last executing test programs: 18m13.792381798s ago: executing program 32 (id=4191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x84) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0xfffffff5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) 18m12.794226835s ago: executing program 33 (id=4197): syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) getitimer(0x1, &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0100c200000086dd6015fe0800482f00fc020000000000000000000000000000ff020000000000000000000000000001242088a800000000ff55fae400000800000086dd88a888be080000031000"], 0x0) write$binfmt_misc(r0, &(0x7f0000000000)="180c4552", 0x4) write$P9_RREADLINK(r0, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) write$binfmt_misc(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0xff000000], [0xffffffff, 0xffffffff], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x6f}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x308, 0x804, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0xfffffffe, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x1}}, @common=@eui64={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x20008804) r4 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r6}, &(0x7f00000007c0), &(0x7f0000000640)=r5}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000240), &(0x7f0000000280)='%-5lx \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r6, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r6, 0x0, &(0x7f0000000400)=""/154}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setreuid(0x0, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 18m12.290369337s ago: executing program 34 (id=4198): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 18m9.779070677s ago: executing program 35 (id=4200): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 8m59.807836774s ago: executing program 7 (id=7858): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a}, 0xd8) sendto$inet(r3, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) mount$binder(0x0, 0x0, &(0x7f00000000c0), 0x1000810, &(0x7f0000000000)=ANY=[]) chroot(0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 8m58.125103043s ago: executing program 7 (id=7859): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r2, @ANYBLOB="080002007f00000108000400ac1e00"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 8m57.839429104s ago: executing program 7 (id=7862): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xec09b3499424556}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 8m57.625529163s ago: executing program 7 (id=7864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000180)=0xb, 0x4) socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x28, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "11f3305280f125e6e11a9314b296"}}, 0xfdef) 8m55.040309427s ago: executing program 7 (id=7876): unshare(0x62040200) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x5031, 0xffffffffffffffff, 0xc2dcc000) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00010000b3ce7b880e0000000000000000006c002d800b000000250e8aefc3c2230005000000320000000a00000002020202020200000a00000002020200000200000001010101010100000a00000001010101010100000a00000002020202020200000a00000001010101010100000a00000001010101010100000600f70008080000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x7b, &(0x7f0000000000), 0x8) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000002c0)={'a', ' *:* ', 'wm\x00'}, 0x9) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000280)}) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES8=r2, @ANYRES64=r2], 0x44}, 0x1, 0x0, 0x0, 0x4000804}, 0x90) socket$inet(0x2, 0x2, 0xd0) 8m54.953659514s ago: executing program 6 (id=7878): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001100), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3], 0xd40}}, 0x8) 8m54.882044545s ago: executing program 6 (id=7879): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) shutdown(r0, 0x1) 8m54.561018662s ago: executing program 6 (id=7881): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) r4 = socket$kcm(0x2b, 0x1, 0x0) syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x4d, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0xff, 0xfffffffd, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x5, '\x00', @ptr=0x2}}) 8m52.000440918s ago: executing program 6 (id=7884): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINK={0x8, 0x5, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) 8m51.609687304s ago: executing program 8 (id=7887): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@ldst={0x6}]}, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x200002, 0x0, 0x0, 0x0, 0x44}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) 8m51.130503648s ago: executing program 8 (id=7892): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1e, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 8m51.020317133s ago: executing program 6 (id=7893): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) r4 = socket$kcm(0x2b, 0x1, 0x0) syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000ffffffd70700001000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032b75649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a6e5e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b6eb3c325d5687644a4c0a1d44d9dfd82896f56bdfa0790406984c123e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x4d, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0xff, 0xfffffffd, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x5, '\x00', @ptr=0x2}}) 8m50.68189508s ago: executing program 8 (id=7894): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xf9, 0x1, 0x18, @private1={0xfc, 0x1, '\x00', 0xfe}, @loopback={0x0, 0xffff888101827518}, 0x80f, 0x10, 0x1, 0xfffdfff8}}) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x349, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="f590", 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 8m49.779199785s ago: executing program 5 (id=7896): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 8m49.495954974s ago: executing program 5 (id=7897): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0xc040) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32, @ANYBLOB="000700000000040014000c8010"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) 8m49.293960368s ago: executing program 5 (id=7898): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0f0700000000fcffffff0c00000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) 8m49.031384862s ago: executing program 5 (id=7899): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) 8m48.847363843s ago: executing program 5 (id=7900): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x4000800) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r6, 0x0, 0x2120) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r6) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$alg(0x26, 0x5, 0x0) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x96}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000000200000000000000", @ANYRESDEC=r4, @ANYRESDEC=r7], &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, r10}, 0x94) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080)) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x3a, 0x0, "33d080577968b3107694c2858f48c27f17ef54caf822abcfad9399c494d846140482c7e40195d5f034a72c69ed7330f3000f530ff9525fad6b3db9851a4354d70cc3734d319f852c370cbc9e69c75987"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(r11, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) socket(0x10, 0x3, 0x0) bind$alg(r8, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) socket(0x2b, 0x1, 0x1) 8m48.383807744s ago: executing program 6 (id=7901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0xe}}}, 0x24}}, 0x40004) 8m48.196383398s ago: executing program 8 (id=7902): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINK={0x8, 0x5, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) 8m48.121456266s ago: executing program 7 (id=7903): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000180)=[{0x1, 0x1, {0x0, 0xff, 0x3}, {0x2, 0xff, 0x4}, 0xff}], 0x20) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x6) listen(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000fcff00020000200900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x9212, @mcast2, 0x7}}, 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 8m48.011321689s ago: executing program 8 (id=7904): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1e, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 8m47.950600768s ago: executing program 5 (id=7905): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x7, 0x9, [0x0, 0x0, 0x3, 0x81, 0x5, 0x1, 0x80, 0x3ee3, 0x3]}, &(0x7f0000000100)=0x1a) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = socket$kcm(0xa, 0x1, 0x106) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r7) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 8m47.77661039s ago: executing program 8 (id=7906): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 8m33.066072878s ago: executing program 36 (id=7901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0xe}}}, 0x24}}, 0x40004) 8m32.955414278s ago: executing program 37 (id=7903): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000180)=[{0x1, 0x1, {0x0, 0xff, 0x3}, {0x2, 0xff, 0x4}, 0xff}], 0x20) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x6) listen(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000fcff00020000200900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000180)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x9212, @mcast2, 0x7}}, 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 8m32.548503752s ago: executing program 38 (id=7906): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 8m32.148385553s ago: executing program 39 (id=7905): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x7, 0x9, [0x0, 0x0, 0x3, 0x81, 0x5, 0x1, 0x80, 0x3ee3, 0x3]}, &(0x7f0000000100)=0x1a) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = socket$kcm(0xa, 0x1, 0x106) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r7) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 7m35.640079477s ago: executing program 2 (id=7953): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) setresgid(0xee00, 0xee01, 0x0) r1 = getgid() setgroups(0x2, &(0x7f0000000140)=[r1, r1]) setuid(0xee01) write$tcp_congestion(r0, 0x0, 0x0) 7m35.358640679s ago: executing program 2 (id=7956): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 7m35.10134495s ago: executing program 2 (id=7958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 7m32.13167245s ago: executing program 2 (id=7963): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0xc, 0x0, &(0x7f00000001c0)=""/12, 0x6, 0x0, 0x800, 0x88, &(0x7f00000005c0)="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", &(0x7f0000000200)="9d7328d6e0eff2079603250dc610ca6b1e5cbe6e2bab081652abe6ac9d23f9372b3b16643a5ea8b7e9a090e414be582a1b9a472e8a007ce3ecfd035ed6a8091d9adb97d6601215cf7ba1e5d41e2619f7727ad88954b2885d5fe237171b99a062625d3d4216b9b30743ac38d9d1350ad13dda19d2a26a8aec386f02c5755bb3d6eb0d99c482bd2c2e", 0x6, 0x0, 0x5}, 0x50) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000630122000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x1ff) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) 7m31.22987592s ago: executing program 2 (id=7970): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_socket_connect_nvme_tcp() r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r4}, @RTA_DST={0x8, 0x1, @remote}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000804}, 0x4c844) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=@ipv6_newaddrlabel={0x38, 0x48, 0x321, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0x4) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) 7m29.457335593s ago: executing program 2 (id=7973): socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000f40)={'ip_vti0\x00', &(0x7f0000000f00)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2}}}}) 7m14.317429426s ago: executing program 40 (id=7973): socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000f40)={'ip_vti0\x00', &(0x7f0000000f00)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2}}}}) 5m43.541347408s ago: executing program 9 (id=8330): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 5m42.948484711s ago: executing program 9 (id=8334): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r6, 0x0, 0x2120) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000000200000000000000", @ANYRESDEC=r4, @ANYRESDEC=r7], &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x60}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x3a, 0x0, "33d080577968b3107694c2858f48c27f17ef54caf822abcfad9399c494d846140482c7e40195d5f034a72c69ed7330f3000f530ff9525fad6b3db9851a4354d70cc3734d319f852c370cbc9e69c75987"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) socket(0x2b, 0x1, 0x1) 5m39.961489485s ago: executing program 9 (id=8338): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@empty, @empty, 0x0, "97943e142c06737c54df5c4a9fc8398fc4ea165b26b7458e31bb8d1aa22f4a59", 0x3, 0x1, 0x26, 0x10000}, 0x3c) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[], 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r5, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r6, 0x3e, r6}, 0x5) 5m39.372301236s ago: executing program 9 (id=8340): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 5m37.732397788s ago: executing program 9 (id=8345): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000c00)}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5m37.446857532s ago: executing program 9 (id=8346): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000030601020000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000458c0)={0x1f, 0x2}, 0x6) unshare(0x20000400) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) bind$alg(r7, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) write$bt_hci(r6, 0x0, 0x13) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002) sendmsg(r0, 0x0, 0x4084) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x6, 0x9, &(0x7f00000003c0)={{0x2, @multicast2, 0xdffd, 0x800002, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x8, 0x2000050}}, 0x44) getsockopt$inet_tcp_int(r8, 0x6, 0x9, 0x0, &(0x7f0000000040)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) 5m22.3212578s ago: executing program 41 (id=8346): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000030601020000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000458c0)={0x1f, 0x2}, 0x6) unshare(0x20000400) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) bind$alg(r7, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) write$bt_hci(r6, 0x0, 0x13) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002) sendmsg(r0, 0x0, 0x4084) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x6, 0x9, &(0x7f00000003c0)={{0x2, @multicast2, 0xdffd, 0x800002, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x8, 0x2000050}}, 0x44) getsockopt$inet_tcp_int(r8, 0x6, 0x9, 0x0, &(0x7f0000000040)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) 10.654896871s ago: executing program 4 (id=9000): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0xa, 0x0, 0x9ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[], 0x1cb) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) 10.504422494s ago: executing program 4 (id=9001): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf39, 0x0) splice(r2, 0x0, r5, 0x0, 0x4, 0x4) write$binfmt_elf32(r3, &(0x7f0000000980)=ANY=[], 0x58) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, 0x0, 0x0) 10.152426337s ago: executing program 0 (id=9002): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$fuseblk(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f0000000440), 0x488, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}]}}) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x5013c1, 0x8) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0xbf32027d) ppoll(&(0x7f00000003c0)=[{r1, 0x8568}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 9.815315182s ago: executing program 3 (id=9003): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r4}, @RTA_DST={0x8, 0x1, @remote}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=@ipv6_newaddrlabel={0x38, 0x48, 0x321, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) 8.963490559s ago: executing program 1 (id=9004): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r1, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) 8.804438262s ago: executing program 3 (id=9005): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) read(r0, 0x0, 0x20) 8.744458297s ago: executing program 4 (id=9006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c0000000203010100000000000000000400001a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}, @IFLA_VFINFO_LIST={0x4}]}, 0x38}}, 0x0) 8.632400341s ago: executing program 1 (id=9007): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x4030582a, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x188, 0x3, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x19}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x5b}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa3}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @empty}}}]}, @CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x7fffffff, 0x6, 0x800, 0x3, 0xe3, 0x8001, 0x98, 0xffff, 0x65f]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x18}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x7, 0xad7, 0x10001, 0x80, 0x4]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xa}]}}, @CTA_NAT_DST={0x7c, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4621}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x188}}, 0x400c001) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x2}}, 0x26) r6 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe4d, 0x10, 0x0, 0x0, 0x0}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{r0, 