last executing test programs: 11m27.618699837s ago: executing program 2 (id=3507): openat$comedi(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 11m26.676641834s ago: executing program 2 (id=3511): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be12020506050e02040943", 0x1d, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f010400000008000000000624"], 0x0) 11m25.429787045s ago: executing program 2 (id=3515): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6e84}, 0x94) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x31) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000180)=0x1000000) 11m25.266094697s ago: executing program 2 (id=3517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) statx(0xffffffffffffffff, 0x0, 0x1800, 0x400, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, 0x0, r2, 0x0) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) listen(r3, 0xffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x86) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) 11m24.033555655s ago: executing program 2 (id=3519): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) recvfrom$inet(r2, &(0x7f0000000180)=""/198, 0xc6, 0x40000000, 0x0, 0x0) 11m23.890240106s ago: executing program 2 (id=3521): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="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", 0x2ef) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, 0x0) msgget(0x0, 0x200) write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11m8.225561779s ago: executing program 32 (id=3521): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="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", 0x2ef) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, 0x0) msgget(0x0, 0x200) write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m4.646130518s ago: executing program 5 (id=4785): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f0000000100)) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x14004040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4m2.78766277s ago: executing program 5 (id=4790): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) syz_clone3(&(0x7f00000003c0)={0x122125000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x8, 0x0, 0x1, "d52c2000000102000300ecffffff0100"}) r5 = syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) r6 = openat$comedi(0xffffffffffffff9c, 0x0, 0x101400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x21, 0x7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x0, 0x5, 0x1, 0x0, 0x9, 0xe1cb, 0x4, 0x4, 0x7, 0x395, 0x80000089, 0x2, 0x4, 0xa, 0xffffeadb, 0x1, 0x80000000, 0x8, 0x7ffffffd, 0x8000000, 0x1]}) 3m57.481078112s ago: executing program 5 (id=4797): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f00000009c0)) 3m56.902612913s ago: executing program 5 (id=4799): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="00150b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000080)="00012c61") syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3m53.788524998s ago: executing program 4 (id=4813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3m53.742939095s ago: executing program 0 (id=4814): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r4, &(0x7f0000003080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200000c4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010008081c000a"], 0x70}}, 0x10) 3m52.649065443s ago: executing program 5 (id=4817): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a31000000000800"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="3303160081fd140000007ef52f555f2a0c0900000000000000f786dd3baa4b1f0f858c4632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x62, 0x6, @broadcast}, 0x14) 3m52.522640256s ago: executing program 3 (id=4818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) 3m52.482466239s ago: executing program 0 (id=4819): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) sendmsg$802154_dgram(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) 3m52.421430997s ago: executing program 5 (id=4820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[], 0xc2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x2f}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x4) 3m52.389869092s ago: executing program 3 (id=4821): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000500)={0x34, r0, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x34}}, 0x4) 3m52.360316217s ago: executing program 0 (id=4822): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x48) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20008000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x404c041) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m52.087740116s ago: executing program 4 (id=4823): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="010000000000000014001a80100004800c0006800800", @ANYRES8], 0x34}, 0x1, 0x0, 0x0, 0x54840}, 0x0) 3m52.030733329s ago: executing program 3 (id=4824): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000400), 0xe) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r0, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 3m52.002932714s ago: executing program 0 (id=4825): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000003040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003000)=""/8, 0x8}, 0x9}], 0x1, 0x1822b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000001440)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9abaeed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264736d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5c553110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba62e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea4c64dec53db7713485bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b8e97fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f000000", 0x580, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 3m51.871335899s ago: executing program 4 (id=4826): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8, 0x2}, 0xe) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r4) 3m51.723179453s ago: executing program 4 (id=4827): socket(0x11, 0x800000003, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0) 3m51.287094376s ago: executing program 4 (id=4828): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r4, &(0x7f0000003080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x200000c4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010008081c000a"], 0x70}}, 0x10) 3m50.277190211s ago: executing program 3 (id=4829): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a3100000000080005"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="3303160081fd140000007ef52f555f2a0c0900000000000000f786dd3baa4b1f0f858c4632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x62, 0x6, @broadcast}, 0x14) 3m50.245498008s ago: executing program 4 (id=4830): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6, @private=0xa010100, 0x4e21, 0x2, 'sed\x00', 0x2, 0x0, 0x68}, 0x2c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) r4 = socket(0x2, 0x400000000002, 0x0) setsockopt(r4, 0x0, 0x20, &(0x7f00000012c0)="15020000", 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02ff0000009400000004ea8621187b5aa58352ef5222dd5802", @ANYRES32=0x0, @ANYBLOB="00800000003f0000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r5, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r10, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000020}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, r10, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6e7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040844) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000714010000000000faffffff04006000"], 0x18}}, 0x0) r13 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r13, 0x6a, 0x3, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x4, 0x1, 0xff, 0x1, 0x0, 0xc}, &(0x7f0000000080)=0x20) 3m50.198669788s ago: executing program 0 (id=4831): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) sendmsg$802154_dgram(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) 3m50.079336874s ago: executing program 0 (id=4832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3m50.013879448s ago: executing program 3 (id=4833): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0008"], 0x34}}, 0x400c010) 3m49.877059459s ago: executing program 3 (id=4834): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x48) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20008000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x404c041) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m36.955383022s ago: executing program 33 (id=4820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[], 0xc2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x2f}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x4) 3m34.931092269s ago: executing program 34 (id=4832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3m34.84130732s ago: executing program 35 (id=4830): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6, @private=0xa010100, 0x4e21, 0x2, 'sed\x00', 0x2, 0x0, 0x68}, 0x2c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) r4 = socket(0x2, 0x400000000002, 0x0) setsockopt(r4, 0x0, 0x20, &(0x7f00000012c0)="15020000", 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02ff0000009400000004ea8621187b5aa58352ef5222dd5802", @ANYRES32=0x0, @ANYBLOB="00800000003f0000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r5, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r10, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000020}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, r10, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6e7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040844) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000714010000000000faffffff04006000"], 0x18}}, 0x0) r13 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r13, 0x6a, 0x3, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x4, 0x1, 0xff, 0x1, 0x0, 0xc}, &(0x7f0000000080)=0x20) 3m34.404058909s ago: executing program 36 (id=4834): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x48) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20008000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x404c041) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.288810642s ago: executing program 6 (id=5349): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 8.666775699s ago: executing program 6 (id=5353): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x48}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x70, r2, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x70}}, 0x20000050) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r4, 0x1, 0x70bd3a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000052}, 0x8000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') shutdown(0xffffffffffffffff, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x5) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept(0xffffffffffffffff, 0x0, 0x0) 6.503200009s ago: executing program 8 (id=5357): sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, 0x0, 0x20000085) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = inotify_init() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000048040)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="63296f62bd5b16d7a496d62cd8bb810be9dcb97471decb814774da3acbc074f7fd14ac0b95ee52ab5b4080813a67b324e319588e5c96f7bb2f5261048f27a7bd4056d2fdf0878fa63ec2cc32fdb9efb974ec513da9c8ffa552cfb6451fffda7e36b1fb73bfbabfe6616710209326b6ff8549db3fe4b173a368e89727fa374045424b3dddbecbc07f8d660f83cfd622fab6bf312a460cfcd594d51a0ea993a9e582be46fc6689158f1a0cb42c57983a94415bd1bb28cafca5b4a35697ab869a401f3940ec7324e3576a3d24c00f", 0xcd}, {&(0x7f00000003c0)="d839e796be2e73f65b4fd8d6bf9d", 0xe}], 0x2}}], 0x1, 0x480e0) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) tkill(0x0, 0xb) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x1) 6.343462767s ago: executing program 9 (id=5358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r1, @ANYBLOB="05072bbd7000ffdbdf2501000000800002807c0001800800010000000000080001000300000008000100030000003c00018008000100050000000800010080000000b8ff01000400000008000100070000000800010005000000080001000600000000000000000000002400018008000100030000"], 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 6.146565661s ago: executing program 6 (id=5360): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f00000001c0)=0x1) 6.145622s ago: executing program 8 (id=5361): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) shutdown(r0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2000480) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, 0x0, 0x0) 5.956012434s ago: executing program 1 (id=5362): unshare(0x22020400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 5.927858073s ago: executing program 9 (id=5363): r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) preadv2(r1, &(0x7f0000000180)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x2, 0x11a, 0x16) splice(r1, 0x0, r2, 0x0, 0x7c1c, 0x8) socket$inet(0x2, 0xa, 0x7ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/91) r8 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_notify(r8, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000240)=0xc) 5.737039394s ago: executing program 7 (id=5364): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x14004040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.716490684s ago: executing program 6 (id=5365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000000101ff0100000000000000000a0000930c00198008000200080000001000028007"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) 5.715856865s ago: executing program 8 (id=5366): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af", 0x91}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001440)=""/67, 0x20}, {&(0x7f0000001280)=""/204, 0xcc}], 0x2}, 0x40000000) recvmsg$can_bcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000007c0)=""/68, 0x44}], 0x1}, 0x102) 5.122890302s ago: executing program 8 (id=5367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x20000084) 4.854884533s ago: executing program 6 (id=5368): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100), 0x4) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) syz_clone3(&(0x7f00000003c0)={0x122125000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x8, 0x0, 0x1, "d52c2000000102000300ecffffff0100"}) r5 = syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) r6 = openat$comedi(0xffffffffffffff9c, 0x0, 0x101400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x21, 0x7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x0, 0x5, 0x1, 0x0, 0x9, 0xe1cb, 0x4, 0x4, 0x7, 0x395, 0x80000089, 0x2, 0x4, 0xa, 0xffffeadb, 0x1, 0x80000000, 0x8, 0x7ffffffd, 0x8000000, 0x1]}) 2.498759651s ago: executing program 1 (id=5369): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000e9ffffffffffffff000000000000000000000000000000000000000000000000000a0000001f40c48a00000000804000020000000040000800000000000000000000000000000000440005000a01010100000000"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.126103541s ago: executing program 8 (id=5370): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x48}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x70, r2, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x70}}, 0x20000050) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r4, 0x1, 0x70bd3a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000052}, 0x8000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r5, 0x5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept(r5, 0x0, 0x0) 2.026269973s ago: executing program 9 (id=5371): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x4000080) 1.986810332s ago: executing program 1 (id=5372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, 0x0, &(0x7f00000003c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r3, 0x0, 0xffffffff000) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x3) 1.709877206s ago: executing program 9 (id=5373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x8, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x3, 0x613f, 0xe}}}}]}, 0x44}}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.709638635s ago: executing program 7 (id=5374): pipe(&(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket(0x28, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000008500feffd10000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6, 0x1}]}, 0x10) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r2, 0x50) 1.212321072s ago: executing program 8 (id=5375): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x6a040000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xffffffff, 0x4e, 0x567}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)={0x24, 0x16, 0xa01, 0x0, 