last executing test programs: 5m45.644427721s ago: executing program 5 (id=133): socket$inet6_sctp(0xa, 0x5, 0x84) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x9e966e64318092aa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$netlink(0x10, 0x3, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x37, 0xfa00, {{0xa, 0x4e21, 0x0, @empty}, {0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, r2}}, 0x48) 5m45.273396706s ago: executing program 5 (id=137): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="60900000000000002c001280090001007866726d000000001c00028008000100020000000800010000000000080002000300000008000a00", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 5m40.926914967s ago: executing program 5 (id=148): set_mempolicy(0x2, &(0x7f0000000080)=0x7e, 0x9) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="169af0179dba7e0ca5", 0x9}, {&(0x7f0000000280)='\x00', 0x8}], 0x2}}], 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0xfffc, [0x0, 0xffffffff]}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f"], 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x82c02, 0x40) 5m39.691039423s ago: executing program 5 (id=154): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) 5m38.381934964s ago: executing program 5 (id=158): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f00000010c0)=0xffffaccd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r2 = socket$inet6(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r6, 0x40405514, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 'syz0\x00'}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)={0x28, r7, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x28}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784004000000000000030038c88cc055c5ac27a6c5", 0x26, 0x0, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r11, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000032000000", 0xfe60) 5m35.357580872s ago: executing program 5 (id=167): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d7", 0x20}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x10040, &(0x7f0000000580)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00']) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) clock_getres(0xfffffffffffffff1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 5m20.098001703s ago: executing program 32 (id=167): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d7", 0x20}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x10040, &(0x7f0000000580)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00']) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) clock_getres(0xfffffffffffffff1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 4m50.933364285s ago: executing program 0 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file1/file4/file7\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') read$FUSE(r4, &(0x7f0000004480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r5) 4m48.932727624s ago: executing program 0 (id=273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x400000000080803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8924, &(0x7f0000001300)={'nr0\x00'}) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$uinput_user_dev(r7, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x5, 0x2, 0x1, 0x7f, 0x800006, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x10005, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x0, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x9, 0x8, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xceb, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x5, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r8 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r8}}, 0x3c) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf) 4m34.630745834s ago: executing program 0 (id=294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$l2tp(0x2, 0x2, 0x73) socket$inet6(0xa, 0x805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000280)=""/4096, 0x1000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00'}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000140), 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 4m33.018039208s ago: executing program 0 (id=301): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10, 0x300}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000081c000000061a31d3e8989543d97f7700000004000000000000070020000000007bf1000000"], &(0x7f0000000340)=""/142, 0x3a, 0x8e, 0x1, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="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"]) 4m26.836936234s ago: executing program 0 (id=314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x400000000080803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8924, &(0x7f0000001300)={'nr0\x00'}) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x104) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf) 4m25.503326938s ago: executing program 0 (id=317): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="060000000000000000000180c200000088a83000810040001b1b180d56353c880856c35e27240000"], 0x3e) 4m10.12182917s ago: executing program 33 (id=317): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="060000000000000000000180c200000088a83000810040001b1b180d56353c880856c35e27240000"], 0x3e) 3m43.074154665s ago: executing program 3 (id=398): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xed, 0x3e, 0xc9, 0x8, 0xccd, 0xb3, 0x2dee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb0, 0x87, 0x1d}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x60, 0x13}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 3m39.199728822s ago: executing program 3 (id=408): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x10, 0x7, 0x1, 0xff, 0x2}) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x7, 0x0, 0x1, "dbb1ff04899763944c75e297b87714b16055b2bfcfbbc64f6a259c8a616b1df53d8f671e82a6911f448e342930e8f28fe8b2eff45bc54e62d88062e94f949f"}, 0x60) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000a00)={0xf9a0, 0x2, [{0x1, 0x1}, {0x9, 0x1}]}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m36.812760465s ago: executing program 3 (id=410): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x400, 0x0) linkat(r2, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file1\x00', 0x0) getdents(r2, 0x0, 0x0) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) rename(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) 3m34.62608002s ago: executing program 3 (id=411): getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xae}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x0, 0x2, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MARK={0x8, 0x10, 0x8}, @RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000140)=0xfffffe00) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) bind$alg(r4, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) utime(0x0, 0x0) r6 = userfaultfd(0x800) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x100}) 3m32.967586037s ago: executing program 3 (id=419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41, &(0x7f00000003c0)=""/65}, &(0x7f0000000240)="259374c96ee3", 0x0, 0x4, 0x0, 0x0, 0x0}) 3m31.185996699s ago: executing program 3 (id=422): getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xae}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x0, 0x2, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MARK={0x8, 0x10, 0x8}, @RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000140)=0xfffffe00) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) bind$alg(r4, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) utime(0x0, 0x0) r6 = userfaultfd(0x800) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x100}) 3m15.096051727s ago: executing program 34 (id=422): getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xae}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x0, 0x2, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MARK={0x8, 0x10, 0x8}, @RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000140)=0xfffffe00) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) bind$alg(r4, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) utime(0x0, 0x0) r6 = userfaultfd(0x800) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x100}) 3m5.496360533s ago: executing program 2 (id=456): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r1, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x500, 0x124, 0x28, 0x1f00, {}, 0x0, 0x0, 0xc, 0x401, 0xffffffffffffff7d, '\nnodev{evo\x03\xd3\x8b\x92\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xfd85) 3m1.840224752s ago: executing program 2 (id=459): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x8, 0x10, 0x20000000, 0x20004, 0x0, 0x0, {0x1}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 3m1.714818247s ago: executing program 2 (id=460): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x80002, 0x0) socket(0x11, 0x800000003, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="2e0000001c0073fc0000000400fd000007000003", @ANYRES32, @ANYBLOB="020047040a000200"], 0x30}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m54.443258224s ago: executing program 2 (id=470): socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x1, 0x5003) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f00000001c0), 0x4003) socket$kcm(0x10, 0x2, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) r4 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r4) 2m53.352495599s ago: executing program 2 (id=473): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x30) 2m51.509485703s ago: executing program 2 (id=476): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x10, 0x7, 0x1, 0xff, 0x2}) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x7, 0x0, 0x1, "dbb1ff04899763944c75e297b87714b16055b2bfcfbbc64f6a259c8a616b1df53d8f671e82a6911f448e342930e8f28fe8b2eff45bc54e62d88062e94f949f"}, 0x60) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000a00)={0xf9a0, 0x2, [{0x1, 0x1}, {0x9, 0x1}]}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r4, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m35.995753812s ago: executing program 35 (id=476): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x10, 0x7, 0x1, 0xff, 0x2}) r1 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x7, 0x0, 0x1, "dbb1ff04899763944c75e297b87714b16055b2bfcfbbc64f6a259c8a616b1df53d8f671e82a6911f448e342930e8f28fe8b2eff45bc54e62d88062e94f949f"}, 0x60) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000a00)={0xf9a0, 0x2, [{0x1, 0x1}, {0x9, 0x1}]}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r4, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m31.520197379s ago: executing program 1 (id=605): set_mempolicy(0x2, &(0x7f0000000080)=0x7e, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="169af0", 0x3}, {&(0x7f0000000280)='\x00', 0x1}], 0x2}}], 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0xfffc, [0x0, 0xffffffff]}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f"], 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x82c02, 0x40) 1m29.3533126s ago: executing program 1 (id=608): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d451e725bf010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m25.228938088s ago: executing program 1 (id=616): socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x1, 0x5003) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f00000001c0), 0x4003) socket$kcm(0x10, 0x2, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1m24.257916941s ago: executing program 1 (id=618): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@deltaction={0x14}, 0x14}}, 0x0) 1m22.876721951s ago: executing program 1 (id=622): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011005704000000000000000010000000", @ANYRES32=r7], 0x20}}, 0x0) 1m18.998861715s ago: executing program 1 (id=627): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000020940)=ANY=[], 0x98}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x514) listen(r3, 0x0) accept$ax25(r3, 0x0, 0x0) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) 1m3.964937867s ago: executing program 36 (id=627): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000020940)=ANY=[], 0x98}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x514) listen(r3, 0x0) accept$ax25(r3, 0x0, 0x0) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) 32.718629295s ago: executing program 4 (id=694): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000780)=""/47, 0x2f}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/192, 0xc0}], 0x4}, 0x2) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000d40)=""/212, 0xd4}, {&(0x7f0000000b00)=""/246, 0xf6}, {&(0x7f0000002480)=""/4061, 0xfdd}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000002380)=""/197, 0xc5}, {&(0x7f0000000500)=""/202, 0xca}, {&(0x7f00000009c0)=""/190, 0xbe}, {&(0x7f0000002180)=""/94, 0x5e}, {&(0x7f0000002140)=""/36, 0x24}, {0x0}], 0xa}, 0x0) 32.547352991s ago: executing program 6 (id=695): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0x7}}]}]}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000022c0), 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000ab3000/0x4000)=nil, 0x4000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) read$FUSE(r2, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f00000002c0)={0xffff, 0x0, 0x0, 0x7fff, 0xff, "db2d416fbecfb84b5452b768e08ee2df361089"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x13, 0x0, &(0x7f00000000c0)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x2d) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) 31.294514303s ago: executing program 4 (id=696): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000240)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x28) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 31.03303589s ago: executing program 4 (id=697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) socket$nl_audit(0x10, 0x3, 0x9) listen(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) socket(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000680)={0x0}) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000300)={r6}) 30.779089104s ago: executing program 6 (id=698): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c7515092", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4], 0x44}}, 0x0) 30.370817571s ago: executing program 6 (id=699): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011005704000000000000000010000000", @ANYRES32=r7], 0x20}}, 0x0) 29.940628473s ago: executing program 4 (id=700): r0 = creat(0x0, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000780)="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", 0x45d) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) 29.610698423s ago: executing program 4 (id=701): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 29.474178132s ago: executing program 6 (id=702): socket$inet6_sctp(0xa, 0x5, 0x84) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x9e966e64318092aa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$netlink(0x10, 0x3, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x37, 0xfa00, {{0xa, 0x4e21, 0x0, @empty}, {0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, r2}}, 0x48) 29.126766618s ago: executing program 6 (id=703): set_mempolicy(0x2, &(0x7f0000000080)=0x7e, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="169af0179d", 0x5}, {&(0x7f0000000280)='\x00', 0x1}], 0x2}}], 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0xfffc, [0x0, 0xffffffff]}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f"], 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x82c02, 0x40) 27.875868585s ago: executing program 4 (id=704): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000780)=""/47, 0x2f}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/192, 0xc0}], 0x4}, 0x2) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000d40)=""/212, 0xd4}, {&(0x7f0000000b00)=""/246, 0xf6}, {&(0x7f0000002480)=""/4061, 0xfdd}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000002380)=""/197, 0xc5}, {&(0x7f0000000500)=""/202, 0xca}, {&(0x7f00000009c0)=""/190, 0xbe}, {&(0x7f0000002180)=""/94, 0x5e}, {&(0x7f0000002140)=""/36, 0x24}, {0x0}], 0xa}, 0x0) 27.782082956s ago: executing program 6 (id=705): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000003c0)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 23.113698335s ago: executing program 8 (id=706): open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000300)='(', 0x1) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x41, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x204, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x200010, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x20002f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0xffff8001, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x100009, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3e, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x1, 0x5, 0x4, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x100001ff, 0x6, 0x0, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x81, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x4, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r3, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r4, 0x0) 22.891270573s ago: executing program 8 (id=707): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f92124fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 22.665838463s ago: executing program 8 (id=708): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c7515092", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4], 0x44}}, 0x0) 22.103057152s ago: executing program 8 (id=709): r0 = creat(0x0, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000780)="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", 0x45d) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) 21.93797554s ago: executing program 8 (id=710): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@deltaction={0x14}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) 15.933809304s ago: executing program 8 (id=711): socket$inet6_sctp(0xa, 0x5, 0x84) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x9e966e64318092aa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$netlink(0x10, 0x3, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x37, 0xfa00, {{0xa, 0x4e21, 0x0, @empty}, {0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, r2}}, 0x48) 12.445463558s ago: executing program 37 (id=704): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000780)=""/47, 0x2f}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/192, 0xc0}], 0x4}, 0x2) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000d40)=""/212, 0xd4}, {&(0x7f0000000b00)=""/246, 0xf6}, {&(0x7f0000002480)=""/4061, 0xfdd}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000002380)=""/197, 0xc5}, {&(0x7f0000000500)=""/202, 0xca}, {&(0x7f00000009c0)=""/190, 0xbe}, {&(0x7f0000002180)=""/94, 0x5e}, {&(0x7f0000002140)=""/36, 0x24}, {0x0}], 0xa}, 0x0) 12.410593683s ago: executing program 38 (id=705): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000003c0)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 0s ago: executing program 39 (id=711): socket$inet6_sctp(0xa, 0x5, 0x84) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x9e966e64318092aa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$netlink(0x10, 0x3, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x37, 0xfa00, {{0xa, 0x4e21, 0x0, @empty}, {0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, r2}}, 0x48) kernel console output (not intermixed with test programs): 8541][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.989492][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.000196][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.010183][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.020830][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.031011][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.041798][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.051904][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.062612][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.074933][ T7264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.216072][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 279.246354][ T7450] bridge_slave_1: left allmulticast mode [ 279.252806][ T7450] bridge_slave_1: left promiscuous mode [ 279.286721][ T7450] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.392352][ T7450] bridge_slave_0: left allmulticast mode [ 279.432875][ T7450] bridge_slave_0: left promiscuous mode [ 279.439218][ T7450] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.666627][ T5857] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 282.231436][ T7579] xt_addrtype: ipv6 does not support BROADCAST matching [ 284.553611][ T5857] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 284.565724][ T5857] usb 7-1: can't read configurations, error -71 [ 288.599015][ T7608] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 294.531801][ T7450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.575280][ T7450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.649267][ T7450] bond0 (unregistering): Released all slaves [ 294.710392][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.743722][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.777297][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.821288][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.864950][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.894824][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.922909][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.947939][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.971115][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.012717][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.023395][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 295.033306][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 295.056795][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 295.069846][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 295.081458][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.094205][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 295.102675][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.116055][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.130186][ T7264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.890639][ T7264] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.913668][ T7264] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.816175][ T7264] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.875736][ T5849] Bluetooth: hci2: command tx timeout [ 298.879659][ T7264] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.080857][ T5857] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 299.186096][ T963] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 299.933600][ T7676] hub 9-0:1.0: USB hub found [ 299.942317][ T7676] hub 9-0:1.0: 1 port detected [ 299.991823][ T5857] usb 2-1: Using ep0 maxpacket: 16 [ 300.032112][ T5857] usb 2-1: device descriptor read/all, error -71 [ 300.156625][ T963] usb 3-1: device descriptor read/all, error -71 [ 300.726589][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.197866][ T5843] Bluetooth: hci2: command tx timeout [ 301.256236][ T5908] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 301.284927][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.397510][ T7698] hub 9-0:1.0: USB hub found [ 301.423969][ T7698] hub 9-0:1.0: 1 port detected [ 302.056883][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.116978][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.126327][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 302.209966][ T5908] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.231213][ T5908] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.249245][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 302.258171][ T5908] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 302.267937][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.295086][ T5908] usb 5-1: config 0 descriptor?? [ 302.301534][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.321914][ T5908] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 302.569817][ T5908] usb 5-1: USB disconnect, device number 7 [ 303.402625][ T5849] Bluetooth: hci2: command tx timeout [ 303.864257][ T7450] hsr_slave_0: left promiscuous mode [ 303.972312][ T7450] hsr_slave_1: left promiscuous mode [ 304.992353][ T5849] Bluetooth: hci0: command tx timeout [ 306.418907][ T5849] Bluetooth: hci2: command tx timeout [ 306.461314][ T7450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.475328][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.606492][ T7450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.613946][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.731277][ T7450] veth1_macvtap: left promiscuous mode [ 306.806761][ T7450] veth0_macvtap: left promiscuous mode [ 306.824468][ T7450] veth1_vlan: left promiscuous mode [ 306.851833][ T7450] veth0_vlan: left promiscuous mode [ 307.143558][ T5849] Bluetooth: hci0: command tx timeout [ 309.566073][ T5849] Bluetooth: hci0: command tx timeout [ 311.616583][ T5849] Bluetooth: hci0: command tx timeout [ 313.985256][ T7450] team0 (unregistering): Port device team_slave_1 removed [ 314.073151][ T7764] fuse: Unknown parameter 'user_id00000000000000000000' [ 314.083850][ T7450] team0 (unregistering): Port device team_slave_0 removed [ 314.494243][ T29] audit: type=1326 audit(1731896811.356:12906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6e77e719 code=0x7fc00000 [ 314.516797][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.884083][ T7737] netlink: 6 bytes leftover after parsing attributes in process `syz.2.460'. [ 314.894626][ T7739] netlink: 6 bytes leftover after parsing attributes in process `syz.2.460'. [ 314.940935][ T7774] bridge_slave_1: left allmulticast mode [ 314.977579][ T7774] bridge_slave_1: left promiscuous mode [ 314.984486][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.045181][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.6.469'. [ 315.096188][ T29] audit: type=1326 audit(1731896811.946:12907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac6e77e719 code=0x7fc00000 [ 315.934880][ T29] audit: type=1326 audit(1731896811.946:12908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6e77e719 code=0x7fc00000 [ 315.962990][ T29] audit: type=1326 audit(1731896811.946:12909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6e77e719 code=0x7fc00000 [ 315.985922][ T29] audit: type=1326 audit(1731896811.946:12910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6e77e719 code=0x7fc00000 [ 316.008956][ T29] audit: type=1326 audit(1731896811.946:12911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6e77e719 code=0x7fc00000 [ 316.031391][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.038478][ T29] audit: type=1326 audit(1731896811.946:12912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6e77e719 code=0x7fc00000 [ 316.061469][ T29] audit: type=1326 audit(1731896811.946:12913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6e77e719 code=0x7fc00000 [ 316.084010][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.091025][ T29] audit: type=1326 audit(1731896811.946:12914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6e77e719 code=0x7fc00000 [ 316.113361][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.120066][ T29] audit: type=1326 audit(1731896811.946:12915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.1.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6e77e719 code=0x7fc00000 [ 316.650980][ T7637] chnl_net:caif_netlink_parms(): no params data found [ 316.663479][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.675889][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.488659][ T7692] chnl_net:caif_netlink_parms(): no params data found [ 320.033523][ T7826] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 322.980344][ T7637] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.244227][ T7637] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.254580][ T7637] bridge_slave_0: entered allmulticast mode [ 324.263578][ T7637] bridge_slave_0: entered promiscuous mode [ 324.967982][ T5853] Bluetooth: hci6: command 0x0406 tx timeout [ 325.062529][ T7851] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 326.732947][ T7856] bond1: entered promiscuous mode [ 326.738503][ T7856] bond1: entered allmulticast mode [ 326.744012][ T7856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.722609][ T7637] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.743748][ T7637] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.288465][ T7637] bridge_slave_1: entered allmulticast mode [ 329.296930][ T7637] bridge_slave_1: entered promiscuous mode [ 334.445598][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.465001][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.474572][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.493607][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.504039][ T5853] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 334.538216][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.128634][ T7637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.251483][ T7876] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 335.494981][ T7637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.560966][ T7692] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.635580][ T7692] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.880516][ T7692] bridge_slave_0: entered allmulticast mode [ 336.493033][ T7692] bridge_slave_0: entered promiscuous mode [ 336.514430][ T7897] overlayfs: failed to resolve './file0': -2 [ 336.522295][ T7692] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.546148][ T7692] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.571489][ T7692] bridge_slave_1: entered allmulticast mode [ 336.609657][ T7692] bridge_slave_1: entered promiscuous mode [ 336.781918][ T7637] team0: Port device team_slave_0 added [ 336.794207][ T7637] team0: Port device team_slave_1 added [ 336.858053][ T7637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.879391][ T7637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.918190][ T7637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.943494][ T7637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.971456][ T7637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.009310][ T7637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.379555][ T7901] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 337.503973][ T5853] Bluetooth: hci3: command tx timeout [ 337.535861][ T7891] netlink: 6 bytes leftover after parsing attributes in process `syz.6.494'. [ 337.544910][ T7891] bridge: RTM_NEWNEIGH with invalid ether address [ 337.570395][ T7894] netlink: 6 bytes leftover after parsing attributes in process `syz.6.494'. [ 337.771665][ T7894] bridge: RTM_NEWNEIGH with invalid ether address [ 337.870319][ T7692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.985177][ T7450] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.229543][ T7692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.243479][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.6.500'. [ 339.532687][ T7450] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.546384][ T5849] Bluetooth: hci3: command tx timeout [ 339.634506][ T7919] bridge2: port 1(bridge_slave_1) entered blocking state [ 339.641972][ T7919] bridge2: port 1(bridge_slave_1) entered disabled state [ 339.701441][ T7919] bridge_slave_1: entered allmulticast mode [ 339.754881][ T7919] bridge_slave_1: entered promiscuous mode [ 339.883109][ T7637] hsr_slave_0: entered promiscuous mode [ 339.891954][ T7930] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 339.923314][ T7637] hsr_slave_1: entered promiscuous mode [ 340.042320][ T7637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.071694][ T7637] Cannot create hsr debugfs directory [ 340.153431][ T7450] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.243834][ T7692] team0: Port device team_slave_0 added [ 340.551261][ T7692] team0: Port device team_slave_1 added [ 341.260488][ T7947] xt_addrtype: ipv6 does not support BROADCAST matching [ 342.111864][ T5849] Bluetooth: hci3: command tx timeout [ 342.170012][ T7450] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.202282][ T5849] Bluetooth: hci3: command tx timeout [ 344.247585][ T7945] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 344.579335][ T7692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.634259][ T7692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.694614][ T7692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.806342][ T7692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.109827][ T7692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.200405][ T7692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.106480][ T7450] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.215689][ T963] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 346.445781][ T963] usb 5-1: Using ep0 maxpacket: 8 [ 346.540615][ T7692] hsr_slave_0: entered promiscuous mode [ 346.651180][ T7692] hsr_slave_1: entered promiscuous mode [ 346.660334][ T7692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.694792][ T963] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 346.726871][ T963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.745701][ T7692] Cannot create hsr debugfs directory [ 346.803362][ T963] usb 5-1: Product: syz [ 346.844670][ T963] usb 5-1: Manufacturer: syz [ 346.877355][ T963] usb 5-1: SerialNumber: syz [ 347.093065][ T7450] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.134979][ T963] usb 5-1: config 0 descriptor?? [ 347.178345][ T7988] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 347.471909][ T963] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 347.563393][ T7450] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.081912][ T7450] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.050737][ T7884] chnl_net:caif_netlink_parms(): no params data found [ 349.474041][ T963] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 350.112232][ T963] usb 5-1: USB disconnect, device number 8 [ 350.476786][ T7884] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.523188][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.577293][ T7884] bridge_slave_0: entered allmulticast mode [ 350.616747][ T7884] bridge_slave_0: entered promiscuous mode [ 350.651302][ T7884] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.691597][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.720244][ T7884] bridge_slave_1: entered allmulticast mode [ 350.778599][ T7884] bridge_slave_1: entered promiscuous mode [ 351.771273][ T7637] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 351.786121][ T7637] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 351.841430][ T8022] bridge_slave_1: left allmulticast mode [ 351.857038][ T8022] bridge_slave_1: left promiscuous mode [ 351.862798][ T8022] bridge2: port 1(bridge_slave_1) entered disabled state [ 351.990141][ T7884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.109688][ T7637] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 352.126287][ T8029] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 352.153151][ T7637] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 352.248903][ T7884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.330347][ T7450] bridge_slave_1: left allmulticast mode [ 352.350322][ T7450] bridge_slave_1: left promiscuous mode [ 352.385029][ T7450] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.404099][ T7450] bridge_slave_0: left allmulticast mode [ 352.420629][ T7450] bridge_slave_0: left promiscuous mode [ 352.435875][ T7450] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.521952][ T7450] bridge_slave_1: left allmulticast mode [ 352.560039][ T7450] bridge_slave_1: left promiscuous mode [ 352.569743][ T7450] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.591216][ T7450] bridge_slave_0: left allmulticast mode [ 352.598089][ T7450] bridge_slave_0: left promiscuous mode [ 352.604293][ T7450] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.360830][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 356.369827][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 356.379167][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 356.388969][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 356.399149][ T5853] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 356.408275][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 357.227477][ T7450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.257221][ T7450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.281950][ T7450] bond0 (unregistering): Released all slaves [ 357.542230][ T7450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.567623][ T7450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.593054][ T7450] bond0 (unregistering): Released all slaves [ 358.543758][ T5853] Bluetooth: hci4: command tx timeout [ 358.857507][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 359.449546][ T7884] team0: Port device team_slave_0 added [ 359.474462][ T7884] team0: Port device team_slave_1 added [ 360.656855][ T5853] Bluetooth: hci4: command tx timeout [ 361.724938][ T7884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.764807][ T7884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.873272][ T7884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.915027][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.919768][ T7884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.958834][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.970648][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.979786][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.982907][ T7884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.016335][ T7884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.027353][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 362.036560][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.202757][ T8117] fuse: Unknown parameter '0x0000000000000003' [ 362.523711][ T7450] hsr_slave_0: left promiscuous mode [ 362.556178][ T7450] hsr_slave_1: left promiscuous mode [ 362.568227][ T7450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.590587][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.601458][ T7450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.609703][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.624905][ T7450] hsr_slave_0: left promiscuous mode [ 362.663868][ T7450] hsr_slave_1: left promiscuous mode [ 362.674510][ T7450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.622792][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.656974][ T5849] Bluetooth: hci4: command tx timeout [ 363.683478][ T7450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.694342][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.757999][ T7450] veth1_macvtap: left promiscuous mode [ 363.763688][ T7450] veth0_macvtap: left promiscuous mode [ 363.779717][ T7450] veth1_vlan: left promiscuous mode [ 363.785066][ T7450] veth0_vlan: left promiscuous mode [ 363.810364][ T7450] veth1_macvtap: left promiscuous mode [ 363.823424][ T7450] veth0_macvtap: left promiscuous mode [ 363.837630][ T7450] veth1_vlan: left promiscuous mode [ 363.844071][ T7450] veth0_vlan: left promiscuous mode [ 364.215082][ T5849] Bluetooth: hci2: command tx timeout [ 365.695822][ T5849] Bluetooth: hci4: command tx timeout [ 365.708357][ T7450] team0 (unregistering): Port device team_slave_1 removed [ 365.758924][ T7450] team0 (unregistering): Port device team_slave_0 removed [ 365.828584][ T5857] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 365.989371][ T5857] usb 5-1: Using ep0 maxpacket: 16 [ 366.000063][ T5857] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 366.012006][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.021640][ T5857] usb 5-1: Product: syz [ 366.026750][ T5857] usb 5-1: Manufacturer: syz [ 366.031369][ T5857] usb 5-1: SerialNumber: syz [ 366.051989][ T5857] r8152-cfgselector 5-1: Unknown version 0x0000 [ 366.059511][ T5857] r8152-cfgselector 5-1: config 0 descriptor?? [ 366.257145][ T5849] Bluetooth: hci2: command tx timeout [ 366.612267][ T7450] team0 (unregistering): Port device team_slave_1 removed [ 366.652502][ T7450] team0 (unregistering): Port device team_slave_0 removed [ 367.133814][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.6.546'. [ 367.183249][ T7884] hsr_slave_0: entered promiscuous mode [ 367.205660][ T5984] r8152-cfgselector 5-1: USB disconnect, device number 9 [ 367.222311][ T7884] hsr_slave_1: entered promiscuous mode [ 367.245689][ T7884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.253476][ T7884] Cannot create hsr debugfs directory [ 368.355697][ T5849] Bluetooth: hci2: command tx timeout [ 368.632830][ T8063] chnl_net:caif_netlink_parms(): no params data found [ 368.723680][ T8168] netlink: 'syz.1.555': attribute type 29 has an invalid length. [ 368.746269][ T8165] netlink: 'syz.1.555': attribute type 29 has an invalid length. [ 369.038645][ T8109] chnl_net:caif_netlink_parms(): no params data found [ 369.149352][ T7884] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 369.244064][ T7884] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 369.282434][ T7884] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 369.346031][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 369.515634][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 369.530433][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 369.555157][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.575704][ T9] usb 2-1: Product: syz [ 369.579876][ T9] usb 2-1: Manufacturer: syz [ 369.584744][ T9] usb 2-1: SerialNumber: syz [ 369.626097][ T9] usb 2-1: config 0 descriptor?? [ 369.633238][ T8063] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.642775][ T8063] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.651139][ T8063] bridge_slave_0: entered allmulticast mode [ 369.668077][ T8063] bridge_slave_0: entered promiscuous mode [ 369.678209][ T7884] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 369.773419][ T8063] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.795053][ T8063] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.818139][ T8063] bridge_slave_1: entered allmulticast mode [ 369.827737][ T8063] bridge_slave_1: entered promiscuous mode [ 369.879813][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 370.448372][ T5849] Bluetooth: hci2: command tx timeout [ 371.078898][ T8063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.091272][ T8063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.226642][ T8109] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.235976][ T8109] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.264521][ T8109] bridge_slave_0: entered allmulticast mode [ 371.335239][ T8109] bridge_slave_0: entered promiscuous mode [ 371.449257][ T7450] IPVS: stop unused estimator thread 0... [ 371.483965][ T8109] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.509471][ T8109] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.563191][ T8109] bridge_slave_1: entered allmulticast mode [ 371.593455][ T8109] bridge_slave_1: entered promiscuous mode [ 371.664466][ T8063] team0: Port device team_slave_0 added [ 371.714577][ T8063] team0: Port device team_slave_1 added [ 371.781733][ T8109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.838875][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 371.860571][ T9] usb 2-1: USB disconnect, device number 6 [ 371.909383][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.563'. [ 371.953398][ T8109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.020201][ T8063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.034294][ T8063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.066196][ T8063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.089933][ T8063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.124555][ T8063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.157857][ T8063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.666987][ T8206] xt_addrtype: ipv6 does not support BROADCAST matching [ 373.627408][ T8063] hsr_slave_0: entered promiscuous mode [ 373.695928][ T8063] hsr_slave_1: entered promiscuous mode [ 373.719980][ T8063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.757933][ T8063] Cannot create hsr debugfs directory [ 373.781291][ T8109] team0: Port device team_slave_0 added [ 373.812642][ T8109] team0: Port device team_slave_1 added [ 374.061103][ T8218] xt_addrtype: ipv6 does not support BROADCAST matching [ 374.904800][ T7884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.044263][ T7884] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.180392][ T8211] netlink: 'syz.4.566': attribute type 29 has an invalid length. [ 377.438040][ T8109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.456656][ T8109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.515655][ T8109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.693745][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.700938][ T6425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.977197][ T8109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.984281][ T8109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.010351][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.099348][ T8247] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 378.925871][ T8109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.960476][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.064717][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.134704][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'. [ 379.301120][ T6469] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.308418][ T6469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.336614][ T8109] hsr_slave_0: entered promiscuous mode [ 379.352781][ T8109] hsr_slave_1: entered promiscuous mode [ 379.373931][ T8109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.393719][ T8109] Cannot create hsr debugfs directory [ 379.821102][ T7450] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.061266][ T8257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.574'. [ 380.210214][ T7450] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.718417][ T7450] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.910269][ T8267] xt_addrtype: ipv6 does not support BROADCAST matching [ 382.019658][ T8268] netlink: 