last executing test programs: 4m38.921322436s ago: executing program 4 (id=37): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000004c0)={[0x7, 0x1, 0x400, 0x3, 0x9a, 0x9531, 0xffffffffffffffff, 0xc, 0x9, 0xae, 0x6, 0x60, 0x9, 0x3, 0x3, 0x5], 0x25000, 0x20000}) r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) readv(0xffffffffffffffff, &(0x7f0000001f40)=[{&(0x7f00000004c0)=""/36, 0x24}, {0x0}, {0x0}], 0x3) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x1, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0xa, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x1000000004, 0x800000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0xffff, 0x7, 0xc0bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x13e, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) r2 = eventfd2(0x4, 0x800) io_setup(0x6, &(0x7f0000001300)=0x0) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x10, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) io_cancel(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x5}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x20044044}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) 4m37.911514719s ago: executing program 4 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='1\x00', 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000), 0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x1]}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x1, 0x4, 'test'}, 0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000), 0x1) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x1, 0x4, 'test'}, 0xc) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) 4m37.773328572s ago: executing program 4 (id=39): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) sendmsg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1, &(0x7f0000000700)=[{0x18, 0x110, 0x1, 'd\x00\x00\x00\x00\x00\x00\x00'}], 0x18}, 0x0) nanosleep(&(0x7f0000000900)={0x0, 0x2faf080}, 0x0) sendmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[{0x18, 0x110, 0x1, 'd\x00\x00\x00\x00\x00\x00\x00'}, {0x14, 0x110, 0x2, "01000000"}], 0x2c}, 0x0) recvmsg(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001000), 0x100}], 0x1}, 0x40) close(r0) nanosleep(&(0x7f0000001200)={0x3}, 0x0) 4m36.868592839s ago: executing program 4 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140), 0x0) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x200}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) 4m36.739301193s ago: executing program 4 (id=41): r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e21, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000340)=0x1, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000340)=0x1, 0x4) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @rand_addr=0x7f000002}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000003}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @rand_addr=0x7f000003}], 0x10) 4m36.643791515s ago: executing program 4 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) write(0xffffffffffffffff, &(0x7f0000000340)='2\n', 0x2) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) 4m21.564840296s ago: executing program 32 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2049\n', 0x9) close(r1) write(0xffffffffffffffff, &(0x7f0000000340)='2\n', 0x2) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f000000000000000011000000000102030405060708090a0b0c0d0e0f\n', 0x85) 3m22.117631606s ago: executing program 3 (id=345): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read(r3, &(0x7f0000000000), 0x4) write(r4, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', 0x10) read(r3, &(0x7f0000000140), 0x10) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) 3m19.887166807s ago: executing program 3 (id=352): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$uid(0x3, 0x0) 3m16.598835434s ago: executing program 3 (id=360): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 3m14.408164021s ago: executing program 3 (id=364): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 3m12.828322403s ago: executing program 3 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') socket$inet6_udp(0xa, 0x2, 0x0) fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/cgroup\x00') 3m10.261914589s ago: executing program 3 (id=372): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$uid(0x3, 0x0) 2m54.491844331s ago: executing program 33 (id=372): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$uid(0x3, 0x0) 2m20.425900224s ago: executing program 5 (id=473): mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 2m20.181568647s ago: executing program 5 (id=475): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) close(r0) 2m19.777689829s ago: executing program 5 (id=477): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r4 = creat(0x0, 0x0) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x40, 0x8000, 0x3, 0x1, 0x10}) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2800) 2m16.98099487s ago: executing program 5 (id=481): syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000240000000040847c547f0000017f0000014e214e20123456780000000006000400"], 0x0) 2m14.39909132s ago: executing program 5 (id=483): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000140)=0xa, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r3, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001e00)=""/54, 0x36}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x81}], 0x4, 0x12002, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m8.520052344s ago: executing program 5 (id=493): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv6/conf/syz_tun/accept_dad\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/net/ipv6/conf/syz_tun/dad_transmits\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/ipv6/conf/all/dad_transmits\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1', 0x1) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) ioctl$sock_ifreq(r4, 0x8914, &(0x7f00000004c0)={'syz_tun\x00', @ifru_ivalue=0x1}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000500)={@local, 0x40, r5}) syz_emit_ethernet(0x0, 0x0, 0x0) nanosleep(&(0x7f00000005c0)={0x1}, 0x0) 1m52.408385927s ago: executing program 34 (id=493): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv6/conf/syz_tun/accept_dad\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/net/ipv6/conf/syz_tun/dad_transmits\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/ipv6/conf/all/dad_transmits\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1', 0x1) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) ioctl$sock_ifreq(r4, 0x8914, &(0x7f00000004c0)={'syz_tun\x00', @ifru_ivalue=0x1}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000500)={@local, 0x40, r5}) syz_emit_ethernet(0x0, 0x0, 0x0) nanosleep(&(0x7f00000005c0)={0x1}, 0x0) 7.94736781s ago: executing program 1 (id=684): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x30}}, 0x0) 7.926225167s ago: executing program 0 (id=686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20600) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 6.764306685s ago: executing program 1 (id=687): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.286990302s ago: executing program 2 (id=688): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) 4.100075511s ago: executing program 0 (id=689): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB], 0x6f4}}, 0x0) 3.94878661s ago: executing program 1 (id=690): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0x80000300, 0x0, 0x0) 3.611008463s ago: executing program 2 (id=691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) 3.137496813s ago: executing program 0 (id=692): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='none\x00', &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f00000001c0)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv4/conf/all/accept_local\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1\n', 0x2) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000240000000040847c547f0000017f0000014e214e20123456780000000006000400"], 0x0) 1.912952821s ago: executing program 1 (id=693): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@getqdisc={0x24, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 1.870322333s ago: executing program 2 (id=694): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) close(r0) 1.559170756s ago: executing program 0 (id=695): pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) 1.55550848s ago: executing program 1 (id=696): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='1\x00', 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000), 0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x1]}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x1, 0x4, 'test'}, 0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x1, 0x4, 'test'}, 0xc) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) 1.414807258s ago: executing program 2 (id=697): r0 = socket$rxrpc(0x21, 0x2, 0x2) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x10, 0x110, 0xe}], 0x10}, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='hello', 0x5}], 0x1, &(0x7f0000000700)=[{0x18, 0x110, 0x1, 'd\x00\x00\x00\x00\x00\x00\x00'}], 0x18}, 0x0) nanosleep(&(0x7f0000000900)={0x0, 0x2faf080}, 0x0) sendmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[{0x18, 0x110, 0x1, 'd\x00\x00\x00\x00\x00\x00\x00'}, {0x14, 0x110, 0x2, "01000000"}], 0x2c}, 0x0) recvmsg(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001000), 0x100}], 0x1}, 0x40) close(r0) nanosleep(&(0x7f0000001200)={0x3}, 0x0) 983.577734ms ago: executing program 1 (id=698): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000200)={0x2, 