0xffffffffffffffff}, &(0x7f0000001800), &(0x7f0000001840)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x19, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000009000000000000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001815000076eadb617b3278e363b56e73113b54d5", @ANYRES32=r0, @ANYBLOB="000000000000000018000000b29300000000000001000000058401800500000085000000bc000000da68200000000000184b00000000000000000000000000001861000002000000000000000600000009238000690000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x1000, 0x1000, &(0x7f0000000780)=""/4096, 0x40f00, 0x29, '\x00', 0x0, @cgroup_sockopt=0x16, r0, 0x8, &(0x7f0000001780)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000017c0)={0x1, 0x2, 0x2, 0x9}, 0x10, r7, r8, 0x0, &(0x7f00000018c0)=[r0, r9, r0, r3, r0, r0, r0, r0], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) close(0x3) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r10, 0x40047435, &(0x7f0000000200)=0x1) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r11, &(0x7f00000000c0), 0x0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@loopback, 0x0, 0x0, 0x30, 0x0, [{@initdev}, {@loopback}, {@private}]}}) r12 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000006000000000000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000007f557abeaf31b88500000083000000bf0900000000000055090100000000009500000000000000bf9100000000ff0d00000000000000008500000084000000b70000000000110095"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x28, '\x00', r13, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x54, 0x18, 0x1, 0x70bd29, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 8.471957273s ago: executing program 0 (id=9008): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40020000) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 8.425077592s ago: executing program 1 (id=9009): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/70, 0x46, 0x2b) 8.320032364s ago: executing program 0 (id=9010): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 8.295041198s ago: executing program 4 (id=9011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) pipe(&(0x7f00000002c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x40200, 0x0) 8.218852765s ago: executing program 1 (id=9012): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) 7.203597762s ago: executing program 3 (id=9013): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, 0x0, r1) 7.186683868s ago: executing program 4 (id=9014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000280)=0x1f5, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 7.118140624s ago: executing program 1 (id=9015): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB], 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) io_uring_setup(0x5f4f, &(0x7f00000003c0)={0x0, 0x804, 0x2, 0x1000000}) 6.028726991s ago: executing program 0 (id=9016): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r1, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) 5.957070225s ago: executing program 3 (id=9017): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030f000000000000000008"], 0x1c}}, 0x48000) 3.992244684s ago: executing program 0 (id=9018): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x4030582a, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x188, 0x3, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x19}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x5b}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa3}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @empty}}}]}, @CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x7fffffff, 0x6, 0x800, 0x3, 0xe3, 0x8001, 0x98, 0xffff, 0x65f]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x18}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x7, 0xad7, 0x10001, 0x80, 0x4]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xa}]}}, @CTA_NAT_DST={0x7c, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4621}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x188}}, 0x400c001) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x2}}, 0x26) r6 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe4d, 0x10, 0x0, 0x0, 0x0}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{r0, 0xffffffffffffffff}, &(0x7f0000001800), &(0x7f0000001840)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x19, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000009000000000000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001815000076eadb617b3278e363b56e73113b54d5", @ANYRES32=r0, @ANYBLOB="000000000000000018000000b29300000000000001000000058401800500000085000000bc000000da68200000000000184b00000000000000000000000000001861000002000000000000000600000009238000690000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x1000, 0x1000, &(0x7f0000000780)=""/4096, 0x40f00, 0x29, '\x00', 0x0, @cgroup_sockopt=0x16, r0, 0x8, &(0x7f0000001780)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000017c0)={0x1, 0x2, 0x2, 0x9}, 0x10, r7, r8, 0x0, &(0x7f00000018c0)=[r0, r9, r0, r3, r0, r0, r0, r0], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) close(0x3) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r10, 0x40047435, &(0x7f0000000200)=0x1) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r11, &(0x7f00000000c0), 0x0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@loopback, 0x0, 0x0, 0x30, 0x0, [{@initdev}, {@loopback}, {@private}]}}) r12 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000006000000000000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000007f557abeaf31b88500000083000000bf0900000000000055090100000000009500000000000000bf9100000000ff0d00000000000000008500000084000000b70000000000110095"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x28, '\x00', r13, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x54, 0x18, 0x1, 0x70bd29, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.927193688s ago: executing program 0 (id=9019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9006}, 0x4) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 2.030130965s ago: executing program 3 (id=9020): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB], 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) io_uring_setup(0x5f4f, &(0x7f00000003c0)={0x0, 0x804, 0x2, 0x1000000}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 1.251998383s ago: executing program 1 (id=9021): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0x1cb) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) 1.211751051s ago: executing program 4 (id=9022): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) read(r0, 0x0, 0x20) 0s ago: executing program 3 (id=9023): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) pipe(&(0x7f00000002c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x13) kernel console output (not intermixed with test programs): 0): Enslaving as an active interface with an up link [ 1259.298105][T28248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.298220][T28248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.298429][T28248] bridge_slave_1: entered allmulticast mode [ 1259.310566][T28248] bridge_slave_1: entered promiscuous mode [ 1259.524438][T28245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.529286][T28233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1259.882132][T28103] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1259.882154][T28103] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.918655][T28236] team0: Port device team_slave_0 added [ 1259.935499][T28233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.950010][ T55] tipc: Left network mode [ 1259.952221][T28236] team0: Port device team_slave_1 added [ 1260.042716][T28248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1260.128420][T28245] team0: Port device team_slave_0 added [ 1260.149291][T28248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1260.447269][T28245] team0: Port device team_slave_1 added [ 1260.449025][T28233] team0: Port device team_slave_0 added [ 1260.622095][T28236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1260.622111][T28236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.622135][T28236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1260.712034][T28233] team0: Port device team_slave_1 added [ 1260.893626][T28103] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1260.893649][T28103] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.943406][T28236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1260.943423][T28236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.943447][T28236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.021107][T28248] team0: Port device team_slave_0 added [ 1261.048331][T28245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.048344][T28245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1261.048358][T28245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1261.193996][T28248] team0: Port device team_slave_1 added [ 1261.222803][T28245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1261.222815][T28245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1261.222829][T28245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.223756][T28233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.223765][T28233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1261.223778][T28233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1261.258635][T28233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1261.258651][T28233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1261.258676][T28233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.323524][T28248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.323541][T28248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1261.323564][T28248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1261.510057][ T55] hsr_slave_0: left promiscuous mode [ 1261.549943][ T55] hsr_slave_1: left promiscuous mode [ 1261.551169][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1261.551185][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1261.575773][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1261.575798][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1261.661163][ T55] veth1_macvtap: left promiscuous mode [ 1261.661365][ T55] veth0_macvtap: left promiscuous mode [ 1261.661502][ T55] veth1_vlan: left promiscuous mode [ 1261.661593][ T55] veth0_vlan: left promiscuous mode [ 1262.461232][ T55] team0 (unregistering): Port device team_slave_1 removed [ 1262.500930][ T55] team0 (unregistering): Port device team_slave_0 removed [ 1262.729390][T28248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1262.729402][T28248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.729417][T28248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.966608][T28103] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1262.966630][T28103] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.058034][T28236] hsr_slave_0: entered promiscuous mode [ 1263.058889][T28236] hsr_slave_1: entered promiscuous mode [ 1263.060787][T28236] debugfs: 'hsr0' already exists in 'hsr' [ 1263.060811][T28236] Cannot create hsr debugfs directory [ 1263.134441][T28245] hsr_slave_0: entered promiscuous mode [ 1263.135331][T28245] hsr_slave_1: entered promiscuous mode [ 1263.135927][T28245] debugfs: 'hsr0' already exists in 'hsr' [ 1263.135942][T28245] Cannot create hsr debugfs directory [ 1263.208304][T28233] hsr_slave_0: entered promiscuous mode [ 1263.209140][T28233] hsr_slave_1: entered promiscuous mode [ 1263.221110][T28233] debugfs: 'hsr0' already exists in 'hsr' [ 1263.221127][T28233] Cannot create hsr debugfs directory [ 1263.584756][T28103] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1263.584777][T28103] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.696997][T28248] hsr_slave_0: entered promiscuous mode [ 1263.700526][T28248] hsr_slave_1: entered promiscuous mode [ 1263.701544][T28248] debugfs: 'hsr0' already exists in 'hsr' [ 1263.701568][T28248] Cannot create hsr debugfs directory [ 1264.604426][ T5257] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1265.653008][ T55] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.747263][T28103] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1265.787994][T28103] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1265.806970][T28103] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1265.836202][T28103] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1265.837908][T28103] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1265.885017][T28103] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1266.217768][ T5257] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1266.435605][ T55] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.458879][T28103] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1266.492599][T28103] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1267.212278][ T55] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.254292][ T5257] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1267.591269][T28103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1267.866688][ T55] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.253386][ T5257] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1268.255956][T28103] 8021q: adding VLAN 0 to HW filter on device team0 [ 1268.285468][T16320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.285589][T16320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1268.287309][T16320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.287388][T16320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1269.634588][T28245] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.241703][ T55] batadv1: left allmulticast mode [ 1270.241726][ T55] batadv1: left promiscuous mode [ 1270.241886][ T55] bridge0: port 3(batadv1) entered disabled state [ 1270.340694][ T55] bridge_slave_1: left allmulticast mode [ 1270.340719][ T55] bridge_slave_1: left promiscuous mode [ 1270.340889][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.110883][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1271.170432][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1271.212433][ T55] bond0 (unregistering): Released all slaves [ 1271.662152][T28245] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.998036][T28103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1272.299166][T28245] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.863872][T28103] veth0_vlan: entered promiscuous mode [ 1273.034684][T28245] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.205794][T28103] veth1_vlan: entered promiscuous mode [ 1273.399919][ T55] hsr_slave_0: left promiscuous mode [ 1273.420613][ T55] hsr_slave_1: left promiscuous mode [ 1273.421388][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1273.421405][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1273.481045][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1273.481064][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1273.591421][ T55] veth1_macvtap: left promiscuous mode [ 1273.591483][ T55] veth0_macvtap: left promiscuous mode [ 1273.591618][ T55] veth1_vlan: left promiscuous mode [ 1273.591726][ T55] veth0_vlan: left promiscuous mode [ 1274.380717][ T55] team0 (unregistering): Port device team_slave_1 removed [ 1274.440426][ T55] team0 (unregistering): Port device team_slave_0 removed [ 1274.720247][T28103] veth0_macvtap: entered promiscuous mode [ 1274.729177][T28103] veth1_macvtap: entered promiscuous mode [ 1274.766641][T28103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1274.795385][T28103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1274.837599][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.837816][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.837852][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.837884][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.309072][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1276.309091][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1276.595989][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1276.596010][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.285800][T28566] netlink: 124 bytes leftover after parsing attributes in process `syz.0.7912'. [ 1279.546590][T28236] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1279.594101][T28236] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1279.595321][T28236] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1279.692735][T28236] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1279.694465][T28236] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1279.775693][T28625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7915'. [ 1279.791766][T28236] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1279.849784][T28625] vlan2: entered promiscuous mode [ 1279.849800][T28625] veth0: entered promiscuous mode [ 1279.992066][T28236] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1280.065974][T28236] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1281.555700][T28236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1281.583689][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1281.683283][T28233] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1281.724633][T28233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1281.742142][T28233] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1281.784338][T28233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1281.943008][T28233] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1281.973472][T28233] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1281.984307][T28233] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1282.024176][T28233] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1282.027797][T28236] 8021q: adding VLAN 0 to HW filter on device team0 [ 