0x1, {0x2}, [@nested={0x10, 0x122, 0x0, 0x1, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xe3, 0x0, 0x0, @pid}]}]}]}, 0x24}}, 0x0) unshare(0x44000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x1d0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x3b, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5c, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x652}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) sendto$inet6(r5, 0x0, 0x0, 0x20000045, &(0x7f0000000100)={0xa, 0x4e21, 0xfffa, @empty, 0x3}, 0x1c) r7 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r7, 0x852ac000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x40, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x4000080) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044011}, 0x20000890) 1.171423587s ago: executing program 7 (id=5376): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f00000001c0)=0x1) 824.770663ms ago: executing program 7 (id=5377): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af", 0x91}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001440)=""/67, 0x20}, {&(0x7f0000001280)=""/204, 0xcc}], 0x2}, 0x40000000) recvmsg$can_bcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000007c0)=""/68, 0x44}], 0x1}, 0x102) 675.387514ms ago: executing program 1 (id=5378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000000101ff0100000000000000000a0000930c00198008000200080000001000028007"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) 514.796538ms ago: executing program 7 (id=5379): unshare(0x22020400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 349.921438ms ago: executing program 1 (id=5380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000002080001401b00001408000240000000120c000580060001008faa00000c000480060001008a95000009000100"], 0x118}}, 0x0) 256.626865ms ago: executing program 6 (id=5381): r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) preadv2(r1, &(0x7f0000000180)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x2, 0x11a, 0x16) splice(r1, 0x0, r2, 0x0, 0x7c1c, 0x8) socket$inet(0x2, 0xa, 0x7ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000000)=""/91) r8 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_notify(r8, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000240)=0xc) 209.660853ms ago: executing program 9 (id=5382): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 153.567067ms ago: executing program 1 (id=5383): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x4000080) 66.685014ms ago: executing program 9 (id=5384): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x13) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300010029bd7000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="d45006000200000024001a802000028014"], 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000) socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) ioctl$sock_netdev_private(r3, 0x89f0, &(0x7f0000000380)="8d037bd3eff51bd421c696d745da6617585e7634fad5ab55fe291b41cc3fd562bfd4398de683b54fa319fc7f298d4c7ab07630fd98a9a3f9e1f00d2483c00137d9dd49232cfef1353c7f323f5ddcb58a108e931a6da9c074182ad5e0425f9d4af8e43c9c9f9bf8be384a19c4c442305d71895bb244b307de5789fa10fa550a9d9e807b5f248f518489e32173fb712f29f4a7258e082546bd1d") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f72"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 0s ago: executing program 7 (id=5385): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, 0x14, 0x1, 0x0, 0x0, {0x2, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "fd2929bf64daedcfeb488e63463d8554add1da6e87f783980a4d1634c6450559443c29240956451306cf"}]}, 0x44}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x2) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0x29, 0x1}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x4, 0x29bb, 0x80000000, 0x40000, 0xffffffffffffffff, 0x4, '\x00', 0x0, r2, 0x3, 0x1, 0x0, 0xe}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x10000009, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af9cc9e5ef6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084075ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcb1a47a87baf63e4edf11c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000ea46c07adee10d0f2bc85cf37182256e4fd8f56942726efc07180eaa5421d697665c8bacd39cdb392e6153af80bc1a69e3bfab032e78c9a96eab13be845a0d44ef2a4ab414ac2e4802a3b5d3aa2a4a4fc259206d97d0cc1602d6b45ff414c53fc9f5f68438f0423e168a97923ca0464b40b2f797841fb2bb2e5ad9feff37220ab7c34f4c382c247e7735adb55c209f7c0f8880733dbd3f5a095cc6a2"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r8, 0x44}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="819b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe80000000f0ffffffffffffff0000bbff02000000000000000000000000000100004e22004d9078020000000000000000000000eaf12af8010d4894322fd8f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70a41ef6c2fca06a9bd768d5f176c198150020000000000000000010009514b06796dbf2ea9e520f1475c8f65b13efcfbfc9b1d0e5c58b4be6608c9608e393ff14c36c9c3390f375043be439a02b275fa5b79c00e7ae925b94dcc6a70a1afb34cb5cb991a40a2f23322648ac95f7"], 0x0) r11 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8b04, &(0x7f0000000200)={'wlan1\x00'}) bind$inet(r11, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) close(0x4) kernel console output (not intermixed with test programs): n failed: -22 [ 1054.503591][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.807533][ T5812] Bluetooth: hci0: command tx timeout [ 1055.144155][ C0] vkms_vblank_simulate: vblank timer overrun [ 1055.930865][T17442] wlan1 speed is unknown, defaulting to 1000 [ 1056.034189][ C0] vkms_vblank_simulate: vblank timer overrun [ 1056.215296][ C0] vkms_vblank_simulate: vblank timer overrun [ 1056.549508][ C0] vkms_vblank_simulate: vblank timer overrun [ 1057.443798][ C0] vkms_vblank_simulate: vblank timer overrun [ 1057.455090][ T5812] Bluetooth: hci0: command tx timeout [ 1058.909636][ C0] vkms_vblank_simulate: vblank timer overrun [ 1058.948853][ C0] vkms_vblank_simulate: vblank timer overrun [ 1059.055962][ C0] vkms_vblank_simulate: vblank timer overrun [ 1059.237372][ C0] vkms_vblank_simulate: vblank timer overrun [ 1059.474082][ C0] vkms_vblank_simulate: vblank timer overrun [ 1059.666306][ C0] vkms_vblank_simulate: vblank timer overrun [ 1059.683573][ T5812] Bluetooth: hci0: command tx timeout [ 1059.747790][ C0] vkms_vblank_simulate: vblank timer overrun [ 1060.347859][ C0] vkms_vblank_simulate: vblank timer overrun [ 1060.605168][T17442] chnl_net:caif_netlink_parms(): no params data found [ 1060.757327][ T977] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 1060.913220][ T977] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 1060.913252][ T977] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.913271][ T977] usb 2-1: config 0 has no interface number 0 [ 1060.913328][ T977] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1060.913358][ T977] usb 2-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1060.916465][ T977] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1060.916493][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.916512][ T977] usb 2-1: Product: syz [ 1060.916526][ T977] usb 2-1: Manufacturer: syz [ 1060.916540][ T977] usb 2-1: SerialNumber: syz [ 1061.032536][ T977] usb 2-1: config 0 descriptor?? [ 1061.034019][T17517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1061.040195][ T977] usb-storage 2-1:0.20: USB Mass Storage device detected [ 1061.050312][ T977] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1061.241094][ T977] usb 2-1: USB disconnect, device number 83 [ 1061.952620][T17559] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4150'. [ 1065.496511][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1065.517053][T17592] delete_channel: no stack [ 1065.550840][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1065.551401][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1065.552208][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1065.552965][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1065.553357][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1065.553797][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1065.554184][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1065.554553][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1065.703309][T17587] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1066.000362][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1066.228453][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1066.231165][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1066.232492][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1066.233954][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1068.062640][T17442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.062768][T17442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.063002][T17442] bridge_slave_0: entered allmulticast mode [ 1068.064649][T17442] bridge_slave_0: entered promiscuous mode [ 1068.110879][T17442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.111031][T17442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.111374][T17442] bridge_slave_1: entered allmulticast mode [ 1068.148795][T17442] bridge_slave_1: entered promiscuous mode [ 1068.197358][T15572] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 1068.512602][ T5812] Bluetooth: hci1: command tx timeout [ 1068.523550][T15572] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 1068.523583][T15572] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.523602][T15572] usb 1-1: config 0 has no interface number 0 [ 1068.523650][T15572] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1068.523674][T15572] usb 1-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1068.526653][T15572] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1068.526679][T15572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.526697][T15572] usb 1-1: Product: syz [ 1068.526710][T15572] usb 1-1: Manufacturer: syz [ 1068.526723][T15572] usb 1-1: SerialNumber: syz [ 1068.536262][T15572] usb 1-1: config 0 descriptor?? [ 1068.537007][T17627] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1068.558288][T15572] usb-storage 1-1:0.20: USB Mass Storage device detected [ 1069.370855][T15572] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1069.446284][T17641] comedi comedi0: Minor 6 could not be opened [ 1069.553123][T15572] usb 1-1: USB disconnect, device number 91 [ 1070.206530][T17442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.534154][T17442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.571991][ T5812] Bluetooth: hci1: command tx timeout [ 1070.989978][T17605] wlan1 speed is unknown, defaulting to 1000 [ 1071.130700][T17442] team0: Port device team_slave_0 added [ 1071.148000][T17442] team0: Port device team_slave_1 added [ 1072.199887][T17671] comedi comedi0: Minor 6 could not be opened [ 1072.345003][T17442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.345020][T17442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.345045][T17442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.415808][T17442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.415835][T17442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.415861][T17442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.647410][ T5812] Bluetooth: hci1: command tx timeout [ 1072.901791][T17442] hsr_slave_0: entered promiscuous mode [ 1072.902667][T17442] hsr_slave_1: entered promiscuous mode [ 1072.903372][T17442] debugfs: 'hsr0' already exists in 'hsr' [ 1072.903389][T17442] Cannot create hsr debugfs directory [ 1072.930287][ T977] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 1073.033976][ T1104] bridge_slave_1: left allmulticast mode [ 1073.034005][ T1104] bridge_slave_1: left promiscuous mode [ 1073.034230][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.092100][ T977] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 1073.092129][ T977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.092149][ T977] usb 4-1: config 0 has no interface number 0 [ 1073.092201][ T977] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1073.092227][ T977] usb 4-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1073.099893][ T977] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1073.099921][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.099941][ T977] usb 4-1: Product: syz [ 1073.099954][ T977] usb 4-1: Manufacturer: syz [ 1073.099967][ T977] usb 4-1: SerialNumber: syz [ 1073.115674][ T977] usb 4-1: config 0 descriptor?? [ 1073.120883][T17678] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1073.131746][ T977] usb-storage 4-1:0.20: USB Mass Storage device detected [ 1073.142117][ T977] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1073.212130][ T1104] bridge_slave_0: left allmulticast mode [ 1073.212157][ T1104] bridge_slave_0: left promiscuous mode [ 1073.212433][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.323520][ T5887] usb 4-1: USB disconnect, device number 86 [ 1073.439182][ T5960] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1073.708982][ T5960] usb 1-1: device descriptor read/64, error -71 [ 1073.947410][ T5960] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1074.008601][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.557943][ T5960] usb 1-1: device descriptor read/64, error -71 [ 1074.678253][ T5960] usb usb1-port1: attempt power cycle [ 1074.743380][ T5812] Bluetooth: hci1: command tx timeout [ 1075.128148][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1075.218525][ T1104] bond0 (unregistering): Released all slaves [ 1075.408520][ T5960] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1075.468530][ T5960] usb 1-1: device descriptor read/8, error -71 [ 1075.727344][ T5960] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1075.747968][ T5960] usb 1-1: device descriptor read/8, error -71 [ 1075.867733][ T5960] usb usb1-port1: unable to enumerate USB device [ 1076.285629][ T1104] hsr_slave_0: left promiscuous mode [ 1076.359848][ T1104] hsr_slave_1: left promiscuous mode [ 1076.360837][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.418460][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.727476][ T5960] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 1076.900019][ T5960] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 1076.900046][ T5960] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.900065][ T5960] usb 4-1: config 0 has no interface number 0 [ 1076.900111][ T5960] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1076.900137][ T5960] usb 4-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1076.903185][ T5960] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1076.903213][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.903232][ T5960] usb 4-1: Product: syz [ 1076.903246][ T5960] usb 4-1: Manufacturer: syz [ 1076.903260][ T5960] usb 4-1: SerialNumber: syz [ 1076.996117][ T5960] usb 4-1: config 0 descriptor?? [ 1076.996891][T17718] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1077.006123][ T5960] usb-storage 4-1:0.20: USB Mass Storage device detected [ 1077.012776][ T5960] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1077.212753][ T5960] usb 4-1: USB disconnect, device number 87 [ 1079.564119][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 1079.887972][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 1081.707363][T11299] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1081.714441][T17605] chnl_net:caif_netlink_parms(): no params data found [ 1081.860999][T11299] usb 1-1: Using ep0 maxpacket: 16 [ 1081.863566][T11299] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.863590][T11299] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1081.866657][T11299] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1081.866685][T11299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.866704][T11299] usb 1-1: Product: syz [ 1081.866718][T11299] usb 1-1: Manufacturer: syz [ 1081.866731][T11299] usb 1-1: SerialNumber: syz [ 1082.808252][T11299] usb 1-1: 0:2 : does not exist [ 1082.815650][T11299] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1082.892601][T11299] usb 1-1: USB disconnect, device number 96 [ 1083.073131][T17770] udevd[17770]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1084.187452][ T7696] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 1085.395821][ T7696] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 1085.395850][ T7696] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.395869][ T7696] usb 1-1: config 0 has no interface number 0 [ 1085.395920][ T7696] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1085.395946][ T7696] usb 1-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1085.399500][ T7696] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1085.399527][ T7696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.399545][ T7696] usb 1-1: Product: syz [ 1085.399558][ T7696] usb 1-1: Manufacturer: syz [ 1085.399572][ T7696] usb 1-1: SerialNumber: syz [ 1085.419564][ T7696] usb 1-1: config 0 descriptor?? [ 1085.420304][T17786] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1085.431569][ T7696] usb-storage 1-1:0.20: USB Mass Storage device detected [ 1085.471665][ T7696] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1085.788070][T17811] comedi comedi0: Minor 6 could not be opened [ 1085.813456][ T7696] usb 1-1: USB disconnect, device number 97 [ 1086.460473][T17605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.461902][T17605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.462160][T17605] bridge_slave_0: entered allmulticast mode [ 1086.558052][T17605] bridge_slave_0: entered promiscuous mode [ 1086.708254][T17605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.708390][T17605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.708653][T17605] bridge_slave_1: entered allmulticast mode [ 1086.714411][T17605] bridge_slave_1: entered promiscuous mode [ 1087.766985][T17605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.791217][T17605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.167452][ T977] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 1088.320035][ T977] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 1088.320063][ T977] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.320083][ T977] usb 1-1: config 0 has no interface number 0 [ 1088.320129][ T977] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1088.320154][ T977] usb 1-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1088.322843][ T977] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1088.322861][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.322872][ T977] usb 1-1: Product: syz [ 1088.322879][ T977] usb 1-1: Manufacturer: syz [ 1088.322886][ T977] usb 1-1: SerialNumber: syz [ 1088.408930][ T977] usb 1-1: config 0 descriptor?? [ 1088.410224][T17843] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1088.412892][ T977] usb-storage 1-1:0.20: USB Mass Storage device detected [ 1088.441250][ T977] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1088.579885][T17605] team0: Port device team_slave_0 added [ 1088.620406][T11299] usb 1-1: USB disconnect, device number 98 [ 1088.811666][T17605] team0: Port device team_slave_1 added [ 1089.145534][T17852] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1090.412043][ T5812] Bluetooth: hci0: command 0x0401 tx timeout [ 1090.673811][T17605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.673827][T17605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.673853][T17605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.978285][T17605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.978302][T17605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.978328][T17605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.157519][ T977] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 1091.307501][T17442] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1091.311730][ T977] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 1091.311759][ T977] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.311779][ T977] usb 1-1: config 0 has no interface number 0 [ 1091.311825][ T977] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1091.311852][ T977] usb 1-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1091.314979][ T977] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1091.315008][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.315028][ T977] usb 1-1: Product: syz [ 1091.315041][ T977] usb 1-1: Manufacturer: syz [ 1091.315054][ T977] usb 1-1: SerialNumber: syz [ 1091.422320][ T977] usb 1-1: config 0 descriptor?? [ 1091.518477][T17882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1091.541301][ T977] usb-storage 1-1:0.20: USB Mass Storage device detected [ 1091.544812][ T977] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1092.669170][T17442] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1092.689108][ T977] usb 1-1: USB disconnect, device number 99 [ 1092.968786][T17442] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1092.973230][T17907] __nla_validate_parse: 21 callbacks suppressed [ 1092.973307][T17907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4256'. [ 1094.701355][T17442] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1095.938959][T17605] hsr_slave_0: entered promiscuous mode [ 1095.940445][T17605] hsr_slave_1: entered promiscuous mode [ 1095.941401][T17605] debugfs: 'hsr0' already exists in 'hsr' [ 1095.941423][T17605] Cannot create hsr debugfs directory [ 1098.139452][ T1104] bridge_slave_1: left allmulticast mode [ 1098.139490][ T1104] bridge_slave_1: left promiscuous mode [ 1098.139731][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.220665][ T1104] bridge_slave_0: left allmulticast mode [ 1098.220695][ T1104] bridge_slave_0: left promiscuous mode [ 1098.223118][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.327626][ T977] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 1098.539300][ T977] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 1098.539319][ T977] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.539329][ T977] usb 1-1: config 0 has no interface number 0 [ 1098.539356][ T977] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1098.539370][ T977] usb 1-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1098.541825][ T977] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1098.541842][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.541853][ T977] usb 1-1: Product: syz [ 1098.541860][ T977] usb 1-1: Manufacturer: syz [ 1098.541867][ T977] usb 1-1: SerialNumber: syz [ 1098.545662][ T977] usb 1-1: config 0 descriptor?? [ 1098.546473][T17945] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1098.555660][ T977] usb-storage 1-1:0.20: USB Mass Storage device detected [ 1098.560157][ T977] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1098.794739][T17959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4269'. [ 1098.804756][ T977] usb 1-1: USB disconnect, device number 100 [ 1098.805676][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1099.088104][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.925649][ T1104] bond0 (unregistering): Released all slaves [ 1100.585438][T17980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4275'. [ 1103.540582][ T1104] hsr_slave_0: left promiscuous mode [ 1103.577504][ T1104] hsr_slave_1: left promiscuous mode [ 1103.578733][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1103.602638][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1107.329135][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 1107.619265][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 1109.374651][T17984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4277'. [ 1110.385777][T10790] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1110.413343][T10790] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1110.431954][T10790] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1110.435390][T10790] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1110.436360][T10790] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1112.388819][T18060] ipvlan1: entered promiscuous mode [ 1112.429028][T18059] ipvlan1: left promiscuous mode [ 1112.589654][T10790] Bluetooth: hci5: command tx timeout [ 1112.804567][T18070] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4306'. [ 1112.845430][T18042] wlan1 speed is unknown, defaulting to 1000 [ 1114.159826][T17605] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1114.222252][T17605] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1114.601993][T17605] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1114.662563][T10790] Bluetooth: hci5: command tx timeout [ 1114.722446][T17605] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1115.936634][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.936710][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.366240][T18042] chnl_net:caif_netlink_parms(): no params data found [ 1116.737625][T10790] Bluetooth: hci5: command tx timeout [ 1117.529016][T18141] overlayfs: missing 'lowerdir' [ 1117.749714][ T1104] bridge_slave_1: left allmulticast mode [ 1117.749743][ T1104] bridge_slave_1: left promiscuous mode [ 1117.749993][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.829344][ T1104] bridge_slave_0: left allmulticast mode [ 1117.829376][ T1104] bridge_slave_0: left promiscuous mode [ 1117.829655][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.623409][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.745050][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1118.803632][ T1104] bond0 (unregistering): Released all slaves [ 1118.807366][T10790] Bluetooth: hci5: command tx timeout [ 1119.133948][ T977] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1119.162340][T18042] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.162417][T18042] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.162566][T18042] bridge_slave_0: entered allmulticast mode [ 1119.164070][T18042] bridge_slave_0: entered promiscuous mode [ 1119.178469][T18042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.178698][T18042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.178965][T18042] bridge_slave_1: entered allmulticast mode [ 1119.181816][T18042] bridge_slave_1: entered promiscuous mode [ 1119.248470][T18178] comedi comedi0: Minor 6 could not be opened [ 1124.214059][ T977] usb 2-1: device descriptor read/all, error -71 [ 1124.397415][ T1104] hsr_slave_0: left promiscuous mode [ 1124.447354][ T1104] hsr_slave_1: left promiscuous mode [ 1124.448946][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.519430][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1127.018323][ T977] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1127.179763][ T977] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1127.179792][ T977] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 1127.179810][ T977] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1127.179861][ T977] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1127.182138][ T977] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1127.182166][ T977] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1127.182186][ T977] usb 4-1: Product: syz [ 1127.182200][ T977] usb 4-1: Manufacturer: syz [ 1127.334375][ T977] cdc_wdm 4-1:1.0: skipping garbage [ 1127.334417][ T977] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1127.414527][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1127.432437][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1127.474138][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1127.496787][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1127.505079][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1127.567918][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 1127.748964][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 1128.956978][T18218] comedi comedi0: Minor 6 could not be opened [ 1128.963102][T18042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.056458][T18042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.219600][ T5812] Bluetooth: hci0: command tx timeout [ 1130.848332][ T5960] usb 4-1: USB disconnect, device number 88 [ 1132.287346][ T5812] Bluetooth: hci0: command tx timeout [ 1132.532828][T18042] team0: Port device team_slave_0 added [ 1132.581223][T18042] team0: Port device team_slave_1 added [ 1132.582184][T18208] wlan1 speed is unknown, defaulting to 1000 [ 1132.711898][T18243] IPv6: Can't replace route, no match found [ 1133.157546][ T5788] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 1133.708456][ T5788] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 1133.708478][ T5788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.708489][ T5788] usb 4-1: config 0 has no interface number 0 [ 1133.708526][ T5788] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1133.708551][ T5788] usb 4-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1133.773039][ T5788] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1133.773059][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.773070][ T5788] usb 4-1: Product: syz [ 1133.773078][ T5788] usb 4-1: Manufacturer: syz [ 1133.773085][ T5788] usb 4-1: SerialNumber: syz [ 1133.781238][ T5788] usb 4-1: config 0 descriptor?? [ 1133.822937][T18241] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1133.836754][ T5788] usb-storage 4-1:0.20: USB Mass Storage device detected [ 1133.853093][ T5788] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1134.056955][T18258] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1134.172826][T18042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1134.172845][T18042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.172869][T18042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1134.327435][ T5812] Bluetooth: hci0: command tx timeout [ 1134.366766][T18042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1134.366785][T18042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.366802][T18042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1134.595579][T10265] usb 4-1: USB disconnect, device number 89 [ 1135.956203][T18273] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4371'. [ 1136.019764][T18042] hsr_slave_0: entered promiscuous mode [ 1136.021699][T18042] hsr_slave_1: entered promiscuous mode [ 1136.410865][ T5812] Bluetooth: hci0: command 0x0419 tx timeout [ 1138.497967][T10790] Bluetooth: hci0: command 0x0419 tx timeout [ 1138.822376][ T5960] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 1138.981559][ T5960] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 1138.981581][ T5960] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.981592][ T5960] usb 4-1: config 0 has no interface number 0 [ 1138.981626][ T5960] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1138.981643][ T5960] usb 4-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1139.055840][ T5960] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1139.055864][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.055886][ T5960] usb 4-1: Product: syz [ 1139.055901][ T5960] usb 4-1: Manufacturer: syz [ 1139.055915][ T5960] usb 4-1: SerialNumber: syz [ 1139.080112][ T5960] usb 4-1: config 0 descriptor?? [ 1139.105233][T18301] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1139.123620][ T5960] usb-storage 4-1:0.20: USB Mass Storage device detected [ 1139.141232][ T5960] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1140.903509][T18208] chnl_net:caif_netlink_parms(): no params data found [ 1141.574955][ T5960] usb 4-1: USB disconnect, device number 90 [ 1142.007517][ T5788] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1142.146306][T18208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.146445][T18208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.146705][T18208] bridge_slave_0: entered allmulticast mode [ 1142.180646][T18208] bridge_slave_0: entered promiscuous mode [ 1142.184950][ T5788] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1142.184979][ T5788] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1142.185001][ T5788] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1142.185053][ T5788] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1142.185079][ T5788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 1142.185105][ T5788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 1142.186922][ T5788] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1142.186951][ T5788] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1142.186971][ T5788] usb 1-1: Product: syz [ 1142.186986][ T5788] usb 1-1: Manufacturer: syz [ 1142.747573][ T5788] cdc_wdm 1-1:1.0: skipping garbage [ 1142.747594][ T5788] cdc_wdm 1-1:1.0: skipping garbage [ 1142.757465][ T5788] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1143.066206][T18208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.066876][T18208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.082362][T18208] bridge_slave_1: entered allmulticast mode [ 1143.085489][T18208] bridge_slave_1: entered promiscuous mode [ 1143.563498][T18208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1143.615882][T18208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1144.471730][T18208] team0: Port device team_slave_0 added [ 1144.492820][T18208] team0: Port device team_slave_1 added [ 1144.631211][ T1104] bridge_slave_1: left allmulticast mode [ 1144.631241][ T1104] bridge_slave_1: left promiscuous mode [ 1144.631517][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.726722][ T1104] bridge_slave_0: left allmulticast mode [ 1144.726886][ T1104] bridge_slave_0: left