO is full! [ 1169.573062][ C0] rc rc0: IR event FIFO is full! [ 1169.573074][ C0] rc rc0: IR event FIFO is full! [ 1169.573087][ C0] rc rc0: IR event FIFO is full! [ 1169.573099][ C0] rc rc0: IR event FIFO is full! [ 1169.573112][ C0] rc rc0: IR event FIFO is full! [ 1169.573124][ C0] rc rc0: IR event FIFO is full! [ 1169.573137][ C0] rc rc0: IR event FIFO is full! [ 1169.573150][ C0] rc rc0: IR event FIFO is full! [ 1169.573380][ C0] rc rc0: IR event FIFO is full! [ 1169.573393][ C0] rc rc0: IR event FIFO is full! [ 1169.573406][ C0] rc rc0: IR event FIFO is full! [ 1169.573419][ C0] rc rc0: IR event FIFO is full! [ 1169.573432][ C0] rc rc0: IR event FIFO is full! [ 1169.573446][ C0] rc rc0: IR event FIFO is full! [ 1169.573458][ C0] rc rc0: IR event FIFO is full! [ 1169.573688][ C0] rc rc0: IR event FIFO is full! [ 1169.573702][ C0] rc rc0: IR event FIFO is full! [ 1169.573715][ C0] rc rc0: IR event FIFO is full! [ 1169.573728][ C0] rc rc0: IR event FIFO is full! [ 1169.573741][ C0] rc rc0: IR event FIFO is full! [ 1169.573754][ C0] rc rc0: IR event FIFO is full! [ 1169.573982][ C0] rc rc0: IR event FIFO is full! [ 1169.573996][ C0] rc rc0: IR event FIFO is full! [ 1169.574009][ C0] rc rc0: IR event FIFO is full! [ 1169.574022][ C0] rc rc0: IR event FIFO is full! [ 1169.574034][ C0] rc rc0: IR event FIFO is full! [ 1169.574264][ C0] rc rc0: IR event FIFO is full! [ 1169.574278][ C0] rc rc0: IR event FIFO is full! [ 1169.574291][ C0] rc rc0: IR event FIFO is full! [ 1169.574303][ C0] rc rc0: IR event FIFO is full! [ 1169.574316][ C0] rc rc0: IR event FIFO is full! [ 1169.574329][ C0] rc rc0: IR event FIFO is full! [ 1169.574341][ C0] rc rc0: IR event FIFO is full! [ 1169.574577][ C0] rc rc0: IR event FIFO is full! [ 1169.574590][ C0] rc rc0: IR event FIFO is full! [ 1169.574602][ C0] rc rc0: IR event FIFO is full! [ 1169.574615][ C0] rc rc0: IR event FIFO is full! [ 1169.574628][ C0] rc rc0: IR event FIFO is full! [ 1169.574639][ C0] rc rc0: IR event FIFO is full! [ 1169.574873][ C0] rc rc0: IR event FIFO is full! [ 1169.574886][ C0] rc rc0: IR event FIFO is full! [ 1169.574899][ C0] rc rc0: IR event FIFO is full! [ 1169.574912][ C0] rc rc0: IR event FIFO is full! [ 1169.574925][ C0] rc rc0: IR event FIFO is full! [ 1169.574937][ C0] rc rc0: IR event FIFO is full! [ 1169.574950][ C0] rc rc0: IR event FIFO is full! [ 1169.574962][ C0] rc rc0: IR event FIFO is full! [ 1169.575195][ C0] rc rc0: IR event FIFO is full! [ 1169.575216][ C0] rc rc0: IR event FIFO is full! [ 1169.575230][ C0] rc rc0: IR event FIFO is full! [ 1169.575460][ C0] rc rc0: IR event FIFO is full! [ 1169.575474][ C0] rc rc0: IR event FIFO is full! [ 1169.575486][ C0] rc rc0: IR event FIFO is full! [ 1169.575499][ C0] rc rc0: IR event FIFO is full! [ 1169.575511][ C0] rc rc0: IR event FIFO is full! [ 1169.575523][ C0] rc rc0: IR event FIFO is full! [ 1169.575535][ C0] rc rc0: IR event FIFO is full! [ 1169.575549][ C0] rc rc0: IR event FIFO is full! [ 1169.575781][ C0] rc rc0: IR event FIFO is full! [ 1169.575795][ C0] rc rc0: IR event FIFO is full! [ 1169.576032][ C0] rc rc0: IR event FIFO is full! [ 1169.576046][ C0] rc rc0: IR event FIFO is full! [ 1169.576057][ C0] rc rc0: IR event FIFO is full! [ 1169.576071][ C0] rc rc0: IR event FIFO is full! [ 1169.576083][ C0] rc rc0: IR event FIFO is full! [ 1169.576095][ C0] rc rc0: IR event FIFO is full! [ 1169.576108][ C0] rc rc0: IR event FIFO is full! [ 1169.576121][ C0] rc rc0: IR event FIFO is full! [ 1169.576134][ C0] rc rc0: IR event FIFO is full! [ 1169.576147][ C0] rc rc0: IR event FIFO is full! [ 1169.576822][ C0] rc rc0: IR event FIFO is full! [ 1169.576837][ C0] rc rc0: IR event FIFO is full! [ 1169.576857][ C0] rc rc0: IR event FIFO is full! [ 1169.577087][ C0] rc rc0: IR event FIFO is full! [ 1169.577102][ C0] rc rc0: IR event FIFO is full! [ 1169.577338][ C0] rc rc0: IR event FIFO is full! [ 1169.577352][ C0] rc rc0: IR event FIFO is full! [ 1169.577585][ C0] rc rc0: IR event FIFO is full! [ 1169.577598][ C0] rc rc0: IR event FIFO is full! [ 1169.577611][ C0] rc rc0: IR event FIFO is full! [ 1169.577623][ C0] rc rc0: IR event FIFO is full! [ 1169.577636][ C0] rc rc0: IR event FIFO is full! [ 1169.577648][ C0] rc rc0: IR event FIFO is full! [ 1169.577661][ C0] rc rc0: IR event FIFO is full! [ 1169.577673][ C0] rc rc0: IR event FIFO is full! [ 1169.577904][ C0] rc rc0: IR event FIFO is full! [ 1169.577918][ C0] rc rc0: IR event FIFO is full! [ 1169.577930][ C0] rc rc0: IR event FIFO is full! [ 1169.577943][ C0] rc rc0: IR event FIFO is full! [ 1169.577956][ C0] rc rc0: IR event FIFO is full! [ 1169.578186][ C0] rc rc0: IR event FIFO is full! [ 1169.578207][ C0] rc rc0: IR event FIFO is full! [ 1169.578440][ C0] rc rc0: IR event FIFO is full! [ 1169.578453][ C0] rc rc0: IR event FIFO is full! [ 1169.578466][ C0] rc rc0: IR event FIFO is full! [ 1169.578479][ C0] rc rc0: IR event FIFO is full! [ 1169.578491][ C0] rc rc0: IR event FIFO is full! [ 1169.578720][ C0] rc rc0: IR event FIFO is full! [ 1169.578735][ C0] rc rc0: IR event FIFO is full! [ 1169.578748][ C0] rc rc0: IR event FIFO is full! [ 1169.578760][ C0] rc rc0: IR event FIFO is full! [ 