1282.165118][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.165300][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1282.286291][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.286396][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1282.366446][T28245] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1282.414536][T28245] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1282.435031][T28245] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1282.567953][T28245] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1282.587563][T28245] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1282.620597][T28245] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1283.009748][T28245] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1283.052820][T28245] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1283.474272][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1283.614172][T28248] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1283.645656][T28248] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1283.670951][T28248] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1283.704688][T28248] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1283.717005][T28248] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1283.755263][T28248] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1283.767279][T28248] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1283.817133][T28248] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1284.060740][T28233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1284.346471][T28233] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.393701][T28245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1284.421707][T14286] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.421953][T14286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.473536][T14286] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.475209][T14286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.564566][T28245] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.673566][T16320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.673786][T16320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.780592][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.780723][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.854108][T28248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1284.976766][T28248] 8021q: adding VLAN 0 to HW filter on device team0 [ 1285.122182][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.122384][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1285.162158][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.162283][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1285.209111][T28236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1285.216157][T28712] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1285.217706][T28712] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1285.508865][ T5257] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1286.033048][T28712] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1286.360352][T28712] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1286.396589][T28712] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1286.476160][T28712] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1286.708537][T28236] veth0_vlan: entered promiscuous mode [ 1286.762779][T28236] veth1_vlan: entered promiscuous mode [ 1286.849877][T24492] Bluetooth: hci1: command 0x0c1a tx timeout [ 1286.855518][T28712] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1286.855613][T28712] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1286.929061][T28233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1287.032561][T28712] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1287.088978][T28236] veth0_macvtap: entered promiscuous mode [ 1287.117131][T28712] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1287.117253][T28712] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1287.128415][T28236] veth1_macvtap: entered promiscuous mode [ 1287.281261][T28712] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1287.308002][T28245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1287.416563][T28236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1287.453438][T28236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1287.455864][T28712] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1287.456587][T28712] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1287.503660][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.511649][T28248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1287.528382][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.544260][T28712] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1287.546870][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.577787][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.379894][T24492] Bluetooth: hci0: command 0x0c1a tx timeout [ 1288.483002][T28245] veth0_vlan: entered promiscuous mode [ 1288.733000][T28245] veth1_vlan: entered promiscuous mode [ 1288.744193][T16313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1288.744226][T16313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1288.781910][T28248] veth0_vlan: entered promiscuous mode [ 1288.894466][T16313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1288.894486][T16313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1288.926238][T28248] veth1_vlan: entered promiscuous mode [ 1288.930203][T24492] Bluetooth: hci6: command 0x0c1a tx timeout [ 1288.930215][T28238] Bluetooth: hci1: command 0x0c1a tx timeout [ 1288.982531][T28233] veth0_vlan: entered promiscuous mode [ 1289.054389][T28233] veth1_vlan: entered promiscuous mode [ 1289.158804][T28245] veth0_macvtap: entered promiscuous mode [ 1289.170462][T28238] Bluetooth: hci7: command 0x0c1a tx timeout [ 1289.226871][T28245] veth1_macvtap: entered promiscuous mode [ 1289.310144][T28248] veth0_macvtap: entered promiscuous mode [ 1289.361981][T28248] veth1_macvtap: entered promiscuous mode [ 1289.420466][T28245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1289.465944][T28233] veth0_macvtap: entered promiscuous mode [ 1289.481391][T28245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1289.490806][T28238] Bluetooth: hci8: command 0x0c1a tx timeout [ 1289.521843][T28233] veth1_macvtap: entered promiscuous mode [ 1289.525750][ T2791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.542161][T28248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1289.542336][ T2791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.582584][ T2791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.669118][ T2791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.714049][T28248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1289.897254][ T5257] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1289.918950][T28820] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7930'. [ 1289.921399][T16313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.011634][T28820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.016940][T28820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.131241][T16313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.191384][T16313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.217184][T28233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1290.242734][ T2222] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.024030][T28238] Bluetooth: hci1: command 0x0c1a tx timeout [ 1291.246537][T28238] Bluetooth: hci0: command 0x0c1a tx timeout [ 1291.248796][T28238] Bluetooth: hci6: command 0x0c1a tx timeout [ 1291.254707][T28238] Bluetooth: hci7: command 0x0c1a tx timeout [ 1291.576746][T24492] Bluetooth: hci8: command 0x0c1a tx timeout [ 1291.649334][T28233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1292.614073][ T55] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.616602][ T55] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.683305][ T55] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.835844][ T2222] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.903960][T16320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.903979][T16320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1293.256578][T24492] Bluetooth: hci0: command 0x0c1a tx timeout [ 1293.333901][T24492] Bluetooth: hci7: command 0x0c1a tx timeout [ 1293.333937][T24492] Bluetooth: hci6: command 0x0c1a tx timeout [ 1293.659490][T28238] Bluetooth: hci8: command 0x0c1a tx timeout [ 1293.990774][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1293.990794][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.844589][T16310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.844610][T16310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.976170][T16313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.976188][T16313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.327768][T16310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.327788][T16310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.925543][ T5908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.925565][ T5908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1297.760367][T14971] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1297.943546][T14971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1297.943577][T14971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1297.943602][T14971] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1297.943649][T14971] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1297.943671][T14971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.084172][T14971] usb 2-1: config 0 descriptor?? [ 1298.668480][T14971] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 1300.622309][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.687801][T14971] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1302.541270][T14971] usb 2-1: USB disconnect, device number 66 [ 1302.652702][T28948] fido_id[28948]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:047F:FFFF.0002/report_descriptor': No such device [ 1302.687069][T28958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7961'. [ 1303.165002][T28978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1305.191404][T28996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.195457][T28996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.747329][T29016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7975'. [ 1306.748034][T29016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7975'. [ 1313.849804][ T5722] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 1314.273331][ T5722] usb 1-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1314.273635][ T5722] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1314.273737][ T5722] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1314.273799][ T5722] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1314.274034][ T5722] usb 1-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 1314.274126][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.863618][ T5722] usb 1-1: config 0 descriptor?? [ 1314.864660][T29086] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1315.541449][ T5722] thrustmaster 0003:044F:B323.0003: ignoring exceeding usage max [ 1315.937154][ T5722] thrustmaster 0003:044F:B323.0003: hidraw0: USB HID v0.01 Device [HID 044f:b323] on usb-dummy_hcd.0-1/input0 [ 1315.937186][ T5722] thrustmaster 0003:044F:B323.0003: no inputs found [ 1315.995201][ T5722] usb 1-1: USB disconnect, device number 89 [ 1317.047451][T29111] fido_id[29111]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1318.417516][T29129] ======================================================= [ 1318.417516][T29129] WARNING: The mand mount option has been deprecated and [ 1318.417516][T29129] and is ignored by this kernel. Remove the mand [ 1318.417516][T29129] option from the mount to silence this warning. [ 1318.417516][T29129] ======================================================= [ 1320.663953][T29133] netlink: 'syz.9.7996': attribute type 1 has an invalid length. [ 1320.663975][T29133] netlink: 'syz.9.7996': attribute type 2 has an invalid length. [ 1321.042241][T29149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8001'. [ 1321.042264][T29149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8001'. [ 1324.939391][T28238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1325.018439][T28238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1325.081983][T28238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1325.083435][T28238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1325.087643][T28238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1328.274111][T29201] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8013'. [ 1328.274134][T29201] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8013'. [ 1328.300427][T24492] Bluetooth: hci2: command tx timeout [ 1328.519363][T29212] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8016'. [ 1328.519391][T29212] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8016'. [ 1329.507146][T29229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1330.734488][T24492] Bluetooth: hci2: command tx timeout [ 1330.935314][T29251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8025'. [ 1330.935334][T29251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8025'. [ 1331.008123][T16310] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.753364][T29272] macvtap0: entered promiscuous mode [ 1332.167442][T29283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8032'. [ 1332.860833][T24492] Bluetooth: hci2: command tx timeout [ 1333.443965][T29301] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8035'. [ 1333.443988][T29301] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8035'. [ 1333.625840][T29305] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8036'. [ 1333.953095][T16310] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.052628][T28238] Bluetooth: hci2: command tx timeout [ 1335.675029][T29341] macvtap0: entered promiscuous mode [ 1336.021434][T29346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8045'. [ 1336.021466][T29346] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8045'. [ 1336.486877][T29356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8048'. [ 1336.808376][T16310] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.046465][T29376] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8055'. [ 1337.048599][T29376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8055'. [ 1338.284693][T16310] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.274844][T29410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8063'. [ 1339.573367][T29157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.573529][T29157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.573833][T29157] bridge_slave_0: entered allmulticast mode [ 1339.600541][T29421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8066'. [ 1339.619236][T29157] bridge_slave_0: entered promiscuous mode [ 1339.636435][T29421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8066'. [ 1339.643034][T29157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.643259][T29157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.643571][T29157] bridge_slave_1: entered allmulticast mode [ 1339.676680][T29157] bridge_slave_1: entered promiscuous mode [ 1340.099809][T26401] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1341.128219][T26401] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1341.128251][T26401] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1341.128288][T26401] usb 10-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1341.128309][T26401] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.201948][T26401] usb 10-1: config 0 descriptor?? [ 1341.823384][T29157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1341.928887][T26401] hid-led 0003:1D34:000A.0004: probe with driver hid-led failed with error -71 [ 1341.996158][T26401] usb 10-1: USB disconnect, device number 2 [ 1342.329488][T29157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1342.785963][T29157] team0: Port device team_slave_0 added [ 1342.818870][T29157] team0: Port device team_slave_1 added [ 1343.020519][T29458] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8079'. [ 1343.222303][T29460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8079'. [ 1344.235509][T29157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1344.235526][T29157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1344.235551][T29157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1344.571163][T29157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1344.571195][T29157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1344.571219][T29157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1345.040194][T16310] bridge_slave_1: left allmulticast mode [ 1345.040231][T16310] bridge_slave_1: left promiscuous mode [ 1345.040602][T16310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.109099][T16310] bridge_slave_0: left allmulticast mode [ 1345.109134][T16310] bridge_slave_0: left promiscuous mode [ 1345.109402][T16310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.279532][T29484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8083'. [ 1346.275058][T29494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8087'. [ 1346.474312][T16310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1346.541300][T16310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1346.565003][T16310] bond0 (unregistering): Released all slaves [ 1346.877421][T29499] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8090'. [ 1348.140715][T29499] erspan0: entered promiscuous mode [ 1348.171591][T29499] macvtap1: entered promiscuous mode [ 1348.171922][T29499] macvtap1: entered allmulticast mode [ 1348.171943][T29499] erspan0: entered allmulticast mode [ 1351.715151][T29157] hsr_slave_0: entered promiscuous mode [ 1351.723016][T29157] hsr_slave_1: entered promiscuous mode [ 1351.725882][T29157] debugfs: 'hsr0' already exists in 'hsr' [ 1351.725908][T29157] Cannot create hsr debugfs directory [ 1352.207091][T29544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8104'. [ 1356.265992][T29544] erspan0: entered promiscuous mode [ 1356.272801][T29544] macvtap1: entered promiscuous mode [ 1356.273002][T29544] macvtap1: entered allmulticast mode [ 1356.273015][T29544] erspan0: entered allmulticast mode [ 1358.452785][T29592] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1359.091237][T16310] hsr_slave_0: left promiscuous mode [ 1359.137434][T16310] hsr_slave_1: left promiscuous mode [ 1359.149470][T16310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1359.149497][T16310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.382496][T16310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1359.382522][T16310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.402581][T16310] veth1_macvtap: left promiscuous mode [ 1360.402703][T16310] veth0_macvtap: left promiscuous mode [ 1360.402934][T16310] veth1_vlan: left promiscuous mode [ 1360.403100][T16310] veth0_vlan: left promiscuous mode [ 1360.431050][T29610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8120'. [ 1361.712126][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1365.184798][T29648] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8132'. [ 1365.215162][T16310] team0 (unregistering): Port device team_slave_1 removed [ 1365.470695][T16310] team0 (unregistering): Port device team_slave_0 removed [ 1368.142039][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1368.299356][T29610] erspan0: entered promiscuous mode [ 1368.300262][T29610] macvtap1: entered promiscuous mode [ 1368.300454][T29610] macvtap1: entered allmulticast mode [ 1368.300469][T29610] erspan0: entered allmulticast mode [ 1369.546421][T29685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8143'. [ 1371.486693][T29724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8155'. [ 1373.923993][T29751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8163'. [ 1374.110614][ T5257] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1376.399054][T29804] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8178'. [ 1377.475726][ T5257] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1378.900143][ T37] audit: type=1326 audit(1778720024.211:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29858 comm="syz.1.8195" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabd91ace59 code=0x0 [ 1378.907291][T29864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8196'. [ 1379.175440][ T5257] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1380.068703][T29892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8203'. [ 1381.000642][T29892] hsr_slave_1 (unregistering): left promiscuous mode [ 1383.226510][T24492] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1383.280932][T24492] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1383.282439][T24492] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1383.315080][T24492] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1383.316159][T24492] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1383.597982][T29938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8214'. [ 1383.949739][T29938] hsr_slave_1 (unregistering): left promiscuous mode [ 1385.268030][T29980] binder: 29972:29980 ioctl c00c620f 200000000340 returned -22 [ 1385.780354][T28238] Bluetooth: hci3: command tx timeout [ 1386.069965][T29988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8222'. [ 1386.903283][T30015] netlink: 284 bytes leftover after parsing attributes in process `syz.9.8230'. [ 1388.788395][T28238] Bluetooth: hci3: command tx timeout [ 1389.603163][T30054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8237'. [ 1390.364169][T30074] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8242'. [ 1390.485940][T30079] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8243'. [ 1390.621886][T30074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8242'. [ 1390.678828][T30079] macvtap2: entered promiscuous mode [ 1390.678989][T30079] macvtap2: entered allmulticast mode [ 1390.850309][T28238] Bluetooth: hci3: command tx timeout [ 1391.094776][T30100] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8248'. [ 1391.431489][T30100] hsr_slave_1 (unregistering): left promiscuous mode [ 1391.765885][T29922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.766104][T29922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.766393][T29922] bridge_slave_0: entered allmulticast mode [ 1391.769564][T29922] bridge_slave_0: entered promiscuous mode [ 1391.774416][T29922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.774583][T29922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.865857][T29922] bridge_slave_1: entered allmulticast mode [ 1391.875539][T29922] bridge_slave_1: entered promiscuous mode [ 1392.180295][T30125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8255'. [ 1392.185406][T29922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1392.252276][T30129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8255'. [ 1392.257755][T30125] macvtap2: entered promiscuous mode [ 1392.258003][T30125] macvtap2: entered allmulticast mode [ 1392.314467][T29922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1392.790363][T30129] macvtap2: left promiscuous mode [ 1392.790402][T30129] macvtap2: left allmulticast mode [ 1392.930170][T28238] Bluetooth: hci3: command tx timeout [ 1393.124113][T30151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8262'. [ 1394.401335][T30151] hsr_slave_1 (unregistering): left promiscuous mode [ 1394.579874][T25876] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1394.742151][T25876] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.742182][T25876] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1394.742203][T25876] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1394.742243][T25876] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1394.742263][T25876] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.758942][T25876] usb 10-1: config 0 descriptor?? [ 1394.892444][T30178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8270'. [ 1394.939807][T27136] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1395.099124][T27136] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1395.099170][T27136] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1395.099194][T27136] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1395.099214][T27136] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1395.106994][T27136] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1395.107023][T27136] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1395.107042][T27136] usb 1-1: Manufacturer: syz [ 1395.190344][T27136] usb 1-1: config 0 descriptor?? [ 1395.401258][T25876] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 1395.542775][T25876] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1395.569292][T25876] usb 10-1: USB disconnect, device number 3 [ 1395.651231][T27136] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 1395.728470][T27136] appleir 0003:05AC:8243.0006: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1395.780356][T30182] fido_id[30182]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1395.901168][ T5709] usb 1-1: USB disconnect, device number 90 [ 1395.903536][T29922] team0: Port device team_slave_0 added [ 1395.991974][T29922] team0: Port device team_slave_1 added [ 1396.236052][T30189] fido_id[30189]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1397.055594][T30202] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8276'. [ 1397.348216][T30214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8278'. [ 1397.622722][T29922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1397.622737][T29922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.622763][T29922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1397.714429][T29922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1397.714443][T29922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.714463][T29922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1397.944067][T30224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8280'. [ 1399.881353][ T40] bridge_slave_1: left allmulticast mode [ 1399.881390][ T40] bridge_slave_1: left promiscuous mode [ 1399.881636][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.082346][T30258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8288'. [ 1400.114931][ T40] bridge_slave_0: left allmulticast mode [ 1400.114963][ T40] bridge_slave_0: left promiscuous mode [ 1400.118924][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.144202][T30260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8289'. [ 1400.641089][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1400.740835][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1400.826052][ T40] bond0 (unregistering): Released all slaves [ 1400.902068][T30279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8292'. [ 1400.919190][T29922] hsr_slave_0: entered promiscuous mode [ 1400.926973][T29922] hsr_slave_1: entered promiscuous mode [ 1400.928192][T29922] debugfs: 'hsr0' already exists in 'hsr' [ 1400.928218][T29922] Cannot create hsr debugfs directory [ 1402.261254][ T40] hsr_slave_0: left promiscuous mode [ 1402.295885][ T40] hsr_slave_1: left promiscuous mode [ 1402.297048][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.368898][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1403.530679][ T40] team0 (unregistering): Port device team_slave_1 removed [ 1403.686687][ T40] team0 (unregistering): Port device team_slave_0 removed [ 1404.400754][T30324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8301'. [ 1405.537449][T30331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8304'. [ 1405.681653][T30334] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8303'. [ 1406.217672][T30350] binder: binder_mmap: 30349 200000000000-200000b36000 bad vm_flags failed -1 [ 1407.315832][T30372] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8313'. [ 1407.474623][T30377] netlink: 'syz.4.8314': attribute type 4 has an invalid length. [ 1407.886739][T30384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8316'. [ 1408.360448][T30392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8317'. [ 1408.399780][T18512] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1408.417155][T30398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8319'. [ 1408.569803][T18512] usb 10-1: Using ep0 maxpacket: 32 [ 1408.582752][T18512] usb 10-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1408.582781][T18512] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.582798][T18512] usb 10-1: Product: syz [ 1408.582812][T18512] usb 10-1: Manufacturer: syz [ 1408.582825][T18512] usb 10-1: SerialNumber: syz [ 1408.828320][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 1408.828698][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 1408.829056][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 1408.829420][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 1409.665062][T18512] usb 10-1: USB disconnect, device number 4 [ 1409.927753][T30435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8327'. [ 1411.263038][T30453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8329'. [ 1411.539115][T30461] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8330'. [ 1411.783044][T30463] nbd10: detected capacity change from 0 to 127 [ 1411.940049][T28238] block nbd10: Receive control failed (result -104) [ 1414.824452][T30476] kthread_run failed with err -4 [ 1415.254114][T30538] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8338'. [ 1415.704245][T30546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8341'. [ 1416.059949][T29922] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1417.203432][T29922] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1417.208947][T29922] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1417.467925][T30560] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8346'. [ 1419.454130][T29922] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1419.458971][T29922] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1419.520664][T29922] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1419.527277][T29922] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1419.904927][T29922] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1423.567212][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.969520][T29922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1424.155124][T30581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8349'. [ 1424.291760][T29922] 8021q: adding VLAN 0 to HW filter on device team0 [ 1424.460463][T16310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1424.460695][T16310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1424.629852][T23789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.629976][T23789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1425.118711][T30595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8352'. [ 1432.236081][T30653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8361'. [ 1433.001550][T24492] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1433.072662][T24492] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1433.076052][T24492] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1433.099537][T24492] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1433.104349][T24492] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1433.410415][T29922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1435.410051][T24492] Bluetooth: hci2: command tx timeout [ 1435.923933][T29922] veth0_vlan: entered promiscuous mode [ 1436.035679][T29922] veth1_vlan: entered promiscuous mode [ 1437.510944][T24492] Bluetooth: hci2: command tx timeout [ 1439.341266][T29922] veth0_macvtap: entered promiscuous mode [ 1439.366179][T29922] veth1_macvtap: entered promiscuous mode [ 1439.405148][T29922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1439.417444][T29922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1439.660159][T24492] Bluetooth: hci2: command tx timeout [ 1441.740364][T24492] Bluetooth: hci2: command tx timeout [ 1442.169958][ T71] block nbd10: Possible stuck request ffff888027220000: control (read@0,1024B). Runtime 30 seconds [ 1442.172642][ T71] block nbd10: Possible stuck request ffff8880272201c0: control (read@1024,1024B). Runtime 30 seconds [ 1442.172665][ T71] block nbd10: Possible stuck request ffff888027220380: control (read@2048,1024B). Runtime 30 seconds [ 1442.172680][ T71] block nbd10: Possible stuck request ffff888027220540: control (read@3072,1024B). Runtime 30 seconds [ 1442.258956][T30719] macvtap0: left promiscuous mode [ 1442.306518][T30747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8374'. [ 1442.457134][ T1067] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.501682][ T1067] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.937007][T28238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1442.948161][T28238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1442.953318][T28238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1443.002820][T28238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1443.003558][T28238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1443.233624][ T1067] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.771677][T30776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8379'. [ 1445.195194][T24492] Bluetooth: hci0: command tx timeout [ 1447.286607][T24492] Bluetooth: hci0: command tx timeout [ 1447.938735][T16313] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.148223][ T1067] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.221830][ T1054] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1448.254838][ T1054] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1448.270071][T30803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8383'. [ 1448.291006][ T1054] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1448.293141][ T1054] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1449.339810][T24492] Bluetooth: hci0: command tx timeout [ 1450.186812][T30820] macvtap1: left promiscuous mode [ 1450.422758][T16313] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.754878][T24492] Bluetooth: hci0: command tx timeout [ 1455.187039][T30869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8392'. [ 1455.406432][T16313] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.842544][T30885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8395'. [ 1455.886544][T16313] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.430016][T30659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.430139][T30659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.430775][T30659] bridge_slave_0: entered allmulticast mode [ 1457.439298][T30659] bridge_slave_0: entered promiscuous mode [ 1457.519752][ T5722] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 1458.232746][ T5722] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1458.233943][ T5722] usb 1-1: not running at top speed; connect to a high speed hub [ 1458.235807][ T5722] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 233, changing to 4 [ 1458.235836][ T5722] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 1458.245287][ T5722] usb 1-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 1458.245315][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.245333][ T5722] usb 1-1: Product: syz [ 1458.245347][ T5722] usb 1-1: Manufacturer: syz [ 1458.245361][ T5722] usb 1-1: SerialNumber: syz [ 1458.570817][ T5722] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1458.572985][T30659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.573104][T30659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.573421][T30659] bridge_slave_1: entered allmulticast mode [ 1458.574552][ T5722] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1458.594838][T30659] bridge_slave_1: entered promiscuous mode [ 1459.351856][ T5722] usb 1-1: USB disconnect, device number 91 [ 1459.848676][T30946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8403'. [ 1459.864318][T30181] udevd[30181]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1460.735441][T30966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8404'. [ 1461.092493][T30659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1461.167037][T30659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1461.467999][T30659] team0: Port device team_slave_0 added [ 1461.820596][T16313] bridge_slave_1: left allmulticast mode [ 1461.820632][T16313] bridge_slave_1: left promiscuous mode [ 1461.826227][T16313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.941422][T16313] bridge_slave_0: left allmulticast mode [ 1461.941458][T16313] bridge_slave_0: left promiscuous mode [ 1461.943023][T16313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.290592][T31007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8412'. [ 