0x800, @empty}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='3\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='8\n\x00', 0x2) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r4, &(0x7f0000000200)={0x2, 0x800, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) close(r3) 781.063175ms ago: executing program 0 (id=699): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) 555.142712ms ago: executing program 0 (id=700): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effff"], 0x6f4}}, 0x0) 67.054619ms ago: executing program 2 (id=701): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) bind(0xffffffffffffffff, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(0xffffffffffffffff, 0x5) connect(r2, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000700), 0x4) 0s ago: executing program 2 (id=702): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='proc\x00', &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv6/conf/syz_tun/accept_dad\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/ipv6/conf/all/accept_dad\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='0', 0x1) write(0xffffffffffffffff, &(0x7f00000003c0)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/ipv6/conf/all/dad_transmits\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='1', 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) ioctl$sock_ifreq(r5, 0x8914, &(0x7f00000004c0)={'syz_tun\x00', @ifru_ivalue=0x1}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000500)={@local, 0x40, r6}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. [ 86.921094][ T9] cfg80211: failed to load regulatory.db [ 88.648410][ T5580] cgroup: Unknown subsys name 'net' [ 88.889459][ T5580] cgroup: Unknown subsys name 'cpuset' [ 88.964591][ T5580] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.895899][ T5580] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.478743][ T5607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.490860][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.494752][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.496173][ T5607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.497024][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.498008][ T5607] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.508550][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.516199][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.520537][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.524201][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.531406][ T5607] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.532144][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.532751][ T5607] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.535699][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.541205][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.593742][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.608384][ T5607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.619776][ T5607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.620909][ T5607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.623176][ T5607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.624430][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.626308][ T5607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.629271][ T5607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.633293][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.649755][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.626285][ T5612] Bluetooth: hci1: command tx timeout [ 95.626423][ T5612] Bluetooth: hci2: command tx timeout [ 95.694094][ T5615] Bluetooth: hci4: command tx timeout [ 95.694526][ T5615] Bluetooth: hci3: command tx timeout [ 95.773795][ T5612] Bluetooth: hci0: command tx timeout [ 96.330280][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.331489][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.331815][ T5597] bridge_slave_0: entered allmulticast mode [ 96.333502][ T5597] bridge_slave_0: entered promiscuous mode [ 96.342168][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.342291][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.342469][ T5595] bridge_slave_0: entered allmulticast mode [ 96.346564][ T5595] bridge_slave_0: entered promiscuous mode [ 96.410610][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.410749][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.410881][ T5597] bridge_slave_1: entered allmulticast mode [ 96.412548][ T5597] bridge_slave_1: entered promiscuous mode [ 96.414311][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.414433][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.414947][ T5595] bridge_slave_1: entered allmulticast mode [ 96.417641][ T5595] bridge_slave_1: entered promiscuous mode [ 96.521663][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.521767][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.521878][ T5596] bridge_slave_0: entered allmulticast mode [ 96.523477][ T5596] bridge_slave_0: entered promiscuous mode [ 96.557441][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.557579][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.557763][ T5599] bridge_slave_0: entered allmulticast mode [ 96.559388][ T5599] bridge_slave_0: entered promiscuous mode [ 96.610284][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.610443][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.610607][ T5596] bridge_slave_1: entered allmulticast mode [ 96.612158][ T5596] bridge_slave_1: entered promiscuous mode [ 96.613102][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.613201][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.613297][ T5599] bridge_slave_1: entered allmulticast mode [ 96.616877][ T5599] bridge_slave_1: entered promiscuous mode [ 96.644640][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.650331][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.726150][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.728387][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.877231][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.877367][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.877473][ T5600] bridge_slave_0: entered allmulticast mode [ 96.879123][ T5600] bridge_slave_0: entered promiscuous mode [ 96.888358][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.896718][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.936208][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.936375][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.936551][ T5600] bridge_slave_1: entered allmulticast mode [ 96.939412][ T5600] bridge_slave_1: entered promiscuous mode [ 96.942490][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.946607][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.950405][ T5597] team0: Port device team_slave_0 added [ 96.956904][ T5595] team0: Port device team_slave_0 added [ 97.016257][ T5597] team0: Port device team_slave_1 added [ 97.018303][ T5595] team0: Port device team_slave_1 added [ 97.091090][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.097123][ T5596] team0: Port device team_slave_0 added [ 97.101033][ T5599] team0: Port device team_slave_0 added [ 97.135034][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.138942][ T5596] team0: Port device team_slave_1 added [ 97.142848][ T5599] team0: Port device team_slave_1 added [ 97.145641][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.145657][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.145681][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.152860][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.152874][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.152897][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.222492][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.222510][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.222534][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.229235][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.229250][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.229274][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.336595][ T5600] team0: Port device team_slave_0 added [ 97.337702][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.337718][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.337743][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.340520][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.340534][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.340556][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.361823][ T5600] team0: Port device team_slave_1 added [ 97.362679][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.362699][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.362750][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.368301][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.368330][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.368354][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.552941][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.552959][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.552987][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.570244][ T5597] hsr_slave_0: entered promiscuous mode [ 97.571867][ T5597] hsr_slave_1: entered promiscuous mode [ 97.587300][ T5595] hsr_slave_0: entered promiscuous mode [ 97.588760][ T5595] hsr_slave_1: entered promiscuous mode [ 97.590244][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 97.590355][ T5595] Cannot create hsr debugfs directory [ 97.638401][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.638420][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.638445][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.693823][ T5612] Bluetooth: hci2: command tx timeout [ 97.693859][ T5612] Bluetooth: hci1: command tx timeout [ 97.700102][ T5596] hsr_slave_0: entered promiscuous mode [ 97.700913][ T5596] hsr_slave_1: entered promiscuous mode [ 97.701729][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 97.701749][ T5596] Cannot create hsr debugfs directory [ 97.715140][ T5599] hsr_slave_0: entered promiscuous mode [ 97.716533][ T5599] hsr_slave_1: entered promiscuous mode [ 97.717548][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 97.717571][ T5599] Cannot create hsr debugfs directory [ 97.774125][ T5615] Bluetooth: hci3: command tx timeout [ 97.774160][ T5615] Bluetooth: hci4: command tx timeout [ 97.853811][ T5612] Bluetooth: hci0: command tx timeout [ 98.378068][ T5600] hsr_slave_0: entered promiscuous mode [ 98.378972][ T5600] hsr_slave_1: entered promiscuous mode [ 98.379785][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 98.379802][ T5600] Cannot create hsr debugfs directory [ 99.040600][ T5597] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.077091][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.082693][ T5597] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.109573][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.115124][ T5597] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.138930][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.168577][ T5597] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.187123][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.330091][ T5596] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.362965][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.372243][ T5596] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.397064][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.405666][ T5596] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.441516][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.467298][ T5596] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.503045][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.610603][ T5599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.650649][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.663089][ T5599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.687226][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.693201][ T5599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.757910][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.775415][ T5612] Bluetooth: hci1: command tx timeout [ 99.775451][ T5612] Bluetooth: hci2: command tx timeout [ 99.781219][ T5599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.807698][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.867711][ T5615] Bluetooth: hci4: command tx timeout [ 99.867748][ T5615] Bluetooth: hci3: command tx timeout [ 99.934957][ T5612] Bluetooth: hci0: command tx timeout [ 99.980287][ T5600] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.009631][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.016772][ T5600] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.058729][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.093285][ T5600] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.127041][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.148762][ T5600] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.189021][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.269278][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.306067][ T5595] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.347192][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.362688][ T5595] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.387066][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.392969][ T5595] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.437181][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.442800][ T5595] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.477121][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.545681][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.592182][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.592921][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.631054][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.657387][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.657514][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.759292][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.807492][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.821331][ T2604] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.821534][ T2604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.878954][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.879088][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.948895][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.002524][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.047671][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.047902][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.113004][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.113186][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.228807][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.329537][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.336198][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.336351][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.391182][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.391683][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.483460][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.561162][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.562947][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.685059][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.685323][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.855344][ T5612] Bluetooth: hci2: command tx timeout [ 101.855363][ T5615] Bluetooth: hci1: command tx timeout [ 101.934109][ T5615] Bluetooth: hci3: command tx timeout [ 101.934148][ T5615] Bluetooth: hci4: command tx timeout [ 102.014284][ T5612] Bluetooth: hci0: command tx timeout [ 102.182412][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.639590][ T5597] veth0_vlan: entered promiscuous mode [ 102.759843][ T5597] veth1_vlan: entered promiscuous mode [ 103.011294][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.210710][ T5597] veth0_macvtap: entered promiscuous mode [ 103.252903][ T5597] veth1_macvtap: entered promiscuous mode [ 103.277175][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.483849][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.569122][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.619371][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.681724][ T159] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.698659][ T159] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.707748][ T159] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.726926][ T159] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.833047][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.849291][ T5599] veth0_vlan: entered promiscuous mode [ 104.069669][ T5599] veth1_vlan: entered promiscuous mode [ 104.261371][ T5600] veth0_vlan: entered promiscuous mode [ 104.287448][ T5596] veth0_vlan: entered promiscuous mode [ 104.302447][ T2604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.302469][ T2604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.359115][ T5600] veth1_vlan: entered promiscuous mode [ 104.379010][ T5596] veth1_vlan: entered promiscuous mode [ 104.380363][ T5595] veth0_vlan: entered promiscuous mode [ 104.440149][ T5599] veth0_macvtap: entered promiscuous mode [ 104.459845][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.459869][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.486055][ T5595] veth1_vlan: entered promiscuous mode [ 104.489662][ T5599] veth1_macvtap: entered promiscuous mode [ 104.616592][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.619975][ T5600] veth0_macvtap: entered promiscuous mode [ 104.638635][ T5596] veth0_macvtap: entered promiscuous mode [ 104.675747][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.701837][ T5600] veth1_macvtap: entered promiscuous mode [ 104.715723][ T5596] veth1_macvtap: entered promiscuous mode [ 104.734572][ T5595] veth0_macvtap: entered promiscuous mode [ 104.765898][ T66] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.792410][ T66] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.801929][ T66] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.802632][ T5595] veth1_macvtap: entered promiscuous mode [ 104.821304][ T66] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.860140][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.928593][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.971887][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.094389][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.112155][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.235210][ T66] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.252677][ T2604] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.266731][ T2604] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.337651][ T2604] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.341453][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.361218][ T2604] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.422649][ T744] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.456224][ T5788] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 105.456270][ T5788] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 105.456289][ T5788] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 105.493557][ T744] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.627817][ T744] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.630902][ T5789] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 105.677689][ T744] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.680675][ T744] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.707052][ T744] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.765738][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.765754][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.769978][ T744] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.585992][ T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.586033][ T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.836565][ T744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.836588][ T744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.058901][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.058925][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.318940][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.318961][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.731704][ T3325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.731727][ T3325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.866088][ T744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.866108][ T744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.201687][ T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.201710][ T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.239789][ T5797] NFSD: Failed to start, no listeners configured. [ 112.121380][ T5813] NFSD: Failed to start, no listeners configured. [ 113.633967][ T5814] NFSD: Unable to initialize client recovery tracking! (-110) [ 113.633990][ T5814] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 113.634002][ T5814] NFSD: starting 90-second grace period (net f0000426) [ 115.591451][ T5847] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 115.591721][ T5847] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 115.591797][ T5847] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 116.099560][ T5834] NFSD: Unable to initialize client recovery tracking! (-110) [ 116.099629][ T5834] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 116.099643][ T5834] NFSD: starting 90-second grace period (net f00003bf) [ 117.730637][ T5848] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 118.017966][ T5858] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.258712][ T5862] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 118.258755][ T5862] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 118.258775][ T5862] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 119.043236][ T5863] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 121.674905][ T5872] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 121.675171][ T5872] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 121.675254][ T5872] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 122.603465][ T5873] syz.3.20 (5873) used greatest stack depth: 18592 bytes left [ 122.972288][ T5838] NFSD: Failed to start, no listeners configured. [ 124.603887][ T5876] NFSD: Unable to initialize client recovery tracking! (-110) [ 124.603903][ T5876] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 124.603909][ T5876] NFSD: starting 90-second grace period (net f00005af) [ 128.228326][ T5882] NFSD: Failed to start, no listeners configured. [ 129.392586][ T5899] NFSD: Failed to start, no listeners configured. [ 131.083822][ T5903] NFSD: Unable to initialize client recovery tracking! (-110) [ 131.083839][ T5903] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 131.083846][ T5903] NFSD: starting 90-second grace period (net f00003bf) [ 132.997784][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.997846][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.433850][ T5920] NFSD: Unable to initialize client recovery tracking! (-110) [ 142.433874][ T5920] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 142.433886][ T5920] NFSD: starting 90-second grace period (net f00003c0) [ 143.119390][ T5959] bridge0: port 3(syz_tun) entered blocking state [ 143.120750][ T5959] bridge0: port 3(syz_tun) entered disabled state [ 143.120980][ T5959] syz_tun: entered allmulticast mode [ 143.135287][ T5959] syz_tun: entered promiscuous mode [ 143.150604][ T5959] bridge0: port 3(syz_tun) entered blocking state [ 143.150761][ T5959] bridge0: port 3(syz_tun) entered forwarding state [ 143.194300][ T5959] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 143.399559][ T5965] bridge0: port 3(syz_tun) entered blocking state [ 143.399793][ T5965] bridge0: port 3(syz_tun) entered disabled state [ 143.400020][ T5965] syz_tun: entered allmulticast mode [ 143.403380][ T5965] syz_tun: entered promiscuous mode [ 143.411704][ T5965] bridge0: port 3(syz_tun) entered blocking state [ 143.411842][ T5965] bridge0: port 3(syz_tun) entered forwarding state [ 143.479413][ T5965] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 143.771068][ T5972] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 143.779121][ T5972] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 143.893363][ T5974] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 143.899193][ T5974] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 144.108025][ T5978] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 144.111888][ T5978] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 144.228136][ T5980] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 144.229796][ T5980] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 150.309468][ T5615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.311741][ T5615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.322773][ T5615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.329432][ T5615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.333424][ T5615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.979644][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.979783][ T5998] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.979893][ T5998] bridge_slave_0: entered allmulticast mode [ 150.981537][ T5998] bridge_slave_0: entered promiscuous mode [ 150.983551][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.983851][ T5998] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.984033][ T5998] bridge_slave_1: entered allmulticast mode [ 150.986766][ T5998] bridge_slave_1: entered promiscuous mode [ 151.059423][ T5998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.062269][ T5998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.100369][ T5998] team0: Port device team_slave_0 added [ 151.102838][ T5998] team0: Port device team_slave_1 added [ 151.137431][ T5998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.137444][ T5998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.137460][ T5998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.141757][ T5998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.141774][ T5998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.141800][ T5998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.234533][ T5998] hsr_slave_0: entered promiscuous mode [ 151.235513][ T5998] hsr_slave_1: entered promiscuous mode [ 151.236101][ T5998] debugfs: 'hsr0' already exists in 'hsr' [ 151.236117][ T5998] Cannot create hsr debugfs directory [ 151.470030][ T5998] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 151.487266][ T5998] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 151.488827][ T5998] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 151.542449][ T5998] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 151.554388][ T5998] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 151.580161][ T5998] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 151.581891][ T5998] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 151.610622][ T5998] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 151.677287][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.677515][ T5998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.677889][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.678094][ T5998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.809635][ T5998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.857003][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.895921][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.065652][ T5998] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.092773][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.092930][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.120675][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.120792][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.425684][ T5615] Bluetooth: hci5: command tx timeout [ 153.345381][ T6042] net_ratelimit: 2 callbacks suppressed [ 153.345402][ T6042] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 153.347988][ T6042] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 153.605494][ T6047] bridge0: port 3(syz_tun) entered blocking state [ 153.605670][ T6047] bridge0: port 3(syz_tun) entered disabled state [ 153.605900][ T6047] syz_tun: entered allmulticast mode [ 153.609051][ T6047] syz_tun: entered promiscuous mode [ 153.609892][ T6047] bridge0: port 3(syz_tun) entered blocking state [ 153.610059][ T6047] bridge0: port 3(syz_tun) entered forwarding state [ 153.896505][ T6047] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 153.956055][ T6054] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 154.121306][ T6060] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 