1169.578773][ C0] rc rc0: IR event FIFO is full! [ 1169.578785][ C0] rc rc0: IR event FIFO is full! [ 1169.578798][ C0] rc rc0: IR event FIFO is full! [ 1169.579028][ C0] rc rc0: IR event FIFO is full! [ 1169.579340][ C0] rc rc0: IR event FIFO is full! [ 1169.579354][ C0] rc rc0: IR event FIFO is full! [ 1169.579367][ C0] rc rc0: IR event FIFO is full! [ 1169.579612][ C0] rc rc0: IR event FIFO is full! [ 1169.579629][ C0] rc rc0: IR event FIFO is full! [ 1169.579643][ C0] rc rc0: IR event FIFO is full! [ 1169.579654][ C0] rc rc0: IR event FIFO is full! [ 1169.579882][ C0] rc rc0: IR event FIFO is full! [ 1169.579896][ C0] rc rc0: IR event FIFO is full! [ 1169.579909][ C0] rc rc0: IR event FIFO is full! [ 1169.579921][ C0] rc rc0: IR event FIFO is full! [ 1169.579933][ C0] rc rc0: IR event FIFO is full! [ 1169.579945][ C0] rc rc0: IR event FIFO is full! [ 1169.579958][ C0] rc rc0: IR event FIFO is full! [ 1169.580207][ C0] rc rc0: IR event FIFO is full! [ 1169.580221][ C0] rc rc0: IR event FIFO is full! [ 1169.580233][ C0] rc rc0: IR event FIFO is full! [ 1169.580246][ C0] rc rc0: IR event FIFO is full! [ 1169.580258][ C0] rc rc0: IR event FIFO is full! [ 1169.580269][ C0] rc rc0: IR event FIFO is full! [ 1169.580279][ C0] rc rc0: IR event FIFO is full! [ 1169.580290][ C0] rc rc0: IR event FIFO is full! [ 1169.580301][ C0] rc rc0: IR event FIFO is full! [ 1169.580532][ C0] rc rc0: IR event FIFO is full! [ 1169.580545][ C0] rc rc0: IR event FIFO is full! [ 1169.580563][ C0] rc rc0: IR event FIFO is full! [ 1169.580575][ C0] rc rc0: IR event FIFO is full! [ 1169.580804][ C0] rc rc0: IR event FIFO is full! [ 1169.580817][ C0] rc rc0: IR event FIFO is full! [ 1169.581939][ C0] rc rc0: IR event FIFO is full! [ 1169.581954][ C0] rc rc0: IR event FIFO is full! [ 1169.581967][ C0] rc rc0: IR event FIFO is full! [ 1169.581980][ C0] rc rc0: IR event FIFO is full! [ 1169.581993][ C0] rc rc0: IR event FIFO is full! [ 1169.582006][ C0] rc rc0: IR event FIFO is full! [ 1169.582019][ C0] rc rc0: IR event FIFO is full! [ 1169.582032][ C0] rc rc0: IR event FIFO is full! [ 1169.582044][ C0] rc rc0: IR event FIFO is full! [ 1169.582274][ C0] rc rc0: IR event FIFO is full! [ 1169.582288][ C0] rc rc0: IR event FIFO is full! [ 1169.582301][ C0] rc rc0: IR event FIFO is full! [ 1169.582313][ C0] rc rc0: IR event FIFO is full! [ 1169.582326][ C0] rc rc0: IR event FIFO is full! [ 1169.582338][ C0] rc rc0: IR event FIFO is full! [ 1169.582570][ C0] rc rc0: IR event FIFO is full! [ 1169.582583][ C0] rc rc0: IR event FIFO is full! [ 1169.582595][ C0] rc rc0: IR event FIFO is full! [ 1169.582607][ C0] rc rc0: IR event FIFO is full! [ 1169.582853][ C0] rc rc0: IR event FIFO is full! [ 1169.582868][ C0] rc rc0: IR event FIFO is full! [ 1169.582881][ C0] rc rc0: IR event FIFO is full! [ 1169.583113][ C0] rc rc0: IR event FIFO is full! [ 1169.583127][ C0] rc rc0: IR event FIFO is full! [ 1169.583139][ C0] rc rc0: IR event FIFO is full! [ 1169.583153][ C0] rc rc0: IR event FIFO is full! [ 1169.583377][ C0] rc rc0: IR event FIFO is full! [ 1169.583392][ C0] rc rc0: IR event FIFO is full! [ 1169.583404][ C0] rc rc0: IR event FIFO is full! [ 1169.583650][ C0] rc rc0: IR event FIFO is full! [ 1169.583668][ C0] rc rc0: IR event FIFO is full! [ 1169.583830][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1169.583919][ C0] rc rc0: IR event FIFO is full! [ 1169.583933][ C0] rc rc0: IR event FIFO is full! [ 1169.583945][ C0] rc rc0: IR event FIFO is full! [ 1169.583957][ C0] rc rc0: IR event FIFO is full! [ 1169.583970][ C0] rc rc0: IR event FIFO is full! [ 1169.583983][ C0] rc rc0: IR event FIFO is full! [ 1169.583995][ C0] rc rc0: IR event FIFO is full! [ 1169.584008][ C0] rc rc0: IR event FIFO is full! [ 1169.584241][ C0] rc rc0: IR event FIFO is full! [ 1169.584255][ C0] rc rc0: IR event FIFO is full! [ 1169.584268][ C0] rc rc0: IR event FIFO is full! [ 1169.584500][ C0] rc rc0: IR event FIFO is full! [ 1169.584514][ C0] rc rc0: IR event FIFO is full! [ 1169.584527][ C0] rc rc0: IR event FIFO is full! [ 1169.584540][ C0] rc rc0: IR event FIFO is full! [ 1169.584553][ C0] rc rc0: IR event FIFO is full! [ 1169.585001][ C0] rc rc0: IR event FIFO is full! [ 1169.585015][ C0] rc rc0: IR event FIFO is full! [ 1169.585027][ C0] rc rc0: IR event FIFO is full! [ 1169.585041][ C0] rc rc0: IR event FIFO is full! [ 1169.585705][ C0] rc rc0: IR event FIFO is full! [ 1169.585719][ C0] rc rc0: IR event FIFO is full! [ 1169.585734][ C0] rc rc0: IR event FIFO is full! [ 1169.585747][ C0] rc rc0: IR event FIFO is full! [ 1169.585760][ C0] rc rc0: IR event FIFO is full! [ 1169.585988][ C0] rc rc0: IR event FIFO is full! [ 1169.586002][ C0] rc rc0: IR event FIFO is full! [ 1169.586015][ C0] rc rc0: IR event FIFO is full! [ 1169.586028][ C0] rc rc0: IR event FIFO is full! [ 1169.586045][ C0] rc rc0: IR event FIFO is full! [ 1169.586058][ C0] rc rc0: IR event FIFO is full! [ 1169.586070][ C0] rc rc0: IR event FIFO is full! [ 1169.586296][ C0] rc rc0: IR event FIFO is full! [ 1169.586310][ C0] rc rc0: IR event FIFO is full! [ 1169.586323][ C0] rc rc0: IR event FIFO is full! [ 1169.586336][ C0] rc rc0: IR event FIFO is full! [ 1169.586373][ C0] rc rc0: IR event FIFO is full! [ 1169.586847][ C0] rc rc0: IR event FIFO is full! [ 1169.586861][ C0] rc rc0: IR event FIFO is full! [ 1169.586873][ C0] rc rc0: IR event FIFO is full! [ 1169.586886][ C0] rc rc0: IR event FIFO is full! [ 1169.586899][ C0] rc rc0: IR event FIFO is full! [ 1169.586911][ C0] rc rc0: IR event FIFO is full! [ 1169.586924][ C0] rc rc0: IR event FIFO is full! [ 1169.587151][ C0] rc rc0: IR event FIFO is full! [ 1169.587165][ C0] rc rc0: IR event FIFO is full! [ 1169.587178][ C0] rc rc0: IR event FIFO is full! [ 1169.587191][ C0] rc rc0: IR event FIFO is full! [ 1169.587203][ C0] rc rc0: IR event FIFO is full! [ 1169.587216][ C0] rc rc0: IR event FIFO is full! [ 1169.587228][ C0] rc rc0: IR event FIFO is full! [ 1169.587475][ C0] rc rc0: IR event FIFO is full! [ 1169.587488][ C0] rc rc0: IR event FIFO is full! [ 1169.587502][ C0] rc rc0: IR event FIFO is full! [ 1169.587754][ C0] rc rc0: IR event FIFO is full! [ 1169.587768][ C0] rc rc0: IR event FIFO is full! [ 1169.587781][ C0] rc rc0: IR event FIFO is full! [ 1169.587793][ C0] rc rc0: IR event FIFO is full! [ 1169.587806][ C0] rc rc0: IR event FIFO is full! [ 1169.587818][ C0] rc rc0: IR event FIFO is full! [ 1169.588057][ C0] rc rc0: IR event FIFO is full! [ 1169.588070][ C0] rc rc0: IR event FIFO is full! [ 1169.588083][ C0] rc rc0: IR event FIFO is full! [ 1169.588096][ C0] rc rc0: IR event FIFO is full! [ 1169.588108][ C0] rc rc0: IR event FIFO is full! [ 1169.588358][ C0] rc rc0: IR event FIFO is full! [ 1169.588372][ C0] rc rc0: IR event FIFO is full! [ 1169.588385][ C0] rc rc0: IR event FIFO is full! [ 1169.588397][ C0] rc rc0: IR event FIFO is full! [ 1169.744539][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1169.815588][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1169.976035][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1170.031092][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1170.104972][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1170.147832][ T5807] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1170.487820][ T5807] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1170.487845][ T5807] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1171.140295][ T5807] usb 8-1: USB disconnect, device number 6 [ 1172.823678][T14889] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2696'. [ 1173.913713][T14897] fuse: fd is not a fuse device [ 1177.000970][T14918] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2707'. [ 1178.339370][T14927] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2710'. [ 1178.949793][T14930] fuse: Unknown parameter 'use00000000000000000000' [ 1181.438537][T10849] Bluetooth: hci5: command 0x0405 tx timeout [ 1182.897337][T14954] netlink: 208 bytes leftover after parsing attributes in process `syz.8.2718'. [ 1183.512091][T14962] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2722'. [ 1183.607335][T14966] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2724'. [ 1184.689740][T14970] fuse: fd is not a fuse device [ 1188.232405][T14989] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2731'. [ 1190.015902][T15002] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2738'. [ 1190.425038][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1190.434688][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1191.517325][T15011] fuse: fd is not a fuse device [ 1195.542192][T15029] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2748'. [ 1198.531769][T15047] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2753'. [ 1198.887316][T15051] fuse: fd is not a fuse device [ 1206.139223][T15087] fuse: fd is not a fuse device [ 1206.254416][T15090] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2767'. [ 1209.776865][T12173] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1209.960048][T12173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.960080][T12173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.960108][T12173] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1209.960149][T12173] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1209.960170][T12173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.965456][T12173] usb 2-1: config 0 descriptor?? [ 1210.704015][T12173] usbhid 2-1:0.0: can't add hid device: -71 [ 1210.711850][T12173] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1210.746824][T12173] usb 2-1: USB disconnect, device number 16 [ 1213.351265][T15132] fuse: Unknown parameter 'user_id00000000000000000000' [ 1213.574709][T15136] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2784'. [ 1215.739174][T15154] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2789'. [ 1217.092720][ T3075] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1217.093684][ T3075] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1217.093723][ T3075] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1217.093756][ T3075] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1219.500361][T15159] syz.8.2791 (15159) used greatest stack depth: 17568 bytes left [ 1221.521467][T15176] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2798'. [ 1221.978862][T15181] fuse: fd is not a fuse