1465.147930][T16313] erspan0 (unregistering): left allmulticast mode [ 1465.660544][T16313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1465.724655][T16313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1465.756974][T16313] bond0 (unregistering): Released all slaves [ 1465.817021][T30659] team0: Port device team_slave_1 added [ 1466.187510][T31030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8416'. [ 1466.221831][T31017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.221915][T31017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1466.222860][T31017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.236107][T31017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1466.378821][T31017] macvtap0: left promiscuous mode [ 1466.578241][T31017] macvtap1: left promiscuous mode [ 1467.570988][T30659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1467.571005][T30659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1467.571029][T30659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1468.785194][T30659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1468.785211][T30659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1468.785238][T30659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1469.861665][T31054] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8424'. [ 1470.225086][T30752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.225259][T30752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.225533][T30752] bridge_slave_0: entered allmulticast mode [ 1470.228177][T30752] bridge_slave_0: entered promiscuous mode [ 1470.235336][T30752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.235448][T30752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.235643][T30752] bridge_slave_1: entered allmulticast mode [ 1470.238442][T31058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8425'. [ 1470.240630][T30752] bridge_slave_1: entered promiscuous mode [ 1472.269809][ T71] block nbd10: Possible stuck request ffff888027220000: control (read@0,1024B). Runtime 60 seconds [ 1472.269854][ T71] block nbd10: Possible stuck request ffff8880272201c0: control (read@1024,1024B). Runtime 60 seconds [ 1472.269881][ T71] block nbd10: Possible stuck request ffff888027220380: control (read@2048,1024B). Runtime 60 seconds [ 1472.269908][ T71] block nbd10: Possible stuck request ffff888027220540: control (read@3072,1024B). Runtime 60 seconds [ 1472.332958][T16313] hsr_slave_0: left promiscuous mode [ 1472.333859][T16313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1472.333876][T16313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1472.415320][T16313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1472.415348][T16313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1472.573184][T16313] veth1_macvtap: left promiscuous mode [ 1472.573249][T16313] veth0_macvtap: left promiscuous mode [ 1472.573347][T16313] veth1_vlan: left promiscuous mode [ 1472.573439][T16313] veth0_vlan: left promiscuous mode [ 1473.370379][T16313] team0 (unregistering): Port device team_slave_1 removed [ 1473.420633][T16313] team0 (unregistering): Port device team_slave_0 removed [ 1473.821509][T30659] hsr_slave_0: entered promiscuous mode [ 1473.822393][T30659] hsr_slave_1: entered promiscuous mode [ 1473.822970][T30659] debugfs: 'hsr0' already exists in 'hsr' [ 1473.822986][T30659] Cannot create hsr debugfs directory [ 1474.330008][T30752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1474.338723][T30752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1474.498688][T30752] team0: Port device team_slave_0 added [ 1474.570464][T30752] team0: Port device team_slave_1 added [ 1475.481056][T30752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1475.481073][T30752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1475.481098][T30752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1476.499162][T30752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1476.499178][T30752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1476.499204][T30752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1479.400618][T31117] hub 8-0:1.0: USB hub found [ 1479.451554][T31117] hub 8-0:1.0: 1 port detected [ 1480.276101][T30752] hsr_slave_0: entered promiscuous mode [ 1480.287627][T30752] hsr_slave_1: entered promiscuous mode [ 1480.288671][T30752] debugfs: 'hsr0' already exists in 'hsr' [ 1480.288692][T30752] Cannot create hsr debugfs directory [ 1480.303920][T31124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8437'. [ 1481.017743][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1482.772706][T30659] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.385449][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.197223][T16313] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.913593][T30659] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.545606][ T5257] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1488.695668][T16313] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.109826][T30659] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.656542][T16313] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.272528][T30659] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.438009][ T5257] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1491.887958][T16313] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.086448][T28238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1493.202678][T28238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1493.204331][T28238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1493.230162][T28238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1493.268850][T28238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1495.160157][ T5257] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1495.329798][T28238] Bluetooth: hci3: command tx timeout [ 1495.871230][T16313] bridge_slave_1: left allmulticast mode [ 1495.871282][T16313] bridge_slave_1: left promiscuous mode [ 1495.871525][T16313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.105675][T16313] bridge_slave_0: left allmulticast mode [ 1496.105714][T16313] bridge_slave_0: left promiscuous mode [ 1496.105970][T16313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.410966][T28238] Bluetooth: hci3: command tx timeout [ 1498.091590][T16313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1498.151255][T16313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1498.191947][T16313] bond0 (unregistering): Released all slaves [ 1498.267867][ T5257] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1499.496254][T28238] Bluetooth: hci3: command tx timeout [ 1499.529791][T16313] hsr_slave_0: left promiscuous mode [ 1499.586019][T16313] hsr_slave_1: left promiscuous mode [ 1499.587250][T16313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1499.587271][T16313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1499.613764][T16313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1499.613787][T16313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1500.061691][T16313] veth1_macvtap: left promiscuous mode [ 1500.061797][T16313] veth0_macvtap: left promiscuous mode [ 1500.074214][T16313] veth1_vlan: left promiscuous mode [ 1500.074396][T16313] veth0_vlan: left promiscuous mode [ 1501.019760][ T5722] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1501.025286][T16313] team0 (unregistering): Port device team_slave_1 removed [ 1501.081558][T16313] team0 (unregistering): Port device team_slave_0 removed [ 1501.181626][ T5722] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1501.181673][ T5722] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1501.181694][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.186191][ T5722] usb 2-1: config 0 descriptor?? [ 1501.569829][T28238] Bluetooth: hci3: command tx timeout [ 1501.628750][ T5722] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 1501.659020][ T5722] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0007/input/input67 [ 1504.023041][ T71] block nbd10: Possible stuck request ffff888027220000: control (read@0,1024B). Runtime 90 seconds [ 1504.023087][ T71] block nbd10: Possible stuck request ffff8880272201c0: control (read@1024,1024B). Runtime 90 seconds [ 1504.027182][ T71] block nbd10: Possible stuck request ffff888027220380: control (read@2048,1024B). Runtime 90 seconds [ 1504.027217][ T71] block nbd10: Possible stuck request ffff888027220540: control (read@3072,1024B). Runtime 90 seconds [ 1504.755974][T24492] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1504.868864][T24492] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1504.874936][T24492] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1504.902069][T24492] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1504.916724][T24492] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1505.148737][ T5722] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1505.178173][ T5722] usb 2-1: USB disconnect, device number 67 [ 1505.326577][T31416] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8492'. [ 1506.488121][T31413] fido_id[31413]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1507.403058][T28238] Bluetooth: hci4: command tx timeout [ 1509.442866][T28238] Bluetooth: hci4: command tx timeout [ 1510.359793][ T820] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1511.535177][T28238] Bluetooth: hci4: command tx timeout [ 1513.463055][ T4962] udevd[4962]: worker [29573] /devices/virtual/block/nbd10 is taking a long time [ 1513.612164][T28238] Bluetooth: hci4: command tx timeout [ 1513.729770][ T820] usb 5-1: device not accepting address 45, error -71 [ 1517.525227][T31513] netlink: 'syz.0.8506': attribute type 49 has an invalid length. [ 1517.592372][T31292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.592573][T31292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.592848][T31292] bridge_slave_0: entered allmulticast mode [ 1517.595463][T31292] bridge_slave_0: entered promiscuous mode [ 1518.010235][T31292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.010377][T31292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.010619][T31292] bridge_slave_1: entered allmulticast mode [ 1518.013464][T31292] bridge_slave_1: entered promiscuous mode [ 1519.689904][T31538] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8512'. [ 1520.987797][ T5908] bridge_slave_1: left allmulticast mode [ 1520.987831][ T5908] bridge_slave_1: left promiscuous mode [ 1520.988088][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.470705][ T5908] bridge_slave_0: left allmulticast mode [ 1521.470730][ T5908] bridge_slave_0: left promiscuous mode [ 1521.470905][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.792478][ T5908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1521.980879][ T5908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1522.138420][ T5908] bond0 (unregistering): Released all slaves [ 1522.200006][T31292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1523.487440][T31292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1524.012815][T31562] netlink: 'syz.0.8517': attribute type 49 has an invalid length. [ 1525.179989][ T5908] hsr_slave_0: left promiscuous mode [ 1525.343840][ T5908] hsr_slave_1: left promiscuous mode [ 1525.364571][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1525.615600][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1527.277584][ T5908] team0 (unregistering): Port device team_slave_1 removed [ 1527.361135][ T5908] team0 (unregistering): Port device team_slave_0 removed [ 1527.587691][T31578] veth0: entered promiscuous mode [ 1527.622836][T31292] team0: Port device team_slave_0 added [ 1527.624074][T31585] bond0: entered promiscuous mode [ 1527.624093][T31585] bond_slave_0: entered promiscuous mode [ 1527.624281][T31585] bond_slave_1: entered promiscuous mode [ 1527.658225][T31585] bond0: left promiscuous mode [ 1527.658245][T31585] bond_slave_0: left promiscuous mode [ 1527.658426][T31585] bond_slave_1: left promiscuous mode [ 1527.710893][T31585] veth0: left promiscuous mode [ 1527.715321][T31292] team0: Port device team_slave_1 added [ 1527.953456][T31292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1527.953472][T31292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1527.953497][T31292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1528.103456][T31292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1528.103469][T31292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1528.103484][T31292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1528.369304][T31292] hsr_slave_0: entered promiscuous mode [ 1528.430055][T31292] hsr_slave_1: entered promiscuous mode [ 1528.432257][T31292] debugfs: 'hsr0' already exists in 'hsr' [ 1528.432281][T31292] Cannot create hsr debugfs directory [ 1529.241080][T31612] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8530'. [ 1529.934618][T28238] Bluetooth: hci4: command tx timeout [ 1532.097419][T31632] bond0: entered promiscuous mode [ 1532.097441][T31632] bond_slave_0: entered promiscuous mode [ 1532.097623][T31632] bond_slave_1: entered promiscuous mode [ 1532.185004][T31629] bond0: left promiscuous mode [ 1532.185024][T31629] bond_slave_0: left promiscuous mode [ 1532.185355][T31629] bond_slave_1: left promiscuous mode [ 1532.729984][T31655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8539'. [ 1533.555441][T31397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.555645][T31397] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.555974][T31397] bridge_slave_0: entered allmulticast mode [ 1533.568013][T31397] bridge_slave_0: entered promiscuous mode [ 1533.602012][T31397] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.602157][T31397] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.602530][T31397] bridge_slave_1: entered allmulticast mode [ 1533.617763][T31397] bridge_slave_1: entered promiscuous mode [ 1534.601938][T31397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1534.610638][T31397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1534.654237][T31397] team0: Port device team_slave_0 added [ 1534.657790][T31397] team0: Port device team_slave_1 added [ 1534.726393][T31397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1534.726409][T31397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1534.726434][T31397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1534.728659][T31397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1534.728670][T31397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1534.728695][T31397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1534.859854][ T71] block nbd10: Possible stuck request ffff888027220000: control (read@0,1024B). Runtime 120 seconds [ 1534.859901][ T71] block nbd10: Possible stuck request ffff8880272201c0: control (read@1024,1024B). Runtime 120 seconds [ 1534.859930][ T71] block nbd10: Possible stuck request ffff888027220380: control (read@2048,1024B). Runtime 120 seconds [ 1534.859958][ T71] block nbd10: Possible stuck request ffff888027220540: control (read@3072,1024B). Runtime 120 seconds [ 1536.207068][T31697] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8545'. [ 1536.617511][T31700] veth0: entered promiscuous mode [ 1536.647033][T31699] veth0: left promiscuous mode [ 1537.348288][T31397] hsr_slave_0: entered promiscuous mode [ 1537.349304][T31397] hsr_slave_1: entered promiscuous mode [ 1537.361871][T31397] debugfs: 'hsr0' already exists in 'hsr' [ 1537.361897][T31397] Cannot create hsr debugfs directory [ 1537.671187][T31717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8550'. [ 1541.485939][T31738] veth0: entered promiscuous mode [ 1541.489203][T31737] veth0: left promiscuous mode [ 1541.879986][ T5908] bridge_slave_1: left allmulticast mode [ 1541.880021][ T5908] bridge_slave_1: left promiscuous mode [ 1541.880280][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.978265][T31754] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8557'. [ 1542.014480][ T5908] bridge_slave_0: left allmulticast mode [ 1542.014514][ T5908] bridge_slave_0: left promiscuous mode [ 1542.037694][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.841016][ T5908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1542.940830][ T5908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1543.006200][ T5908] bond0 (unregistering): Released all slaves [ 1543.352152][ T5257] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1543.653993][T31771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8561'. [ 1544.409808][ T5908] hsr_slave_0: left promiscuous mode [ 1544.599851][ T5908] hsr_slave_1: left promiscuous mode [ 1544.651320][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1544.671689][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1545.120499][ T5908] team0 (unregistering): Port device team_slave_1 removed [ 1545.170528][ T5908] team0 (unregistering): Port device team_slave_0 removed [ 1545.824835][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1547.027286][T31810] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8567'. [ 1550.078959][T31831] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8571'. [ 1554.586119][T24492] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1554.636822][T24492] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1554.641436][T24492] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1554.643954][T24492] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1554.649024][T24492] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1556.497943][T31904] netlink: 108 bytes leftover after parsing attributes in process `syz.4.8582'. [ 1558.960415][T16310] bridge_slave_1: left allmulticast mode [ 1558.960452][T16310] bridge_slave_1: left promiscuous mode [ 1558.960715][T16310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.033775][T16310] bridge_slave_0: left allmulticast mode [ 1559.033811][T16310] bridge_slave_0: left promiscuous mode [ 1559.034070][T16310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.444228][T16310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1559.553292][T16310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1559.593031][T16310] bond0 (unregistering): Released all slaves [ 