'syz.6.578': attribute type 29 has an invalid length. [ 382.944626][ T7450] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.263163][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.6.583'. [ 384.354708][ T7450] bridge_slave_1: left allmulticast mode [ 384.378854][ T7450] bridge_slave_1: left promiscuous mode [ 384.482305][ T8293] xt_addrtype: ipv6 does not support BROADCAST matching [ 384.572280][ T7450] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.396346][ T7450] bridge_slave_0: left allmulticast mode [ 385.410679][ T7450] bridge_slave_0: left promiscuous mode [ 385.439102][ T7450] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.569168][ T7450] bridge_slave_1: left allmulticast mode [ 385.574886][ T7450] bridge_slave_1: left promiscuous mode [ 385.638199][ T7450] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.692796][ T7450] bridge_slave_0: left allmulticast mode [ 385.715858][ T7450] bridge_slave_0: left promiscuous mode [ 385.732224][ T7450] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.735801][ T963] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 385.767885][ T7450] bridge_slave_1: left allmulticast mode [ 386.386470][ T963] usb 7-1: Using ep0 maxpacket: 8 [ 386.419395][ T963] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 386.431311][ T7450] bridge_slave_1: left promiscuous mode [ 386.455246][ T7450] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.463669][ T963] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.487212][ T963] usb 7-1: Product: syz [ 386.491487][ T963] usb 7-1: Manufacturer: syz [ 386.526026][ T7450] bridge_slave_0: left allmulticast mode [ 386.532467][ T7450] bridge_slave_0: left promiscuous mode [ 386.546216][ T963] usb 7-1: SerialNumber: syz [ 386.561385][ T7450] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.571101][ T963] usb 7-1: config 0 descriptor?? [ 386.793574][ T963] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 388.048507][ T7450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.107783][ T7450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.133892][ T7450] bond0 (unregistering): Released all slaves [ 388.178972][ T7450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.219896][ T7450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.240489][ T963] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 388.261937][ T7450] bond0 (unregistering): Released all slaves [ 388.277852][ T963] usb 7-1: USB disconnect, device number 4 [ 388.725642][ T7450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.801459][ T7450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.998280][ T7450] bond0 (unregistering): Released all slaves [ 389.158005][ T8063] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 389.200710][ T8063] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 389.269646][ T7884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.348335][ T8063] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 389.561310][ T8063] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 389.732262][ T8331] netlink: 'syz.4.591': attribute type 29 has an invalid length. [ 389.804618][ T8337] xt_addrtype: ipv6 does not support BROADCAST matching [ 389.858250][ T47] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 390.329885][ T8327] netlink: 'syz.4.591': attribute type 29 has an invalid length. [ 390.763012][ T47] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=51.d4 [ 390.763240][ T8336] netlink: 'syz.4.591': attribute type 29 has an invalid length. [ 390.772315][ T47] usb 2-1: New USB device strings: Mfr=231, Product=37, SerialNumber=191 [ 390.788723][ T47] usb 2-1: Product: syz [ 390.792907][ T47] usb 2-1: Manufacturer: syz [ 390.798037][ T47] usb 2-1: SerialNumber: syz [ 390.804851][ T47] usb 2-1: config 0 descriptor?? [ 391.356594][ T47] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 391.357329][ T8109] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 391.399051][ T8109] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 391.998041][ T47] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 392.013121][ T8109] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 392.016416][ T47] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32 [ 392.056117][ T47] usb 2-1: USB disconnect, device number 7 [ 392.103532][ T8109] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 392.206331][ T7450] hsr_slave_0: left promiscuous mode [ 392.236921][ T7450] hsr_slave_1: left promiscuous mode [ 392.246869][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.266865][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.287909][ T7450] hsr_slave_0: left promiscuous mode [ 392.300927][ T7450] hsr_slave_1: left promiscuous mode [ 392.308124][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.332237][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.373218][ T7450] hsr_slave_0: left promiscuous mode [ 392.391895][ T7450] hsr_slave_1: left promiscuous mode [ 392.540497][ T7450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.558235][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.596235][ T7450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.615817][ T7450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.424767][ T7450] veth1_macvtap: left promiscuous mode [ 393.431586][ T7450] veth0_macvtap: left promiscuous mode [ 393.437598][ T7450] veth1_vlan: left promiscuous mode [ 393.442919][ T7450] veth0_vlan: left promiscuous mode [ 394.235543][ T8363] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 394.635229][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 394.648009][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 394.661137][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 394.670461][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 394.684198][ T5853] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 394.692691][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 394.803112][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 394.803135][ T29] audit: type=1800 audit(1731896891.666:12955): pid=8368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.598" name="/" dev="9p" ino=2 res=0 errno=0 [ 394.852467][ T7450] team0 (unregistering): Port device team_slave_1 removed [ 394.884896][ T7450] team0 (unregistering): Port device team_slave_0 removed [ 395.244683][ T7450] team0 (unregistering): Port device team_slave_1 removed [ 395.284025][ T7450] team0 (unregistering): Port device team_slave_0 removed [ 395.802195][ T8373] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 396.736566][ T5853] Bluetooth: hci0: command tx timeout [ 396.874754][ T7450] team0 (unregistering): Port device team_slave_1 removed [ 396.912551][ T7450] team0 (unregistering): Port device team_slave_0 removed [ 397.320851][ T8355] netlink: 28 bytes leftover after parsing attributes in process `syz.4.595'. [ 397.347491][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.595'. [ 397.437234][ T8360] netlink: 'syz.6.596': attribute type 29 has an invalid length. [ 397.447635][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.6.596'. [ 397.526095][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.600'. [ 397.570894][ T8377] bridge4: port 1(bridge_slave_1) entered blocking state [ 397.624828][ T8377] bridge4: port 1(bridge_slave_1) entered disabled state [ 397.632856][ T8377] bridge_slave_1: entered allmulticast mode [ 397.661115][ T8377] bridge_slave_1: entered promiscuous mode [ 397.837740][ T8383] netlink: 'syz.4.602': attribute type 29 has an invalid length. [ 397.896609][ T8380] netlink: 'syz.4.602': attribute type 29 has an invalid length. [ 397.978311][ T8384] netlink: 'syz.4.602': attribute type 29 has an invalid length. [ 398.134378][ T8109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.152097][ T8109] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.238392][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.245647][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.269531][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.276909][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.895187][ T5853] Bluetooth: hci0: command tx timeout [ 398.948660][ T8109] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 398.959613][ T8109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.060003][ T8063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.260675][ T8386] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 399.310192][ T8386] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 399.384161][ T8063] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.098614][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.105906][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.119687][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.126930][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.374639][ T8109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.453451][ T8063] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 400.483446][ T8063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 400.820939][ T8366] chnl_net:caif_netlink_parms(): no params data found [ 401.343511][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 401.351406][ T5849] Bluetooth: hci0: command tx timeout [ 401.640684][ T25] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=51.d4 [ 401.650110][ T25] usb 2-1: New USB device strings: Mfr=231, Product=37, SerialNumber=191 [ 401.660387][ T25] usb 2-1: Product: syz [ 401.664579][ T25] usb 2-1: Manufacturer: syz [ 401.670685][ T25] usb 2-1: SerialNumber: syz [ 401.706434][ T25] usb 2-1: config 0 descriptor?? [ 401.816376][ T8426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.611'. [ 401.869112][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.611'. [ 401.958877][ T8366] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.967367][ T8366] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.974588][ T8366] bridge_slave_0: entered allmulticast mode [ 401.982203][ T8366] bridge_slave_0: entered promiscuous mode [ 401.992080][ T8366] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.010670][ T8366] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.018881][ T8366] bridge_slave_1: entered allmulticast mode [ 402.025651][ T5908] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 402.036256][ T8366] bridge_slave_1: entered promiscuous mode [ 402.112818][ T8366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.124245][ T25] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 402.205091][ T5908] usb 7-1: config 0 has no interfaces? [ 402.213381][ T5908] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 402.229801][ T5908] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 402.241426][ T8366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.251617][ T5908] usb 7-1: Manufacturer: syz [ 402.271428][ T5908] usb 7-1: config 0 descriptor?? [ 402.335162][ T8366] team0: Port device team_slave_0 added [ 402.346532][ T8366] team0: Port device team_slave_1 added [ 402.403913][ T8063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.529464][ T5908] usb 7-1: USB disconnect, device number 5 [ 402.561238][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.581560][ T25] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 402.591483][ T25] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 402.611409][ T25] usb 2-1: USB disconnect, device number 8 [ 402.619298][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.161008][ T7450] IPVS: stop unused estimator thread 0... [ 403.189352][ T8366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.231683][ T8109] veth0_vlan: entered promiscuous mode [ 