last executing test programs: 58.20250991s ago: executing program 3 (id=51): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x70bd2d, 0x20000, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xffffffff}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 58.062486513s ago: executing program 3 (id=52): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x0, 0x6, 0x588}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) 57.622970744s ago: executing program 3 (id=59): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000800)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000840)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000880)=[{&(0x7f00000008c0)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f8343fe0d53db903cbe1e2197e3d", 0x3a}], 0x1) 57.3809647s ago: executing program 3 (id=63): memfd_secret(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setaffinity(r2, 0x0, 0x0) mkdir(&(0x7f0000019e80)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000019ec0)='./config\x00', &(0x7f0000019f00)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000019f40)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000019f80)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000019fc0)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/sub_compatible_id\x00', 0x0, 0x0) capset(&(0x7f000001a080)={0x20080522}, &(0x7f000001a0c0)={0x200002, 0x200003, 0x803, 0xffffff7b, 0x55ea}) write(r0, &(0x7f0000000180)="72f6746573742f6576656e7431202e2f66696c65303a30", 0x17) 56.881842682s ago: executing program 3 (id=65): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 56.512189421s ago: executing program 1 (id=70): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000740), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x14, r1, 0xf01, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008004) 56.439831213s ago: executing program 1 (id=71): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000400)={0x1e, 0x2, 0x7, 0xa, 0x0, 0x0, 0x20, 0x0, 0xff, 0x0, 0x3, 0xec, 0x53, 0x31}, 0xe) shutdown(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) 56.334693436s ago: executing program 1 (id=73): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7f, 0x200004d, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x200, 0x4f, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x1, 0x3, 0x9}) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x8, 0x404d, 0x2ba9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000980)={0x5, 0x2, 0x10007}) r4 = syz_open_dev$dri(&(0x7f0000000340), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000380)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000003c0)={0x5, 0x52a1, 0x1e}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 56.314357476s ago: executing program 1 (id=74): memfd_secret(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setaffinity(r2, 0x0, 0x0) mkdir(&(0x7f0000019e80)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000019ec0)='./config\x00', &(0x7f0000019f00)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000019f40)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000019f80)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000019fc0)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/sub_compatible_id\x00', 0x0, 0x0) capset(&(0x7f000001a080)={0x20080522}, &(0x7f000001a0c0)={0x200002, 0x200003, 0x803, 0xffffff7b, 0x55ea}) write(r0, &(0x7f0000000180)="72f6746573742f6576656e7431202e2f66696c65303a30", 0x17) 56.058587193s ago: executing program 3 (id=78): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = eventfd2(0xe5c, 0x80000) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000240)={r2, 0x7, 0x2, r1}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 55.545283955s ago: executing program 32 (id=78): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = eventfd2(0xe5c, 0x80000) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000240)={r2, 0x7, 0x2, r1}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 55.512906266s ago: executing program 1 (id=83): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000400)={0x1e, 0x2, 0x7, 0xa, 0x0, 0x0, 0x20, 0x0, 0xff, 0x0, 0x3, 0xec, 0x53, 0x31}, 0xe) shutdown(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) 54.344203925s ago: executing program 1 (id=88): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001d80)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001780)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) socket(0x10, 0x803, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) 54.096465041s ago: executing program 33 (id=88): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001d80)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001780)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) socket(0x10, 0x803, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) 50.650346215s ago: executing program 0 (id=107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x101, 0x9, 0x0, 0x10, 0x6, 0x1, 0x10, 0x1ff}}}}]}, 0x58}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x10000002, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x4}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x6, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x10004, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x80008, 0x7f}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0xe5bc}, {0x6, 0xb, 0x6c5f1878, 0x57c4, 0x6, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x1009}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x1, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x78d, 0xfff, 0xffffff13, 0x6, 0x7f, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x101}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0x0, 0x4, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0xe5f3, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0xfffffffc, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0x75}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0x8, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0xffff8000, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0xfffffffd, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x7f, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x18, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x54}, {0x3, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x2000007, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x4, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff0, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x8, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x8007, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5f0, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x5, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff001, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x205, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0xfed, 0x6, 0x4, 0xd, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x7ff, 0x9, 0xb}, {0x47, 0x6, 0x81, 0xdcb, 0x3, 0x2}, {0x5, 0x80000000, 0xb, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x6, 0xfff, 0x6, 0x800}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x5, 0x6, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x6, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0xa, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000001500)={&(0x7f0000001540)=@xdp={0x2c, 0x8, r8, 0x109}, 0x80, &(0x7f00000015c0)}, 0x20000885) 50.246990575s ago: executing program 0 (id=109): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000440)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000004c0)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x1000, 0x3, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000640)={0x0, 0x18, 0x30}}}]}) 50.184266867s ago: executing program 0 (id=110): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 50.05775808s ago: executing program 0 (id=111): memfd_secret(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setaffinity(r2, 0x0, 0x0) mkdir(&(0x7f0000019e80)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000019ec0)='./config\x00', &(0x7f0000019f00)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000019f40)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000019f80)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000019fc0)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/sub_compatible_id\x00', 0x0, 0x0) capset(&(0x7f000001a080)={0x20080522}, &(0x7f000001a0c0)={0x200002, 0x200003, 0x803, 0xffffff7b, 0x55ea}) write(r0, &(0x7f0000000180)="72f6746573742f6576656e7431202e2f66696c65303a30", 0x17) 49.262793889s ago: executing program 0 (id=113): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000400)={0x1e, 0x2, 0x7, 0xa, 0x0, 0x0, 0x20, 0x0, 0xff, 0x0, 0x3, 0xec, 0x53, 0x31}, 0xe) shutdown(0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 49.031502255s ago: executing program 2 (id=114): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) 48.82271604s ago: executing program 2 (id=115): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x2}}, @TCA_CT_ACTION={0x6, 0x3, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) write$tun(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="000008004500002012340000401154970a0000010a0000023039d431000c"], 0x24) 48.299940883s ago: executing program 0 (id=116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x101, 0x9, 0x0, 0x10, 0x6, 0x1, 0x10, 0x1ff}}}}]}, 0x58}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x10000002, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x4}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x6, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x10004, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x80008, 0x7f}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0xe5bc}, {0x6, 0xb, 0x6c5f1878, 0x57c4, 0x6, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x1009}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x1, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x78d, 0xfff, 0xffffff13, 0x6, 0x7f, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x101}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0x0, 0x4, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0xe5f3, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0xfffffffc, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0x75}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0x8, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0xffff8000, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0xfffffffd, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x7f, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x18, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x54}, {0x3, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x2000007, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x4, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff0, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x8, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x8007, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5f0, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x5, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff001, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x205, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0xfed, 0x6, 0x4, 0xd, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x7ff, 0x9, 0xb}, {0x47, 0x6, 0x81, 0xdcb, 0x3, 0x2}, {0x5, 0x80000000, 0xb, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x6, 0xfff, 0x6, 0x800}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x5, 0x6, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x6, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0xa, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000001500)={&(0x7f0000001540)=@xdp={0x2c, 0x8, r8, 0x109}, 0x80, &(0x7f00000015c0)}, 0x20000885) 47.862611544s ago: executing program 34 (id=116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x101, 0x9, 0x0, 0x10, 0x6, 0x1, 0x10, 0x1ff}}}}]}, 0x58}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x10000002, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x4}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x6, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x10004, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x80008, 0x7f}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0xe5bc}, {0x6, 0xb, 0x6c5f1878, 0x57c4, 0x6, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x1009}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x1, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x78d, 0xfff, 0xffffff13, 0x6, 0x7f, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x101}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0x0, 