154.152232][ T6060] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 154.493783][ T5615] Bluetooth: hci5: command tx timeout [ 154.530665][ T6069] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 154.530711][ T6069] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 154.530732][ T6069] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 155.059237][ T5998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.716734][ T6090] Zero length message leads to an empty skb [ 156.573747][ T5615] Bluetooth: hci5: command tx timeout [ 156.573892][ T6107] bridge0: port 3(syz_tun) entered blocking state [ 156.574056][ T6107] bridge0: port 3(syz_tun) entered disabled state [ 156.574271][ T6107] syz_tun: entered allmulticast mode [ 156.673914][ T6107] syz_tun: entered promiscuous mode [ 156.684608][ T6107] bridge0: port 3(syz_tun) entered blocking state [ 156.684798][ T6107] bridge0: port 3(syz_tun) entered forwarding state [ 156.795101][ T6106] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 156.849317][ T6107] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 156.853205][ T6111] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 156.885514][ T6111] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 157.564638][ T1283] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.954987][ T5998] veth0_vlan: entered promiscuous mode [ 158.334153][ T1283] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.371306][ T6145] net_ratelimit: 6 callbacks suppressed [ 158.371329][ T6145] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 158.381751][ T6145] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 158.474270][ T5998] veth1_vlan: entered promiscuous mode [ 158.640914][ T6137] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 158.654890][ T5615] Bluetooth: hci5: command tx timeout [ 158.732836][ T6153] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 158.753466][ T6153] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 158.919055][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'. [ 159.202561][ T1283] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.449932][ T5998] veth0_macvtap: entered promiscuous mode [ 159.546843][ T5998] veth1_macvtap: entered promiscuous mode [ 159.647263][ T6173] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 159.662592][ T6169] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 160.155987][ T1283] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.556465][ T5998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.730565][ T6187] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 160.776413][ T5998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.800116][ T6187] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 160.800145][ T6187] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 160.926558][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.930640][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.932486][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.932714][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.646349][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 163.649895][ T6225] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 163.652229][ T6225] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 163.691499][ T5849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.691520][ T5849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.932981][ T6223] bridge0: port 3(syz_tun) entered disabled state [ 164.024146][ T6223] syz_tun (unregistering): left allmulticast mode [ 164.024182][ T6223] syz_tun (unregistering): left promiscuous mode [ 164.028427][ T6223] bridge0: port 3(syz_tun) entered disabled state [ 164.532148][ T6241] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 164.547767][ T6241] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 164.548198][ T1283] bridge_slave_1: left allmulticast mode [ 164.548326][ T1283] bridge_slave_1: left promiscuous mode [ 164.548908][ T1283] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.651693][ T1283] bridge_slave_0: left allmulticast mode [ 164.651720][ T1283] bridge_slave_0: left promiscuous mode [ 164.652041][ T1283] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.323164][ T6247] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 165.791842][ T6255] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 167.067597][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'. [ 167.367772][ T1283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.454710][ T1283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.480362][ T1283] bond0 (unregistering): Released all slaves [ 167.684907][ T6262] bridge0: port 3(syz_tun) entered disabled state [ 167.879687][ T6262] syz_tun (unregistering): left allmulticast mode [ 167.879724][ T6262] syz_tun (unregistering): left promiscuous mode [ 167.879825][ T6262] bridge0: port 3(syz_tun) entered disabled state [ 168.197820][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.197844][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.727050][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.145'. [ 169.929652][ T6306] bridge0: port 3(syz_tun) entered disabled state [ 170.169128][ T6306] syz_tun (unregistering): left allmulticast mode [ 170.169167][ T6306] syz_tun (unregistering): left promiscuous mode [ 170.169294][ T6306] bridge0: port 3(syz_tun) entered disabled state [ 171.160027][ T6328] bridge0: port 3(syz_tun) entered blocking state [ 171.160176][ T6328] bridge0: port 3(syz_tun) entered disabled state [ 171.160428][ T6328] syz_tun: entered allmulticast mode [ 171.184125][ T6328] syz_tun: entered promiscuous mode [ 171.184990][ T6328] bridge0: port 3(syz_tun) entered blocking state [ 171.185156][ T6328] bridge0: port 3(syz_tun) entered forwarding state [ 171.213130][ T6333] tipc: Started in network mode [ 171.213153][ T6333] tipc: Node identity 1000001, cluster identity 4369 [ 171.213167][ T6333] tipc: Node number set to 16777217 [ 171.260111][ T5256] 8021q: adding VLAN 0 to HW filter on device eth1 [ 171.761074][ T6355] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.158'. [ 171.966015][ T1283] hsr_slave_0: left promiscuous mode [ 172.009824][ T1283] hsr_slave_1: left promiscuous mode [ 172.042665][ T1283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.095044][ T1283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.128446][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 172.147752][ T1283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.147781][ T1283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.349411][ T1283] veth1_macvtap: left promiscuous mode [ 172.350382][ T1283] veth0_macvtap: left promiscuous mode [ 172.356168][ T1283] veth1_vlan: left promiscuous mode [ 172.356624][ T1283] veth0_vlan: left promiscuous mode [ 173.245420][ T1283] team0 (unregistering): Port device team_slave_1 removed [ 173.304320][ T1283] team0 (unregistering): Port device team_slave_0 removed [ 173.692766][ T6371] bridge0: port 3(syz_tun) entered disabled state [ 173.818830][ T6371] syz_tun (unregistering): left allmulticast mode [ 173.818869][ T6371] syz_tun (unregistering): left promiscuous mode [ 173.818996][ T6371] bridge0: port 3(syz_tun) entered disabled state [ 174.091963][ T5256] 8021q: adding VLAN 0 to HW filter on device eth2 [ 175.899316][ T6414] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 176.447547][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.179'. [ 176.516724][ T6432] bridge0: port 3(syz_tun) entered disabled state [ 177.000927][ T6432] syz_tun (unregistering): left allmulticast mode [ 177.000963][ T6432] syz_tun (unregistering): left promiscuous mode [ 177.001197][ T6432] bridge0: port 3(syz_tun) entered disabled state [ 178.776800][ T5256] 8021q: adding VLAN 0 to HW filter on device eth3 [ 178.862217][ T6479] tipc: New replicast peer: 127.0.0.1 [ 178.898181][ T6479] tipc: Enabled bearer , priority 10 [ 179.816911][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 181.723520][ T6530] syz.5.208 (6530) used greatest stack depth: 17408 bytes left [ 182.055405][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 182.191019][ T5256] 8021q: adding VLAN 0 to HW filter on device eth4 [ 186.900309][ T6684] tipc: Started in network mode [ 186.900330][ T6684] tipc: Node identity 1000001, cluster identity 4369 [ 186.900342][ T6684] tipc: Node number set to 16777217 [ 186.908390][ T6684] tipc: New replicast peer: 127.0.0.1 [ 186.930605][ T6684] tipc: Enabled bearer , priority 10 [ 186.932203][ T6685] tipc: Started in network mode [ 186.932230][ T6685] tipc: Node identity 7f000001, cluster identity 4711 [ 186.932554][ T6685] tipc: New replicast peer: 127.0.0.1 [ 186.964630][ T6685] tipc: Enabled bearer , priority 10 [ 188.060239][ T100] tipc: Node number set to 2130706433 [ 188.675939][ T6742] process 'syz.1.275' launched './file0' with NULL argv: empty string added [ 191.009146][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 192.198380][ T100] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 192.233837][ T5728] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 193.386711][ T5728] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.391716][ T100] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.391745][ T100] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 193.391879][ T5728] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 193.391906][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 193.391925][ T5728] usb 3-1: Product: syz [ 193.391950][ T5728] usb 3-1: Manufacturer: syz [ 193.398466][ T100] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 193.398494][ T100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 