device [ 1222.749080][T10849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1222.870469][T10849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1223.020177][T10849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1223.024546][T10849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1223.045341][T10849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1224.686961][T15186] lo speed is unknown, defaulting to 1000 [ 1225.387768][T14536] Bluetooth: hci0: command tx timeout [ 1225.828791][T15186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.839614][T15186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.839937][T15186] bridge_slave_0: entered allmulticast mode [ 1225.858189][T15186] bridge_slave_0: entered promiscuous mode [ 1225.876231][T15186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.876449][T15186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.876652][T15186] bridge_slave_1: entered allmulticast mode [ 1225.879394][T15186] bridge_slave_1: entered promiscuous mode [ 1225.951889][T15186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.956498][T15186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1226.471044][T15186] team0: Port device team_slave_0 added [ 1227.573869][T15230] fuse: fd is not a fuse device [ 1227.574933][T15186] team0: Port device team_slave_1 added [ 1227.646656][T14536] Bluetooth: hci0: command tx timeout [ 1227.802082][T15186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1227.802098][T15186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1227.802122][T15186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1227.873985][T15186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1227.874001][T15186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1227.874026][T15186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1227.978661][T15232] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2811'. [ 1228.070053][T15186] hsr_slave_0: entered promiscuous mode [ 1228.071537][T15186] hsr_slave_1: entered promiscuous mode [ 1228.072638][T15186] debugfs: 'hsr0' already exists in 'hsr' [ 1228.072662][T15186] Cannot create hsr debugfs directory [ 1229.895849][T14536] Bluetooth: hci0: command tx timeout [ 1232.325627][T14536] Bluetooth: hci0: command tx timeout [ 1256.860351][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1256.860419][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1258.515766][T15444] batman_adv: batadv0: Adding interface: vlan2 [ 1258.515808][T15444] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1258.515881][T15444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1258.515920][T15444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.515952][T15444] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1259.493948][T15446] 9pnet_fd: p9_fd_create_tcp (15446): problem connecting socket to 127.0.0.1 [ 1270.186845][T14536] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1270.186891][T14536] CPU: 0 UID: 0 PID: 14536 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1270.186919][T14536] Tainted: [L]=SOFTLOCKUP [ 1270.186926][T14536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1270.186937][T14536] Workqueue: hci3 hci_rx_work [ 1270.187108][T14536] Call Trace: [ 1270.187115][T14536] [ 1270.187124][T14536] dump_stack_lvl+0xe8/0x150 [ 1270.187185][T14536] sysfs_create_dir_ns+0x271/0x2a0 [ 1270.187291][T14536] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1270.187394][T14536] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1270.187424][T14536] ? rt_spin_unlock+0x160/0x200 [ 1270.187447][T14536] kobject_add_internal+0x631/0xd10 [ 1270.187528][T14536] kobject_add+0x163/0x240 [ 1270.187556][T14536] ? __pfx_kobject_add+0x10/0x10 [ 1270.187588][T14536] ? get_device_parent+0x370/0x3a0 [ 1270.187674][T14536] device_add+0x408/0xbb0 [ 1270.187701][T14536] hci_conn_add_sysfs+0xd5/0x210 [ 1270.187763][T14536] le_conn_complete_evt+0x10e6/0x16b0 [ 1270.187818][T14536] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1270.187837][T14536] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1270.187861][T14536] ? lockdep_hardirqs_on+0x7a/0x110 [ 1270.187976][T14536] ? skb_pull_data+0xfb/0x200 [ 1270.188083][T14536] hci_le_enh_conn_complete_evt+0x189/0x490 [ 1270.188134][T14536] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1270.188166][T14536] hci_event_packet+0x659/0xef0 [ 1270.188197][T14536] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1270.188215][T14536] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1270.188239][T14536] ? __pfx_hci_event_packet+0x10/0x10 [ 1270.188262][T14536] ? rt_spin_unlock+0x14f/0x200 [ 1270.188291][T14536] ? hci_send_to_monitor+0xe2/0x590 [ 1270.188346][T14536] hci_rx_work+0x3ee/0x1040 [ 1270.188377][T14536] ? process_scheduled_works+0xa70/0x1860 [ 1270.188423][T14536] process_scheduled_works+0xb5d/0x1860 [ 1270.188478][T14536] ? __pfx_process_scheduled_works+0x10/0x10 [ 1270.188504][T14536] ? assign_work+0x3d5/0x5e0 [ 1270.188531][T14536] worker_thread+0xa53/0xfc0 [ 1270.188579][T14536] kthread+0x388/0x470 [ 1270.188631][T14536] ? __pfx_worker_thread+0x10/0x10 [ 1270.188649][T14536] ? __pfx_kthread+0x10/0x10 [ 