403.251275][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.271321][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.297552][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.313929][ T8366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.376890][ T5849] Bluetooth: hci0: command tx timeout [ 403.451903][ T8366] hsr_slave_0: entered promiscuous mode [ 403.468053][ T8366] hsr_slave_1: entered promiscuous mode [ 403.504401][ T8366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.514234][ T8366] Cannot create hsr debugfs directory [ 404.292172][ T8109] veth1_vlan: entered promiscuous mode [ 406.437851][ T8476] bridge_slave_1: left allmulticast mode [ 406.459860][ T8476] bridge_slave_1: left promiscuous mode [ 406.557992][ T8476] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.657767][ T8109] veth0_macvtap: entered promiscuous mode [ 406.701671][ T8063] veth0_vlan: entered promiscuous mode [ 406.733200][ T8109] veth1_macvtap: entered promiscuous mode [ 406.790638][ T8479] netlink: 28 bytes leftover after parsing attributes in process `syz.1.622'. [ 406.818224][ T8063] veth1_vlan: entered promiscuous mode [ 406.845743][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.622'. [ 406.991306][ T8483] xt_addrtype: ipv6 does not support BROADCAST matching [ 407.985068][ T8109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.013522][ T8109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.047186][ T8109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.058617][ T8109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.069360][ T8109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.080249][ T8109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.233248][ T8489] xt_addrtype: ipv6 does not support BROADCAST matching [ 409.158840][ T8109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.940426][ T8063] veth0_macvtap: entered promiscuous mode [ 410.006126][ T8063] veth1_macvtap: entered promiscuous mode [ 410.079486][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.090643][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.101884][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.112733][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.122861][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.133578][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.143731][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.155799][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.167688][ T8063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.182166][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.193579][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.204065][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.214741][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.224931][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.235769][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.247501][ T8063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.262764][ T8063] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.272248][ T8063] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.281390][ T8063] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.290842][ T8063] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.352974][ T29] audit: type=1800 audit(1731896907.216:12956): pid=8492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.626" name="/" dev="9p" ino=2 res=0 errno=0 [ 410.389900][ T8109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.402000][ T8109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.413626][ T8109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.425192][ T8109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.440040][ T8109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.451044][ T8109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.461997][ T8109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.483818][ T8109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.507482][ T8109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.612593][ T5055] bridge_slave_1: left allmulticast mode [ 410.630324][ T5055] bridge_slave_1: left promiscuous mode [ 410.642322][ T5055] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.657933][ T5055] bridge_slave_0: left allmulticast mode [ 410.674315][ T5055] bridge_slave_0: left promiscuous mode [ 410.698009][ T5055] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.963923][ T8504] xt_addrtype: ipv6 does not support BROADCAST matching [ 414.936987][ T5055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.964583][ T5055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.990474][ T5055] bond0 (unregistering): Released all slaves [ 415.072676][ T8109] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.084315][ T8109] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.094182][ T8109] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.105540][ T8109] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.209184][ T5055] hsr_slave_0: left promiscuous mode [ 415.227067][ T5055] hsr_slave_1: left promiscuous mode [ 415.241540][ T5055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.253339][ T5055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.655187][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 417.677151][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 417.701071][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 417.749888][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 417.770417][ T5853] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 417.787835][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 417.889823][ T5055] team0 (unregistering): Port device team_slave_1 removed [ 417.934151][ T5055] team0 (unregistering): Port device team_slave_0 removed [ 418.874421][ T8527] xt_addrtype: ipv6 does not support BROADCAST matching [ 419.856824][ T5853] Bluetooth: hci3: command tx timeout [ 419.892802][ T8529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.636'. [ 419.984832][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 421.931307][ T8366] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 421.965779][ T5853] Bluetooth: hci3: command tx timeout [ 422.136034][ T8366] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 422.399788][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 422.410184][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 422.419371][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 422.431655][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 422.441213][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 422.449189][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 422.484912][ T8366] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 422.491952][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 422.571587][ T8366] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 422.660348][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 422.671570][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 422.693727][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.720019][ T9] usb 7-1: Product: syz [ 422.731888][ T9] usb 7-1: Manufacturer: syz [ 422.801049][ T9] usb 7-1: SerialNumber: syz [ 423.154360][ T9] usb 7-1: config 0 descriptor?? [ 423.912250][ T5055] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.923356][ T9] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 423.963780][ T8520] chnl_net:caif_netlink_parms(): no params data found [ 424.016888][ T5849] Bluetooth: hci3: command tx timeout [ 424.044719][ T5055] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.153139][ T5055] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.370221][ T8520] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.379856][ T8520] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.389021][ T8520] bridge_slave_0: entered allmulticast mode [ 424.400381][ T8520] bridge_slave_0: entered promiscuous mode [ 424.491802][ T5055] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.505894][ T5849] Bluetooth: hci4: command tx timeout [ 424.901974][ T8520] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.910843][ T8520] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.922356][ T8520] bridge_slave_1: entered allmulticast mode [ 424.932437][ T8520] bridge_slave_1: entered promiscuous mode [ 425.876724][ T5055] bridge_slave_1: left allmulticast mode [ 425.882453][ T5055] bridge_slave_1: left promiscuous mode [ 425.911789][ T5055] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.962148][ T5055] bridge_slave_0: left allmulticast mode [ 425.980914][ T5055] bridge_slave_0: left promiscuous mode [ 426.001385][ T5055] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.104763][ T5849] Bluetooth: hci3: command tx timeout [ 426.315810][ T9] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 426.687242][ T5853] Bluetooth: hci4: command tx timeout [ 427.197517][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 427.209245][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 427.219979][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 427.228731][ T9] usb 7-1: USB disconnect, device number 6 [ 427.255004][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 427.263637][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 427.271888][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 427.772051][ T5055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.786710][ T5055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.800623][ T5055] bond0 (unregistering): Released all slaves [ 427.859212][ T8577] netlink: 28 bytes leftover after parsing attributes in process `syz.6.647'. [ 427.869786][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.647'. [ 427.981339][ T8581] netlink: 'syz.4.648': attribute type 10 has an invalid length. [ 427.994320][ T8581] bond0: (slave bond_slave_0): Releasing backup interface [ 428.227537][ T8366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.246821][ T8366] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.353732][ T8520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.376625][ T6484] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.383852][ T6484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.409139][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.416472][ T6484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.488770][ T8520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.995535][ T8587] fuse: Bad value for 'fd' [ 429.054513][ T5853] Bluetooth: hci4: command tx timeout [ 429.139760][ T47] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 429.244528][ T8520] team0: Port device team_slave_0 added [ 429.253442][ T8520] team0: Port device team_slave_1 added [ 429.469964][ T5853] Bluetooth: hci2: command tx timeout [ 429.603496][ T5055] hsr_slave_0: left promiscuous mode [ 429.640699][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 429.800549][ T5055] hsr_slave_1: left promiscuous mode [ 429.999811][ T47] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 430.011127][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.019639][ T47] usb 5-1: Product: syz [ 430.020708][ T5055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.024133][ T47] usb 5-1: Manufacturer: syz [ 430.325232][ T47] usb 5-1: SerialNumber: syz [ 430.327510][ T5055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.360028][ T47] r8152-cfgselector 5-1: Unknown version 0x0000 [ 430.366707][ T47] r8152-cfgselector 5-1: config 0 descriptor?? [ 430.373894][ T5055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.391097][ T5055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.419246][ T5055] veth1_macvtap: left promiscuous mode [ 430.424820][ T5055] veth0_macvtap: left promiscuous mode [ 430.430721][ T5055] veth1_vlan: left promiscuous mode [ 430.436759][ T5055] veth0_vlan: left promiscuous mode [ 431.029818][ T5055] team0 (unregistering): Port device team_slave_1 removed [ 431.071952][ T5055] team0 (unregistering): Port device team_slave_0 removed [ 431.146190][ T5853] Bluetooth: hci4: command tx timeout [ 431.538116][ T5853] Bluetooth: hci2: command tx timeout [ 431.567495][ T8550] chnl_net:caif_netlink_parms(): no params data found [ 431.631796][ T5908] r8152-cfgselector 5-1: USB disconnect, device number 10 [ 431.642237][ T8520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.656236][ T8520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.683265][ T8520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.699364][ T8520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.713983][ T8520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.741360][ T8520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.021833][ T8608] xt_addrtype: ipv6 does not support BROADCAST matching [ 432.935962][ T8520] hsr_slave_0: entered promiscuous mode [ 433.032165][ T8520] hsr_slave_1: entered promiscuous mode [ 433.045135][ T8520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.053546][ T8520] Cannot create hsr debugfs directory [ 433.198513][ T8613] xt_addrtype: ipv6 does not support BROADCAST matching [ 433.620401][ T5853] Bluetooth: hci2: command tx timeout [ 434.379090][ T8550] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.461104][ T8550] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.519557][ T8550] bridge_slave_0: entered allmulticast mode [ 434.557573][ T8550] bridge_slave_0: entered promiscuous mode [ 434.596625][ T8550] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.604101][ T8550] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.612390][ T8550] bridge_slave_1: entered allmulticast mode [ 434.672712][ T8550] bridge_slave_1: entered promiscuous mode [ 435.630655][ T8550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.686836][ T8574] chnl_net:caif_netlink_parms(): no params data found [ 435.708956][ T8628] netlink: 28 bytes leftover after parsing attributes in process `syz.6.658'. [ 435.732508][ T8550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.867432][ T8366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.875268][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.658'. [ 436.025676][ T8634] xt_addrtype: ipv6 does not support BROADCAST matching [ 436.267523][ T5853] Bluetooth: hci2: command tx timeout [ 437.039164][ T8550] team0: Port device team_slave_0 added [ 437.050198][ T8550] team0: Port device team_slave_1 added [ 437.189147][ T29] audit: type=1800 audit(1731896934.046:12957): pid=8641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.661" name="/" dev="9p" ino=2 res=0 errno=0 [ 437.222494][ T8574] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.238028][ T8574] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.245943][ T8574] bridge_slave_0: entered allmulticast mode [ 437.253132][ T8574] bridge_slave_0: entered promiscuous mode [ 437.263748][ T8574] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.272094][ T8574] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.280790][ T8574] bridge_slave_1: entered allmulticast mode [ 437.290957][ T8574] bridge_slave_1: entered promiscuous mode [ 437.300288][ T8550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.318802][ T8550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.345615][ T5946] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 437.355801][ T8550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.369579][ T8550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.379681][ T8550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.406757][ T8550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.470371][ T8574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.507080][ T5946] usb 5-1: Using ep0 maxpacket: 8 [ 437.523945][ T5946] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.545618][ T5946] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 437.557485][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.576729][ T8574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.588576][ T5946] usb 5-1: config 0 descriptor?? [ 437.683025][ T5055] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.733520][ T8574] team0: Port device team_slave_0 added [ 437.750567][ T8574] team0: Port device team_slave_1 added [ 437.786314][ T8550] hsr_slave_0: entered promiscuous mode [ 437.793055][ T8550] hsr_slave_1: entered promiscuous mode [ 437.803019][ T8550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.807876][ T47] usb 5-1: USB disconnect, device number 11 [ 437.817422][ T8550] Cannot create hsr debugfs directory [ 437.882473][ T5055] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.084617][ T5055] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.282732][ T8574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.310847][ T8574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.448548][ T8574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.554966][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.561534][ T5055] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.561663][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.636012][ T8574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.643010][ T8574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.669229][ C0] vkms_vblank_simulate: vblank timer overrun [ 439.682854][ T8574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.924580][ T29] audit: type=1326 audit(1731896936.786:12958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.6.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5ef97e719 code=0x7fc00000 [ 440.030224][ T8366] veth0_vlan: entered promiscuous mode [ 440.180499][ T8574] hsr_slave_0: entered promiscuous mode [ 440.197969][ T8574] hsr_slave_1: entered promiscuous mode [ 440.206299][ T8574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.224438][ T8574] Cannot create hsr debugfs directory [ 440.354027][ T5055] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.439686][ T8520] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 440.507785][ T5055] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.518987][ T29] audit: type=1326 audit(1731896937.386:12959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.6.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb5ef97e719 code=0x7fc00000 [ 440.561747][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.669'. [ 440.583408][ T8366] veth1_vlan: entered promiscuous mode [ 440.632468][ T8520] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 440.643432][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.669'. [ 440.701692][ T5055] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.725054][ T8520] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 440.750035][ T8520] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 440.933695][ T5055] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.034999][ T8366] veth0_macvtap: entered promiscuous mode [ 441.701166][ T8366] veth1_macvtap: entered promiscuous mode [ 441.836907][ T8700] ip6t_rpfilter: unknown options [ 442.241410][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.274716][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.305659][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.341252][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.351582][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.392004][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.405045][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.422083][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.438003][ T8366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.452442][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.464596][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.485696][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.507364][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.532409][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.543159][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.553886][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.564699][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.593783][ T8366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.645678][ T5908] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 442.755565][ T5055] bridge_slave_0: left allmulticast mode [ 442.761973][ T5055] bridge_slave_0: left promiscuous mode [ 442.769133][ T5055] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.785180][ T5055] bridge_slave_1: left allmulticast mode [ 442.793557][ T5055] bridge_slave_1: left promiscuous mode [ 443.288069][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 443.301423][ T5908] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.312735][ T5908] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 443.322073][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.331952][ T5055] bridge4: port 1(bridge_slave_1) entered disabled state [ 443.346732][ T5908] usb 5-1: config 0 descriptor?? [ 443.347049][ T5055] bridge_slave_1: left allmulticast mode [ 443.359361][ T5055] bridge_slave_1: left promiscuous mode [ 443.365941][ T5055] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.387166][ T5055] bridge_slave_0: left allmulticast mode [ 443.392830][ T5055] bridge_slave_0: left promiscuous mode [ 443.414998][ T5055] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.568652][ T5908] usb 5-1: USB disconnect, device number 12 [ 445.770710][ T8724] xt_addrtype: ipv6 does not support BROADCAST matching [ 446.852654][ T5055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.875650][ T5055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.889005][ T5055] bond0 (unregistering): Released all slaves [ 447.051248][ T5055] bond1 (unregistering): Released all slaves [ 447.153541][ T5055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.172359][ T5055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.187548][ T5055] bond0 (unregistering): Released all slaves [ 447.211409][ T8366] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.221299][ T8366] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.230908][ T8366] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.252581][ T29] audit: type=1326 audit(1731896944.116:12960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 447.252814][ T8366] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.409617][ T8520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.561696][ T8520] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.670952][ T8736] netlink: 12 bytes leftover after parsing attributes in process `syz.6.679'. [ 447.752358][ T7450] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.759648][ T7450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.803685][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.6.679'. [ 447.875911][ T29] audit: type=1326 audit(1731896944.726:12961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 447.922088][ T29] audit: type=1326 audit(1731896944.726:12962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 447.971738][ T29] audit: type=1326 audit(1731896944.726:12963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 447.996006][ T29] audit: type=1326 audit(1731896944.726:12964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 448.019820][ T29] audit: type=1326 audit(1731896944.726:12965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 448.064658][ T29] audit: type=1326 audit(1731896944.726:12966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 