193.398513][ T100] usb 2-1: Product: syz [ 193.398526][ T100] usb 2-1: Manufacturer: syz [ 194.727004][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.727085][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.042896][ T100] usb 2-1: can't set config #1, error -71 [ 195.199864][ T5728] usb 3-1: selecting invalid altsetting 1 [ 195.199891][ T5728] speedtch 3-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 195.200069][ T5728] speedtch 3-1:1.0: usbatm_usb_probe: bind failed: -22! [ 195.200168][ T5728] speedtch 3-1:1.0: probe with driver speedtch failed with error -22 [ 195.289355][ T5728] usb 3-1: selecting invalid altsetting 1 [ 195.289389][ T5728] speedtch 3-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 195.292363][ T5728] speedtch 3-1:1.1: usbatm_usb_probe: bind failed: -22! [ 195.292446][ T5728] speedtch 3-1:1.1: probe with driver speedtch failed with error -22 [ 195.507685][ T100] usb 2-1: USB disconnect, device number 2 [ 195.519640][ T5728] usb 3-1: USB disconnect, device number 2 [ 195.608289][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.311'. [ 204.576156][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 208.583460][ T5583] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 211.696986][ T5583] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.697088][ T5583] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 211.697116][ T5583] usb 3-1: config 1 interface 1 has no altsetting 0 [ 211.709482][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 211.796192][ T5583] usb 3-1: string descriptor 0 read error: -71 [ 211.796308][ T5583] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 211.796332][ T5583] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 211.884370][ T5583] usb 3-1: can't set config #1, error -71 [ 211.969497][ T5583] usb 3-1: USB disconnect, device number 3 [ 216.433835][ T5616] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 216.611272][ T5616] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.620568][ T5616] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 216.620597][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 216.620615][ T5616] usb 1-1: Product: syz [ 216.620628][ T5616] usb 1-1: Manufacturer: syz [ 217.247030][ T5614] Bluetooth: hci4: command 0x0406 tx timeout [ 217.247176][ T5614] Bluetooth: hci1: command 0x0406 tx timeout [ 217.247204][ T5614] Bluetooth: hci2: command 0x0406 tx timeout [ 217.247363][ T5608] Bluetooth: hci3: command 0x0406 tx timeout [ 217.790690][ T5616] usb 1-1: selecting invalid altsetting 1 [ 217.790718][ T5616] speedtch 1-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 217.790803][ T5616] speedtch 1-1:1.0: usbatm_usb_probe: bind failed: -22! [ 217.790870][ T5616] speedtch 1-1:1.0: probe with driver speedtch failed with error -22 [ 218.557503][ T5616] usb 1-1: selecting invalid altsetting 1 [ 218.557530][ T5616] speedtch 1-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 218.583398][ T5616] speedtch 1-1:1.1: usbatm_usb_probe: bind failed: -22! [ 218.583506][ T5616] speedtch 1-1:1.1: probe with driver speedtch failed with error -22 [ 218.642761][ T5616] usb 1-1: USB disconnect, device number 2 [ 218.867862][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.366'. [ 221.553769][ T100] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 221.719711][ T100] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.719791][ T100] usb 3-1: config 1 interface 1 has no altsetting 0 [ 221.723255][ T100] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 221.723284][ T100] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 221.723304][ T100] usb 3-1: Product: syz [ 221.723319][ T100] usb 3-1: Manufacturer: syz [ 224.170419][ T100] usb 3-1: can't set config #1, error -71 [ 224.579339][ T100] usb 3-1: USB disconnect, device number 4 [ 232.127880][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'. [ 240.476766][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.521582][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.537743][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.548022][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.551246][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.653873][ T5612] Bluetooth: hci0: command tx timeout [ 244.733871][ T5612] Bluetooth: hci0: command tx timeout [ 247.279596][ T5612] Bluetooth: hci0: command tx timeout [ 249.471422][ T5612] Bluetooth: hci0: command tx timeout [ 250.508868][ T7297] syzkaller0: entered promiscuous mode [ 250.508898][ T7297] syzkaller0: entered allmulticast mode [ 252.448439][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.5.422'. [ 252.681814][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'. [ 254.152599][ T68] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.589890][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.589972][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.705068][ T68] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.380564][ T68] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.816302][ T68] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.250570][ T7230] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.250710][ T7230] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.250865][ T7230] bridge_slave_0: entered allmulticast mode [ 270.831034][ T7230] bridge_slave_0: entered promiscuous mode [ 271.058162][ T7230] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.058334][ T7230] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.058592][ T7230] bridge_slave_1: entered allmulticast mode [ 271.061592][ T7230] bridge_slave_1: entered promiscuous mode [ 271.763382][ T7230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.788887][ T7230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.933614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 272.983609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 274.773618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 274.793596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 274.803598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 274.813604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 274.823608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 274.833614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 274.843627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 274.853605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 275.220600][ T5612] Bluetooth: hci5: command 0x0406 tx timeout [ 278.474192][ T7230] team0: Port device team_slave_0 added [ 278.496792][ T7230] team0: Port device team_slave_1 added [ 281.236000][ T7230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.236020][ T7230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.236048][ T7230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.478143][ T7230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.478162][ T7230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.478190][ T7230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.346693][ T68] bridge_slave_1: left allmulticast mode [ 283.346732][ T68] bridge_slave_1: left promiscuous mode [ 283.347019][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.842402][ T68] bridge_slave_0: left allmulticast mode [ 284.842440][ T68] bridge_slave_0: left promiscuous mode [ 284.842728][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.184642][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.364614][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.537398][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.540536][ T68] bond0 (unregistering): Released all slaves [ 299.564157][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.568885][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.579643][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.582112][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.821482][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 301.886140][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 301.891272][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 301.893525][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 301.897524][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 302.842280][ T4909] Bluetooth: hci3: command tx timeout [ 304.914803][ T4909] Bluetooth: hci3: command tx timeout [ 304.973910][ T4909] Bluetooth: hci6: command tx timeout [ 306.979610][ T4909] Bluetooth: hci3: command tx timeout [ 307.074996][ T4909] Bluetooth: hci6: command tx timeout [ 309.071090][ T4909] Bluetooth: hci3: command tx timeout [ 309.133917][ T4909] Bluetooth: hci6: command tx timeout [ 311.213714][ T4909] Bluetooth: hci6: command tx timeout [ 312.471863][ T5256] 8021q: adding VLAN 0 to HW filter on device eth5 [ 317.354624][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.354704][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.393454][ T68] hsr_slave_0: left promiscuous mode [ 325.442379][ T68] hsr_slave_1: left promiscuous mode [ 325.444010][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.444037][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.554080][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.554111][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.038997][ T68] veth1_macvtap: left promiscuous mode [ 327.039130][ T68] veth0_macvtap: left promiscuous mode [ 327.040982][ T68] veth1_vlan: left promiscuous mode [ 327.041197][ T68] veth0_vlan: left promiscuous mode [ 335.088151][ T68] team0 (unregistering): Port device team_slave_1 removed [ 335.165469][ T68] team0 (unregistering): Port device team_slave_0 removed [ 336.760695][ T5256] 8021q: adding VLAN 0 to HW filter on device eth6 [ 344.731792][ T7678] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.732161][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.732384][ T7678] bridge_slave_0: entered allmulticast mode [ 344.759721][ T7678] bridge_slave_0: entered promiscuous mode [ 344.800348][ T7678] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.800541][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.800745][ T7678] bridge_slave_1: entered allmulticast mode [ 344.826670][ T7678] bridge_slave_1: entered promiscuous mode [ 344.888400][ T7692] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.888593][ T7692] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.888805][ T7692] bridge_slave_0: entered allmulticast mode [ 344.892373][ T7692] bridge_slave_0: entered promiscuous mode [ 344.977277][ T7692] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.977451][ T7692] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.011171][ T7692] bridge_slave_1: entered allmulticast mode [ 345.024362][ T7692] bridge_slave_1: entered promiscuous mode [ 345.050752][ T7678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.151640][ T7980] netlink: 132 bytes leftover after parsing attributes in process `syz.0.568'. [ 345.854344][ T7678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.530477][ T7692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.717959][ T7692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.742625][ T5256] 8021q: adding VLAN 0 to HW filter on device eth7 [ 346.795306][ T7678] team0: Port device team_slave_0 added [ 346.944583][ T7678] team0: Port device team_slave_1 added [ 347.440908][ T7692] team0: Port device team_slave_0 added [ 348.146352][ T7692] team0: Port device team_slave_1 added [ 349.947501][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.947519][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.947545][ T7678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.110452][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.110479][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.110507][ T7678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.374363][ T7692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.374382][ T7692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.374411][ T7692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.431517][ T7692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.431536][ T7692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.431563][ T7692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.206154][ T7678] hsr_slave_0: entered promiscuous mode [ 352.216031][ T7678] hsr_slave_1: entered promiscuous mode [ 352.263165][ T7678] debugfs: 'hsr0' already exists in 'hsr' [ 352.263196][ T7678] Cannot create hsr debugfs directory [ 352.896869][ T7692] hsr_slave_0: entered promiscuous mode [ 354.339041][ T7692] hsr_slave_1: entered promiscuous mode [ 354.340199][ T7692] debugfs: 'hsr0' already exists in 'hsr' [ 354.340226][ T7692] Cannot create hsr debugfs directory [ 359.150695][ T68] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.300422][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 359.332904][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 359.337325][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 359.338673][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 359.339560][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 359.638357][ T5256] 8021q: adding VLAN 0 to HW filter on device eth8 [ 361.547646][ T4909] Bluetooth: hci0: command tx timeout [ 361.894331][ T68] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.354185][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.392869][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.394414][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.442597][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.450104][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.615065][ T59] Bluetooth: hci0: command tx timeout [ 365.699194][ T59] Bluetooth: hci0: command tx timeout [ 365.817936][ T59] Bluetooth: hci5: command tx timeout [ 365.923335][ T68] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.877417][ T59] Bluetooth: hci0: command tx timeout [ 368.211026][ T59] Bluetooth: hci5: command tx timeout [ 369.892919][ T68] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.835161][ T59] Bluetooth: hci5: command tx timeout [ 370.843326][ T8210] dvmrp0: entered allmulticast mode [ 372.893652][ T59] Bluetooth: hci5: command tx timeout [ 380.975701][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.975847][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.740924][ T68] bridge_slave_1: left allmulticast mode [ 381.740961][ T68] bridge_slave_1: left promiscuous mode [ 381.741264][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.398599][ T68] bridge_slave_0: left allmulticast mode [ 382.398636][ T68] bridge_slave_0: left promiscuous mode [ 382.398917][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.357256][ T68] bridge_slave_1: left allmulticast mode [ 384.357295][ T68] bridge_slave_1: left promiscuous mode [ 384.357577][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.716709][ T68] bridge_slave_0: left allmulticast mode [ 384.716737][ T68] bridge_slave_0: left promiscuous mode [ 384.716934][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.126052][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.204412][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.265419][ T68] bond0 (unregistering): Released all slaves [ 386.814337][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.894405][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.918475][ T68] bond0 (unregistering): Released all slaves [ 389.637593][ T8365] netlink: 132 bytes leftover after parsing attributes in process `syz.0.641'. [ 390.382780][ T8370] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.642'. [ 390.519486][ T8371] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.644'. [ 391.944253][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 391.946534][ T8115] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.946672][ T8115] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.946914][ T8115] bridge_slave_0: entered allmulticast mode [ 391.951474][ T8115] bridge_slave_0: entered promiscuous mode [ 392.118483][ T8115] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.118619][ T8115] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.118882][ T8115] bridge_slave_1: entered allmulticast mode [ 392.137343][ T8115] bridge_slave_1: entered promiscuous mode [ 393.872001][ T8115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.917839][ T8142] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.917982][ T8142] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.918235][ T8142] bridge_slave_0: entered allmulticast mode [ 393.934751][ T8142] bridge_slave_0: entered promiscuous mode [ 393.956848][ T8115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.957232][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.958982][ T8449] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.654'. [ 394.014953][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.071435][ T8453] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.656'. [ 394.245231][ T68] hsr_slave_0: left promiscuous mode [ 394.295339][ T68] hsr_slave_1: left promiscuous mode [ 394.296721][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.296747][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.351548][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.351578][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.567809][ T68] veth1_macvtap: left promiscuous mode [ 394.567890][ T68] veth0_macvtap: left promiscuous mode [ 394.568041][ T68] veth1_vlan: left promiscuous mode [ 394.568192][ T68] veth0_vlan: left promiscuous mode [ 394.924577][ T68] team0 (unregistering): Port device team_slave_1 removed [ 394.974501][ T68] team0 (unregistering): Port device team_slave_0 removed [ 395.614593][ T68] team0 (unregistering): Port device team_slave_1 removed [ 395.674236][ T68] team0 (unregistering): Port device team_slave_0 removed [ 395.914697][ T8142] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.914840][ T8142] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.915036][ T8142] bridge_slave_1: entered allmulticast mode [ 395.916771][ T8142] bridge_slave_1: entered promiscuous mode [ 396.326007][ T8115] team0: Port device team_slave_0 added [ 396.394750][ T8142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.397512][ T8115] team0: Port device team_slave_1 added [ 396.402010][ T8142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.930758][ T8142] team0: Port device team_slave_0 added [ 396.935770][ T8115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.935786][ T8115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.935810][ T8115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.600043][ T8142] team0: Port device team_slave_1 added [ 398.306014][ T8115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.306033][ T8115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.306062][ T8115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.627702][ T8142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.627720][ T8142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.627757][ T8142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.676895][ T8142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.676912][ T8142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.676937][ T8142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.798725][ T8509] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.667'. [ 