1270.188674][T14536] ret_from_fork+0x514/0xb70 [ 1270.188711][T14536] ? __pfx_ret_from_fork+0x10/0x10 [ 1270.188732][T14536] ? __switch_to+0xc79/0x1410 [ 1270.188761][T14536] ? __pfx_kthread+0x10/0x10 [ 1270.188785][T14536] ret_from_fork_asm+0x1a/0x30 [ 1270.188826][T14536] [ 1270.188858][T14536] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1270.188899][T14536] Bluetooth: hci3: failed to register connection device [ 1272.954252][T15505] netlink: 'syz.8.2876': attribute type 13 has an invalid length. [ 1272.954273][T15505] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2876'. [ 1272.954313][T15505] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 1284.744824][T15543] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2888'. [ 1290.032701][T10849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1290.096544][T10849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1290.101392][T10849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1290.130231][T10849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1290.133791][T10849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1292.445884][T10849] Bluetooth: hci6: command tx timeout [ 1294.655281][T10849] Bluetooth: hci6: command tx timeout [ 1296.229124][T15554] lo speed is unknown, defaulting to 1000 [ 1298.116722][T10849] Bluetooth: hci6: command tx timeout [ 1300.292168][T14536] Bluetooth: hci6: command tx timeout [ 1307.412797][T15554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.412932][T15554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.413177][T15554] bridge_slave_0: entered allmulticast mode [ 1307.440221][T15554] bridge_slave_0: entered promiscuous mode [ 1307.558935][T15554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.559057][T15554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.559299][T15554] bridge_slave_1: entered allmulticast mode [ 1307.588688][T15554] bridge_slave_1: entered promiscuous mode [ 1308.011260][T15554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1308.032785][T15554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1310.756461][T15554] team0: Port device team_slave_0 added [ 1310.767389][T15554] team0: Port device team_slave_1 added [ 1311.627634][T15554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1311.627649][T15554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.627674][T15554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1311.633546][T15554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1311.634799][T15554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.634827][T15554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.474352][T15554] hsr_slave_0: entered promiscuous mode [ 1312.475637][T15554] hsr_slave_1: entered promiscuous mode [ 1312.477628][T15554] debugfs: 'hsr0' already exists in 'hsr' [ 1312.477657][T15554] Cannot create hsr debugfs directory [ 1318.837902][T10987] libceph: connect (1)[c::]:6789 error -101 [ 1319.293010][T15680] ceph: No mds server is up or the cluster is laggy [ 1319.326053][T10987] libceph: mon0 (1)[c::]:6789 connect error [ 1319.675337][T10987] libceph: connect (1)[c::]:6789 error -101 [ 1319.675559][T10987] libceph: mon0 (1)[c::]:6789 connect error [ 1323.589463][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1323.589530][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1328.699777][T15714] fuse: fd is not a fuse device [ 1341.050371][T15749] fuse: fd is not a fuse device [ 1353.557908][T15783] fuse: fd is not a fuse device [ 1353.584784][T14536] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 1355.649244][T10849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1355.713351][T10849] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1355.756450][T10849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1355.802382][T10849] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1355.812940][T10849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1358.114451][T10849] Bluetooth: hci7: command tx timeout [ 1358.995989][T10849] Bluetooth: hci0: command 0x0406 tx timeout [ 1360.368274][T14536] Bluetooth: hci7: command tx timeout [ 1360.774166][T14536] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1360.774194][T14536] CPU: 0 UID: 0 PID: 14536 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1360.774229][T14536] Tainted: [L]=SOFTLOCKUP [ 1360.774236][T14536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1360.774248][T14536] Workqueue: hci1 hci_rx_work [ 1360.774282][T14536] Call Trace: [ 1360.774290][T14536] [ 1360.774299][T14536] dump_stack_lvl+0xe8/0x150 [ 1360.774324][T14536] sysfs_create_dir_ns+0x271/0x2a0 [ 1360.774353][T14536] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1360.774376][T14536] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1360.774407][T14536] ? rt_spin_unlock+0x160/0x200 [ 1360.774429][T14536] kobject_add_internal+0x631/0xd10 [ 1360.774464][T14536] kobject_add+0x163/0x240 [ 1360.774495][T14536] ? __pfx_kobject_add+0x10/0x10 [ 1360.774528][T14536] ? get_device_parent+0x370/0x3a0 [ 1360.774554][T14536] device_add+0x408/0xbb0 [ 1360.774580][T14536] hci_conn_add_sysfs+0xd5/0x210 [ 1360.774606][T14536] le_conn_complete_evt+0x10e6/0x16b0 [ 