promiscuous mode [ 1144.744549][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.162270][ T977] usb 1-1: USB disconnect, device number 101 [ 1145.364491][T18410] comedi comedi0: Minor 6 could not be opened [ 1146.594630][T18419] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1147.735844][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1147.828876][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1147.882905][ T1104] bond0 (unregistering): Released all slaves [ 1147.957372][ T5788] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1148.158376][ T5788] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1148.158405][ T5788] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1148.158424][ T5788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1148.158479][ T5788] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1148.158505][ T5788] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 1148.158531][ T5788] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 1148.184638][ T5788] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1148.184667][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1148.184686][ T5788] usb 2-1: Product: syz [ 1148.184700][ T5788] usb 2-1: Manufacturer: syz [ 1148.222613][T18208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1148.222629][T18208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.222654][T18208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1148.259331][T10790] Bluetooth: hci0: command 0x0419 tx timeout [ 1148.314005][ T5788] cdc_wdm 2-1:1.0: skipping garbage [ 1148.314025][ T5788] cdc_wdm 2-1:1.0: skipping garbage [ 1148.314131][ T5788] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1148.549136][T18208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1148.549153][T18208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.549180][T18208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1148.743144][ T1104] hsr_slave_0: left promiscuous mode [ 1148.793613][ T1104] hsr_slave_1: left promiscuous mode [ 1148.795011][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1148.839036][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1149.913352][T18467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4444'. [ 1150.108082][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 1150.268123][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 1150.753036][T11299] usb 2-1: USB disconnect, device number 86 [ 1150.815708][T18471] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4445'. [ 1152.756168][T18493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4453'. [ 1152.756808][T18493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4453'. [ 1152.757652][T18493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4453'. [ 1152.758133][T18493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4453'. [ 1152.758659][T18493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4453'. [ 1152.759078][T18493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4453'. [ 1152.761916][T18493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4453'. [ 1152.762359][T18493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4453'. [ 1153.128308][T18208] hsr_slave_0: entered promiscuous mode [ 1153.129844][T18208] hsr_slave_1: entered promiscuous mode [ 1153.130828][T18208] debugfs: 'hsr0' already exists in 'hsr' [ 1153.130853][T18208] Cannot create hsr debugfs directory [ 1153.388930][T18042] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1153.721160][T18042] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1153.807543][T18042] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1154.018578][T18042] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1155.059251][T18537] __nla_validate_parse: 81 callbacks suppressed [ 1155.059272][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'. [ 1155.059849][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'. [ 1155.060297][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'. [ 1155.060766][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'. [ 1155.061246][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'. [ 1155.061272][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'. [ 1155.061770][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'. [ 1155.062347][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'. [ 1155.062946][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'. [ 1155.063374][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'. [ 1157.580568][T18042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.125982][T18042] 8021q: adding VLAN 0 to HW filter on device team0 [ 1158.156793][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.157082][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.180428][T14938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.180649][T14938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.866926][T18618] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1159.033364][T18208] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1159.099778][T18208] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1159.739465][T18208] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1160.198662][T10790] Bluetooth: hci0: command 0x0419 tx timeout [ 1160.837967][T18208] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1162.093213][T18042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1162.382135][T18208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.405588][T18690] __nla_validate_parse: 65 callbacks suppressed [ 1162.405612][T18690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4503'. [ 1162.405643][T18690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4503'. [ 1162.432110][T18690] ip6gretap0: entered promiscuous mode [ 1162.436209][T18690] syz_tun: entered promiscuous mode [ 1162.443976][T18690] debugfs: 'hsr1' already exists in 'hsr' [ 1162.444013][T18690] Cannot create hsr debugfs directory [ 1162.510350][T18208] 8021q: adding VLAN 0 to HW filter on device team0 [ 1162.529586][ T6980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.532480][ T6980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1163.682578][ T6004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.682767][ T6004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1163.773711][T18689] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1164.411282][T10790] Bluetooth: hci0: command 0x0419 tx timeout [ 1164.559651][T18744] overlayfs: missing 'lowerdir' [ 1165.200957][T18042] veth0_vlan: entered promiscuous mode [ 1166.681299][T18042] veth1_vlan: entered promiscuous mode [ 1166.734896][T18208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1167.858630][T18042] veth0_macvtap: entered promiscuous mode [ 1167.935763][T18042] veth1_macvtap: entered promiscuous mode [ 1168.064204][T18042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1168.095021][T18042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1168.177691][T10265] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 1168.198732][ T6980] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.202314][ T6980] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.222380][ T6980] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.225447][ T6980] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.622254][T10265] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 1168.622283][T10265] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.622301][T10265] usb 4-1: config 0 has no interface number 0 [ 1168.622351][T10265] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1168.622379][T10265] usb 4-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1168.626282][T10265] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1168.626315][T10265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.626335][T10265] usb 4-1: Product: syz [ 1168.626365][T10265] usb 4-1: Manufacturer: syz [ 1168.626379][T10265] usb 4-1: SerialNumber: syz [ 1168.923419][T10265] usb 4-1: config 0 descriptor?? [ 1169.431886][T18800] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1169.435901][T10265] usb-storage 4-1:0.20: USB Mass Storage device detected [ 1169.474765][T10265] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1169.749616][T18208] veth0_vlan: entered promiscuous mode [ 1169.779262][T18208] veth1_vlan: entered promiscuous mode [ 1169.915923][T18208] veth0_macvtap: entered promiscuous mode [ 1171.017983][T18208] veth1_macvtap: entered promiscuous mode [ 1171.046002][T10265] usb 4-1: USB disconnect, device number 91 [ 1171.398708][T18208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1171.423520][T18208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1171.532231][T14796] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.537306][T14796] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.537606][T14796] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.537845][T14796] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.623662][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1172.647039][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1172.650306][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1172.654317][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1172.658380][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1172.688756][ T5960] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1172.791404][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1172.791425][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.840368][ T5960] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1172.840403][ T5960] usb 1-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 1172.840424][ T5960] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1172.840480][ T5960] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1172.848548][ T5960] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1172.848582][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1172.848603][ T5960] usb 1-1: Product: syz [ 1172.848618][ T5960] usb 1-1: Manufacturer: syz [ 1172.896954][ T5960] cdc_wdm 1-1:1.0: skipping garbage [ 1172.896976][ T5960] cdc_wdm 1-1:1.0: skipping garbage [ 1172.897011][ T5960] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1173.185013][ T6980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.185043][ T6980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.590709][T14796] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.712609][T18880] wlan1 speed is unknown, defaulting to 1000 [ 1174.808554][T10790] Bluetooth: hci1: command tx timeout [ 1175.161506][T14796] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.196609][T18932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4560'. [ 1175.196648][T18932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4560'. [ 1175.486281][ T5888] usb 1-1: USB disconnect, device number 102 [ 1175.642069][T14796] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.757403][ T5959] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1175.888860][T18961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4567'. [ 1175.918021][ T5959] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1175.918051][ T5959] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1175.918073][ T5959] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1175.918129][ T5959] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1175.918156][ T5959] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1175.920628][ T5959] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1175.920659][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1175.920679][ T5959] usb 2-1: Product: syz [ 1175.920694][ T5959] usb 2-1: Manufacturer: syz [ 1176.042346][ T5959] cdc_wdm 2-1:1.0: skipping garbage [ 1176.042365][ T5959] cdc_wdm 2-1:1.0: skipping garbage [ 1176.049094][ T5959] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1176.049116][ T5959] cdc_wdm 2-1:1.0: Unknown control protocol [ 1176.887381][ T5812] Bluetooth: hci1: command tx timeout [ 1177.206381][T14796] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.372674][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.372749][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.776009][ T5959] usb 2-1: USB disconnect, device number 87 [ 1177.802441][T18880] chnl_net:caif_netlink_parms(): no params data found [ 1178.967328][ T5812] Bluetooth: hci1: command tx timeout [ 1179.131189][T10265] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1179.279833][T10265] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1179.279866][T10265] usb 4-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 1179.279886][T10265] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1179.279938][T10265] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1179.282248][T10265] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1179.282277][T10265] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1179.282298][T10265] usb 4-1: Product: syz [ 1179.282312][T10265] usb 4-1: Manufacturer: syz [ 1179.390897][T10265] cdc_wdm 4-1:1.0: skipping garbage [ 1179.390917][T10265] cdc_wdm 4-1:1.0: skipping garbage [ 1179.390954][T10265] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1179.426390][T19020] comedi comedi0: Minor 6 could not be opened [ 1179.799036][T18880] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.799115][T18880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.799302][T18880] bridge_slave_0: entered allmulticast mode [ 1179.801073][T18880] bridge_slave_0: entered promiscuous mode [ 1179.803380][T19035] tipc: Started in network mode [ 1179.803409][T19035] tipc: Node identity 96c22272b0f7, cluster identity 4711 [ 1179.804303][T19035] tipc: Enabled bearer , priority 0 [ 1179.806381][T19028] syzkaller0: entered promiscuous mode [ 1179.806405][T19028] syzkaller0: entered allmulticast mode [ 1179.813010][T18880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.813142][T18880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.813409][T18880] bridge_slave_1: entered allmulticast mode [ 1179.819681][T18880] bridge_slave_1: entered promiscuous mode [ 1179.825892][T19028] tipc: Resetting bearer [ 1179.909608][T19027] tipc: Resetting bearer [ 1180.238209][T19027] tipc: Disabling bearer [ 1180.469577][T14796] bridge_slave_1: left allmulticast mode [ 1180.469606][T14796] bridge_slave_1: left promiscuous mode [ 1180.470017][T14796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.344983][T14796] bridge_slave_0: left allmulticast mode [ 1181.345013][T14796] bridge_slave_0: left promiscuous mode [ 1181.345292][T14796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.427259][ T5812] Bluetooth: hci1: command tx timeout [ 1181.569955][T19058] comedi comedi0: Minor 6 could not be opened [ 1181.868001][ T5888] usb 4-1: USB disconnect, device number 92 [ 1185.447117][T19099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4611'. [ 1186.357545][ T5887] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1186.605589][ T5887] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1186.605619][ T5887] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1186.605639][ T5887] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1186.605690][ T5887] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1186.609107][ T5887] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1186.609136][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1186.609156][ T5887] usb 4-1: Product: syz [ 1186.609169][ T5887] usb 4-1: Manufacturer: syz [ 1186.636067][ T5887] cdc_wdm 4-1:1.0: skipping garbage [ 1186.636087][ T5887] cdc_wdm 4-1:1.0: skipping garbage [ 1186.636101][ T5887] cdc_wdm 4-1:1.0: skipping garbage [ 1186.636134][ T5887] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1187.058005][T14796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1187.148497][T14796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1187.170111][T14796] bond0 (unregistering): Released all slaves [ 1187.398790][T19074] veth4: entered allmulticast mode [ 1187.516667][T18880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1187.537696][T18880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1187.666933][T19115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4617'. [ 1187.718248][T14796] hsr_slave_0: left promiscuous mode [ 1187.757537][T14796] hsr_slave_1: left promiscuous mode [ 1187.758640][T14796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1187.758664][T14796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1187.789687][T19120] comedi comedi0: Minor 6 could not be opened [ 1187.805658][T14796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1187.805688][T14796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1187.960533][T14796] veth1_macvtap: left promiscuous mode [ 1187.960696][T14796] veth0_macvtap: left promiscuous mode [ 1187.960872][T14796] veth1_vlan: left promiscuous mode [ 1187.960975][T14796] veth0_vlan: left promiscuous mode [ 1189.127569][ T5788] usb 4-1: USB disconnect, device number 93 [ 1189.507444][ T5788] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1189.657516][ T5788] usb 4-1: Using ep0 maxpacket: 32 [ 1189.659569][ T5788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.659595][ T5788] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1189.662627][ T5788] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1189.662648][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.662659][ T5788] usb 4-1: Product: syz [ 1189.662667][ T5788] usb 4-1: Manufacturer: syz [ 1189.662675][ T5788] usb 4-1: SerialNumber: syz [ 1189.668235][ T5788] usb 4-1: config 0 descriptor?? [ 1190.897915][T14796] team0 (unregistering): Port device team_slave_1 removed [ 1191.178264][T14796] team0 (unregistering): Port device team_slave_0 removed [ 1194.508531][T18880] team0: Port device team_slave_0 added [ 1194.539781][T18880] team0: Port device team_slave_1 added [ 1194.575943][T19145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4627'. [ 1194.730528][ T5959] usb 4-1: USB disconnect, device number 94 [ 1195.252027][T19157] tipc: Started in network mode [ 1195.252060][T19157] tipc: Node identity fe5d6a4131f4, cluster identity 4711 [ 1195.252282][T19157] tipc: Enabled bearer , priority 0 [ 1196.335688][T19157] tipc: Resetting bearer [ 1196.463872][T19161] syzkaller0: entered promiscuous mode [ 1196.463906][T19161] syzkaller0: entered allmulticast mode [ 1196.486633][T19176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4636'. [ 1196.621042][ C0] vkms_vblank_simulate: vblank timer overrun [ 1196.669710][ C0] vkms_vblank_simulate: vblank timer overrun [ 1196.680028][T19151] tipc: Resetting bearer [ 1196.802653][ C0] vkms_vblank_simulate: vblank timer overrun [ 1196.871967][ C0] vkms_vblank_simulate: vblank timer overrun [ 1196.876310][T19151] tipc: Disabling bearer [ 1196.939769][ C0] vkms_vblank_simulate: vblank timer overrun [ 1197.014403][ C0] vkms_vblank_simulate: vblank timer overrun [ 1197.129505][T18880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.129528][T18880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.129554][T18880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.130204][ T5887] tipc: Node number set to 3483986497 [ 1197.228396][T18880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.228414][T18880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.228442][T18880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1197.772148][ C0] vkms_vblank_simulate: vblank timer overrun [ 1197.824995][ C0] vkms_vblank_simulate: vblank timer overrun [ 1197.927520][ C0] vkms_vblank_simulate: vblank timer overrun [ 1198.162299][T18880] hsr_slave_0: entered promiscuous mode [ 1198.163786][T18880] hsr_slave_1: entered promiscuous mode [ 1198.314738][T19226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4643'. [ 1198.314760][T19226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4643'. [ 1198.810620][ C0] vkms_vblank_simulate: vblank timer overrun [ 1198.811955][ T5788] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1198.996277][ C0] vkms_vblank_simulate: vblank timer overrun [ 1199.001288][ T5788] usb 5-1: Using ep0 maxpacket: 16 [ 1199.725631][ C0] vkms_vblank_simulate: vblank timer overrun [ 1199.735466][ T5788] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1199.735492][ T5788] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1199.755485][ T5788] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1199.755515][ T5788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.755535][ T5788] usb 5-1: Product: syz [ 1199.755548][ T5788] usb 5-1: Manufacturer: syz [ 1199.755563][ T5788] usb 5-1: SerialNumber: syz [ 1199.969264][ T5788] usb 5-1: 0:2 : does not exist [ 1199.975785][ T5788] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1200.036835][ T5788] usb 5-1: USB disconnect, device number 31 [ 1200.107803][ C0] vkms_vblank_simulate: vblank timer overrun [ 1200.139694][T19153] udevd[19153]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1201.406710][ C0] vkms_vblank_simulate: vblank timer overrun [ 1201.916365][T19274] comedi comedi0: Minor 6 could not be opened [ 1202.747627][ T5887] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1203.007922][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 1203.011410][ T5887] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.011436][ T5887] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1203.013517][ T5887] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1203.013535][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.013546][ T5887] usb 1-1: Product: syz [ 1203.013554][ T5887] usb 1-1: Manufacturer: syz [ 1203.013562][ T5887] usb 1-1: SerialNumber: syz [ 1204.438734][ T5887] usb 1-1: 0:2 : does not exist [ 1204.452902][ T5887] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1204.599691][ T5887] usb 1-1: USB disconnect, device number 103 [ 1204.724204][T19153] udevd[19153]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1211.177437][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4685'. [ 1211.178075][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4685'. [ 1211.178573][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4685'. [ 1211.179455][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4685'. [ 1211.180250][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4685'. [ 1211.182453][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4685'. [ 1211.183034][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4685'. [ 1211.183452][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4685'. [ 1211.187346][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4685'. [ 1211.187928][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4685'. [ 1212.120677][T18880] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1212.152689][T18880] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1212.203858][T18880] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1212.265550][T18880] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1212.629480][T18880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1212.691908][T18880] 8021q: adding VLAN 0 to HW filter on device team0 [ 1212.712887][ T6980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.713042][ T6980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1212.768477][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.774026][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1214.627077][T18880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1216.251155][T19473] syzkaller0: entered promiscuous mode [ 1216.251181][T19473] syzkaller0: entered allmulticast mode [ 1216.450882][T19487] __nla_validate_parse: 64 callbacks suppressed [ 1216.450906][T19487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4732'. [ 1216.658866][T19491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4734'. [ 1216.858564][T19501] geneve0: entered allmulticast mode [ 1217.397835][T18880] veth0_vlan: entered promiscuous mode [ 1217.405676][T18880] veth1_vlan: entered promiscuous mode [ 1217.425395][T18880] veth0_macvtap: entered promiscuous mode [ 1217.432189][T18880] veth1_macvtap: entered promiscuous mode [ 1217.450616][T18880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1217.453960][T18880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1217.539319][ T1174] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.578112][ T1174] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.611599][ T7344] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.611651][ T7344] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.907984][T19516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4740'. [ 1221.471572][ T6980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.471595][ T6980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.640171][T19544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4747'. [ 1221.643848][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.643868][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.884901][T19551] netlink: 332 bytes leftover after parsing attributes in process `syz.3.4749'. [ 1221.884981][T19551] netlink: 'syz.3.4749': attribute type 9 has an invalid length. [ 1221.884995][T19551] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4749'. [ 1222.156124][T19557] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4750'. [ 1222.452240][T19568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4752'. [ 1225.043677][T19607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4767'. [ 1225.461517][T19620] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4770'. [ 1225.461582][T19620] netlink: 'syz.0.4770': attribute type 9 has an invalid length. [ 1225.461596][T19620] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4770'. [ 1226.050493][T10790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1226.125701][T10790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1226.148112][T10790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1226.179693][T10790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1226.224419][T10790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1228.756973][ T5812] Bluetooth: hci4: command tx timeout [ 1229.256797][T19624] wlan1 speed is unknown, defaulting to 1000 [ 1229.284579][T19655] netlink: 332 bytes leftover after parsing attributes in process `syz.5.4780'. [ 1229.284650][T19655] netlink: 'syz.5.4780': attribute type 9 has an invalid length. [ 1229.284664][T19655] netlink: 160 bytes leftover after parsing attributes in process `syz.5.4780'. [ 1229.797656][T19680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4786'. [ 1230.348901][T19624] chnl_net:caif_netlink_parms(): no params data found [ 1230.807341][ T5812] Bluetooth: hci4: command tx timeout [ 1232.929322][ T5812] Bluetooth: hci4: command tx timeout [ 1236.726610][ T5812] Bluetooth: hci4: command tx timeout [ 1237.319091][T19624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.319242][T19624] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.319619][T19624] bridge_slave_0: entered allmulticast mode [ 1237.322617][T19624] bridge_slave_0: entered promiscuous mode [ 1237.402263][T19624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.402425][T19624] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.402871][T19624] bridge_slave_1: entered allmulticast mode [ 1237.405970][T19624] bridge_slave_1: entered promiscuous mode [ 1237.728502][T10265] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1238.402113][T10265] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1238.402144][T10265] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1238.402165][T10265] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1238.402221][T10265] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1238.402249][T10265] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1238.404970][T10265] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1238.404999][T10265] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1238.405020][T10265] usb 6-1: Product: syz [ 1238.405034][T10265] usb 6-1: Manufacturer: syz [ 1238.425680][T10265] cdc_wdm 6-1:1.0: skipping garbage [ 1238.425703][T10265] cdc_wdm 6-1:1.0: skipping garbage [ 1238.432397][T10265] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1238.432421][T10265] cdc_wdm 6-1:1.0: Unknown control protocol [ 1238.813661][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.813735][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.899348][T19624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1239.084275][T19624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1240.041054][ C1] wdm_int_callback: 778 callbacks suppressed [ 1240.041081][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 4 bytes [ 1240.361252][T19624] team0: Port device team_slave_0 added [ 1240.385591][T19624] team0: Port device team_slave_1 added [ 1240.386840][T19771] tipc: Enabled bearer , priority 0 [ 1241.398457][T10265] usb 6-1: USB disconnect, device number 2 [ 1241.702249][T19770] tipc: Disabling bearer [ 1241.972578][T19624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1241.972596][T19624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.972622][T19624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1242.126897][T19624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1242.126933][T19624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.126959][T19624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1243.944258][T19842] netlink: 'syz.4.4830': attribute type 1 has an invalid length. [ 1243.967581][ T5959] IPVS: starting estimator thread 0... [ 1244.115320][T19846] IPVS: using max 8 ests per chain, 19200 per kthread [ 1244.133690][T19851] netlink: 'syz.4.4830': attribute type 96 has an invalid length. [ 1257.454579][T10790] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1257.512428][T10790] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1257.514569][T10790] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1257.516100][T10790] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1257.518070][T10790] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1259.556783][T10790] Bluetooth: hci5: command tx timeout [ 1259.819397][ T5812] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1259.849958][ T5812] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1259.851420][ T5812] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1259.855513][ T5812] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1259.856310][ T5812] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1259.959216][ T5812] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1259.974894][ T5812] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1259.985227][ T5812] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1260.002445][ T5812] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1260.003193][ T5812] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1260.049536][T19624] hsr_slave_0: entered promiscuous mode [ 1260.051028][T19624] hsr_slave_1: entered promiscuous mode [ 1260.051992][T19624] debugfs: 'hsr0' already exists in 'hsr' [ 1260.052015][T19624] Cannot create hsr debugfs directory [ 1260.053698][T19842] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1260.095529][T19853] tipc: Started in network mode [ 1260.095562][T19853] tipc: Node identity 66616cb31c1b, cluster identity 4711 [ 1260.095777][T19853] tipc: Enabled bearer , priority 0 [ 1260.244058][ T5812] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1260.257742][ T5812] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1260.270621][ T5812] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1260.272554][ T5812] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1260.273232][ T5812] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1260.279152][T19849] tipc: Disabling bearer [ 1261.377450][T19856] syz_tun (unregistering): left promiscuous mode [ 1261.607818][T10790] Bluetooth: hci5: command tx timeout [ 1262.007481][T10790] Bluetooth: hci7: command tx timeout [ 1262.087469][T10790] Bluetooth: hci8: command tx timeout [ 1262.407700][T10790] Bluetooth: hci9: command tx timeout [ 1262.486111][T19865] wlan1 speed is unknown, defaulting to 1000 [ 1262.525182][T19859] wlan1 speed is unknown, defaulting to 1000 [ 1262.702910][ T6980] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.754277][T19867] wlan1 speed is unknown, defaulting to 1000 [ 1262.785729][T19872] wlan1 speed is unknown, defaulting to 1000 [ 1263.062236][ T6980] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.362225][ T6980] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.622248][T19624] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.687405][T10790] Bluetooth: hci5: command tx timeout [ 1263.883436][ T6980] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.087426][T10790] Bluetooth: hci7: command tx timeout [ 1264.106953][T19624] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.167413][T10790] Bluetooth: hci8: command tx timeout [ 1264.465050][T19624] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.487456][T10790] Bluetooth: hci9: command tx timeout [ 1264.820150][T19624] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.999255][T19865] chnl_net:caif_netlink_parms(): no params data found [ 1265.090642][T19859] chnl_net:caif_netlink_parms(): no params data found [ 1265.285648][T19872] chnl_net:caif_netlink_parms(): no params data found [ 1265.405282][T19867] chnl_net:caif_netlink_parms(): no params data found [ 1265.476781][ T6980] b: left allmulticast mode [ 1265.476957][ T6980] bridge0: port 2(b) entered disabled state [ 1265.548794][ T6980] bridge_slave_0: left allmulticast mode [ 1265.548815][ T6980] bridge_slave_0: left promiscuous mode [ 1265.549066][ T6980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.767447][T10790] Bluetooth: hci5: command tx timeout [ 1265.987489][ T6980] ip6gretap0 (unregistering): left promiscuous mode [ 1266.167492][T10790] Bluetooth: hci7: command tx timeout [ 1266.247438][T10790] Bluetooth: hci8: command tx timeout [ 1266.575856][T10790] Bluetooth: hci9: command tx timeout [ 1267.928830][ T6980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1267.998120][ T6980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1268.040135][ T6980] bond0 (unregistering): Released all slaves [ 1268.270015][ T5812] Bluetooth: hci7: command tx timeout [ 1268.327550][T10790] Bluetooth: hci8: command tx timeout [ 1268.647776][T10790] Bluetooth: hci9: command tx timeout [ 1268.789233][T19865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.789369][T19865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.789655][T19865] bridge_slave_0: entered allmulticast mode [ 1268.824714][T19865] bridge_slave_0: entered promiscuous mode [ 1268.931948][T19865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.932148][T19865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.932314][T19865] bridge_slave_1: entered allmulticast mode [ 1268.933877][T19865] bridge_slave_1: entered promiscuous mode [ 1269.095298][T19859] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.095421][T19859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.095701][T19859] bridge_slave_0: entered allmulticast mode [ 1269.099312][T19859] bridge_slave_0: entered promiscuous mode [ 1269.322324][T19859] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.322452][T19859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.322690][T19859] bridge_slave_1: entered allmulticast mode [ 1269.325553][T19859] bridge_slave_1: entered promiscuous mode [ 1269.598820][T19872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.598942][T19872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.599096][T19872] bridge_slave_0: entered allmulticast mode [ 1269.600719][T19872] bridge_slave_0: entered promiscuous mode [ 1269.671636][T19865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1269.671730][T19624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1269.778672][T19872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.778860][T19872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.779140][T19872] bridge_slave_1: entered allmulticast mode [ 1269.780856][T19872] bridge_slave_1: entered promiscuous mode [ 1269.907590][ T6980] hsr_slave_0: left promiscuous mode [ 1269.908308][ T6980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1269.908326][ T6980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.929171][ T6980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1269.929199][ T6980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1270.021603][ T6980] veth1_macvtap: left promiscuous mode [ 1270.021675][ T6980] veth0_macvtap: left promiscuous mode [ 1270.022060][ T6980] veth1_vlan: left promiscuous mode [ 1270.022160][ T6980] veth0_vlan: left promiscuous mode [ 1272.529076][ T6980] team0 (unregistering): Port device team_slave_1 removed [ 1272.838017][ T6980] team0 (unregistering): Port device team_slave_0 removed [ 1275.688168][T19867] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.688258][T19867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.688459][T19867] bridge_slave_0: entered allmulticast mode [ 1275.690056][T19867] bridge_slave_0: entered promiscuous mode [ 1275.694106][T19865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1275.694455][T19624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1275.746606][T19859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1275.871120][T19867] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.871202][T19867] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.871340][T19867] bridge_slave_1: entered allmulticast mode [ 1275.872907][T19867] bridge_slave_1: entered promiscuous mode [ 1275.969393][T19624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1275.992936][T19859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1276.308845][T19624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1276.414339][T19872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1276.490890][T19865] team0: Port device team_slave_0 added [ 1276.573567][T19872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1276.577153][T19867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1276.581763][T19865] team0: Port device team_slave_1 added [ 1276.587826][T19859] team0: Port device team_slave_0 added [ 1276.714913][T19867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1276.840840][T19859] team0: Port device team_slave_1 added [ 1277.410311][T19872] team0: Port device team_slave_0 added [ 1277.570055][T19865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1277.570069][T19865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1277.570084][T19865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1277.573363][T19872] team0: Port device team_slave_1 added [ 1277.575254][T19867] team0: Port device team_slave_0 added [ 1277.582583][T19859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1277.582601][T19859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1277.582626][T19859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1277.635083][T19865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1277.635100][T19865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1277.635127][T19865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1277.730170][T19867] team0: Port device team_slave_1 added [ 1277.732758][T19859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1277.732769][T19859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1277.732784][T19859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1277.909743][T19872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1277.909759][T19872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1277.909784][T19872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1278.027708][T19872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1278.027724][T19872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1278.027751][T19872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1278.029247][T19867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1278.029256][T19867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1278.029270][T19867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1278.215527][T19867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1278.215538][T19867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1278.215552][T19867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1278.514246][T19865] hsr_slave_0: entered promiscuous mode [ 1278.515138][T19865] hsr_slave_1: entered promiscuous mode [ 1278.515744][T19865] debugfs: 'hsr0' already exists in 'hsr' [ 1278.515761][T19865] Cannot create hsr debugfs directory [ 1278.535415][T19859] hsr_slave_0: entered promiscuous mode [ 1278.536795][T19859] hsr_slave_1: entered promiscuous mode [ 1278.541572][T19859] debugfs: 'hsr0' already exists in 'hsr' [ 1278.541601][T19859] Cannot create hsr debugfs directory [ 1279.596176][T19867] hsr_slave_0: entered promiscuous mode [ 1279.597070][T19867] hsr_slave_1: entered promiscuous mode [ 1279.598870][T19867] debugfs: 'hsr0' already exists in 'hsr' [ 1279.598895][T19867] Cannot create hsr debugfs directory [ 1279.683468][T19872] hsr_slave_0: entered promiscuous mode [ 1279.684381][T19872] hsr_slave_1: entered promiscuous mode [ 1279.684967][T19872] debugfs: 'hsr0' already exists in 'hsr' [ 1279.684983][T19872] Cannot create hsr debugfs directory [ 1280.000081][ T6980] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.389392][ T6980] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.749932][ T6980] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.112571][ T6980] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.803352][T19865] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1281.895305][T19865] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1281.953176][T19865] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1282.044219][T19865] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1282.275292][ T6980] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.314689][T19624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1282.531644][ T6980] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.633173][T19624] 8021q: adding VLAN 0 to HW filter on device team0 [ 1282.641891][T19859] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1282.820943][ T6980] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.840439][T19859] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1282.883143][T19859] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1282.941638][T19859] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1282.962471][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.962600][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1283.099504][ T6980] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.160094][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.160256][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1283.257670][T19872] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1283.313990][T19872] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1283.362174][T19872] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1283.421811][T19872] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1283.796498][T19867] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1283.853943][ T6980] bridge_slave_1: left allmulticast mode [ 1283.853972][ T6980] bridge_slave_1: left promiscuous mode [ 1283.854216][ T6980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.930291][ T6980] bridge_slave_0: left allmulticast mode [ 1283.930321][ T6980] bridge_slave_0: left promiscuous mode [ 1283.930601][ T6980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.036782][ T6980] bridge_slave_1: left allmulticast mode [ 1284.036815][ T6980] bridge_slave_1: left promiscuous mode [ 1284.037102][ T6980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.090504][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1284.096235][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1284.112882][ T6980] bridge_slave_0: left allmulticast mode [ 1284.112912][ T6980] bridge_slave_0: left promiscuous mode [ 1284.113142][ T6980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.119024][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1284.123560][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1284.124255][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1286.167617][T10790] Bluetooth: hci0: command tx timeout [ 1286.728770][ T6980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1286.788066][ T6980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1286.830088][ T6980] bond0 (unregistering): Released all slaves [ 1288.274877][T10790] Bluetooth: hci0: command tx timeout [ 1288.809483][ T6980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1288.889577][ T6980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1288.910238][ T6980] bond0 (unregistering): Released all slaves [ 1288.930021][T19867] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1289.350912][T19867] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1289.410811][ T6980] tipc: Left network mode [ 1289.417047][T19867] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1289.596869][T19865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1289.600479][T19959] wlan1 speed is unknown, defaulting to 1000 [ 1290.212757][T19865] 8021q: adding VLAN 0 to HW filter on device team0 [ 1290.337480][T10790] Bluetooth: hci0: command tx timeout [ 1290.376744][T19859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.395569][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.395691][ T6111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.513772][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.513899][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1290.826655][T19859] 8021q: adding VLAN 0 to HW filter on device team0 [ 1290.877556][T19872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1291.017600][ T6980] hsr_slave_0: left promiscuous mode [ 1291.037458][ T6980] hsr_slave_1: left promiscuous mode [ 1291.038985][ T6980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1291.039007][ T6980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1291.088472][ T6980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1291.088501][ T6980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1291.257415][ T6980] hsr_slave_0: left promiscuous mode [ 1291.278722][ T6980] hsr_slave_1: left promiscuous mode [ 1291.279407][ T6980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1291.279423][ T6980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1291.328317][ T6980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1291.328345][ T6980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1291.446891][ T6980] veth1_macvtap: left promiscuous mode [ 1291.446990][ T6980] veth0_macvtap: left promiscuous mode [ 1291.449818][ T6980] veth1_vlan: left promiscuous mode [ 1291.450024][ T6980] veth0_vlan: left promiscuous mode [ 1291.577801][ T6980] veth1_macvtap: left promiscuous mode [ 1291.577872][ T6980] veth0_macvtap: left promiscuous mode [ 1291.578024][ T6980] veth1_vlan: left promiscuous mode [ 1291.578126][ T6980] veth0_vlan: left promiscuous mode [ 1292.438819][T10790] Bluetooth: hci0: command tx timeout [ 1294.458126][ T6980] team0 (unregistering): Port device team_slave_1 removed [ 1294.718134][ T6980] team0 (unregistering): Port device team_slave_0 removed [ 1300.048096][ T6980] team0 (unregistering): Port device team_slave_1 removed [ 1300.271985][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.272085][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.338857][ T6980] team0 (unregistering): Port device team_slave_0 removed [ 1303.381947][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.382089][ T6111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1303.389580][T19959] chnl_net:caif_netlink_parms(): no params data found [ 1303.553211][ T6004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.553347][ T6004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1303.636218][T19872] 8021q: adding VLAN 0 to HW filter on device team0 [ 1303.915806][T19959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.916025][T19959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.916241][T19959] bridge_slave_0: entered allmulticast mode [ 1303.920307][T19959] bridge_slave_0: entered promiscuous mode [ 1303.929997][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.930139][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1303.943628][T19867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1303.944852][T19959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.944998][T19959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.945221][T19959] bridge_slave_1: entered allmulticast mode [ 1303.949762][T19959] bridge_slave_1: entered promiscuous mode [ 1304.213417][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.213542][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1304.257786][T19959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1304.322786][T19959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1304.646111][T19959] team0: Port device team_slave_0 added [ 1304.659094][T19959] team0: Port device team_slave_1 added [ 1304.683907][T19867] 8021q: adding VLAN 0 to HW filter on device team0 [ 1304.906338][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.906620][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1304.910967][T19959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1304.910983][T19959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1304.911017][T19959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1304.969568][T19959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1304.969579][T19959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1304.969594][T19959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.046849][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.046949][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1305.349608][T19959] hsr_slave_0: entered promiscuous mode [ 1305.350991][T19959] hsr_slave_1: entered promiscuous mode [ 1305.366675][T19865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1305.985043][T19859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1306.044416][ T6980] IPVS: stop unused estimator thread 0... [ 1306.614424][T19872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1306.932128][T19865] veth0_vlan: entered promiscuous mode [ 1307.020901][T19865] veth1_vlan: entered promiscuous mode [ 1307.038789][T19867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1307.326473][T19859] veth0_vlan: entered promiscuous mode [ 1307.556006][T19859] veth1_vlan: entered promiscuous mode [ 1307.617076][T19865] veth0_macvtap: entered promiscuous mode [ 1307.665628][T19865] veth1_macvtap: entered promiscuous mode [ 1307.672698][T19872] veth0_vlan: entered promiscuous mode [ 1307.744277][T19872] veth1_vlan: entered promiscuous mode [ 1307.751164][ T6980] bridge_slave_1: left allmulticast mode [ 1307.751191][ T6980] bridge_slave_1: left promiscuous mode [ 1307.751433][ T6980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.858451][ T6980] bridge_slave_0: left allmulticast mode [ 1307.858471][ T6980] bridge_slave_0: left promiscuous mode [ 1307.858641][ T6980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.889401][ T6980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1309.948661][ T6980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1309.970151][ T6980] bond0 (unregistering): Released all slaves [ 1310.073881][T19865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1310.134505][T19859] veth0_macvtap: entered promiscuous mode [ 1310.192487][T19865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1310.246343][T19859] veth1_macvtap: entered promiscuous mode [ 1310.321907][ T1104] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.347876][ T1104] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.365138][ T1104] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.380465][T19959] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1310.421020][ T1104] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.537416][ T6980] hsr_slave_0: left promiscuous mode [ 1310.580724][ T6980] hsr_slave_1: left promiscuous mode [ 1310.581978][ T6980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1310.627998][ T6980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.502812][ T6980] team0 (unregistering): Port device team_slave_1 removed [ 1311.773726][ T6980] team0 (unregistering): Port device team_slave_0 removed [ 1314.322992][T19867] veth0_vlan: entered promiscuous mode [ 1314.325439][T19959] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1314.356341][T19959] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1314.414620][T19959] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1314.451579][T19859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1314.531528][T19872] veth0_macvtap: entered promiscuous mode [ 1314.534128][T19867] veth1_vlan: entered promiscuous mode [ 1314.553668][T19859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1314.683902][T19872] veth1_macvtap: entered promiscuous mode [ 1314.758669][ T6004] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.779403][ T6004] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.796153][ T6004] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.831872][ T6004] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.871039][ T7344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.871060][ T7344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.022632][T19872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1315.143455][T19872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1315.240835][ T6004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.240890][ T6004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.305717][T19867] veth0_macvtap: entered promiscuous mode [ 1315.323827][ T3562] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.401034][ T3562] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.404944][ T3562] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.419260][T19867] veth1_macvtap: entered promiscuous mode [ 1315.422892][ T3562] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.423307][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.423322][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.712982][ T7344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.713002][ T7344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.753930][T19867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1315.925842][T19867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1316.013489][ T6980] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.016032][ T6980] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.038546][ T6980] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.045166][ T6980] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.091486][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.091506][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.146351][T19959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1317.179943][ T6980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.179963][ T6980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.425625][T19959] 8021q: adding VLAN 0 to HW filter on device team0 [ 1317.492775][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.502296][ T6111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1317.551427][ T7344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.566825][ T7344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1317.573904][ T6980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.573926][ T6980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.583881][ T7344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.583902][ T7344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.805702][T19959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1321.280380][T19959] veth0_vlan: entered promiscuous mode [ 1321.315351][T19959] veth1_vlan: entered promiscuous mode [ 1321.446503][T20089] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4859'. [ 1321.577245][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1321.588893][T19959] veth0_macvtap: entered promiscuous mode [ 1321.611161][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1321.614778][T19959] veth1_macvtap: entered promiscuous mode [ 1321.616692][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1321.629722][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1321.632714][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1322.217360][ T5960] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1322.276277][T20111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1322.367536][ T5960] usb 10-1: Using ep0 maxpacket: 16 [ 1322.370136][ T5960] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.370162][ T5960] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1322.376140][ T5960] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1322.376170][ T5960] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.376192][ T5960] usb 10-1: Product: syz [ 1322.376207][ T5960] usb 10-1: Manufacturer: syz [ 1322.376223][ T5960] usb 10-1: SerialNumber: syz [ 1322.690366][T19959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1322.888352][ T5960] usb 10-1: 0:2 : does not exist [ 1322.888461][ T5960] usb 10-1: unit 6 not found! [ 1323.120397][ T5960] usb 10-1: USB disconnect, device number 2 [ 1323.217615][T20119] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4864'. [ 1323.342202][T20021] udevd[20021]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1323.427017][T20125] program syz.6.4866 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1323.688505][ T5812] Bluetooth: hci1: command tx timeout [ 1323.866011][T20092] wlan1 speed is unknown, defaulting to 1000 [ 1323.886337][T19959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1324.358085][T15572] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1324.432227][ T7344] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.537386][T15572] usb 9-1: Using ep0 maxpacket: 16 [ 1324.542762][T15572] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.542785][T15572] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1324.575590][T15572] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1324.575618][T15572] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.575638][T15572] usb 9-1: Product: syz [ 1324.575653][T15572] usb 9-1: Manufacturer: syz [ 1324.575666][T15572] usb 9-1: SerialNumber: syz [ 1324.607336][T14938] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.713182][T14938] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.725376][T14938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.744530][T20166] program syz.6.4876 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1324.888052][T15572] usb 9-1: 0:2 : does not exist [ 1324.888148][T15572] usb 9-1: unit 6 not found! [ 1324.952222][T15572] usb 9-1: USB disconnect, device number 2 [ 1325.100493][T20021] udevd[20021]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1325.178716][ T7344] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.247998][T14938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.429866][T20186] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4883'. [ 1325.429905][T20186] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4883'. [ 1325.670112][ T7344] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.777379][ T5812] Bluetooth: hci1: command tx timeout [ 1326.364797][ T7344] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.884309][ T5812] Bluetooth: hci1: command tx timeout [ 1329.927757][ T5812] Bluetooth: hci1: command tx timeout [ 1330.597858][T14938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.597879][T14938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.764849][ T7344] bridge_slave_1: left allmulticast mode [ 1331.764878][ T7344] bridge_slave_1: left promiscuous mode [ 1331.807233][ T7344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.028951][ T7344] bridge_slave_0: left allmulticast mode [ 1332.028981][ T7344] bridge_slave_0: left promiscuous mode [ 1332.029265][ T7344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.240609][T20281] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1334.343334][ T5812] Bluetooth: hci0: command 0x0401 tx timeout [ 1336.618581][ T7344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1336.697922][ T7344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1336.720942][ T7344] bond0 (unregistering): Released all slaves [ 1337.823361][T20092] chnl_net:caif_netlink_parms(): no params data found [ 1337.834511][T14796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1337.834597][T14796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.565760][T20389] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4917'. [ 1339.728704][T20391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4755'. [ 1343.134911][T20431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4927'. [ 1347.458893][T20452] netlink: 'syz.1.4931': attribute type 4 has an invalid length. [ 1347.512870][T20455] netlink: 'syz.1.4931': attribute type 4 has an invalid length. [ 1347.529062][ T7344] hsr_slave_0: left promiscuous mode [ 1347.569228][ T7344] hsr_slave_1: left promiscuous mode [ 1347.573455][ T7344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1347.573483][ T7344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1347.587196][T20458] Bluetooth: MGMT ver 1.23 [ 1347.631255][ T7344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1347.631282][ T7344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1347.794483][ T7344] veth1_macvtap: left promiscuous mode [ 1347.794597][ T7344] veth0_macvtap: left promiscuous mode [ 1347.794858][ T7344] veth1_vlan: left promiscuous mode [ 1347.795039][ T7344] veth0_vlan: left promiscuous mode [ 1351.028175][ T7344] team0 (unregistering): Port device team_slave_1 removed [ 1351.318176][ T7344] team0 (unregistering): Port device team_slave_0 removed [ 1354.627477][T20092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.627598][T20092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.627869][T20092] bridge_slave_0: entered allmulticast mode [ 1354.630521][T20092] bridge_slave_0: entered promiscuous mode [ 1354.753952][T20092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.754148][T20092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.754419][T20092] bridge_slave_1: entered allmulticast mode [ 1354.794451][T20092] bridge_slave_1: entered promiscuous mode [ 1356.975842][T20092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1356.993156][T20092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1360.767321][T20535] veth0_virt_wifi: renamed from veth1_vlan [ 1361.163826][T20092] team0: Port device team_slave_0 added [ 1361.179663][T20092] team0: Port device team_slave_1 added [ 1361.512538][T20092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1361.512553][T20092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.512573][T20092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1361.569357][T20092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1361.569375][T20092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.569402][T20092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1361.746290][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.746365][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.256838][T20092] hsr_slave_0: entered promiscuous mode [ 1363.266429][T20092] hsr_slave_1: entered promiscuous mode [ 1363.274271][T20092] debugfs: 'hsr0' already exists in 'hsr' [ 1363.274299][T20092] Cannot create hsr debugfs directory [ 1363.839171][T20606] comedi comedi0: Minor 6 could not be opened [ 1367.898070][T20637] comedi comedi0: Minor 6 could not be opened [ 1371.389563][T20676] comedi comedi0: Minor 6 could not be opened [ 1373.790430][T20723] comedi comedi0: Minor 6 could not be opened [ 1374.777383][T20702] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 1374.887447][ T5812] Bluetooth: hci0: command 0x0401 tx timeout [ 1377.908066][T20092] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1379.371024][T20092] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1379.508640][T20767] comedi comedi0: Minor 6 could not be opened [ 1380.670541][T20773] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5022'. [ 1384.334218][T20779] Bluetooth: hci9: command 0x0406 tx timeout [ 1384.334258][T20779] Bluetooth: hci5: command 0x0406 tx timeout [ 1384.334282][T20779] Bluetooth: hci7: command 0x0406 tx timeout [ 1384.518498][T20780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1384.543434][T20780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1384.550531][T20825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5034'. [ 1384.570991][T20780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1384.584961][T20780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1384.590291][T20780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1384.651851][T20784] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 1384.657376][ T5812] Bluetooth: hci0: command 0x0401 tx timeout [ 1385.173175][T20841] comedi comedi0: Minor 6 could not be opened [ 1385.802620][T20823] wlan1 speed is unknown, defaulting to 1000 [ 1386.734992][T18209] Bluetooth: hci3: command tx timeout [ 1387.461706][T20886] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5050'. [ 1387.493825][T20884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5048'. [ 1387.940607][T20897] comedi comedi0: Minor 6 could not be opened [ 1387.964090][T20897] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5054'. [ 1388.811340][T18209] Bluetooth: hci3: command tx timeout [ 1390.887622][T18209] Bluetooth: hci3: command tx timeout [ 1392.810188][T20941] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5064'. [ 1392.955314][T20945] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5066'. [ 1392.967422][T18209] Bluetooth: hci3: command tx timeout [ 1394.206864][T20975] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5078'. [ 1395.561203][T20823] chnl_net:caif_netlink_parms(): no params data found [ 1395.653700][T20993] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5082'. [ 1398.958325][T20823] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.958494][T20823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.958734][T20823] bridge_slave_0: entered allmulticast mode [ 1398.962536][T20823] bridge_slave_0: entered promiscuous mode [ 1399.040001][T21014] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1399.164666][T20823] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.164812][T20823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.165081][T20823] bridge_slave_1: entered allmulticast mode [ 1399.176274][T20823] bridge_slave_1: entered promiscuous mode [ 1399.225257][T21051] dummy0: entered promiscuous mode [ 1399.558929][T21051] dummy0: left promiscuous mode [ 1402.187112][T18209] Bluetooth: hci0: command 0x0401 tx timeout [ 1402.358270][T21075] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5103'. [ 1403.001326][T21098] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5110'. [ 1403.016810][T20823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1403.096429][T20823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1403.221011][T21103] netlink: 