1559.920971][T28238] Bluetooth: hci0: command tx timeout [ 1560.450225][T31397] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1560.484958][T31397] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1560.486959][T31913] veth0: entered promiscuous mode [ 1560.489146][T31397] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1560.551277][T31397] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1560.551922][T31915] veth0: left promiscuous mode [ 1561.671550][T16310] hsr_slave_0: left promiscuous mode [ 1561.721726][T16310] hsr_slave_1: left promiscuous mode [ 1561.725987][T16310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1561.763955][T16310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1561.974296][T28238] Bluetooth: hci0: command tx timeout [ 1562.362801][T31937] overlayfs: failed to resolve './file1': -2 [ 1563.311247][T16310] team0 (unregistering): Port device team_slave_1 removed [ 1563.391742][T16310] team0 (unregistering): Port device team_slave_0 removed [ 1563.591961][T31397] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1563.650820][T31397] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1564.120632][T28238] Bluetooth: hci0: command tx timeout [ 1564.285834][T24492] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1564.332937][T24492] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1564.367251][T24492] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1564.419561][T31870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1564.422103][T31870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1565.960774][ T71] block nbd10: Possible stuck request ffff888027220000: control (read@0,1024B). Runtime 150 seconds [ 1565.960815][ T71] block nbd10: Possible stuck request ffff8880272201c0: control (read@1024,1024B). Runtime 150 seconds [ 1565.960838][ T71] block nbd10: Possible stuck request ffff888027220380: control (read@2048,1024B). Runtime 150 seconds [ 1565.960858][ T71] block nbd10: Possible stuck request ffff888027220540: control (read@3072,1024B). Runtime 150 seconds [ 1566.209772][T31870] Bluetooth: hci0: command tx timeout [ 1566.748736][T31870] Bluetooth: hci2: command tx timeout [ 1567.531848][T31997] netlink: 'syz.4.8603': attribute type 49 has an invalid length. [ 1567.537917][T31864] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.538122][T31864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.538412][T31864] bridge_slave_0: entered allmulticast mode [ 1567.569578][T31864] bridge_slave_0: entered promiscuous mode [ 1567.599272][T31864] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.599386][T31864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.617314][T31864] bridge_slave_1: entered allmulticast mode [ 1567.626792][T31864] bridge_slave_1: entered promiscuous mode [ 1567.812831][T31864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1567.950656][T31864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1567.951020][T32003] bond0: entered promiscuous mode [ 1567.951039][T32003] bond_slave_0: entered promiscuous mode [ 1567.951256][T32003] bond_slave_1: entered promiscuous mode [ 1568.222868][T31999] bond0: left promiscuous mode [ 1568.222889][T31999] bond_slave_0: left promiscuous mode [ 1568.223079][T31999] bond_slave_1: left promiscuous mode [ 1568.384693][T31870] Bluetooth: hci0: command tx timeout [ 1568.845335][T31870] Bluetooth: hci2: command tx timeout [ 1569.694270][T31864] team0: Port device team_slave_0 added [ 1569.806698][T31864] team0: Port device team_slave_1 added [ 1570.170550][T32026] netlink: 'syz.0.8614': attribute type 49 has an invalid length. [ 1570.728657][T31864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1570.728674][T31864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1570.728696][T31864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1570.809045][T31864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1570.809056][T31864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1570.809070][T31864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1570.861233][T31870] Bluetooth: hci2: command tx timeout [ 1570.974824][T32031] veth0: entered promiscuous mode [ 1570.977491][T32034] bond0: entered promiscuous mode [ 1570.977510][T32034] bond_slave_0: entered promiscuous mode [ 1570.977696][T32034] bond_slave_1: entered promiscuous mode [ 1571.039926][T32030] bond0: left promiscuous mode [ 1571.039947][T32030] bond_slave_0: left promiscuous mode [ 1571.040147][T32030] bond_slave_1: left promiscuous mode [ 1571.047007][T32030] veth0: left promiscuous mode [ 1571.993095][T31864] hsr_slave_0: entered promiscuous mode [ 1572.019237][T31864] hsr_slave_1: entered promiscuous mode [ 1572.027121][T31864] debugfs: 'hsr0' already exists in 'hsr' [ 1572.027139][T31864] Cannot create hsr debugfs directory [ 1572.819998][T32063] netlink: 'syz.0.8625': attribute type 49 has an invalid length. [ 1572.879017][T32066] veth0: entered promiscuous mode [ 1572.891154][T31954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1572.891373][T31954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.891597][T31954] bridge_slave_0: entered allmulticast mode [ 1572.894268][T31954] bridge_slave_0: entered promiscuous mode [ 1572.896455][T32066] bond0: entered promiscuous mode [ 1572.896474][T32066] bond_slave_0: entered promiscuous mode [ 1572.896667][T32066] bond_slave_1: entered promiscuous mode [ 1572.942762][T32064] bond0: left promiscuous mode [ 1572.942783][T32064] bond_slave_0: left promiscuous mode [ 1572.943377][T32064] bond_slave_1: left promiscuous mode [ 1572.943757][T31870] Bluetooth: hci2: command tx timeout [ 1572.943911][T32064] veth0: left promiscuous mode [ 1572.944142][T31954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1572.944306][T31954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.944598][T31954] bridge_slave_1: entered allmulticast mode [ 1572.959974][T31954] bridge_slave_1: entered promiscuous mode [ 1573.188098][T31954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1573.486607][T31954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1573.649295][T31954] team0: Port device team_slave_0 added [ 1573.682094][T31954] team0: Port device team_slave_1 added [ 1573.922525][T31954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1573.922540][T31954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1573.922558][T31954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1573.928253][T31954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1573.928268][T31954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1573.928288][T31954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1575.012991][T31870] Bluetooth: hci2: command tx timeout [ 1575.282244][T32097] veth0: entered promiscuous mode [ 1575.305293][T32100] bond0: entered promiscuous mode [ 1575.305316][T32100] bond_slave_0: entered promiscuous mode [ 1575.305530][T32100] bond_slave_1: entered promiscuous mode [ 1576.119327][T32104] netlink: 'syz.0.8638': attribute type 49 has an invalid length. [ 1576.417196][T32096] bond0: left promiscuous mode [ 1576.417217][T32096] bond_slave_0: left promiscuous mode [ 1576.417389][T32096] bond_slave_1: left promiscuous mode [ 1576.417827][T32096] veth0: left promiscuous mode [ 1576.700775][T31954] hsr_slave_0: entered promiscuous mode [ 1576.702309][T31954] hsr_slave_1: entered promiscuous mode [ 1576.703327][T31954] debugfs: 'hsr0' already exists in 'hsr' [ 1576.703351][T31954] Cannot create hsr debugfs directory [ 1577.618617][T31864] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1577.684590][T31864] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1577.733326][T31864] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1577.935431][T31864] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1578.069944][T16310] bridge_slave_1: left allmulticast mode [ 1578.069990][T16310] bridge_slave_1: left promiscuous mode [ 1578.070248][T16310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.122416][T16310] bridge_slave_0: left allmulticast mode [ 1578.122452][T16310] bridge_slave_0: left promiscuous mode [ 1578.122715][T16310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.776594][T32132] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8648'. [ 1579.418337][T16310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1579.552060][T16310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1579.622958][T16310] bond0 (unregistering): Released all slaves [ 1579.671024][T31864] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1579.705724][T31864] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1579.724483][T32125] veth0: entered promiscuous mode [ 1579.958735][T31864] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1579.984299][T31864] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1580.008928][T32128] veth0: left promiscuous mode [ 1580.324941][T32145] netlink: 'syz.1.8651': attribute type 49 has an invalid length. [ 1581.859823][T16310] hsr_slave_0: left promiscuous mode [ 1582.839876][T16310] hsr_slave_1: left promiscuous mode [ 1582.841976][T16310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1583.276318][T16310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1583.917871][T32175] netlink: 'syz.0.8660': attribute type 49 has an invalid length. [ 1584.372928][T16310] team0 (unregistering): Port device team_slave_1 removed [ 1584.420535][T16310] team0 (unregistering): Port device team_slave_0 removed [ 1584.608527][T32169] veth0: entered promiscuous mode [ 1584.608987][T32170] bond0: entered promiscuous mode [ 1584.609003][T32170] bond_slave_0: entered promiscuous mode [ 1584.609183][T32170] bond_slave_1: entered promiscuous mode [ 1584.662561][T32170] bond0: left promiscuous mode [ 1584.662584][T32170] bond_slave_0: left promiscuous mode [ 1584.662785][T32170] bond_slave_1: left promiscuous mode [ 1584.663228][T32170] veth0: left promiscuous mode [ 1585.003299][T32187] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8661'. [ 1587.287228][T31864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1587.308599][T31864] 8021q: adding VLAN 0 to HW filter on device team0 [ 1587.329345][T16317] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.329499][T16317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1588.872751][ T5257] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1588.880686][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.880812][ T5908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1589.369253][T32225] bond0: entered promiscuous mode [ 1589.369275][T32225] bond_slave_0: entered promiscuous mode [ 1589.369463][T32225] bond_slave_1: entered promiscuous mode [ 1589.399569][T32223] bond0: left promiscuous mode [ 1589.399752][T32223] bond_slave_0: left promiscuous mode [ 1589.399890][T32223] bond_slave_1: left promiscuous mode [ 1592.971289][T32270] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8677'. [ 1594.445139][T32293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8682'. [ 1597.542221][ T4962] udevd[4962]: worker [29573] /devices/virtual/block/nbd10 timeout; kill it [ 1597.542328][ T4962] udevd[4962]: seq 34816 '/devices/virtual/block/nbd10' killed [ 1597.589769][ T71] block nbd10: Possible stuck request ffff888027220000: control (read@0,1024B). Runtime 180 seconds [ 1597.589822][ T71] block nbd10: Possible stuck request ffff8880272201c0: control (read@1024,1024B). Runtime 180 seconds [ 1597.589850][ T71] block nbd10: Possible stuck request ffff888027220380: control (read@2048,1024B). Runtime 180 seconds [ 1597.589876][ T71] block nbd10: Possible stuck request ffff888027220540: control (read@3072,1024B). Runtime 180 seconds [ 1598.838070][T31864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1599.858225][T31954] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1599.997796][T31954] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1600.000538][T32329] bond0: entered promiscuous mode [ 1600.000568][T32329] bond_slave_0: entered promiscuous mode [ 1600.000761][T32329] bond_slave_1: entered promiscuous mode [ 1600.001654][T32327] bond0: left promiscuous mode [ 1600.001669][T32327] bond_slave_0: left promiscuous mode [ 1600.001851][T32327] bond_slave_1: left promiscuous mode [ 1600.003441][T31954] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1600.049915][T31954] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1600.056209][T31954] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1600.254949][T31954] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1600.496349][T31954] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1600.518361][T31954] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1600.665779][T32335] overlayfs: failed to resolve './file0': -2 [ 1601.658434][T31864] veth0_vlan: entered promiscuous mode [ 1601.814200][T31864] veth1_vlan: entered promiscuous mode [ 1601.988854][T31864] veth0_macvtap: entered promiscuous mode [ 1602.033899][T31864] veth1_macvtap: entered promiscuous mode [ 1602.058323][T31954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1602.200521][T32355] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8696'. [ 1602.750201][T31864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1602.782136][T31954] 8021q: adding VLAN 0 to HW filter on device team0 [ 1602.804986][T31864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1602.845493][T16310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1602.847337][T16310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1602.891158][T29121] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.908612][T29121] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.082206][T16310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1603.082347][T16310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1603.085820][T29121] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.980814][T29121] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.867634][T31954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1605.957401][T31954] veth0_vlan: entered promiscuous mode [ 1605.964971][T31954] veth1_vlan: entered promiscuous mode [ 1606.009125][T31954] veth0_macvtap: entered promiscuous mode [ 1606.024423][T31954] veth1_macvtap: entered promiscuous mode [ 1606.088884][T31954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1606.108640][T31954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1606.129650][ T5908] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.130651][ T5908] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.130691][ T5908] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.130724][ T5908] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.316365][T32408] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8710'. [ 1607.027929][T32370] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1607.253796][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1614.199380][T29121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1614.199400][T29121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1614.199500][T28238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1614.297463][T28238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1614.312480][T28238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1614.327540][T28238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1614.328413][T28238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1615.154481][T30795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1615.154502][T30795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1617.524238][T32478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8723'. [ 1618.470858][T28238] Bluetooth: hci3: command tx timeout [ 1620.292622][T32502] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8728'. [ 1620.579699][T28238] Bluetooth: hci3: command tx timeout [ 1622.615886][T28238] Bluetooth: hci3: command tx timeout [ 1624.191543][T32509] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1624.804230][T28238] Bluetooth: hci3: command tx timeout [ 1624.925446][T32530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8734'. [ 1625.111541][T23792] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1626.291762][T32561] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8742'. [ 1626.361684][T23792] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1626.482036][T32554] macvtap0: entered promiscuous mode [ 1627.772490][ T71] block nbd10: Possible stuck request ffff888027220000: control (read@0,1024B). Runtime 210 seconds [ 1627.772535][ T71] block nbd10: Possible stuck request ffff8880272201c0: control (read@1024,1024B). Runtime 210 seconds [ 1627.772561][ T71] block nbd10: Possible stuck request ffff888027220380: control (read@2048,1024B). Runtime 210 seconds [ 1627.772584][ T71] block nbd10: Possible stuck request ffff888027220540: control (read@3072,1024B). Runtime 210 seconds [ 1627.860267][T32574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8746'. [ 1630.598255][T23792] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.950967][T32445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.951103][T32445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.952509][T32445] bridge_slave_0: entered allmulticast mode [ 1632.955538][T32445] bridge_slave_0: entered promiscuous mode [ 1632.957638][T32445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.959228][T32445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.959375][T32445] bridge_slave_1: entered allmulticast mode [ 1632.960873][T32445] bridge_slave_1: entered promiscuous mode [ 1633.446761][T32445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1633.640563][T32445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1633.812988][T32627] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8760'. [ 1633.955242][T32623] binder: 32619:32623 ioctl c00c620f 200000000340 returned -22 [ 1636.871655][T32636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8761'. [ 1637.421317][T23792] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.695629][T32647] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8763'. [ 1638.129337][T32445] team0: Port device team_slave_0 added [ 1638.395866][T32445] team0: Port device team_slave_1 added [ 