0x4, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0xe5f3, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0xfffffffc, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0x75}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0x8, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0xffff8000, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0xfffffffd, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x7f, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x18, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x54}, {0x3, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x2000007, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x4, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff0, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x8, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x8007, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5f0, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x5, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff001, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x205, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0xfed, 0x6, 0x4, 0xd, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x7ff, 0x9, 0xb}, {0x47, 0x6, 0x81, 0xdcb, 0x3, 0x2}, {0x5, 0x80000000, 0xb, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x6, 0xfff, 0x6, 0x800}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x5, 0x6, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x6, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0xa, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000001500)={&(0x7f0000001540)=@xdp={0x2c, 0x8, r8, 0x109}, 0x80, &(0x7f00000015c0)}, 0x20000885) 47.848932684s ago: executing program 2 (id=118): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 47.655013499s ago: executing program 2 (id=119): memfd_secret(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setaffinity(r2, 0x0, 0x0) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000019ec0)='./config\x00', &(0x7f0000019f00)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000019f40)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000019f80)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000019fc0)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/sub_compatible_id\x00', 0x0, 0x0) capset(&(0x7f000001a080)={0x20080522}, &(0x7f000001a0c0)={0x200002, 0x200003, 0x803, 0xffffff7b, 0x55ea}) write(r0, &(0x7f0000000180)="72f6746573742f6576656e7431202e2f66696c65303a30", 0x17) 47.005919035s ago: executing program 2 (id=120): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x88, 0x2c, 0x601, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}}, 0x0) write(r1, 0x0, 0x0) 45.866574183s ago: executing program 2 (id=121): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/net/ipv4/conf/default/rp_filter\x00', 0x1, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ff) mount(&(0x7f0000000440), &(0x7f0000000480)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x2, 0x0) 45.461888233s ago: executing program 35 (id=121): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/net/ipv4/conf/default/rp_filter\x00', 0x1, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ff) mount(&(0x7f0000000440), &(0x7f0000000480)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x2, 0x0) 40.181393803s ago: executing program 4 (id=80): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x28, 0x41, 0x1, 0x70bd26, 0x4, {0x3}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0x8}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 40.023880267s ago: executing program 4 (id=123): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0xfffffffd, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}}, 0x0) 39.91016783s ago: executing program 4 (id=124): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}}, 0x0) 39.853278921s ago: executing program 4 (id=125): memfd_secret(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setaffinity(r2, 0x0, 0x0) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000019ec0)='./config\x00', &(0x7f0000019f00)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000019f40)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000019f80)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000019fc0)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/sub_compatible_id\x00', 0x0, 0x0) capset(&(0x7f000001a080)={0x20080522}, &(0x7f000001a0c0)={0x200002, 0x200003, 0x803, 0xffffff7b, 0x55ea}) write(r0, &(0x7f0000000180)="72f6746573742f6576656e7431202e2f66696c65303a30", 0x17) 39.365017013s ago: executing program 4 (id=126): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x88, 0x2c, 0x601, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}}, 0x0) write(r1, &(0x7f0000000440), 0x0) 38.146789093s ago: executing program 4 (id=127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000001080)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x10, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x731, 0x5, 0xfffffff8, 0x2}, 0x42}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000f00), 0x56) sendmsg$kcm(r6, &(0x7f0000000f40)={&(0x7f0000000f80)=@xdp={0x2c, 0x0, r5, 0x2042}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="27030200dc0f14000e0007000024c1020000fc24451551e792289fc77e4dca6e341e3207c2fb7fe0406e52534b4f", 0x2e}], 0x1}, 0x4005) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 37.45666432s ago: executing program 36 (id=127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000001080)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x10, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x731, 0x5, 0xfffffff8, 0x2}, 0x42}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000f00), 0x56) sendmsg$kcm(r6, &(0x7f0000000f40)={&(0x7f0000000f80)=@xdp={0x2c, 0x0, r5, 0x2042}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="27030200dc0f14000e0007000024c1020000fc24451551e792289fc77e4dca6e341e3207c2fb7fe0406e52534b4f", 0x2e}], 0x1}, 0x4005) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 37.44847329s ago: executing program 5 (id=89): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[], 0x30}, 0x1, 0x1000000}, 0x0) 37.300825914s ago: executing program 5 (id=129): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 37.195675656s ago: executing program 5 (id=130): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000080)) 37.074853559s ago: executing program 5 (id=131): memfd_secret(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setaffinity(r2, 0x0, 0x0) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000019ec0)='./config\x00', &(0x7f0000019f00)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000019f40)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000019f80)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000019fc0)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/sub_compatible_id\x00', 0x0, 0x0) capset(&(0x7f000001a080)={0x20080522}, &(0x7f000001a0c0)={0x200002, 0x200003, 0x803, 0xffffff7b, 0x55ea}) write(r0, &(0x7f0000000180)="72f6746573742f6576656e7431202e2f66696c65303a30", 0x17) 36.576158132s ago: executing program 5 (id=132): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000ac0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000b00)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000b40)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000c00)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000002e00)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002e40)={0x54, 0x0, &(0x7f0000002e80)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002f00)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000002f80)={0x0, 0x28, 0x40}}, 0x1000}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002fc0)={0x4c, 0x0, &(0x7f0000003000)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x48, 0x18, &(0x7f0000003080)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000003100)={0x0, 0x18, 0x30}}}]}) prlimit64(0x0, 0x7, &(0x7f0000003140), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000003180)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f00000031c0)}) 33.961061576s ago: executing program 5 (id=133): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) 33.440499338s ago: executing program 37 (id=133): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) 4.355261894s ago: executing program 8 (id=385): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000cc0)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f00)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002280)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002340)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x0, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x90}}, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x0, 0x6, 0x588}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) 3.848250916s ago: executing program 8 (id=391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32000000"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 3.730045259s ago: executing program 8 (id=392): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/4085, 0xff5, 0x0, 0x0}, &(0x7f0000001940)=0x40) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001a00)="85", 0x1}], 0x1}}], 0x1, 0x20000000) 3.462661925s ago: executing program 8 (id=395): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109", @ANYRES8=r0, @ANYBLOB="7ba9"], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x1) write$P9_RVERSION(r1, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x1, 0x8, '9P2000.u'}, 0x15) close_range(r0, 0xffffffffffffffff, 0x0) 3.247240911s ago: executing program 7 (id=398): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_j1939(r1, &(0x7f0000000300)={0x1d, 0x0, 0x0, {0x2, 0xf0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000340)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000380)=[{{0x0, 0xfffffffffffffd0f, &(0x7f00000003c0)=[{&(0x7f0000000400)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000440)=[{0x1, 0x3, {0x0, 0x62da12a15307ded4}, {0x1, 0x1}, 0x1, 0x2}, {0x1, 0x3, {0x0, 0xf0, 0x4}, {0x0, 0x1, 0x2}, 0xfd, 0xff}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, {0xffff, 0xe}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) 3.035005866s ago: executing program 7 (id=401): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 2.8668106s ago: executing program 7 (id=402): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cifs\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000240)='cifs\x00', 0x0, &(0x7f0000000280)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,,ers=3.0,nodfs\x00') r2 = accept(r0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000300)='\x00\x00', 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x40810}, 0x0) 1.899855604s ago: executing program 7 (id=416): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x4, @multicast, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x40084) connect$pppoe(r3, &(0x7f00000002c0)={0x18, 0x0, {0x0, @broadcast, 'erspan0\x00'}}, 0x1e) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911039000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) 1.66467419s ago: executing program 6 (id=419): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_j1939(r1, &(0x7f0000000300)={0x1d, 0x0, 0x0, {0x2, 0xf0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000340)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000380)=[{{0x0, 0xfffffffffffffd0f, &(0x7f00000003c0)=[{&(0x7f0000000400)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000440)=[{0x1, 0x3, {0x0, 0x62da12a15307ded4}, {0x1, 0x1}, 0x1, 0x2}, {0x1, 0x3, {0x0, 0xf0, 0x4}, {0x0, 0x1, 0x2}, 0xfd, 0xff}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, {0xffff, 0xe}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) 1.616517111s ago: executing program 9 (id=420): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000ac0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000b40)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000b80)={0x8, 0x0, &(0x7f0000000bc0)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000c00)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000002e00)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002e40)={0x54, 0x0, &(0x7f0000002e80)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002f00)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000002f80)={0x0, 0x28, 0x40}}, 0x1000}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002fc0)={0x4c, 0x0, &(0x7f0000003000)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x48, 0x18, &(0x7f0000003080)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000003100)={0x0, 0x18, 0x30}}}]}) prlimit64(0x0, 0x7, &(0x7f0000003140), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000003180)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f00000031c0)}) 1.527069063s ago: executing program 6 (id=421): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1], 0x28}}, 0x0) 1.433316225s ago: executing program 6 (id=422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48890) 1.348054787s ago: executing program 6 (id=423): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f00000006c0)=""/76, 0x4c}, {&(0x7f0000005740)=""/4092, 