80 bytes leftover after parsing attributes in process `syz.9.5113'. [ 1404.928576][T20823] team0: Port device team_slave_0 added [ 1404.929929][T14938] bridge_slave_1: left allmulticast mode [ 1404.929954][T14938] bridge_slave_1: left promiscuous mode [ 1404.930217][T14938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.059138][T14938] bridge_slave_0: left allmulticast mode [ 1405.059167][T14938] bridge_slave_0: left promiscuous mode [ 1405.059456][T14938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.614784][T21160] netlink: 80 bytes leftover after parsing attributes in process `syz.6.5124'. [ 1408.043418][T14938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1408.324076][T14938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1408.439619][T14938] bond0 (unregistering): Released all slaves [ 1408.500679][T20823] team0: Port device team_slave_1 added [ 1408.504994][T21184] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5132'. [ 1409.698279][T18861] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1409.783647][T20823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1409.783664][T20823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1409.783689][T20823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1409.860232][T18861] usb 9-1: config 0 has an invalid interface number: 20 but max is 0 [ 1409.860262][T18861] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.860282][T18861] usb 9-1: config 0 has no interface number 0 [ 1409.860330][T18861] usb 9-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1409.860357][T18861] usb 9-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1409.863457][T18861] usb 9-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1409.863485][T18861] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.863505][T18861] usb 9-1: Product: syz [ 1409.863521][T18861] usb 9-1: Manufacturer: syz [ 1409.863535][T18861] usb 9-1: SerialNumber: syz [ 1409.873289][T18861] usb 9-1: config 0 descriptor?? [ 1409.874076][T21198] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1409.884905][T18861] usb-storage 9-1:0.20: USB Mass Storage device detected [ 1409.891919][T18861] usb-storage 9-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1409.935361][T18209] Bluetooth: hci0: command 0x0401 tx timeout [ 1410.116686][T18861] usb 9-1: USB disconnect, device number 3 [ 1410.260667][T14938] hsr_slave_0: left promiscuous mode [ 1410.297587][T14938] hsr_slave_1: left promiscuous mode [ 1410.298427][T14938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1410.502913][T14938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1411.908797][T21229] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5142'. [ 1412.417997][T14938] team0 (unregistering): Port device team_slave_1 removed [ 1412.588511][T14938] team0 (unregistering): Port device team_slave_0 removed [ 1413.374623][T20823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1413.374639][T20823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1413.374666][T20823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1413.611560][T21241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5147'. [ 1413.611601][T21241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5147'. [ 1413.855385][T21242] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5145'. [ 1414.409300][T20823] hsr_slave_0: entered promiscuous mode [ 1414.411064][T20823] hsr_slave_1: entered promiscuous mode [ 1414.412372][T20823] debugfs: 'hsr0' already exists in 'hsr' [ 1414.412449][T20823] Cannot create hsr debugfs directory [ 1414.647812][T18861] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1415.960067][T18861] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 1415.960095][T18861] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.960114][T18861] usb 2-1: config 0 has no interface number 0 [ 1415.960163][T18861] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1415.960189][T18861] usb 2-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1415.963581][T18861] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1415.963608][T18861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.963628][T18861] usb 2-1: Product: syz [ 1415.963642][T18861] usb 2-1: Manufacturer: syz [ 1415.963656][T18861] usb 2-1: SerialNumber: syz [ 1416.024563][T18861] usb 2-1: config 0 descriptor?? [ 1416.025328][T21245] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1416.041185][T18861] usb-storage 2-1:0.20: USB Mass Storage device detected [ 1416.078468][T18861] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1416.363974][T18861] usb 2-1: USB disconnect, device number 88 [ 1416.990505][T21274] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5155'. [ 1417.046636][T21276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5157'. [ 1417.046670][T21276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5157'. [ 1423.521771][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.625893][T21308] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5167'. [ 1423.625910][T21308] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5167'. [ 1423.858763][T21312] syzkaller0: entered promiscuous mode [ 1423.858790][T21312] syzkaller0: entered allmulticast mode [ 1424.087484][T21324] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5170'. [ 1426.080298][T21339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5172'. [ 1427.465201][T21352] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5177'. [ 1427.465227][T21352] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5177'. [ 1428.041271][T21365] syzkaller0: entered promiscuous mode [ 1428.041298][T21365] syzkaller0: entered allmulticast mode [ 1428.915614][T21380] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5186'. [ 1429.280935][T20823] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1429.333231][T20823] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1429.624285][T20823] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1430.579295][T21391] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5188'. [ 1430.616360][T21398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5189'. [ 1430.616385][T21398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5189'. [ 1430.849689][T20823] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1432.713803][T20823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1432.783788][T20823] 8021q: adding VLAN 0 to HW filter on device team0 [ 1432.813687][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1432.813871][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1432.960032][T21439] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5198'. [ 1432.965724][ T6111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1432.965938][ T6111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1433.010794][T21438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5198'. [ 1433.147787][T21445] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5200'. [ 1433.147812][T21445] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5200'. [ 1435.763722][T20823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1437.064115][T20823] veth0_vlan: entered promiscuous mode [ 1437.077145][T21535] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5221'. [ 1437.102210][T21528] wlan1 speed is unknown, defaulting to 1000 [ 1437.320535][T20823] veth1_vlan: entered promiscuous mode [ 1437.688291][T21537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5221'. [ 1437.695073][T21537] nbd: nbd64 already in use [ 1438.584246][T20823] veth0_macvtap: entered promiscuous mode [ 1438.622566][T20823] veth1_macvtap: entered promiscuous mode [ 1438.820118][T20823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1438.835778][T20823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1438.871280][ T6111] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.871657][ T6111] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.871697][ T6111] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.871732][ T6111] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.009280][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1440.009300][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1440.275514][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1440.275533][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1442.182545][T21673] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5258'. [ 1442.296476][T21674] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5260'. [ 1446.173999][T21666] wlan1 speed is unknown, defaulting to 1000 [ 1446.722788][T21718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5272'. [ 1448.486313][T21737] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5275'. [ 1450.201594][T21750] Can't find ip_set type hash:net,por [ 1452.117658][T21790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5286'. [ 1452.229720][T21796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5290'. [ 1455.436484][T21846] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5301'. [ 1456.720836][T21863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5306'. [ 1457.598116][T21884] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5311'. [ 1457.996991][T21895] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5314'. [ 1458.955936][T21873] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1459.207341][T20822] Bluetooth: hci0: command 0x0401 tx timeout [ 1459.452357][T21926] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5320'. [ 1460.197900][T21930] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5320'. [ 1460.198003][T21930] nbd: device at index 64 is going down [ 1460.642967][T21957] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5325'. [ 1460.703584][T21961] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5327'. [ 1460.887606][T21596] udevd[21596]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1460.912689][T21599] udevd[21599]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1461.001285][T21968] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5329'. [ 1461.325947][T21978] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5332'. [ 1462.681547][T22013] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5341'. [ 1463.652118][T21599] udevd[21599]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1464.359558][T22034] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5346'. [ 1464.505174][T22036] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5347'. [ 1465.308541][T21599] udevd[21599]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1465.359474][T22062] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5352'. [ 1467.385970][T22073] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5354'. [ 1467.921503][T22079] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5354'. [ 1467.921536][T22079] nbd: nbd64 already in use [ 1467.946134][T22088] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5358'. [ 1468.528116][T22107] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5363'. [ 1468.653261][T22110] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5365'. [ 1468.753961][T21599] udevd[21599]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1473.019409][T22145] syzkaller0: entered promiscuous mode [ 1473.019438][T22145] syzkaller0: entered allmulticast mode [ 1473.147348][T22153] netlink: 'syz.8.5375': attribute type 8 has an invalid length. [ 1473.647743][T22165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5378'. [ 1473.863857][T22152] wlan1 speed is unknown, defaulting to 1000 [ 1474.032219][T22153] wlan1 speed is unknown, defaulting to 1000 [ 1474.154324][T22179] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5381'. [ 1474.413674][ T1229] ------------[ cut here ]------------ [ 1474.413697][ T1229] WARNING: CPU: 0 PID: 1229 at kernel/kcov.c:477 kcov_task_exit+0x13c/0x150 [ 1474.413845][ T1229] Modules linked in: [ 1474.413882][ T1229] CPU: 0 UID: 0 PID: 1229 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1474.413907][ T1229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1474.413923][ T1229] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 1474.413952][ T1229] Code: c7 c7 50 45 c5 8e 48 c7 c6 1e 27 da 8c 48 c7 c2 e4 fc d8 8c 4c 89 f9 e8 42 61 f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 e4 3e 04 09 0f 1f 40 00 90 90 [ 1474.413972][ T1229] RSP: 0018:ffffc900054f7bc0 EFLAGS: 00010206 [ 1474.413990][ T1229] RAX: 5a980f2a1707db00 RBX: ffff88803041df00 RCX: 0000000000000000 [ 1474.414005][ T1229] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 1474.414020][ T1229] RBP: ffffc900054f7d38 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 1474.414035][ T1229] R10: dffffc0000000000 R11: fffffbfff1dac82f R12: dffffc0000000000 [ 1474.414052][ T1229] R13: 0000000000000000 R14: ffff88803041df08 R15: ffff888026a85a00 [ 1474.414066][ T1229] FS: 0000000000000000(0000) GS:ffff888126df6000(0000) knlGS:0000000000000000 [ 1474.414083][ T1229] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1474.414099][ T1229] CR2: 00007f653887f48d CR3: 0000000038c9a000 CR4: 00000000003526f0 [ 1474.414117][ T1229] Call Trace: [ 1474.414130][ T1229] [ 1474.414142][ T1229] do_exit+0x105/0x2300 [ 1474.414200][ T1229] ? worker_thread+0xcf7/0xda0 [ 1474.414233][ T1229] ? __pfx_do_exit+0x10/0x10 [ 1474.414282][ T1229] kthread_exit+0x22c/0x280 [ 1474.414314][ T1229] kthread+0x72f/0x8a0 [ 1474.414348][ T1229] ? __pfx_worker_thread+0x10/0x10 [ 1474.414373][ T1229] ? __pfx_kthread+0x10/0x10 [ 1474.414400][ T1229] ? rt_spin_unlock+0x150/0x200 [ 1474.414533][ T1229] ? rt_spin_unlock+0x161/0x200 [ 1474.414563][ T1229] ? __pfx_kthread+0x10/0x10 [ 1474.414594][ T1229] ret_from_fork+0x4bc/0x870 [ 1474.414633][ T1229] ? __pfx_ret_from_fork+0x10/0x10 [ 1474.414667][ T1229] ? __switch_to_asm+0x39/0x70 [ 1474.414706][ T1229] ? __switch_to_asm+0x33/0x70 [ 1474.414726][ T1229] ? __pfx_kthread+0x10/0x10 [ 1474.414756][ T1229] ret_from_fork_asm+0x1a/0x30 [ 1474.414794][ T1229] [ 1474.414808][ T1229] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1474.414823][ T1229] CPU: 0 UID: 0 PID: 1229 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1474.414846][ T1229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1474.414857][ T1229] Call Trace: [ 1474.414865][ T1229] [ 1474.414874][ T1229] dump_stack_lvl+0x99/0x250 [ 1474.414905][ T1229] ? __asan_memcpy+0x40/0x70 [ 1474.414953][ T1229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1474.414984][ T1229] ? __pfx__printk+0x10/0x10 [ 1474.415028][ T1229] vpanic+0x237/0x6d0 [ 1474.415049][ T1229] ? __pfx_vpanic+0x10/0x10 [ 1474.415081][ T1229] panic+0xb9/0xc0 [ 1474.415101][ T1229] ? __pfx_panic+0x10/0x10 [ 1474.415138][ T1229] __warn+0x31b/0x4b0 [ 1474.415157][ T1229] ? kcov_task_exit+0x13c/0x150 [ 1474.415187][ T1229] ? kcov_task_exit+0x13c/0x150 [ 1474.415213][ T1229] report_bug+0x2be/0x4f0 [ 1474.415308][ T1229] ? kcov_task_exit+0x13c/0x150 [ 1474.415334][ T1229] ? kcov_task_exit+0x13c/0x150 [ 1474.415358][ T1229] ? kcov_task_exit+0x13e/0x150 [ 1474.415381][ T1229] handle_bug+0x84/0x160 [ 1474.415449][ T1229] exc_invalid_op+0x1a/0x50 [ 1474.415468][ T1229] asm_exc_invalid_op+0x1a/0x20 [ 1474.415533][ T1229] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 1474.415564][ T1229] Code: c7 c7 50 45 c5 8e 48 c7 c6 1e 27 da 8c 48 c7 c2 e4 fc d8 8c 4c 89 f9 e8 42 61 f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 e4 3e 04 09 0f 1f 40 00 90 90 [ 1474.415582][ T1229] RSP: 0018:ffffc900054f7bc0 EFLAGS: 00010206 [ 1474.415599][ T1229] RAX: 5a980f2a1707db00 RBX: ffff88803041df00 RCX: 0000000000000000 [ 1474.415614][ T1229] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 1474.415629][ T1229] RBP: ffffc900054f7d38 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 1474.415643][ T1229] R10: dffffc0000000000 R11: fffffbfff1dac82f R12: dffffc0000000000 [ 1474.415659][ T1229] R13: 0000000000000000 R14: ffff88803041df08 R15: ffff888026a85a00 [ 1474.415682][ T1229] ? rt_spin_lock+0x1c1/0x3e0 [ 1474.415716][ T1229] do_exit+0x105/0x2300 [ 1474.415755][ T1229] ? worker_thread+0xcf7/0xda0 [ 1474.415779][ T1229] ? __pfx_do_exit+0x10/0x10 [ 1474.415826][ T1229] kthread_exit+0x22c/0x280 [ 1474.415856][ T1229] kthread+0x72f/0x8a0 [ 1474.415887][ T1229] ? __pfx_worker_thread+0x10/0x10 [ 1474.415911][ T1229] ? __pfx_kthread+0x10/0x10 [ 1474.415937][ T1229] ? rt_spin_unlock+0x150/0x200 [ 1474.415966][ T1229] ? rt_spin_unlock+0x161/0x200 [ 1474.415988][ T1229] ? __pfx_kthread+0x10/0x10 [ 1474.416017][ T1229] ret_from_fork+0x4bc/0x870 [ 1474.416043][ T1229] ? __pfx_ret_from_fork+0x10/0x10 [ 1474.416073][ T1229] ? __switch_to_asm+0x39/0x70 [ 1474.416093][ T1229] ? __switch_to_asm+0x33/0x70 [ 1474.416111][ T1229] ? __pfx_kthread+0x10/0x10 [ 1474.416139][ T1229] ret_from_fork_asm+0x1a/0x30 [ 1474.416177][ T1229] [ 1474.416538][ T1229] Kernel Offset: disabled