1360.774635][T14536] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1360.774654][T14536] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1360.774678][T14536] ? lockdep_hardirqs_on+0x7a/0x110 [ 1360.774703][T14536] ? skb_pull_data+0xfb/0x200 [ 1360.774733][T14536] hci_le_enh_conn_complete_evt+0x189/0x490 [ 1360.774762][T14536] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1360.774793][T14536] hci_event_packet+0x659/0xef0 [ 1360.774823][T14536] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1360.774842][T14536] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1360.774865][T14536] ? __pfx_hci_event_packet+0x10/0x10 [ 1360.774886][T14536] ? rt_spin_unlock+0x14f/0x200 [ 1360.774915][T14536] ? hci_send_to_monitor+0xe2/0x590 [ 1360.774938][T14536] hci_rx_work+0x3ee/0x1040 [ 1360.774968][T14536] ? process_scheduled_works+0xa70/0x1860 [ 1360.774990][T14536] process_scheduled_works+0xb5d/0x1860 [ 1360.775042][T14536] ? __pfx_process_scheduled_works+0x10/0x10 [ 1360.775069][T14536] ? assign_work+0x3d5/0x5e0 [ 1360.775095][T14536] worker_thread+0xa53/0xfc0 [ 1360.775144][T14536] kthread+0x388/0x470 [ 1360.775169][T14536] ? __pfx_worker_thread+0x10/0x10 [ 1360.775186][T14536] ? __pfx_kthread+0x10/0x10 [ 1360.775211][T14536] ret_from_fork+0x514/0xb70 [ 1360.775242][T14536] ? __pfx_ret_from_fork+0x10/0x10 [ 1360.775263][T14536] ? __switch_to+0xc79/0x1410 [ 1360.775294][T14536] ? __pfx_kthread+0x10/0x10 [ 1360.775319][T14536] ret_from_fork_asm+0x1a/0x30 [ 1360.775358][T14536] [ 1360.777899][T14536] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1360.777945][T14536] Bluetooth: hci1: failed to register connection device [ 1361.727244][T15789] lo speed is unknown, defaulting to 1000 [ 1362.622384][T14536] Bluetooth: hci7: command tx timeout [ 1363.450609][T10849] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1363.517697][T10849] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1363.563718][T10849] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1363.571705][T10849] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1363.677342][T10849] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1364.947843][T14536] Bluetooth: hci7: command tx timeout [ 1365.742038][T15829] fuse: fd is not a fuse device [ 1366.263522][T14536] Bluetooth: hci8: command tx timeout [ 1368.528572][T10849] Bluetooth: hci8: command tx timeout [ 1369.558993][T15789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.560864][T15789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.561083][T15789] bridge_slave_0: entered allmulticast mode [ 1369.569465][T15789] bridge_slave_0: entered promiscuous mode [ 1369.642824][T15789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.642946][T15789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.643186][T15789] bridge_slave_1: entered allmulticast mode [ 1369.680777][T15789] bridge_slave_1: entered promiscuous mode [ 1370.338794][T15789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1370.373068][T15789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1370.555125][T15857] tipc: Enabling of bearer rejected, failed to enable media [ 1370.773391][T14536] Bluetooth: hci8: command tx timeout [ 1371.924678][T15789] team0: Port device team_slave_0 added [ 1372.732836][T15789] team0: Port device team_slave_1 added [ 1372.735195][T15819] lo speed is unknown, defaulting to 1000 [ 1373.028730][T14536] Bluetooth: hci8: command tx timeout [ 1374.278629][T15789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1374.278645][T15789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1374.278670][T15789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.146585][ T38] INFO: task syz.6.2770:15099 blocked for more than 144 seconds. [ 1376.146612][ T38] Tainted: G L syzkaller #0 [ 1376.146623][ T38] Blocked by coredump. [ 1376.146629][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1376.146655][ T38] task:syz.6.2770 state:D stack:28632 pid:15099 tgid:15095 ppid:13231 task_flags:0x40044c flags:0x00080001 [ 1376.146705][ T38] Call Trace: [ 1376.146712][ T38] [ 1376.146725][ T38] __schedule+0x16ec/0x5620 [ 1376.146768][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.146852][ T38] ? look_up_lock_class+0x57/0x110 [ 1376.146877][ T38] ? __pfx___schedule+0x10/0x10 [ 1376.146909][ T38] ? schedule+0x90/0x360 [ 1376.146932][ T38] schedule+0x164/0x360 [ 1376.146955][ T38] schedule_timeout+0xc3/0x2c0 [ 1376.146981][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 1376.147003][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1376.147140][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1376.147161][ T38] ? wait_for_completion+0x274/0x5e0 [ 1376.147185][ T38] wait_for_completion+0x2cc/0x5e0 [ 1376.147219][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 1376.147253][ T38] exit_aio+0x319/0x3f0 [ 1376.147357][ T38] ? __pfx_exit_aio+0x10/0x10 [ 1376.147385][ T38] ? uprobe_clear_state+0x2bf/0x3f0 [ 1376.147466][ T38] __mmput+0x68/0x3d0 [ 1376.147489][ T38] exit_mm+0x1f6/0x2d0 [ 1376.147517][ T38] do_exit+0x6a2/0x22c0 [ 1376.147542][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1376.147567][ T38] ? __pfx_do_exit+0x10/0x10 [ 