0xffc}], 0x3}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f00000027c0)=[{0x0}], 0x1}, 0x101}], 0x7, 0x0, 0x0) 914.192218ms ago: executing program 7 (id=424): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cifs\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000240)='cifs\x00', 0x0, &(0x7f0000000280)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,,ers=3.0,nodfs\x00') r2 = accept(r0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000300)='\x00\x00', 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x40810}, 0x0) 697.932563ms ago: executing program 9 (id=425): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000200)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000000240)="800037bbfa9ba1ce", 0x8, 0x48840, &(0x7f0000000280)={0xa, 0x1, 0x0, @loopback}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x40010162, 0x0) 618.916805ms ago: executing program 9 (id=426): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000040000000004000008"], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) socket(0x10, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x7, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="720ac4ff000000007110a90000000000720ac0ff0100000095"], &(0x7f0000000580)='GPL\x00'}, 0x94) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r0], 0x38}}, 0x10) 470.717799ms ago: executing program 9 (id=427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @random="0100003600"}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000001080)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x10, 0xd}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000f00), 0x56) sendmsg$kcm(r5, &(0x7f0000000f40)={&(0x7f0000000f80)=@xdp={0x2c, 0x0, r4, 0x2042}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="27030200dc0f14000e0007000024c1020000fc24451551e792289fc77e4dca6e341e3207c2fb7fe0406e52534b4f", 0x2e}], 0x1}, 0x4005) 416.879711ms ago: executing program 6 (id=428): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40008c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 332.188152ms ago: executing program 8 (id=429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000160001002abd2000fbdbdf250a780400", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x10) 274.847954ms ago: executing program 9 (id=430): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1], 0x28}}, 0x0) 244.446245ms ago: executing program 6 (id=431): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x200000000000000, 0x0, 0x400c800}, 0x40) r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 199.048936ms ago: executing program 8 (id=432): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000a40)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x9, @b={0x40, 0x2, 0x2, 0x1, 0x47, 0x7, 0xe, {0x0, "1b5310e7260bd242e9c84cde16ac799372e38d801b58663c32ef36ba2a767f9f5e2030cd4432b5a8fff814544183fb683416193eac9adea4c5cd44c18940458f351a73d62b52036d6cd345fef5d2a8ed24ad1ff572ef4ed5173634025e8e746c37c1bb6f68c37133cc7112ad7e950f6d86dead5ecae67fd9f515f06ca4e33614b32e76925dd58b215f118b6edbbc6b061d131471fb73656c5d1fee7a2393016e25965145cac5f8449e30a966f9d45c43aab4762c1f96a612b78377c3a0198d926a4e9a44b25bd4afe70d2bc1285ccdc43dbea9ce2387d2c88ff839c8f8bae64467a3d3c70bea3d1b08d3c89e6ab9a006082cbe"}, 0xdb, 0x5, 0x1, 0x1, 0x0, "42826934b70bdaf86140bd03f275a6ea2f7983a2452d6f0c8b1a8104802f4de41b8c7fcad61b3b6b7d5d214534bf1d5efd474c9e4e48a8e931f92f53a70b75e13ebaf9cc95f29905b54443b4c2054226791741856af0bb9f2125d9a4f8f26140d163f408c37318db35eb735222324140b5e1d78b"}}, 0x16) read$nci(r0, 0x0, 0x0) 98.323238ms ago: executing program 9 (id=433): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000002c0)="560001002a00000000000000000101000100"/48, 0x30) 0s ago: executing program 7 (id=434): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001d80)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0x5}}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}}, 0x4c800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000580)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)='\r', 0x1}], 0x1}, 0x8004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. syzkaller login: [ 73.745544][ T5762] cgroup: Unknown subsys name 'net' [ 73.882372][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.245158][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.908427][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.925218][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.937841][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.949602][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.960704][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.968545][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.986446][ T5088] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.004227][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.013112][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.021022][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.021049][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.021263][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.030928][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.038542][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.043249][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.050549][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.072439][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.073217][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.080235][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.087774][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.094674][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.115403][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.124209][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.131780][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.175577][ T5774] (null): rxe_set_mtu: Set mtu to 1024 [ 77.203500][ T5774] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.213001][ T5777] (null): rxe_set_mtu: Set mtu to 1024 [ 77.221057][ T5774] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.227105][ T5777] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.235567][ T5778] (null): rxe_set_mtu: Set mtu to 1024 [ 77.247518][ T5783] (null): rxe_set_mtu: Set mtu to 1024 [ 77.253268][ T5783] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.261462][ T5774] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.268231][ T5778] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.468445][ T5774] infiniband rxe0: set active [ 77.474272][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.481017][ T5774] infiniband rxe0: added rxe_eth0 [ 77.597245][ T5774] RDS/IB: rxe0: added [ 77.601974][ T5774] smc: adding ib device rxe0 with port count 1 [ 77.609653][ T5774] smc: ib device rxe0 port 1 has pnetid [ 77.639620][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.673744][ T5774] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.742814][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 77.853576][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 77.889444][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 78.118442][ T5774] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.200307][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.224485][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.240912][ T5777] bridge_slave_0: entered allmulticast mode [ 78.253320][ T5777] bridge_slave_0: entered promiscuous mode [ 78.292489][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.306323][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.313558][ T5777] bridge_slave_1: entered allmulticast mode [ 78.321329][ T5777] bridge_slave_1: entered promiscuous mode [ 78.328949][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.336820][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.344184][ T5778] bridge_slave_0: entered allmulticast mode [ 78.351587][ T5778] bridge_slave_0: entered promiscuous mode [ 78.359727][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.377668][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.384853][ T5783] bridge_slave_0: entered allmulticast mode [ 78.397654][ T5783] bridge_slave_0: entered promiscuous mode [ 78.405044][ T5774] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.437748][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.445103][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.454070][ T5778] bridge_slave_1: entered allmulticast mode [ 78.461786][ T5778] bridge_slave_1: entered promiscuous mode [ 78.480563][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.496049][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.503283][ T5783] bridge_slave_1: entered allmulticast mode [ 78.511641][ T5783] bridge_slave_1: entered promiscuous mode [ 78.543570][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.570331][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.624028][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.644042][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.665765][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.691514][ T5777] team0: Port device team_slave_0 added [ 78.701173][ T5777] team0: Port device team_slave_1 added [ 78.711345][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.721132][ T5774] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.776399][ T5783] team0: Port device team_slave_0 added [ 78.787447][ T5783] team0: Port device team_slave_1 added [ 78.794586][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.802252][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.830043][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.881933][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.890036][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.916500][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.951193][ T5778] team0: Port device team_slave_0 added [ 78.957800][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.964778][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.991185][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.017055][ T5088] Bluetooth: hci0: command tx timeout [ 79.018402][ T5778] team0: Port device team_slave_1 added [ 79.029135][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.036577][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.062674][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.118378][ T5777] hsr_slave_0: entered promiscuous mode [ 79.125508][ T5777] hsr_slave_1: entered promiscuous mode [ 79.164170][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.171371][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.197554][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.197621][ T5088] Bluetooth: hci1: command tx timeout [ 79.208257][ T5782] Bluetooth: hci2: command tx timeout [ 79.208456][ T5782] Bluetooth: hci3: command tx timeout [ 79.269844][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.278668][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.305527][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.334771][ T5783] hsr_slave_0: entered promiscuous mode [ 79.342030][ T5783] hsr_slave_1: entered promiscuous mode [ 79.348655][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.356545][ T5783] Cannot create hsr debugfs directory [ 79.409958][ T5778] hsr_slave_0: entered promiscuous mode [ 79.416506][ T5778] hsr_slave_1: entered promiscuous mode [ 79.422957][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.431477][ T5778] Cannot create hsr debugfs directory [ 79.648539][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 79.847095][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.854399][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.861797][ T5774] bridge_slave_0: entered allmulticast mode [ 79.869271][ T5774] bridge_slave_0: entered promiscuous mode [ 79.878684][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.886076][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.893298][ T5774] bridge_slave_1: entered allmulticast mode [ 79.906145][ T5774] bridge_slave_1: entered promiscuous mode [ 79.918830][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.941810][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.951770][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.978642][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.000632][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.010358][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.084071][ T5774] team0: Port device team_slave_0 added [ 80.107361][ T5774] team0: Port device team_slave_1 added [ 80.152933][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.165012][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.193573][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.207995][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.214977][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.242021][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.260670][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.270859][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.280352][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.292128][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.389001][ T5774] hsr_slave_0: entered promiscuous mode [ 80.395705][ T5774] hsr_slave_1: entered promiscuous mode [ 80.402344][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.410882][ T5774] Cannot create hsr debugfs directory [ 80.422159][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.433688][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.444732][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.455348][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.678811][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.742456][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.763926][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.777360][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.795337][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.802856][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.815110][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.825332][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.865171][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.872492][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.894501][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.929544][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.942878][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.964979][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.972118][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.032115][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.039330][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.061614][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.097279][ T5782] Bluetooth: hci0: command tx timeout [ 81.110951][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.118156][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.150293][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.157572][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.256679][ T5782] Bluetooth: hci1: command tx timeout [ 81.262138][ T5782] Bluetooth: hci2: command tx timeout [ 81.268412][ T51] Bluetooth: hci3: command tx timeout [ 81.323682][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.421743][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.474116][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.481773][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.523811][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.531024][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.649636][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.682002][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.724100][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.823450][ T5778] veth0_vlan: entered promiscuous mode [ 81.902396][ T5777] veth0_vlan: entered promiscuous mode [ 81.923556][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.937998][ T5783] veth0_vlan: entered promiscuous mode [ 81.949634][ T5778] veth1_vlan: entered promiscuous mode [ 81.965734][ T5783] veth1_vlan: entered promiscuous mode [ 81.983308][ T5777] veth1_vlan: entered promiscuous mode [ 82.072937][ T5774] veth0_vlan: entered promiscuous mode [ 82.084091][ T5777] veth0_macvtap: entered promiscuous mode [ 82.100222][ T5783] veth0_macvtap: entered promiscuous mode [ 82.122545][ T5777] veth1_macvtap: entered promiscuous mode [ 82.132426][ T5774] veth1_vlan: entered promiscuous mode [ 82.148096][ T5783] veth1_macvtap: entered promiscuous mode [ 82.156203][ T5778] veth0_macvtap: entered promiscuous mode [ 82.176790][ T5778] veth1_macvtap: entered promiscuous mode [ 82.190670][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.230703][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.240407][ T5774] veth0_macvtap: entered promiscuous mode [ 82.255000][ T5774] veth1_macvtap: entered promiscuous mode [ 82.268813][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.278221][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.287914][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.298958][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.332683][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.347497][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.359619][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.383161][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.393986][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.405692][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.421252][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.432343][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.442766][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.453342][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.465113][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.473776][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.485143][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.495240][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.506652][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.516580][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.527355][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.541821][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.563724][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.576612][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.585700][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.596606][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.610059][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.621200][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.631519][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.642014][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.653233][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.666121][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.678478][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.692613][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.703280][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.713162][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.723639][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.735036][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.750272][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.763007][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.772279][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.781190][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.795023][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.804327][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.813777][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.823099][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.913691][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.935131][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.025232][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.049288][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.062775][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.074481][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.144208][ T3451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.172648][ T3451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.177017][ T5782] Bluetooth: hci0: command tx timeout [ 83.192175][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.214381][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.262074][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.294286][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.294871][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.333675][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.336943][ T51] Bluetooth: hci3: command tx timeout [ 83.346388][ T5088] Bluetooth: hci1: command tx timeout [ 83.352084][ T5782] Bluetooth: hci2: command tx timeout [ 83.430012][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.452801][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.399764][ T5866] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 84.406626][ T5866] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 84.416748][ T5866] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 84.424455][ T5866] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 84.431197][ T5866] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 84.439464][ T5866] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 84.447121][ T5866] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 84.453290][ T5866] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 84.465734][ T5866] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 84.474002][ T5866] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 84.480499][ T5866] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 84.490817][ T5866] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 84.915291][ T5903] Bluetooth: MGMT ver 1.22 [ 85.193546][ T5906] batman_adv: batadv0: Adding interface: syz_tun [ 85.197424][ T5911] Bluetooth: MGMT ver 1.22 [ 85.204745][ T5906] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.204822][ T5906] batman_adv: batadv0: Interface activated: syz_tun [ 85.388049][ T5915] Zero length message leads to an empty skb [ 85.640697][ T5931] batman_adv: batadv0: Adding interface: syz_tun [ 85.647307][ T5931] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.674815][ T5931] batman_adv: batadv0: Interface activated: syz_tun [ 85.736530][ T5782] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.953223][ T970] IPVS: starting estimator thread 0... [ 86.046365][ T5949] IPVS: using max 22 ests per chain, 52800 per kthread [ 86.147695][ T5960] syzkaller0: entered promiscuous mode [ 86.155093][ T5960] syzkaller0: entered allmulticast mode [ 86.456216][ T5782] Bluetooth: hci1: command 0x0c1a tx timeout [ 86.462337][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 86.536489][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 86.780520][ T5987] syzkaller0: entered promiscuous mode [ 86.786269][ T5987] syzkaller0: entered allmulticast mode [ 86.878650][ T173] cfg80211: failed to load regulatory.db [ 87.146857][ T5995] netlink: 'syz.1.50': attribute type 2 has an invalid length. [ 87.696038][ T6024] syz.3.59 uses obsolete (PF_INET,SOCK_PACKET) [ 87.815995][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.201693][ T6034] binder_alloc: 6033: binder_alloc_buf, no vma [ 88.274292][ T28] audit: type=1800 audit(1792186701.607:2): pid=6032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.63" name="sub_compatible_id" dev="configfs" ino=7056 res=0 errno=0 [ 88.536072][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.542204][ T5782] Bluetooth: hci1: command 0x0c1a tx timeout [ 88.616282][ T5782] Bluetooth: hci3: command 0x0c1a tx timeout [ 89.180934][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.232071][ T970] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.388521][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.534088][ T28] audit: type=1800 audit(1792186702.867:3): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.74" name="sub_compatible_id" dev="configfs" ino=7112 res=0 errno=0 [ 89.618337][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.767557][ T6074] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.781935][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.374913][ T6067] batman_adv: batadv0: Interface deactivated: syz_tun [ 90.471544][ T6067] batman_adv: batadv0: Removing interface: syz_tun [ 90.616259][ T5782] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.706685][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.718007][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.728974][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.737733][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.751814][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.763739][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.773110][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.826627][ T6098] syzkaller0: entered promiscuous mode [ 90.836140][ T6098] syzkaller0: entered allmulticast mode [ 91.218514][ T6099] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.807153][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.822424][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.837334][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.846002][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.858717][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.867492][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.185830][ T6121] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.249545][ T6135] syzkaller0: entered promiscuous mode [ 92.255221][ T6135] syzkaller0: entered allmulticast mode [ 