1638.507889][T32445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1638.507906][T32445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1638.507930][T32445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1638.568598][T32445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1638.568614][T32445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1638.568638][T32445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1640.437567][T32669] bond0: entered promiscuous mode [ 1640.437590][T32669] bond_slave_0: entered promiscuous mode [ 1640.437759][T32669] bond_slave_1: entered promiscuous mode [ 1640.494314][T32668] bond0: left promiscuous mode [ 1640.494334][T32668] bond_slave_0: left promiscuous mode [ 1640.494526][T32668] bond_slave_1: left promiscuous mode [ 1640.523965][T32445] hsr_slave_0: entered promiscuous mode [ 1640.525453][T32445] hsr_slave_1: entered promiscuous mode [ 1640.526469][T32445] debugfs: 'hsr0' already exists in 'hsr' [ 1640.526492][T32445] Cannot create hsr debugfs directory [ 1640.584854][T32671] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8770'. [ 1640.977669][T32678] binder: 32677:32678 ioctl c00c620f 200000000340 returned -22 [ 1643.478773][T32706] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8780'. [ 1643.739563][T32712] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8779'. [ 1644.082435][T23792] bridge_slave_1: left allmulticast mode [ 1644.082472][T23792] bridge_slave_1: left promiscuous mode [ 1644.082880][T23792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.183026][T23792] bridge_slave_0: left allmulticast mode [ 1644.183062][T23792] bridge_slave_0: left promiscuous mode [ 1644.196570][T23792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.531060][T23792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1645.850400][T23792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1645.872812][T23792] bond0 (unregistering): Released all slaves [ 1647.005460][T32714] bond0: entered promiscuous mode [ 1647.005483][T32714] bond_slave_0: entered promiscuous mode [ 1647.005661][T32714] bond_slave_1: entered promiscuous mode [ 1648.493152][T32742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1648.560030][T32714] bond0: left promiscuous mode [ 1648.560052][T32714] bond_slave_0: left promiscuous mode [ 1648.560203][T32714] bond_slave_1: left promiscuous mode [ 1649.359895][T23792] hsr_slave_0: left promiscuous mode [ 1649.399860][T23792] hsr_slave_1: left promiscuous mode [ 1649.401270][T23792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1649.401294][T23792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1649.451095][T23792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1649.451122][T23792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1649.739324][T32764] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8790'. [ 1649.842504][T23792] veth1_macvtap: left promiscuous mode [ 1649.842608][T23792] veth0_macvtap: left promiscuous mode [ 1649.842824][T23792] veth1_vlan: left promiscuous mode [ 1649.842982][T23792] veth0_vlan: left promiscuous mode [ 1651.207504][ T318] binder: 316:318 ioctl c00c620f 200000000340 returned -22 [ 1653.026298][ T331] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8798'. [ 1653.522946][T23792] team0 (unregistering): Port device team_slave_1 removed [ 1653.605683][T23792] team0 (unregistering): Port device team_slave_0 removed [ 1654.300403][ T5257] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1654.373619][ T330] macvtap0: left promiscuous mode [ 1656.135220][ T347] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8802'. [ 1656.216204][ T345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1656.686644][ T355] netlink: 'syz.1.8804': attribute type 1 has an invalid length. [ 1656.686665][ T355] netlink: 1840 bytes leftover after parsing attributes in process `syz.1.8804'. [ 1656.829974][ T358] binder: 356:358 ioctl c00c620f 200000000340 returned -22 [ 1658.329812][ T71] block nbd10: Possible stuck request ffff888027220000: control (read@0,1024B). Runtime 240 seconds [ 1658.329868][ T71] block nbd10: Possible stuck request ffff8880272201c0: control (read@1024,1024B). Runtime 240 seconds [ 1658.329896][ T71] block nbd10: Possible stuck request ffff888027220380: control (read@2048,1024B). Runtime 240 seconds [ 1658.329923][ T71] block nbd10: Possible stuck request ffff888027220540: control (read@3072,1024B). Runtime 240 seconds [ 1658.407951][ T364] veth0: entered promiscuous mode [ 1658.408381][ T366] bond0: entered promiscuous mode [ 1658.408401][ T366] bond_slave_0: entered promiscuous mode [ 1658.408591][ T366] bond_slave_1: entered promiscuous mode [ 1658.413573][ T366] bond0: left promiscuous mode [ 1658.413593][ T366] bond_slave_0: left promiscuous mode [ 1658.413798][ T366] bond_slave_1: left promiscuous mode [ 1658.415851][ T366] veth0: left promiscuous mode [ 1658.672162][ T380] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8812'. [ 1658.891827][T14971] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1659.051276][ T387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8813'. [ 1660.130164][T14971] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1660.137450][T14971] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1660.137487][T14971] usb 4-1: can't read configurations, error -71 [ 1664.306877][ T427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1664.327876][ T431] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8822'. [ 1665.924900][ T426] veth0: entered promiscuous mode [ 1665.925212][ T428] bond0: entered promiscuous mode [ 1665.925229][ T428] bond_slave_0: entered promiscuous mode [ 1665.925438][ T428] bond_slave_1: entered promiscuous mode [ 1665.926219][ T428] bond0: left promiscuous mode [ 1665.926236][ T428] bond_slave_0: left promiscuous mode [ 1665.926429][ T428] bond_slave_1: left promiscuous mode [ 1665.926923][ T428] veth0: left promiscuous mode [ 1668.655788][ T472] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8830'. [ 1668.695829][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.848515][ T475] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8832'. [ 1670.994217][ T496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1672.416159][ T502] veth0: entered promiscuous mode [ 1672.428471][ T501] veth0: left promiscuous mode [ 1672.827205][ T531] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8842'. [ 1674.750950][ T541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1676.654695][T31870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1676.724081][ T5604] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1677.154451][T31870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1677.178977][T31870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1677.225470][T31870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1677.237637][T31870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1677.456212][ T5604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1677.456244][ T5604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1677.456266][ T5604] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1677.456307][ T5604] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1677.456329][ T5604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.538198][ T5604] usb 4-1: config 0 descriptor?? [ 1678.836861][ T5604] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1679.409917][T28238] Bluetooth: hci0: command tx timeout [ 1679.524328][ T578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1681.490738][T28238] Bluetooth: hci0: command tx timeout [ 1683.576806][T28238] Bluetooth: hci0: command tx timeout [ 1683.682556][ T603] veth0: entered promiscuous mode [ 1683.688524][ T602] veth0: left promiscuous mode [ 1684.205403][T32382] usb 4-1: USB disconnect, device number 47 [ 1685.020287][ T548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.020529][ T548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.020932][ T548] bridge_slave_0: entered allmulticast mode [ 1685.024205][ T548] bridge_slave_0: entered promiscuous mode [ 1685.028221][ T548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.028477][ T548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.028747][ T548] bridge_slave_1: entered allmulticast mode [ 1685.079057][ T548] bridge_slave_1: entered promiscuous mode [ 1685.148643][ T632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1685.576359][ T548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1685.589025][ T548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1685.651571][T31870] Bluetooth: hci0: command tx timeout [ 1686.934331][ T548] team0: Port device team_slave_0 added [ 1686.946068][ T548] team0: Port device team_slave_1 added [ 1688.309742][T14971] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1688.479804][T14971] usb 1-1: Using ep0 maxpacket: 32 [ 1688.486226][T14971] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1688.486254][T14971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.486273][T14971] usb 1-1: Product: syz [ 1688.486286][T14971] usb 1-1: Manufacturer: syz [ 1688.486300][T14971] usb 1-1: SerialNumber: syz [ 1689.147333][T14971] usb 1-1: 1:1: cannot get freq (v2/v3): err -32 [ 1689.352529][T14971] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 1689.381993][T14971] usb 1-1: 2:1: cannot get freq (v2/v3): err -71 [ 1689.382484][T14971] usb 1-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 1689.419792][ T71] block nbd10: Possible stuck request ffff888027220000: control (read@0,1024B). Runtime 270 seconds [ 1689.419839][ T71] block nbd10: Possible stuck request ffff8880272201c0: control (read@1024,1024B). Runtime 270 seconds [ 1689.419868][ T71] block nbd10: Possible stuck request ffff888027220380: control (read@2048,1024B). Runtime 270 seconds [ 1689.419902][ T71] block nbd10: Possible stuck request ffff888027220540: control (read@3072,1024B). Runtime 270 seconds [ 1689.422433][ T548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1689.422447][ T548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1689.422472][ T548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1689.661128][ T653] veth0: entered promiscuous mode [ 1689.731618][ T548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1689.731635][ T548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1689.731661][ T548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1689.732606][ T654] veth0: left promiscuous mode [ 1689.957392][T14971] usb 1-1: USB disconnect, device number 92 [ 1690.187777][T30191] udevd[30191]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1690.840730][ T548] hsr_slave_0: entered promiscuous mode [ 1690.842244][ T548] hsr_slave_1: entered promiscuous mode [ 1690.843322][ T548] debugfs: 'hsr0' already exists in 'hsr' [ 1690.843347][ T548] Cannot create hsr debugfs directory [ 1691.001701][ T679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1691.543205][ T681] vlan2: entered promiscuous mode [ 1691.543224][ T681] bond0: entered promiscuous mode [ 1691.543237][ T681] bond_slave_0: entered promiscuous mode [ 1691.543453][ T681] bond_slave_1: entered promiscuous mode [ 1691.853207][ T696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8885'. [ 1691.925627][ T697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8885'. [ 1693.017908][ T698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1693.018263][ T698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1693.568363][ T698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1693.574828][ T698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1694.314959][ T698] erspan0: left allmulticast mode [ 1694.487837][ T5257] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1694.488178][T16320] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.593013][T16320] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.635442][T16320] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.635852][T16320] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.824038][T29120] bridge_slave_1: left allmulticast mode [ 1694.824074][T29120] bridge_slave_1: left promiscuous mode [ 1694.824340][T29120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.891367][T29120] bridge_slave_0: left allmulticast mode [ 1694.891400][T29120] bridge_slave_0: left promiscuous mode [ 1694.894566][T29120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.486310][ T745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1696.753610][ T751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8899'. [ 1697.673003][T29120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1697.730943][T29120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1697.773403][T29120] bond0 (unregistering): Released all slaves [ 1697.833200][ T753] veth0: entered promiscuous mode [ 1697.890004][ T752] veth0: left promiscuous mode [ 1698.851706][T29120] hsr_slave_0: left promiscuous mode [ 1699.538665][T29120] hsr_slave_1: left promiscuous mode [ 1699.539965][T29120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1699.601407][T29120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1702.253338][ T808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8911'. [ 1702.305301][ T810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1702.501654][T29120] team0 (unregistering): Port device team_slave_1 removed [ 1702.550725][T29120] team0 (unregistering): Port device team_slave_0 removed [ 1703.822091][ T5257] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1709.061721][ T858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8924'. [ 1711.470119][ T5604] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1711.694288][ T5604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1711.694321][ T5604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1711.694357][ T5604] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1711.694378][ T5604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.767578][ T5604] usb 5-1: config 0 descriptor?? [ 1711.829776][T28238] Bluetooth: hci2: command 0x0406 tx timeout [ 1712.352369][ T5604] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x1 [ 1712.352404][ T5604] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x2 [ 1712.352426][ T5604] pyra 0003:1E7D:2CF6.0009: item fetching failed at offset 4/7 [ 1712.353208][ T5604] pyra 0003:1E7D:2CF6.0009: parse failed [ 1712.353339][ T5604] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -22 [ 1712.483941][ T5604] usb 5-1: USB disconnect, device number 47 [ 1713.202558][ T901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8936'. [ 1713.252937][ T902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8936'. [ 1713.739135][ T908] netlink: 'syz.1.8938': attribute type 1 has an invalid length. [ 1713.739159][ T908] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.8938'. [ 1713.739174][ T908] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8938'. [ 1715.315777][ T917] overlayfs: missing 'lowerdir' [ 1715.503878][ T917] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1715.503908][ T917] overlayfs: failed to set xattr on upper [ 1715.503916][ T917] overlayfs: ...falling back to redirect_dir=nofollow. [ 1715.503925][ T917] overlayfs: ...falling back to index=off. [ 1715.503932][ T917] overlayfs: ...falling back to uuid=null. [ 1715.504160][ T917] overlayfs: conflicting lowerdir path [ 1717.699733][T14971] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1717.862396][T14971] usb 4-1: Using ep0 maxpacket: 16 [ 1717.865010][T14971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1717.865039][T14971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1717.865059][T14971] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1717.865097][T14971] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1717.865118][T14971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.875915][T14971] usb 4-1: config 0 descriptor?? [ 1718.375862][T14971] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1718.375895][T14971] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1718.375921][T14971] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1718.375943][T14971] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1718.375967][T14971] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1718.375989][T14971] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1718.376011][T14971] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1718.376033][T14971] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1718.376057][T14971] microsoft 0003:045E:07DA.000A: unknown main item tag 0x3 [ 1718.376079][T14971] microsoft 0003:045E:07DA.000A: unknown main item tag 0x3 [ 1718.416415][T14971] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1718.416447][T14971] microsoft 0003:045E:07DA.000A: no inputs found [ 1718.416460][T14971] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 1718.631526][T14971] usb 4-1: USB disconnect, device number 48 [ 1719.730158][ T962] fido_id[962]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1719.929760][ T71] block nbd10: Possible stuck request ffff888027220000: control (read@0,1024B). Runtime 300 seconds [ 1719.929811][ T71] block nbd10: Possible stuck request ffff8880272201c0: control (read@1024,1024B). Runtime 300 seconds [ 1719.929840][ T71] block nbd10: Possible stuck request ffff888027220380: control (read@2048,1024B). Runtime 300 seconds [ 1719.929865][ T71] block nbd10: Possible stuck request ffff888027220540: control (read@3072,1024B). Runtime 300 seconds [ 1726.532361][ T1035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8962'. [ 1726.558756][ T1035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8962'. [ 1727.891589][ T1047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1727.892320][ T1047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1729.295370][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1729.315294][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1729.580149][T31870] Bluetooth: hci0: link tx timeout [ 1729.580597][T31870] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1730.175957][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1733.590006][T31870] Bluetooth: hci0: command 0x0406 tx timeout [ 1734.230171][ T1047] erspan0: left allmulticast mode [ 1734.273911][ T1137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8978'. [ 1734.297008][T16313] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.331857][ T1135] macsec0: entered promiscuous mode [ 1734.470532][ T1137] veth1_macvtap: left promiscuous mode [ 1734.543374][ T1137] macsec0 (unregistering): left promiscuous mode [ 1735.625021][T16313] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.664149][T14286] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.664197][T14286] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1736.289006][T31870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1736.341508][T31870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1736.344579][T31870] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1736.376003][T31870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1736.404381][T31870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1738.544760][T14971] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1739.849819][T14971] usb 4-1: Using ep0 maxpacket: 16 [ 1739.981323][T14971] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1739.981399][T14971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1739.981425][T14971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1739.981461][T14971] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1739.981483][T14971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.995529][T14971] usb 4-1: config 0 descriptor?? [ 1740.084833][T14971] usbhid 4-1:0.0: can't add hid device: -71 [ 1740.084947][T14971] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1740.097318][T14971] usb 4-1: USB disconnect, device number 49 [ 1740.671080][ T1189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8989'. [ 1740.676231][T31870] Bluetooth: hci3: command tx timeout [ 1740.717766][ T1189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8989'. [ 1741.983302][T32382] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1742.146350][T32382] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1742.146404][T32382] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1742.146420][T32382] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1742.146443][T32382] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1742.146454][T32382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1742.210421][T32382] usb 5-1: config 0 descriptor?? [ 1742.211187][ T1187] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1742.240943][ T1194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.241670][ T1194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1742.550203][ T1194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1742.558875][ T1194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1742.665887][T32382] dragonrise 0003:0079:0011.000B: unexpected long global item [ 1742.666846][T32382] dragonrise 0003:0079:0011.000B: parse failed [ 1742.666936][T32382] dragonrise 0003:0079:0011.000B: probe with driver dragonrise failed with error -22 [ 1742.699896][T31870] Bluetooth: hci3: command tx timeout [ 1742.951860][ T5722] usb 5-1: USB disconnect, device number 48 [ 1744.220029][T27136] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1744.380038][T27136] usb 2-1: Using ep0 maxpacket: 16 [ 1744.381943][T27136] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1744.381994][T27136] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1744.382018][T27136] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1744.382045][T27136] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1744.382057][T27136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.385746][T27136] usb 2-1: config 0 descriptor?? [ 1744.726653][ T66] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1744.726685][ T66] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.728259][ T66] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1744.728631][ T66] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.728673][ T66] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1744.728695][ T66] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.728717][ T66] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1744.728729][ T66] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.770577][T31870] Bluetooth: hci3: command tx timeout [ 1744.861441][ T37] audit: type=1326 audit(1778724998.102:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1218 comm="syz.1.8997" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd91ace59 code=0x7ffc0000 [ 1744.861599][ T37] audit: type=1326 audit(1778724998.172:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1218 comm="syz.1.8997" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fabd91ace59 code=0x7ffc0000 [ 1744.861763][ T37] audit: type=1326 audit(1778724998.172:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1218 comm="syz.1.8997" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd91ace59 code=0x7ffc0000 [ 1744.861919][ T37] audit: type=1326 audit(1778724998.172:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1218 comm="syz.1.8997" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd91ace59 code=0x7ffc0000 [ 1744.863589][T27136] usbhid 2-1:0.0: can't add hid device: -71 [ 1744.863693][T27136] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1744.882703][T27136] usb 2-1: USB disconnect, device number 68 [ 1745.974854][ T1242] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.976332][ T1242] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.827672][ T1270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9011'. [ 1746.897378][T31870] Bluetooth: hci3: command tx timeout [ 1746.905325][ T1271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9011'. [ 1751.839737][ T1292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9017'. [ 1753.353902][ T71] block nbd10: Possible stuck request ffff888027220000: control (read@0,1024B). Runtime 330 seconds [ 1753.353950][ T71] block nbd10: Possible stuck request ffff8880272201c0: control (read@1024,1024B). Runtime 330 seconds [ 1753.353978][ T71] block nbd10: Possible stuck request ffff888027220380: control (read@2048,1024B). Runtime 330 seconds [ 1753.354005][ T71] block nbd10: Possible stuck request ffff888027220540: control (read@3072,1024B). Runtime 330 seconds [ 1754.853699][ T38] INFO: task udevd:29573 blocked in I/O wait for more than 145 seconds. [ 1754.853723][ T38] Not tainted syzkaller #0 [ 1754.853734][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1754.853743][ T38] task:udevd state:D stack:22328 pid:29573 tgid:29573 ppid:4962 task_flags:0x400140 flags:0x00080002 [ 1754.853815][ T38] Call Trace: [ 1754.853900][ T38] [ 1754.853969][ T38] __schedule+0x16ec/0x5620 [ 1754.854125][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1754.854192][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1754.854252][ T38] ? __pfx___schedule+0x10/0x10 [ 1754.854282][ T38] ? schedule+0x90/0x360 [ 1754.854305][ T38] schedule+0x164/0x360 [ 1754.854327][ T38] io_schedule+0x80/0xe0 [ 1754.854349][ T38] folio_wait_bit_common+0x6dd/0xbc0 [ 1754.854459][ T38] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1754.854487][ T38] ? __pfx_wake_page_function+0x10/0x10 [ 1754.854513][ T38] ? filemap_add_folio+0x3d9/0x610 [ 1754.854542][ T38] ? __filemap_get_folio_mpol+0x6fa/0xa50 [ 1754.854561][ T38] ? do_read_cache_folio+0x433/0x560 [ 1754.854610][ T38] do_read_cache_folio+0x1a7/0x560 [ 1754.854629][ T38] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1754.854729][ T38] read_part_sector+0xb8/0x2b0 [ 1754.854790][ T38] adfspart_check_POWERTEC+0x9a/0x7a0 [ 1754.854812][ T38] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1754.854899][ T38] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1754.854923][ T38] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1754.854952][ T38] bdev_disk_changed+0x817/0x1770 [ 1754.854992][ T38] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1754.855018][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1754.855080][ T38] blkdev_get_whole+0x2e5/0x480 [ 1754.855109][ T38] bdev_open+0x31e/0xcc0 [ 1754.855140][ T38] blkdev_open+0x485/0x620 [ 1754.855167][ T38] ? __pfx_blkdev_open+0x10/0x10 [ 1754.855188][ T38] do_dentry_open+0x83d/0x13e0 [ 1754.855521][ T38] vfs_open+0x3b/0x350 [ 1754.855548][ T38] ? path_openat+0x2e2b/0x38a0 [ 1754.855608][ T38] path_openat+0x2e43/0x38a0 [ 1754.855659][ T38] ? __pfx_path_openat+0x10/0x10 [ 1754.855682][ T38] ? kasan_save_track+0x4f/0x80 [ 1754.855733][ T38] ? kasan_save_track+0x3e/0x80 [ 1754.855748][ T38] ? __kasan_slab_alloc+0x6c/0x80 [ 1754.855765][ T38] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 1754.855818][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1754.855848][ T38] do_file_open+0x23e/0x4a0 [ 1754.855866][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1754.855901][ T38] ? __pfx_do_file_open+0x10/0x10 [ 1754.855920][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1754.855954][ T38] ? alloc_fd+0x64e/0x6c0 [ 1754.856016][ T38] do_sys_openat2+0x113/0x200 [ 1754.856038][ T38] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1754.856125][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 1754.856153][ T38] ? rcu_is_watching+0x15/0xb0 [ 1754.856227][ T38] __x64_sys_openat+0x138/0x170 [ 1754.856252][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1754.856295][ T38] do_syscall_64+0x15f/0xf80 [ 1754.856343][ T38] ? clear_bhb_loop+0x40/0x90 [ 1754.856366][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1754.856389][ T38] RIP: 0033:0x7f12a1a64407 [ 1754.856439][ T38] RSP: 002b:00007ffe83d08930 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1754.856488][ T38] RAX: ffffffffffffffda RBX: 00007f12a1976880 RCX: 00007f12a1a64407 [ 1754.856501][ T38] RDX: 00000000000a0800 RSI: 00005591515faff0 RDI: ffffffffffffff9c [ 1754.856514][ T38] RBP: 00005591515ed910 R08: 0000000000000000 R09: 0000000000000000 [ 1754.856526][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 000055915160af10 [ 1754.856538][ T38] R13: 00005591515fb190 R14: 0000000000000000 R15: 000055915160af10 [ 1754.856601][ T38] [ 1754.856651][ T38] [ 1754.856651][ T38] Showing all locks held in the system: [ 1754.856693][ T38] 2 locks held by ktimers/0/16: [ 1754.856737][ T38] 1 lock held by khungtaskd/38: [ 1754.856748][ T38] #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1754.856921][ T38] 3 locks held by kworker/u8:7/1054: [ 1754.856932][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1754.856990][ T38] #1: ffffc9000588fc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1754.857061][ T38] #2: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1754.857120][ T38] 2 locks held by getty/5350: [ 1754.857131][ T38] #0: ffff8880295560a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1754.857221][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 1754.857295][ T38] 6 locks held by kworker/u8:13/5908: [ 1754.857307][ T38] 3 locks held by kworker/u8:17/16317: [ 1754.857318][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1754.857360][ T38] #1: ffffc90004747c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1754.857401][ T38] #2: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1754.857509][ T38] 2 locks held by kworker/u8:21/19078: [ 1754.857521][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1754.857564][ T38] #1: ffffc9000ffdfc40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1754.857606][ T38] 4 locks held by kworker/u8:22/22166: [ 1754.857630][ T38] 1 lock held by udevd/29573: [ 1754.857640][ T38] #0: ffff8880271764c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 1754.857688][ T38] 2 locks held by kworker/u8:27/30795: [ 1754.857698][ T38] #0: ffff88801efc1138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1754.857737][ T38] #1: ffffc900057bfc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1754.857776][ T38] 2 locks held by syz-executor/1156: [ 1754.857785][ T38] #0: ffffffff8f890d38 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1754.857836][ T38] #1: ffffffff8f3574f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1754.857874][ T38] 5 locks held by syz.1.9021/1300: [ 1754.857891][ T38] 1 lock held by syz.0.9019/1301: [ 1754.857900][ T38] #0: ffff888060a3b1f8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1754.857950][ T38] [ 1754.857954][ T38] ============================================= [ 1754.857954][ T38] [ 1754.857967][ T38] NMI backtrace for cpu 0 [ 1754.857990][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1754.858010][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1754.858020][ T38] Call Trace: [ 1754.858028][ T38] [ 1754.858036][ T38] dump_stack_lvl+0xe8/0x150 [ 1754.858067][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1754.858122][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1754.858153][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1754.858181][ T38] sys_info+0x135/0x170 [ 1754.858227][ T38] watchdog+0xfd3/0x1030 [ 1754.858254][ T38] ? watchdog+0x1c9/0x1030 [ 1754.858277][ T38] kthread+0x388/0x470 [ 1754.858299][ T38] ? __pfx_watchdog+0x10/0x10 [ 1754.858316][ T38] ? __pfx_kthread+0x10/0x10 [ 1754.858334][ T38] ret_from_fork+0x514/0xb70 [ 1754.858359][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1754.858372][ T38] ? __switch_to+0xc79/0x1410 [ 1754.858393][ T38] ? __pfx_kthread+0x10/0x10 [ 1754.858410][ T38] ret_from_fork_asm+0x1a/0x30 [ 1754.858436][ T38] [ 1754.858441][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1754.858466][ C1] NMI backtrace for cpu 1 [ 1754.858480][ C1] CPU: 1 UID: 0 PID: 5908 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1754.858499][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1754.858509][ C1] Workqueue: netns cleanup_net [ 1754.858568][ C1] RIP: 0010:rt_flush_dev+0x1a4/0x4e0 [ 1754.858634][ C1] Code: e5 4c 89 64 24 18 0f 84 ee 02 00 00 49 89 ec 49 c1 ec 03 43 80 3c 34 00 74 08 48 89 ef e8 24 25 a8 f8 4c 8d 7d 90 4c 8b 6d 00 <4c> 89 fb 48 c1 eb 03 42 80 3c 33 00 74 08 4c 89 ff e8 06 25 a8 f8 [ 1754.858672][ C1] RSP: 0018:ffffc90005467288 EFLAGS: 00000246 [ 1754.858686][ C1] RAX: ffffffff89836014 RBX: 1ffff1100857bc20 RCX: ffff8880310b8000 [ 1754.858698][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1754.858708][ C1] RBP: ffff888042bde070 R08: ffffffff8b1f2900 R09: ffffffff8dfc8140 [ 1754.858720][ C1] R10: dffffc0000000000 R11: fffffbfff1f11dff R12: 1ffff1100857bc0e [ 1754.858732][ C1] R13: ffff8880596b0f70 R14: dffffc0000000000 R15: ffff888042bde000 [ 1754.858745][ C1] FS: 0000000000000000(0000) GS:ffff888126276000(0000) knlGS:0000000000000000 [ 1754.858758][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1754.858769][ C1] CR2: 0000001b31b05ff8 CR3: 000000000ddb6000 CR4: 00000000003526f0 [ 1754.858784][ C1] Call Trace: [ 1754.858790][ C1] [ 1754.858798][ C1] ? rt_flush_dev+0x13f/0x4e0 [ 1754.858818][ C1] fib_netdev_event+0x94/0x490 [ 1754.858861][ C1] ? notifier_call_chain+0x178/0x3d0 [ 1754.858882][ C1] notifier_call_chain+0x1ad/0x3d0 [ 1754.858904][ C1] unregister_netdevice_many_notify+0x17a5/0x22b0 [ 1754.858976][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1754.858998][ C1] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1754.859018][ C1] ? nsim_destroy+0x16b/0x7f0 [ 1754.859114][ C1] unregister_netdevice_queue+0x31f/0x360 [ 1754.859133][ C1] ? nsim_destroy+0x16b/0x7f0 [ 1754.859148][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1754.859172][ C1] nsim_destroy+0x277/0x7f0 [ 1754.859190][ C1] __nsim_dev_port_del+0x14f/0x200 [ 1754.859219][ C1] nsim_dev_reload_destroy+0x288/0x490 [ 1754.859239][ C1] nsim_dev_reload_down+0x8a/0xc0 [ 1754.859261][ C1] devlink_reload+0x1eb/0x8d0 [ 1754.859314][ C1] ? __pfx_devlink_reload+0x10/0x10 [ 1754.859328][ C1] ? xa_get_mark+0x6fc/0x7b0 [ 1754.859352][ C1] devlink_pernet_pre_exit+0x1ff/0x420 [ 1754.859404][ C1] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 1754.859429][ C1] ? class_remove_file_ns+0x124/0x160 [ 1754.859517][ C1] ops_undo_list+0x187/0x940 [ 1754.859535][ C1] ? rt_spin_unlock+0x1c0/0x200 [ 1754.859550][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 1754.859565][ C1] ? rt_spin_unlock+0x14f/0x200 [ 1754.859580][ C1] ? idr_destroy+0x21b/0x2a0 [ 1754.859594][ C1] ? rt_spin_unlock+0x160/0x200 [ 1754.859609][ C1] cleanup_net+0x56e/0x800 [ 1754.859626][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1754.859647][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1754.859663][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1754.859680][ C1] process_scheduled_works+0xb5d/0x1860 [ 1754.859710][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1754.859729][ C1] ? assign_work+0x3d5/0x5e0 [ 1754.859747][ C1] worker_thread+0xa53/0xfc0 [ 1754.859776][ C1] kthread+0x388/0x470 [ 1754.859795][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1754.859810][ C1] ? __pfx_kthread+0x10/0x10 [ 1754.859829][ C1] ret_from_fork+0x514/0xb70 [ 1754.859848][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1754.859864][ C1] ? __switch_to+0xc79/0x1410 [ 1754.859885][ C1] ? __pfx_kthread+0x10/0x10 [ 1754.859904][ C1] ret_from_fork_asm+0x1a/0x30 [ 1754.859930][ C1] [ 1754.862011][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1754.862026][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1754.862042][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1754.862051][ T38] Call Trace: [ 1754.862057][ T38] [ 1754.862063][ T38] vpanic+0x56c/0xa60 [ 1754.862085][ T38] ? __pfx___schedule+0x10/0x10 [ 1754.862101][ T38] ? __pfx_vpanic+0x10/0x10 [ 1754.862123][ T38] panic+0xc5/0xd0 [ 1754.862137][ T38] ? __pfx_panic+0x10/0x10 [ 1754.862153][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1754.862174][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1754.862196][ T38] watchdog+0x102c/0x1030 [ 1754.862216][ T38] ? watchdog+0x1c9/0x1030 [ 1754.862233][ T38] kthread+0x388/0x470 [ 1754.862250][ T38] ? __pfx_watchdog+0x10/0x10 [ 1754.862262][ T38] ? __pfx_kthread+0x10/0x10 [ 1754.862279][ T38] ret_from_fork+0x514/0xb70 [ 1754.862295][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1754.862309][ T38] ? __switch_to+0xc79/0x1410 [ 1754.862329][ T38] ? __pfx_kthread+0x10/0x10 [ 1754.862345][ T38] ret_from_fork_asm+0x1a/0x30 [ 1754.862371][ T38] [ 1754.863319][ T38] Kernel Offset: disabled