399.175180][ T8115] hsr_slave_0: entered promiscuous mode [ 399.176810][ T8115] hsr_slave_1: entered promiscuous mode [ 399.177821][ T8115] debugfs: 'hsr0' already exists in 'hsr' [ 399.177845][ T8115] Cannot create hsr debugfs directory [ 399.958133][ T8142] hsr_slave_0: entered promiscuous mode [ 399.960851][ T8142] hsr_slave_1: entered promiscuous mode [ 399.979064][ T8142] debugfs: 'hsr0' already exists in 'hsr' [ 399.979095][ T8142] Cannot create hsr debugfs directory [ 400.667199][ T8534] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.674'. [ 401.677119][ T8557] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.678'. [ 402.296050][ T8565] netlink: 132 bytes leftover after parsing attributes in process `syz.0.679'. [ 408.124112][ T8600] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.689'. [ 408.589991][ T8142] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 409.870046][ T8142] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 409.871260][ T8142] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 409.940976][ T8142] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.118279][ T68] bridge_slave_1: left allmulticast mode [ 410.118318][ T68] bridge_slave_1: left promiscuous mode [ 410.118604][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.329006][ T68] bridge_slave_0: left allmulticast mode [ 410.329053][ T68] bridge_slave_0: left promiscuous mode [ 410.329343][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.204636][ T68] bridge_slave_1: left allmulticast mode [ 411.204673][ T68] bridge_slave_1: left promiscuous mode [ 411.204955][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.376118][ T68] bridge_slave_0: left allmulticast mode [ 411.376155][ T68] bridge_slave_0: left promiscuous mode [ 411.376599][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.896197][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.037190][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.134153][ T68] bond0 (unregistering): Released all slaves [ 412.417750][ T8643] NFSD: Unable to initialize client recovery tracking! (-110) [ 412.417775][ T8643] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 412.417788][ T8643] NFSD: starting 90-second grace period (net f00003bf) [ 412.535945][ T8659] =========[ 412.535945][ T8659] ================================================================== [ 412.536030][ T8659] BUG: KASAN: slab-out-of-bounds in nfsd+0x118/0xbc0 [ 412.536204][ T8659] Read of size 8 at addr ffff88802ba84f50 by task nfsd/8659 [ 412.536221][ T8659] [ 412.536234][ T8659] CPU: 1 UID: 0 PID: 8659 Comm: nfsd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 412.536258][ T8659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 412.536272][ T8659] Call Trace: [ 412.536280][ T8659] [ 412.536289][ T8659] dump_stack_lvl+0xe8/0x150 [ 412.536382][ T8659] print_address_description+0x55/0x1e0 [ 412.536423][ T8659] ? nfsd+0x118/0xbc0 [ 412.536465][ T8659] print_report+0x58/0x70 [ 412.536494][ T8659] kasan_report+0x117/0x150 [ 412.536574][ T8659] ? nfsd+0x118/0xbc0 [ 412.536602][ T8659] nfsd+0x118/0xbc0 [ 412.536631][ T8659] ? __pfx_nfsd+0x10/0x10 [ 412.536653][ T8659] ? __kthread_parkme+0x71/0x1f0 [ 412.536745][ T8659] ? __kthread_parkme+0x196/0x1f0 [ 412.536774][ T8659] kthread+0x388/0x470 [ 412.536805][ T8659] ? __pfx_nfsd+0x10/0x10 [ 412.536826][ T8659] ? __pfx_kthread+0x10/0x10 [ 412.536856][ T8659] ret_from_fork+0x514/0xb70 [ 412.536932][ T8659] ? __pfx_ret_from_fork+0x10/0x10 [ 412.536956][ T8659] ? __switch_to+0xc89/0x1420 [ 412.537014][ T8659] ? __pfx_kthread+0x10/0x10 [ 412.537038][ T8659] ret_from_fork_asm+0x1a/0x30 [ 412.537080][ T8659] [ 412.537086][ T8659] [ 412.537091][ T8659] Allocated by task 8641: [ 412.537099][ T8659] kasan_save_track+0x3e/0x80 [ 412.537116][ T8659] __kasan_kmalloc+0x93/0xb0 [ 412.537131][ T8659] __kmalloc_cache_noprof+0x3d2/0x6b0 [ 412.537174][ T8659] __svc_create+0x63/0x9e0 [ 412.537273][ T8659] svc_create_pooled+0x5ad/0x770 [ 412.537288][ T8659] nfsd_create_serv+0x55f/0x840 [ 412.537305][ T8659] write_ports+0x6a2/0xd20 [ 412.537326][ T8659] nfsctl_transaction_write+0x112/0x160 [ 412.537353][ T8659] vfs_write+0x29f/0xbb0 [ 412.537426][ T8659] ksys_write+0x156/0x270 [ 412.537444][ T8659] do_syscall_64+0x174/0x580 [ 412.537540][ T8659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.537577][ T8659] [ 412.537582][ T8659] The buggy address belongs to the object at ffff88802ba84c00 [ 412.537582][ T8659] which belongs to the cache kmalloc-512 of size 512 [ 412.537596][ T8659] The buggy address is located 376 bytes to the right of [ 412.537596][ T8659] allocated 472-byte region [ffff88802ba84c00, ffff88802ba84dd8) [ 412.537614][ T8659] [ 412.537619][ T8659] The buggy address belongs to the physical page: [ 412.537628][ T8659] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802ba87400 pfn:0x2ba84 [ 412.537646][ T8659] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 412.537660][ T8659] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 412.537674][ T8659] page_type: f5(slab) [ 412.537690][ T8659] raw: 0080000000000240 ffff88813ffb1c80 ffffea0001841610 ffffea0000b39a10 [ 412.537705][ T8659] raw: ffff88802ba87400 000000080010000f 00000000f5000000 0000000000000000 [ 412.537720][ T8659] head: 0080000000000240 ffff88813ffb1c80 ffffea0001841610 ffffea0000b39a10 [ 412.537735][ T8659] head: ffff88802ba87400 000000080010000f 00000000f5000000 0000000000000000 [ 412.537752][ T8659] head: 0080000000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 412.537765][ T8659] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004 [ 412.537773][ T8659] page dumped because: kasan: bad access detected [ 412.537781][ T8659] page_owner tracks the page as allocated [ 412.537787][ T8659] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 744, tgid 744 (kworker/u8:7), ts 159616203074, free_ts 101842806731 [ 412.537817][ T8659] post_alloc_hook+0x1f9/0x250 [ 412.537859][ T8659] get_page_from_freelist+0x262a/0x26a0 [ 412.537896][ T8659] __alloc_frozen_pages_noprof+0x18d/0x380 [ 412.537914][ T8659] allocate_slab+0x79/0x5e0 [ 412.537952][ T8659] refill_objects+0x2d8/0x350 [ 412.537973][ T8659] __pcs_replace_empty_main+0x330/0x690 [ 412.537993][ T8659] __kmalloc_cache_noprof+0x468/0x6b0 [ 412.538010][ T8659] batadv_forw_packet_alloc+0x178/0x370 [ 412.538077][ T8659] batadv_iv_ogm_queue_add+0x8a9/0xd80 [ 412.538115][ T8659] batadv_iv_ogm_schedule+0x84e/0xfa0 [ 412.538130][ T8659] batadv_iv_send_outstanding_bat_ogm_packet+0x67a/0x790 [ 412.538147][ T8659] process_scheduled_works+0xa8e/0x14e0 [ 412.538165][ T8659] worker_thread+0xa47/0xfb0 [ 412.538191][ T8659] kthread+0x388/0x470 [ 412.538212][ T8659] ret_from_fork+0x514/0xb70 [ 412.538234][ T8659] ret_from_fork_asm+0x1a/0x30 [ 412.538249][ T8659] page last free pid 5742 tgid 5742 stack trace: [ 412.538258][ T8659] __free_frozen_pages+0x10e7/0x11c0 [ 412.538273][ T8659] __slab_free+0x252/0x2a0 [ 412.538288][ T8659] qlist_free_all+0x99/0x100 [ 412.538321][ T8659] kasan_quarantine_reduce+0x148/0x160 [ 412.538335][ T8659] __kasan_slab_alloc+0x22/0x80 [ 412.538351][ T8659] __kvmalloc_node_noprof+0x54f/0x8a0 [ 412.538368][ T8659] seq_read_iter+0x1eb/0xcb0 [ 412.538427][ T8659] vfs_read+0x59e/0xa90 [ 412.538444][ T8659] ksys_read+0x156/0x270 [ 412.538462][ T8659] do_syscall_64+0x174/0x580 [ 412.538481][ T8659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.538496][ T8659] [ 412.538499][ T8659] Memory state around the buggy address: [ 412.538509][ T8659] ffff88802ba84e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 412.538521][ T8659] ffff88802ba84e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 412.538533][ T8659] >ffff88802ba84f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 412.538542][ T8659] ^ [ 412.538551][ T8659] ffff88802ba84f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 412.538561][ T8659] ffff88802ba85000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 412.538569][ T8659] ================================================================== [ 412.546089][ T8659] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 412.546111][ T8659] CPU: 1 UID: 0 PID: 8659 Comm: nfsd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 412.546133][ T8659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 412.546144][ T8659] Call Trace: [ 412.546152][ T8659] [ 412.546159][ T8659] vpanic+0x56c/0xa60 [ 412.546190][ T8659] ? rcu_is_watching+0x15/0xb0 [ 412.546309][ T8659] ? __pfx_vpanic+0x10/0x10 [ 412.546331][ T8659] panic+0xc5/0xd0 [ 412.546348][ T8659] ? __pfx_panic+0x10/0x10 [ 412.546366][ T8659] ? preempt_schedule_thunk+0x16/0x40 [ 412.546390][ T8659] ? nfsd+0x118/0xbc0 [ 412.546410][ T8659] ? preempt_schedule_thunk+0x16/0x40 [ 412.546432][ T8659] ? nfsd+0x118/0xbc0 [ 412.546451][ T8659] check_panic_on_warn+0x89/0xb0 [ 412.546499][ T8659] ? nfsd+0x118/0xbc0 [ 412.546518][ T8659] end_report+0x73/0x170 [ 412.546540][ T8659] ? nfsd+0x118/0xbc0 [ 412.546559][ T8659] kasan_report+0x128/0x150 [ 412.546581][ T8659] ? nfsd+0x118/0xbc0 [ 412.546605][ T8659] nfsd+0x118/0xbc0 [ 412.546631][ T8659] ? __pfx_nfsd+0x10/0x10 [ 412.546655][ T8659] ? __kthread_parkme+0x71/0x1f0 [ 412.546680][ T8659] ? __kthread_parkme+0x196/0x1f0 [ 412.546706][ T8659] kthread+0x388/0x470 [ 412.546732][ T8659] ? __pfx_nfsd+0x10/0x10 [ 412.546751][ T8659] ? __pfx_kthread+0x10/0x10 [ 412.546777][ T8659] ret_from_fork+0x514/0xb70 [ 412.546806][ T8659] ? __pfx_ret_from_fork+0x10/0x10 [ 412.546833][ T8659] ? __switch_to+0xc89/0x1420 [ 412.546857][ T8659] ? __pfx_kthread+0x10/0x10 [ 412.546883][ T8659] ret_from_fork_asm+0x1a/0x30 [ 412.546909][ T8659] [ 412.547065][ T8659] Kernel Offset: disabled