92.461400][ T6099] chnl_net:caif_netlink_parms(): no params data found [ 92.800099][ T6157] netlink: 'syz.0.101': attribute type 1 has an invalid length. [ 92.810049][ T6157] netlink: 'syz.0.101': attribute type 2 has an invalid length. [ 92.886046][ T5782] Bluetooth: hci0: command tx timeout [ 92.960407][ T6099] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.968052][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.975296][ T6099] bridge_slave_0: entered allmulticast mode [ 93.022263][ T6099] bridge_slave_0: entered promiscuous mode [ 93.064739][ T59] hsr_slave_0: left promiscuous mode [ 93.073039][ T59] hsr_slave_1: left promiscuous mode [ 93.080006][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.087875][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.098506][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.106295][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.114331][ T59] bridge_slave_1: left allmulticast mode [ 93.126355][ T59] bridge_slave_1: left promiscuous mode [ 93.133435][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.147831][ T59] bridge_slave_0: left allmulticast mode [ 93.163078][ T59] bridge_slave_0: left promiscuous mode [ 93.174923][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.266770][ T59] veth1_macvtap: left promiscuous mode [ 93.277464][ T59] veth0_macvtap: left promiscuous mode [ 93.293446][ T59] veth1_vlan: left promiscuous mode [ 93.311379][ T59] veth0_vlan: left promiscuous mode [ 93.898230][ T5782] Bluetooth: hci1: command tx timeout [ 93.935523][ T59] team0 (unregistering): Port device team_slave_1 removed [ 93.972382][ T59] team0 (unregistering): Port device team_slave_0 removed [ 94.011217][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.049993][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.301640][ T59] bond0 (unregistering): Released all slaves [ 94.349179][ T6099] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.356770][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.363981][ T6099] bridge_slave_1: entered allmulticast mode [ 94.371006][ T6099] bridge_slave_1: entered promiscuous mode [ 94.511701][ T6099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.550973][ T6188] tipc: Failed to obtain node identity [ 94.556696][ T6188] tipc: Enabling of bearer rejected, failed to enable media [ 94.624744][ T6099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.753637][ T6196] syzkaller0: entered promiscuous mode [ 94.771125][ T6196] syzkaller0: entered allmulticast mode [ 94.810150][ T6099] team0: Port device team_slave_0 added [ 94.899196][ T6099] team0: Port device team_slave_1 added [ 94.937208][ T6121] chnl_net:caif_netlink_parms(): no params data found [ 94.946049][ T5782] Bluetooth: hci0: command tx timeout [ 95.027307][ T6099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.034998][ T6099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.095396][ T6099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.130612][ T6099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.141859][ T59] IPVS: stop unused estimator thread 0... [ 95.150470][ T6099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.215977][ T6099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.368097][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.400318][ T6099] hsr_slave_0: entered promiscuous mode [ 95.419052][ T6099] hsr_slave_1: entered promiscuous mode [ 95.428490][ T6099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.446954][ T6099] Cannot create hsr debugfs directory [ 95.607616][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.739679][ T6121] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.758120][ T6121] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.765396][ T6121] bridge_slave_0: entered allmulticast mode [ 95.777058][ T6121] bridge_slave_0: entered promiscuous mode [ 95.794684][ T6121] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.803402][ T6121] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.820361][ T6121] bridge_slave_1: entered allmulticast mode [ 95.833051][ T28] audit: type=1800 audit(1792186709.167:4): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.111" name="sub_compatible_id" dev="configfs" ino=9356 res=0 errno=0 [ 95.858062][ T6121] bridge_slave_1: entered promiscuous mode [ 95.919326][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.986077][ T5782] Bluetooth: hci1: command tx timeout [ 96.029113][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.154487][ T6121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.208421][ T6121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.372972][ T6121] team0: Port device team_slave_0 added [ 96.457848][ T6224] batman_adv: batadv0: Interface deactivated: syz_tun [ 96.535718][ T6224] batman_adv: batadv0: Removing interface: syz_tun [ 96.571954][ T6121] team0: Port device team_slave_1 added [ 96.803366][ T6121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.837442][ T6121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.897071][ T6121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.005209][ T6121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.016640][ T5782] Bluetooth: hci0: command tx timeout [ 97.028280][ T6121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.067806][ T6121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.206511][ T6121] hsr_slave_0: entered promiscuous mode [ 97.216734][ T6121] hsr_slave_1: entered promiscuous mode [ 97.234315][ T6121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.254247][ T6121] Cannot create hsr debugfs directory [ 97.607360][ T6099] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.672992][ T6099] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.799536][ T6099] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.835002][ T6099] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.992990][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.002578][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.011735][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.020007][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.027789][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 98.035924][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.056368][ T5782] Bluetooth: hci1: command tx timeout [ 98.335705][ T6260] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.465046][ T6121] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.556249][ T6121] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.589327][ T6121] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.620617][ T6121] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.074649][ T6099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.095172][ T6099] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.106717][ T51] Bluetooth: hci0: command tx timeout [ 99.130519][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.137705][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.158875][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.166423][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.404227][ T59] hsr_slave_0: left promiscuous mode [ 99.413600][ T59] hsr_slave_1: left promiscuous mode [ 99.427357][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.434820][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.463667][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.486092][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.506839][ T59] bridge_slave_1: left allmulticast mode [ 99.512546][ T59] bridge_slave_1: left promiscuous mode [ 99.546215][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.562433][ T59] bridge_slave_0: left allmulticast mode [ 99.582743][ T59] bridge_slave_0: left promiscuous mode [ 99.603844][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.672095][ T59] veth1_macvtap: left promiscuous mode [ 99.678119][ T59] veth0_macvtap: left promiscuous mode [ 99.683784][ T59] veth1_vlan: left promiscuous mode [ 99.706348][ T59] veth0_vlan: left promiscuous mode [ 100.146240][ T51] Bluetooth: hci2: command tx timeout [ 100.152519][ T5782] Bluetooth: hci1: command tx timeout [ 100.188967][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.198572][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.209146][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.219011][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.226950][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 100.234270][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.489800][ T59] team0 (unregistering): Port device team_slave_1 removed [ 100.524884][ T59] team0 (unregistering): Port device team_slave_0 removed [ 100.569800][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.604121][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.850904][ T59] bond0 (unregistering): Released all slaves [ 101.001137][ T6121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.044245][ T6292] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.052985][ T6260] chnl_net:caif_netlink_parms(): no params data found [ 101.143105][ T6121] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.241527][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.248829][ T6260] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.256363][ T6260] bridge_slave_0: entered allmulticast mode [ 101.263649][ T6260] bridge_slave_0: entered promiscuous mode [ 101.275165][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.297379][ T6260] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.304834][ T6260] bridge_slave_1: entered allmulticast mode [ 101.339658][ T6260] bridge_slave_1: entered promiscuous mode [ 101.403596][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.411215][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.428029][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.435205][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.468472][ T6260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.489449][ T6260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.549256][ T6260] team0: Port device team_slave_0 added [ 101.578107][ T6260] team0: Port device team_slave_1 added [ 101.607322][ T6260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.614461][ T6260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.641359][ T6260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.657984][ T6260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.664957][ T6260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.695237][ T6260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.784416][ T6099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.860096][ T6260] hsr_slave_0: entered promiscuous mode [ 101.903691][ T6260] hsr_slave_1: entered promiscuous mode [ 101.961498][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.027345][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.178357][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.226143][ T5782] Bluetooth: hci2: command tx timeout [ 102.289486][ T6292] chnl_net:caif_netlink_parms(): no params data found [ 102.306164][ T5782] Bluetooth: hci3: command tx timeout [ 102.369456][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.507902][ T6121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.596359][ T6099] veth0_vlan: entered promiscuous mode [ 102.768335][ T6099] veth1_vlan: entered promiscuous mode [ 102.903527][ T6292] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.926441][ T6292] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.933726][ T6292] bridge_slave_0: entered allmulticast mode [ 102.953334][ T6292] bridge_slave_0: entered promiscuous mode [ 103.009178][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.058986][ T6292] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.078074][ T6292] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.085622][ T6292] bridge_slave_1: entered allmulticast mode [ 103.097818][ T6292] bridge_slave_1: entered promiscuous mode [ 103.125518][ T6260] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 103.160587][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.204286][ T6260] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 103.214851][ T6260] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 103.244592][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.262530][ T6099] veth0_macvtap: entered promiscuous mode [ 103.274861][ T6292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.290991][ T6292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.303703][ T6260] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 103.347701][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.363686][ T6099] veth1_macvtap: entered promiscuous mode [ 103.408639][ T6292] team0: Port device team_slave_0 added [ 103.438394][ T6292] team0: Port device team_slave_1 added [ 103.475317][ T6099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.498530][ T6099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.508607][ T6099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.519302][ T6099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.531276][ T6099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.622546][ T6292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.630329][ T6292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.667463][ T6292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.711729][ T6099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.727572][ T6099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.740813][ T6099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.754518][ T6099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.775571][ T6099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.803008][ T6292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.816484][ T6292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.843967][ T6292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.905077][ T6099] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.927656][ T6099] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.943999][ T6099] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.953042][ T6099] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.051083][ T6292] hsr_slave_0: entered promiscuous mode [ 104.058254][ T6292] hsr_slave_1: entered promiscuous mode [ 104.064324][ T6292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.072622][ T6292] Cannot create hsr debugfs directory [ 104.080451][ T6121] veth0_vlan: entered promiscuous mode [ 104.275409][ T6121] veth1_vlan: entered promiscuous mode [ 104.296492][ T5782] Bluetooth: hci2: command tx timeout [ 104.387694][ T5782] Bluetooth: hci3: command tx timeout [ 104.590423][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.609053][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.772746][ T6260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.798055][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.799189][ T6121] veth0_macvtap: entered promiscuous mode [ 104.813239][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.903070][ T6292] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 104.941739][ T6121] veth1_macvtap: entered promiscuous mode [ 104.988710][ T6260] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.996259][ T6292] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 105.009635][ T6292] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 105.138503][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.145682][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.188898][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.196119][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.204292][ T6292] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 105.387028][ T6121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.407067][ T6121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.427347][ T6121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.438712][ T6121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.448833][ T6121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.459903][ T6121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.478935][ T6121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.498176][ T6121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.508858][ T6121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.526056][ T6121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.537608][ T6121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.556077][ T6121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.567347][ T6121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.636609][ T6121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.832324][ T6121] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.875963][ T6121] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.884723][ T6121] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.915964][ T6121] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.939656][ T6260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.377484][ T5782] Bluetooth: hci2: command tx timeout [ 106.464788][ T6292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.467551][ T5782] Bluetooth: hci3: command tx timeout [ 106.651225][ T6292] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.708471][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.736163][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.744941][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.752099][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.821570][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.828832][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.941420][ T6260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.064137][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.097280][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.613817][ T12] hsr_slave_0: left promiscuous mode [ 107.666810][ T12] hsr_slave_1: left promiscuous mode [ 107.677160][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.684641][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.717254][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.724729][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.737249][ T12] bridge_slave_1: left allmulticast mode [ 107.742963][ T12] bridge_slave_1: left promiscuous mode [ 107.754739][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.764856][ T12] bridge_slave_0: left allmulticast mode [ 107.772374][ T12] bridge_slave_0: left promiscuous mode [ 107.786190][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.808206][ T12] hsr_slave_0: left promiscuous mode [ 107.814366][ T12] hsr_slave_1: left promiscuous mode [ 107.820951][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.837350][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.847864][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.855325][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.864457][ T12] bridge_slave_1: left allmulticast mode [ 107.876046][ T12] bridge_slave_1: left promiscuous mode [ 107.881816][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.906727][ T12] bridge_slave_0: left allmulticast mode [ 107.912442][ T12] bridge_slave_0: left promiscuous mode [ 107.918750][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.015640][ T12] veth1_macvtap: left promiscuous mode [ 108.025169][ T12] veth0_macvtap: left promiscuous mode [ 108.046427][ T12] veth1_vlan: left promiscuous mode [ 108.051805][ T12] veth0_vlan: left promiscuous mode [ 108.071479][ T12] veth1_macvtap: left promiscuous mode [ 108.086324][ T12] veth0_macvtap: left promiscuous mode [ 108.092116][ T12] veth1_vlan: left promiscuous mode [ 108.106058][ T12] veth0_vlan: left promiscuous mode [ 108.357237][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.365980][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.373939][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.382452][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.392218][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.426665][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.546347][ T51] Bluetooth: hci3: command tx timeout [ 109.317352][ T12] team0 (unregistering): Port device team_slave_1 removed [ 109.357208][ T12] team0 (unregistering): Port device team_slave_0 removed [ 109.395539][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.440036][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.693921][ T12] bond0 (unregistering): Released all slaves [ 110.104457][ T12] team0 (unregistering): Port device team_slave_1 removed [ 110.144861][ T12] team0 (unregistering): Port device team_slave_0 removed [ 110.181620][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.229035][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.510534][ T12] bond0 (unregistering): Released all slaves [ 110.540059][ T51] Bluetooth: hci0: command tx timeout [ 110.715247][ T6292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.755722][ T6414] rxe_eth0 speed is unknown, defaulting to 1000 [ 110.787570][ T6260] veth0_vlan: entered promiscuous mode [ 110.853146][ T6260] veth1_vlan: entered promiscuous mode [ 111.019321][ T6260] veth0_macvtap: entered promiscuous mode [ 111.067280][ T6260] veth1_macvtap: entered promiscuous mode [ 111.152323][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.226039][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.246664][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.272046][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.315545][ T6260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.349644][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.381419][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.406017][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.433278][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.445535][ T6260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.474523][ T6260] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.488903][ T6260] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.500995][ T6260] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.513788][ T6260] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.994029][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.031528][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.038530][ T6292] veth0_vlan: entered promiscuous mode [ 112.082891][ T6292] veth1_vlan: entered promiscuous mode [ 112.235996][ T6414] chnl_net:caif_netlink_parms(): no params data found [ 112.276795][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.294809][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.351563][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.362074][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.377956][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.398766][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.410345][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 112.417825][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.483320][ T6414] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.491885][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.499910][ T6414] bridge_slave_0: entered allmulticast mode [ 112.514261][ T6414] bridge_slave_0: entered promiscuous mode [ 112.516979][ T6452] binder: BINDER_SET_CONTEXT_MGR already set [ 112.527553][ T6452] binder: 6451:6452 ioctl 4018620d 200000000440 returned -16 [ 112.578246][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.604898][ T6292] veth0_macvtap: entered promiscuous mode [ 112.614396][ T6414] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.621712][ T5782] Bluetooth: hci0: command tx timeout [ 112.634767][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.643388][ T6414] bridge_slave_1: entered allmulticast mode [ 112.657467][ T6414] bridge_slave_1: entered promiscuous mode [ 112.708059][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.737258][ T6414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.748412][ T6292] veth1_macvtap: entered promiscuous mode [ 112.757227][ T6447] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.777278][ T6414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.839948][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.934480][ T6414] team0: Port device team_slave_0 added [ 113.002207][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.018249][ T6459] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 113.031859][ T6414] team0: Port device team_slave_1 added [ 113.061239][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.079795][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.093149][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.114626][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.124931][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.137930][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.151065][ T6292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.181440][ T6459] netlink: 16 bytes leftover after parsing attributes in process `syz.6.137'. [ 113.193873][ T6466] tipc: Started in network mode [ 113.205585][ T6466] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 113.215264][ T6466] tipc: Enabled bearer , priority 0 [ 113.233691][ T6462] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 113.278055][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.289373][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.303622][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.323760][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.335406][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.361258][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.380076][ T6292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.399828][ T6414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.410070][ T6414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.448881][ T6414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.484530][ T6292] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.503214][ T6292] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.512880][ T6292] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.523926][ T6292] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.542533][ T6414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.552805][ T6414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.588923][ T6414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.785472][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.815234][ T6414] hsr_slave_0: entered promiscuous mode [ 113.822948][ T6414] hsr_slave_1: entered promiscuous mode [ 113.829387][ T6414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.837177][ T6414] Cannot create hsr debugfs directory [ 113.911847][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.045046][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.070414][ T6487] smc: removing ib device rxe0 [ 114.162716][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.291031][ T5764] tipc: Node number set to 11578026 [ 114.456156][ T5782] Bluetooth: hci1: command tx timeout [ 114.696612][ T5782] Bluetooth: hci0: command tx timeout [ 114.710509][ T6447] chnl_net:caif_netlink_parms(): no params data found [ 115.050074][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.086111][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.589697][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.622868][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.655598][ T6414] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 115.674421][ T6414] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 115.774144][ T6414] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 115.778467][ T6497] binder: BINDER_SET_CONTEXT_MGR already set [ 115.796008][ T6497] binder: 6496:6497 ioctl 4018620d 200000000440 returned -16 [ 115.797572][ T6414] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 116.160658][ T6447] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.178255][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.194535][ T6447] bridge_slave_0: entered allmulticast mode [ 116.202229][ T6447] bridge_slave_0: entered promiscuous mode [ 116.275465][ T6447] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.304410][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.326336][ T6447] bridge_slave_1: entered allmulticast mode [ 116.336374][ T6447] bridge_slave_1: entered promiscuous mode [ 116.444510][ T6447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.459599][ T6516] syzkaller0: entered promiscuous mode [ 116.466592][ T6516] syzkaller0: entered allmulticast mode [ 116.512047][ T6447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.536593][ T5782] Bluetooth: hci1: command tx timeout [ 116.638072][ T6447] team0: Port device team_slave_0 added [ 116.691314][ T6447] team0: Port device team_slave_1 added [ 116.761604][ T6447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.772432][ T6447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.777138][ T5782] Bluetooth: hci0: command tx timeout [ 116.807788][ T6447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.828630][ T6447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.839469][ T6447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.868086][ T6447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.071324][ T6532] binder: BINDER_SET_CONTEXT_MGR already set [ 117.097717][ T6532] binder: 6531:6532 ioctl 4018620d 200000000440 returned -16 [ 117.211710][ T6447] hsr_slave_0: entered promiscuous mode [ 117.269593][ T6447] hsr_slave_1: entered promiscuous mode [ 117.286918][ T6447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.304350][ T6542] netlink: 24 bytes leftover after parsing attributes in process `syz.6.150'. [ 117.313390][ T6447] Cannot create hsr debugfs directory [ 117.375801][ T6542] netlink: 24 bytes leftover after parsing attributes in process `syz.6.150'. [ 117.455465][ T6544] warning: `syz.6.150' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.507386][ T6551] binder: BINDER_SET_CONTEXT_MGR already set [ 117.521554][ T12] hsr_slave_0: left promiscuous mode [ 117.532841][ T6551] binder: 6550:6551 ioctl 4018620d 200000000180 returned -16 [ 117.545411][ T12] hsr_slave_1: left promiscuous mode [ 117.567703][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.580371][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.594253][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.605766][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.627951][ T12] bridge_slave_1: left allmulticast mode [ 117.633653][ T12] bridge_slave_1: left promiscuous mode [ 117.646173][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.662787][ T12] bridge_slave_0: left allmulticast mode [ 117.669878][ T12] bridge_slave_0: left promiscuous mode [ 117.675702][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.691139][ T12] hsr_slave_0: left promiscuous mode [ 117.697497][ T12] hsr_slave_1: left promiscuous mode [ 117.703811][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.714203][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.722675][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.736087][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.744025][ T12] bridge_slave_1: left allmulticast mode [ 117.749818][ T12] bridge_slave_1: left promiscuous mode [ 117.755575][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.778822][ T12] bridge_slave_0: left allmulticast mode [ 117.784524][ T12] bridge_slave_0: left promiscuous mode [ 117.799190][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.840539][ T6551] binder: 6550:6551 ioctl c0306201 2000000003c0 returned -14 [ 117.875290][ T12] veth1_macvtap: left promiscuous mode [ 117.881405][ T12] veth0_macvtap: left promiscuous mode [ 117.887121][ T12] veth1_vlan: left promiscuous mode [ 117.893292][ T12] veth0_vlan: left promiscuous mode [ 117.904111][ T12] veth1_macvtap: left promiscuous mode [ 117.918838][ T12] veth0_macvtap: left promiscuous mode [ 117.926160][ T12] veth1_vlan: left promiscuous mode [ 117.931765][ T12] veth0_vlan: left promiscuous mode [ 118.617750][ T5782] Bluetooth: hci1: command tx timeout [ 118.682829][ T12] team0 (unregistering): Port device team_slave_1 removed [ 118.726339][ T12] team0 (unregistering): Port device team_slave_0 removed [ 118.774619][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.838959][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.043664][ T6583] binder: BINDER_SET_CONTEXT_MGR already set [ 119.052421][ T6583] binder: 6582:6583 ioctl 4018620d 200000002e00 returned -16 [ 119.208095][ T12] bond0 (unregistering): Released all slaves [ 119.679846][ T12] team0 (unregistering): Port device team_slave_1 removed [ 119.724816][ T12] team0 (unregistering): Port device team_slave_0 removed [ 119.770615][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.815226][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.149744][ T12] bond0 (unregistering): Released all slaves [ 120.321897][ T6414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.461310][ T6587] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 120.488377][ T6587] netlink: 16 bytes leftover after parsing attributes in process `syz.7.161'. [ 120.519455][ T6414] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.570655][ T6587] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 120.637170][ T6594] tipc: Started in network mode [ 120.642099][ T6594] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 120.666855][ T6594] tipc: Enabled bearer , priority 0 [ 120.675300][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.682498][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.696517][ T5782] Bluetooth: hci1: command tx timeout [ 120.704552][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.711778][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.962728][ T6447] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 121.011379][ T6447] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 121.039355][ T6447] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 121.071801][ T6447] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 121.353714][ T6447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.424600][ T6447] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.489029][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.496269][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.508126][ T6615] binder: BINDER_SET_CONTEXT_MGR already set [ 121.514341][ T6615] binder: 6614:6615 ioctl 4018620d 200000002e00 returned -16 [ 121.526868][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.534035][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.683339][ T6414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.786389][ T970] tipc: Node number set to 11578026 [ 121.817354][ T5782] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 121.825049][ T5782] Bluetooth: hci2: unexpected event for opcode 0x203e [ 122.114402][ T6447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.251672][ T6414] veth0_vlan: entered promiscuous mode [ 122.274100][ T6414] veth1_vlan: entered promiscuous mode [ 122.394857][ T6414] veth0_macvtap: entered promiscuous mode [ 122.423797][ T6414] veth1_macvtap: entered promiscuous mode [ 122.463663][ T6414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.486091][ T6414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.505479][ T6414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.525939][ T6414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.548877][ T6414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.601157][ T6414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.613362][ T6414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.623975][ T6414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.636977][ T6414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.648843][ T6414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.708786][ T6414] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.723741][ T6414] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.735567][ T6414] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.744368][ T6414] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.776291][ T5782] Bluetooth: hci1: command tx timeout [ 122.839104][ T6447] veth0_vlan: entered promiscuous mode [ 122.895669][ T6447] veth1_vlan: entered promiscuous mode [ 122.943429][ T6447] veth0_macvtap: entered promiscuous mode [ 122.972909][ T6447] veth1_macvtap: entered promiscuous mode [ 123.004466][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.023220][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.039394][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.049986][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.064442][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.075252][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.088564][ T6447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.105167][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.109280][ T6625] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.123796][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.139563][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.146433][ T6625] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 123.153242][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.165798][ T6447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.176872][ T6447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.188757][ T6625] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 123.201885][ T6625] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.209065][ T6447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.217385][ T6625] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.239183][ T6625] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.255604][ T6625] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.265778][ T6625] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 123.279737][ T6447] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.290144][ T6447] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.300511][ T6447] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.309859][ T6447] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.319715][ T6671] netlink: 24 bytes leftover after parsing attributes in process `syz.7.176'. [ 123.331376][ T6625] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 123.344418][ T6625] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.371213][ T6625] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.401498][ T6625] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.497703][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.510117][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.587838][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.595713][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.616291][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.627329][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.693564][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.747441][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.885148][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.7.182'. [ 124.027922][ T6683] batman_adv: batadv0: Adding interface: syzkaller0 [ 124.034580][ T6683] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.088480][ T6683] batman_adv: batadv0: Interface activated: syzkaller0 [ 124.160600][ T6682] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 124.203577][ T5782] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 124.212184][ T5782] Bluetooth: hci1: unexpected event for opcode 0x203e [ 124.233204][ T6682] batman_adv: batadv0: Removing interface: syzkaller0 [ 124.723594][ T6716] netlink: 60 bytes leftover after parsing attributes in process `syz.6.195'. [ 124.735225][ T6716] netlink: 60 bytes leftover after parsing attributes in process `syz.6.195'. [ 124.747475][ T6716] netlink: 60 bytes leftover after parsing attributes in process `syz.6.195'. [ 125.048952][ T6729] ip_tables: iptables: counters copy to user failed while replacing table [ 125.260936][ T5782] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.267332][ T5782] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.439900][ T6693] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.456552][ T6693] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.463197][ T6693] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.484603][ T6693] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.994620][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.7.212'. [ 126.037812][ T6769] syzkaller0: entered promiscuous mode [ 126.044431][ T6769] syzkaller0: entered allmulticast mode [ 126.216420][ T5782] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.225523][ T5782] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 126.233413][ T5782] Bluetooth: hci3: unexpected event for opcode 0x203e [ 127.475829][ T6783] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 127.487820][ T6783] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 127.496786][ T5782] Bluetooth: hci1: command 0x0405 tx timeout [ 127.496813][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.515256][ T6783] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 127.530235][ T6783] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 127.881203][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.231'. [ 128.297768][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.496524][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.579006][ T51] Bluetooth: hci1: command 0x0405 tx timeout [ 129.579012][ T5782] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.924444][ T6892] tipc: Enabling of bearer rejected, failed to enable media [ 130.252901][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz.6.247'. [ 130.387335][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.586173][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.669088][ T51] Bluetooth: hci1: command 0x0405 tx timeout [ 132.670926][ T6977] binder: BINDER_SET_CONTEXT_MGR already set [ 132.696124][ T6977] binder: 6976:6977 ioctl 4018620d 200000000440 returned -16 [ 132.949443][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.956970][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.372846][ T7008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.390823][ T7008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.403249][ T7008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.414050][ T7008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.431178][ T7008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.444106][ T7008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.454162][ T7016] binder: BINDER_SET_CONTEXT_MGR already set [ 133.478570][ T7016] binder: 7015:7016 ioctl 4018620d 200000000440 returned -16 [ 133.478620][ T7008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.523748][ T7008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.550929][ T7008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.567455][ T7008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.607942][ T7008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.636523][ T7008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.737379][ T5782] Bluetooth: hci1: command 0x0405 tx timeout [ 133.874393][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.8.274'. [ 134.303238][ T7051] binder: 7049:7051 ioctl c0306201 0 returned -14 [ 134.501949][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.8.286'. [ 135.000865][ T7088] binder: 7087:7088 ioctl c0306201 0 returned -14 [ 135.149385][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.6.296'. [ 135.351436][ T7099] syzkaller0: entered promiscuous mode [ 135.370873][ T7103] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 135.373368][ T7099] syzkaller0: entered allmulticast mode [ 135.412792][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.9.300'. [ 135.706158][ T7122] binder: 7117:7122 ioctl c0306201 0 returned -14 [ 135.816156][ T5782] Bluetooth: hci1: command 0x0405 tx timeout [ 135.940004][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.7.308'. [ 136.094422][ T7141] ip_tables: iptables: counters copy to user failed while replacing table [ 136.123842][ T7141] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 136.178640][ T7141] CIFS: Attempting to mount //127.0.0.1/share [ 136.727063][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.8.321'. [ 136.926459][ T7141] CIFS: VFS: cifs_mount failed w/return code = -512 [ 136.999905][ T7188] syzkaller0: entered promiscuous mode [ 137.005771][ T7188] syzkaller0: entered allmulticast mode [ 137.528242][ T7217] ip_tables: iptables: counters copy to user failed while replacing table [ 137.558189][ T7217] CIFS: Attempting to mount //127.0.0.1/share [ 138.356202][ T7217] CIFS: VFS: cifs_mount failed w/return code = -112 [ 138.577071][ T7268] netlink: 52 bytes leftover after parsing attributes in process `syz.8.352'. [ 138.980571][ T7292] ip_tables: iptables: counters copy to user failed while replacing table [ 138.992883][ T7292] CIFS: Attempting to mount //127.0.0.1/share [ 139.813019][ T7292] CIFS: VFS: cifs_mount failed w/return code = -112 [ 140.309596][ T7355] syzkaller0: entered promiscuous mode [ 140.326101][ T7355] syzkaller0: entered allmulticast mode [ 140.717410][ T7376] ip_tables: iptables: counters copy to user failed while replacing table [ 140.746863][ T7376] CIFS: Attempting to mount //127.0.0.1/share [ 140.967602][ T7392] Bluetooth: MGMT ver 1.22 [ 141.289724][ T7411] syzkaller0: entered promiscuous mode [ 141.308151][ T7411] syzkaller0: entered allmulticast mode [ 141.521080][ T7376] CIFS: VFS: cifs_mount failed w/return code = -112 [ 141.902915][ T7437] syzkaller0: entered promiscuous mode [ 141.915785][ T7437] syzkaller0: entered allmulticast mode [ 142.101080][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.7.398'. [ 142.147763][ T23] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 142.367390][ T23] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 142.404602][ T23] usb 9-1: can't read configurations, error -61 [ 142.441222][ T7458] ip_tables: iptables: counters copy to user failed while replacing table [ 142.457992][ T7458] CIFS: Attempting to mount //127.0.0.1/share [ 142.587126][ T23] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 142.799000][ T23] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 142.817855][ T23] usb 9-1: can't read configurations, error -61 [ 142.835289][ T23] usb usb9-port1: attempt power cycle [ 143.106562][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.412'. [ 143.239727][ T7458] CIFS: VFS: cifs_mount failed w/return code = -512 [ 143.276027][ T23] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 143.350656][ T23] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 143.367711][ T23] usb 9-1: can't read configurations, error -61 [ 143.536117][ T23] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 143.590401][ T23] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 143.616214][ T23] usb 9-1: can't read configurations, error -61 [ 143.633740][ T23] usb usb9-port1: unable to enumerate USB device [ 143.657015][ T7517] netlink: 4 bytes leftover after parsing attributes in process `syz.6.419'. [ 143.666103][ T7519] binder: 7518:7519 ioctl 4018620d 0 returned -22 [ 143.750011][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.6.421'. [ 144.317012][ T7549] ip_tables: iptables: counters copy to user failed while replacing table [ 144.332112][ T7549] CIFS: Attempting to mount //127.0.0.1/share [ 145.030020][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.9.430'. [ 145.165241][ T7549] CIFS: VFS: cifs_mount failed w/return code = -112 [ 145.175110][ T7590] Bluetooth: MGMT ver 1.22 [ 145.199170][ T51] list_del corruption, ffff888025b00780->next is LIST_POISON1 (dead000000000100) [ 145.210898][ T51] ------------[ cut here ]------------ [ 145.216577][ T51] kernel BUG at lib/list_debug.c:58! [ 145.222059][ T51] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 145.228166][ T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 145.235574][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 145.245684][ T51] Workqueue: hci1 hci_cmd_sync_work [ 145.250958][ T51] RIP: 0010:__list_del_entry_valid_or_report+0xe9/0x130 [ 145.257932][ T51] Code: 48 89 de e8 89 c1 4b 06 0f 0b 48 c7 c7 e0 54 1d 8b 48 89 de e8 78 c1 4b 06 0f 0b 48 c7 c7 40 55 1d 8b 48 89 de e8 67 c1 4b 06 <0f> 0b 48 c7 c7 a0 55 1d 8b 48 89 de e8 56 c1 4b 06 0f 0b 48 c7 c7 [ 145.277650][ T51] RSP: 0018:ffffc90000bbfa00 EFLAGS: 00010246 [ 145.283937][ T51] RAX: 000000000000004e RBX: ffff888025b00780 RCX: 8b53d45c59545f00 [ 145.291927][ T51] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 145.299913][ T51] RBP: 1ffff11004b600f3 R08: ffffc90000bbf707 R09: 1ffff92000177ee0 [ 145.307914][ T51] R10: dffffc0000000000 R11: fffff52000177ee1 R12: dffffc0000000000 [ 145.315918][ T51] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 145.323910][ T51] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 145.332855][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.339533][ T51] CR2: 000000110c2e815f CR3: 0000000077c35000 CR4: 00000000003506e0 [ 145.347511][ T51] Call Trace: [ 145.350891][ T51] [ 145.353819][ T51] mgmt_pending_remove+0x53/0x1f0 [ 145.358936][ T51] mgmt_add_adv_patterns_monitor_complete+0x45d/0x730 [ 145.365809][ T51] ? mgmt_add_adv_patterns_monitor_sync+0x90/0x90 [ 145.372244][ T51] ? msft_monitor_supported+0x69/0x80 [ 145.377617][ T51] ? hci_add_adv_monitor+0x17d/0x2a0 [ 145.382903][ T51] ? mgmt_add_adv_patterns_monitor_sync+0x90/0x90 [ 145.389339][ T51] hci_cmd_sync_work+0x24b/0x380 [ 145.394287][ T51] ? process_scheduled_works+0x975/0x1600 [ 145.400005][ T51] process_scheduled_works+0xa60/0x1600 [ 145.405560][ T51] ? worker_attach_to_pool+0x370/0x370 [ 145.411017][ T51] ? assign_work+0x3cc/0x5d0 [ 145.415711][ T51] worker_thread+0xa5e/0xfe0 [ 145.420309][ T51] kthread+0x2fa/0x390 [ 145.424371][ T51] ? pr_cont_work+0x550/0x550 [ 145.429047][ T51] ? kthread_blkcg+0xd0/0xd0 [ 145.433636][ T51] ret_from_fork+0x48/0x80 [ 145.438051][ T51] ? kthread_blkcg+0xd0/0xd0 [ 145.442633][ T51] ret_from_fork_asm+0x11/0x20 [ 145.447397][ T51] [ 145.450423][ T51] Modules linked in: [ 145.456819][ T51] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 145.462312][ T51] RIP: 0010:__list_del_entry_valid_or_report+0xe9/0x130 [ 145.469423][ T51] Code: 48 89 de e8 89 c1 4b 06 0f 0b 48 c7 c7 e0 54 1d 8b 48 89 de e8 78 c1 4b 06 0f 0b 48 c7 c7 40 55 1d 8b 48 89 de e8 67 c1 4b 06 <0f> 0b 48 c7 c7 a0 55 1d 8b 48 89 de e8 56 c1 4b 06 0f 0b 48 c7 c7 [ 145.477770][ T5782] Bluetooth: hci1: command 0x0405 tx timeout [ 145.489234][ T51] RSP: 0018:ffffc90000bbfa00 EFLAGS: 00010246 [ 145.501332][ T51] RAX: 000000000000004e RBX: ffff888025b00780 RCX: 8b53d45c59545f00 [ 145.509377][ T51] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 145.518450][ T51] RBP: 1ffff11004b600f3 R08: ffffc90000bbf707 R09: 1ffff92000177ee0 [ 145.526533][ T51] R10: dffffc0000000000 R11: fffff52000177ee1 R12: dffffc0000000000 [ 145.534533][ T51] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 145.542590][ T51] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 145.551592][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.558238][ T51] CR2: 000000110c2e815f CR3: 0000000077c35000 CR4: 00000000003506e0 [ 145.567416][ T51] Kernel panic - not syncing: Fatal exception [ 145.573631][ T51] Kernel Offset: disabled [ 145.577963][ T51] Rebooting in 86400 seconds..