1376.147587][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1376.147607][ T38] ? reacquire_held_locks+0x104/0x190 [ 1376.147660][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1376.147690][ T38] do_group_exit+0x21b/0x2d0 [ 1376.147713][ T38] ? rt_spin_unlock+0x160/0x200 [ 1376.147734][ T38] get_signal+0x1284/0x1330 [ 1376.147774][ T38] arch_do_signal_or_restart+0xbc/0x840 [ 1376.147806][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1376.147846][ T38] ? __x64_sys_recvmmsg+0x198/0x250 [ 1376.147946][ T38] exit_to_user_mode_loop+0x8c/0x4d0 [ 1376.148028][ T38] ? rcu_is_watching+0x15/0xb0 [ 1376.148108][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.148128][ T38] do_syscall_64+0x33e/0xf80 [ 1376.148180][ T38] ? trace_irq_disable+0x3b/0x140 [ 1376.148256][ T38] ? clear_bhb_loop+0x40/0x90 [ 1376.148278][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.148301][ T38] RIP: 0033:0x7f8211cace59[ 1376.148301][ T38] RIP: 0033:0x7f8211cace59 [ 1376.148319][ T38] RSP: 002b:00007f820fee5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1376.148339][ T38] RAX: 0000000000010106 RBX: 00007f8211f26090 RCX: 00007f8211cace59 [ 1376.148352][ T38] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1376.148364][ T38] RBP: 00007f8211d42d6f R08: 0000000000000000 R09: 0000000000000000 [ 1376.148375][ T38] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1376.148387][ T38] R13: 00007f8211f26128 R14: 00007f8211f26090 R15: 00007ffd9332f688 [ 1376.148435][ T38] [ 1376.148463][ T38] [ 1376.148463][ T38] Showing all locks held in the system: [ 1376.148473][ T38] 4 locks held by rcuc/1/28: [ 1376.148488][ T38] 1 lock held by khungtaskd/38: [ 1376.148498][ T38] #0: ffffffff8dfc8080 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1376.148558][ T38] 3 locks held by kworker/u8:2/42: [ 1376.148567][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1376.148612][ T38] #1: ffffc90000b37c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1376.148667][ T38] #2: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1376.395649][ T38] 5 locks held by kworker/u8:9/1772: [ 1376.395674][ T38] 3 locks held by kworker/u8:10/2977: [ 1376.395684][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1376.395729][ T38] #1: ffffc9000e33fc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1376.395769][ T38] #2: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1376.395812][ T38] 2 locks held by getty/5353: [ 1376.395822][ T38] #0: ffff88803641b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1376.395981][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 1376.396062][ T38] 3 locks held by kworker/u8:15/6177: [ 1376.396072][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1376.396113][ T38] #1: ffffc90004c77c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1376.396155][ T38] #2: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1376.396194][ T38] 4 locks held by kworker/1:6/10987: [ 1376.396204][ T38] 3 locks held by kworker/u8:18/12079: [ 1376.396214][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1376.396256][ T38] #1: ffffc90005c5fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1376.396296][ T38] #2: ffffffff8f3584f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1376.396403][ T38] 2 locks held by syz-executor/13294: [ 1376.396414][ T38] 1 lock held by syz-executor/13328: [ 1376.396425][ T38] 1 lock held by syz-executor/13348: [ 1376.396435][ T38] #0: ffff88805faa6480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1376.396523][ T38] 3 locks held by kworker/u8:19/13750: [ 1376.396533][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1376.396574][ T38] #1: ffffc90005467c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1376.396613][ T38] #2: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1376.396655][ T38] 10 locks held by kworker/u8:24/14740: [ 1376.396666][ T38] 7 locks held by syz-executor/15186: [ 1376.396676][ T38] #0: ffff8880365f4480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1376.396746][ T38] #1: ffff88803b895c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1376.396792][ T38] #2: ffff888028f30e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1376.396838][ T38] #3: ffffffff8ebd04b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1376.396936][ T38] #4: ffff88805e8c0160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1376.397009][ T38] #5: ffff88801e2d4310 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1376.397078][ T38] #6: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1376.397119][ T38] 4 locks held by syz-executor/15554: [ 1376.397129][ T38] #0: ffff8880365f4480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1376.397173][ T38] #1: ffff888093712c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1376.397214][ T38] #2: ffff888028f30e18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1376.397260][ T38] #3: ffffffff8ebd04b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1376.397302][ T38] 4 locks held by syz.8.2957/15786: [ 1376.397314][ T38] 1 lock held by syz-executor/15789: [ 1376.397323][ T38] #0: ffffffff8f3584f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1376.397365][ T38] 2 locks held by syz-executor/15819: [ 1376.397374][ T38] #0: ffffffff8f3497a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1376.397443][ T38] #1: ffffffff8f3584f8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d7/0x840 [ 1376.397536][ T38] 2 locks held by syz.1.2976/15864: [ 1376.397548][ T38] [ 1376.397553][ T38] ============================================= [ 1376.397553][ T38] [ 1376.397566][ T38] NMI backtrace for cpu 1 [ 1376.397581][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1376.397605][ T38] Tainted: [L]=SOFTLOCKUP [ 1376.397611][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1376.397621][ T38] Call Trace: [ 1376.397629][ T38] [ 1376.397637][ T38] dump_stack_lvl+0xe8/0x150 [ 1376.397658][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1376.397706][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1376.397737][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1376.397757][ T38] sys_info+0x135/0x170 [ 1376.397779][ T38] watchdog+0xfd3/0x1030 [ 1376.397862][ T38] ? watchdog+0x1c9/0x1030 [ 1376.397887][ T38] kthread+0x388/0x470 [ 1376.397908][ T38] ? __pfx_watchdog+0x10/0x10 [ 1376.397935][ T38] ? __pfx_kthread+0x10/0x10 [ 1376.397956][ T38] ret_from_fork+0x514/0xb70 [ 1376.397978][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1376.397996][ T38] ? __switch_to+0xc79/0x1410 [ 1376.398022][ T38] ? __pfx_kthread+0x10/0x10 [ 1376.398044][ T38] ret_from_fork_asm+0x1a/0x30 [ 1376.398078][ T38] [ 1376.398084][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1376.398111][ C0] NMI backtrace for cpu 0 [ 1376.398126][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1376.398146][ C0] Tainted: [L]=SOFTLOCKUP [ 1376.398152][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1376.398161][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1376.398242][ C0] Code: e8 4e 01 90 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0f 10 f7 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1376.398254][ C0] RSP: 0000:ffffc900001679d0 EFLAGS: 00000202 [ 1376.398268][ C0] RAX: 1ffffffff3363e00 RBX: 00000000000003fd RCX: 0000000000000000 [ 1376.398279][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1376.398289][ C0] RBP: ffffffff99b1f970 R08: 0000000000000000 R09: 0000000000000000 [ 1376.398298][ C0] R10: dffffc0000000000 R11: ffffffff853477f0 R12: dffffc0000000000 [ 1376.398310][ C0] R13: 0000000000000000 R14: ffffffff99b1f6e0 R15: 0000000000000000 [ 1376.398320][ C0] FS: 0000000000000000(0000) GS:ffff888126171000(0000) knlGS:0000000000000000 [ 1376.398332][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1376.398343][ C0] CR2: 000000110c230000 CR3: 000000003a0cc000 CR4: 00000000003526f0 [ 1376.398356][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000423 [ 1376.398365][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1376.398376][ C0] Call Trace: [ 1376.398382][ C0] [ 1376.398389][ C0] wait_for_lsr+0x1aa/0x2f0 [ 1376.398411][ C0] serial8250_console_write+0x120d/0x1b90 [ 1376.398437][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1376.398456][ C0] ? console_flush_one_record+0xfa/0xb90 [ 1376.398520][ C0] ? console_flush_one_record+0x48f/0xb90 [ 1376.398540][ C0] console_flush_one_record+0x68b/0xb90 [ 1376.398561][ C0] ? console_flush_one_record+0xfa/0xb90 [ 1376.398580][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 1376.398604][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1376.398631][ C0] legacy_kthread_func+0x1b6/0x250 [ 1376.398650][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1376.398667][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1376.398728][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 1376.398748][ C0] kthread+0x388/0x470 [ 1376.398766][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1376.398783][ C0] ? __pfx_kthread+0x10/0x10 [ 1376.398801][ C0] ret_from_fork+0x514/0xb70 [ 1376.398818][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1376.398833][ C0] ? __switch_to+0xc79/0x1410 [ 1376.398855][ C0] ? __pfx_kthread+0x10/0x10 [ 1376.398872][ C0] ret_from_fork_asm+0x1a/0x30 [ 1376.398896][ C0] [ 1376.399114][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1376.399130][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1376.399153][ T38] Tainted: [L]=SOFTLOCKUP [ 1376.399159][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1376.399168][ T38] Call Trace: [ 1376.399175][ T38] [ 1376.399183][ T38] vpanic+0x56c/0xa60 [ 1376.399207][ T38] ? __pfx_vpanic+0x10/0x10 [ 1376.399235][ T38] panic+0xc5/0xd0 [ 1376.399254][ T38] ? __pfx_panic+0x10/0x10 [ 1376.399282][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1376.399303][ T38] watchdog+0x102c/0x1030 [ 1376.399328][ T38] ? watchdog+0x1c9/0x1030 [ 1376.399352][ T38] kthread+0x388/0x470 [ 1376.399373][ T38] ? __pfx_watchdog+0x10/0x10 [ 1376.399390][ T38] ? __pfx_kthread+0x10/0x10 [ 1376.399412][ T38] ret_from_fork+0x514/0xb70 [ 1376.399432][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1376.399451][ T38] ? __switch_to+0xc79/0x1410 [ 1376.399476][ T38] ? __pfx_kthread+0x10/0x10 [ 1376.399498][ T38] ret_from_fork_asm+0x1a/0x30 [ 1376.399532][ T38] [ 1376.399872][ T38] Kernel Offset: disabled