448.090694][ T29] audit: type=1326 audit(1731896944.726:12967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 448.147564][ T7450] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.154941][ T7450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.176567][ T29] audit: type=1326 audit(1731896944.726:12968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 448.214481][ T8742] netlink: 18 bytes leftover after parsing attributes in process `syz.4.680'. [ 448.237364][ T29] audit: type=1326 audit(1731896944.726:12969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 448.265242][ T8743] netlink: 18 bytes leftover after parsing attributes in process `syz.4.680'. [ 448.364444][ T5055] hsr_slave_0: left promiscuous mode [ 448.410207][ T5055] hsr_slave_1: left promiscuous mode [ 448.432852][ T5055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.442381][ T5055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.462069][ T5055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.473961][ T5055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.494892][ T5055] hsr_slave_0: left promiscuous mode [ 448.513829][ T5055] hsr_slave_1: left promiscuous mode [ 448.521504][ T5055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.539843][ T5055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.561313][ T5055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.574879][ T5055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.652886][ T5055] veth1_macvtap: left promiscuous mode [ 448.664940][ T5055] veth0_macvtap: left promiscuous mode [ 448.681586][ T5055] veth1_vlan: left promiscuous mode [ 448.690433][ T5055] veth0_vlan: left promiscuous mode [ 448.716599][ T5055] veth1_macvtap: left promiscuous mode [ 448.722170][ T5055] veth0_macvtap: left promiscuous mode [ 448.735871][ T5055] veth1_vlan: left promiscuous mode [ 448.741487][ T5055] veth0_vlan: left promiscuous mode [ 450.592392][ T5055] team0 (unregistering): Port device team_slave_1 removed [ 450.667141][ T5055] team0 (unregistering): Port device team_slave_0 removed [ 450.878901][ T8763] xt_addrtype: ipv6 does not support BROADCAST matching [ 452.560365][ T5055] team0 (unregistering): Port device team_slave_1 removed [ 452.603499][ T5055] team0 (unregistering): Port device team_slave_0 removed [ 452.876004][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 452.876025][ T29] audit: type=1326 audit(1731896949.736:13017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 452.920247][ T29] audit: type=1326 audit(1731896949.736:13018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 452.962235][ T29] audit: type=1326 audit(1731896949.736:13019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 453.022282][ T29] audit: type=1326 audit(1731896949.736:13020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 453.050189][ T29] audit: type=1326 audit(1731896949.736:13021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 453.082757][ T29] audit: type=1326 audit(1731896949.736:13022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 453.107232][ T29] audit: type=1326 audit(1731896949.736:13023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 453.130014][ T29] audit: type=1326 audit(1731896949.736:13024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 453.152872][ T29] audit: type=1326 audit(1731896949.736:13025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 453.176286][ T29] audit: type=1326 audit(1731896949.736:13026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.4.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 453.281183][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.286116][ T8748] netlink: 28 bytes leftover after parsing attributes in process `syz.6.682'. [ 453.298970][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.312096][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.6.682'. [ 453.338232][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.689'. [ 453.352938][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.689'. [ 453.690239][ T8550] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 453.714736][ T8550] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 453.726737][ T8550] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 453.786805][ T8550] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 453.786918][ T5946] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 453.826684][ T8528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.835905][ T8528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.985672][ T5946] usb 7-1: Using ep0 maxpacket: 8 [ 454.017463][ T5946] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 454.050468][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.071861][ T8648] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 454.082334][ T5946] usb 7-1: Product: syz [ 454.095680][ T5946] usb 7-1: Manufacturer: syz [ 454.113739][ T5946] usb 7-1: SerialNumber: syz [ 454.128554][ T5946] usb 7-1: config 0 descriptor?? [ 454.264408][ T8648] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 454.278154][ T8648] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 454.293111][ T8648] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 454.308966][ T8648] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.355202][ T5946] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 454.388798][ T8782] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 454.458122][ T8648] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 454.901152][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 454.938048][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 454.947596][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 454.977276][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 454.979670][ T5904] usb 5-1: USB disconnect, device number 13 [ 455.007642][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 455.021101][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 455.192395][ T8520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.284984][ T8550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.340334][ T8550] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.471745][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.479011][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.859160][ T5946] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 456.222766][ T5946] usb 7-1: USB disconnect, device number 7 [ 456.697364][ T2937] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.704571][ T2937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.840371][ T8574] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 457.128433][ T5849] Bluetooth: hci1: command tx timeout [ 458.037033][ T8824] netlink: 'syz.4.694': attribute type 29 has an invalid length. [ 458.054121][ T8550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 458.065230][ T8550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 458.098720][ T8574] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 458.172039][ T8574] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 458.190354][ T8574] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 458.207842][ T5055] IPVS: stop unused estimator thread 0... [ 458.383581][ T8520] veth0_vlan: entered promiscuous mode [ 458.458302][ T8801] chnl_net:caif_netlink_parms(): no params data found [ 458.615166][ T5055] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.711907][ T8852] netlink: 28 bytes leftover after parsing attributes in process `syz.6.698'. [ 458.748115][ T8520] veth1_vlan: entered promiscuous mode [ 458.781581][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.6.698'. [ 458.799955][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 458.799977][ T29] audit: type=1326 audit(1731896955.666:13073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 458.904053][ T5055] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.068749][ T5055] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.160238][ T5055] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.223188][ T5849] Bluetooth: hci1: command tx timeout [ 459.255108][ T8801] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.263236][ T8801] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.271759][ T8801] bridge_slave_0: entered allmulticast mode [ 459.279796][ T8801] bridge_slave_0: entered promiscuous mode [ 459.289891][ T8801] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.298499][ T8801] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.306188][ T8801] bridge_slave_1: entered allmulticast mode [ 459.313520][ T8801] bridge_slave_1: entered promiscuous mode [ 459.395623][ T29] audit: type=1326 audit(1731896956.236:13074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 459.404164][ T8574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.438633][ T8574] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.481030][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.699'. [ 459.496739][ T29] audit: type=1326 audit(1731896956.236:13075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 459.528661][ T8869] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 459.538472][ T8869] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 459.566627][ T8872] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 459.581018][ T29] audit: type=1326 audit(1731896956.236:13076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 459.629919][ T8872] bond1 (unregistering): Released all slaves [ 459.667767][ T29] audit: type=1326 audit(1731896956.236:13077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 459.690967][ T29] audit: type=1326 audit(1731896956.236:13078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 459.713787][ T29] audit: type=1326 audit(1731896956.236:13079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 459.736864][ T29] audit: type=1326 audit(1731896956.236:13080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 459.759988][ T29] audit: type=1326 audit(1731896956.236:13081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 459.783188][ T29] audit: type=1326 audit(1731896956.236:13082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b58d7e719 code=0x7fc00000 [ 459.959834][ T8550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.999154][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.006469][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.044983][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.052543][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.112474][ T8801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.145819][ T5857] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 460.279235][ T8801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.337587][ T5857] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 460.348647][ T8520] veth0_macvtap: entered promiscuous mode [ 460.363035][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.393340][ T5857] usb 5-1: Product: syz [ 460.406641][ T5857] usb 5-1: Manufacturer: syz [ 460.411257][ T5857] usb 5-1: SerialNumber: syz [ 460.441427][ T8801] team0: Port device team_slave_0 added [ 460.454080][ T5857] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 460.539346][ T8520] veth1_macvtap: entered promiscuous mode [ 460.548658][ T5055] bridge_slave_1: left allmulticast mode [ 460.554320][ T5055] bridge_slave_1: left promiscuous mode [ 460.572886][ T5948] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 460.609157][ T5055] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.649561][ T5055] bridge_slave_0: left allmulticast mode [ 460.670164][ T5055] bridge_slave_0: left promiscuous mode [ 460.698761][ T5055] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.386138][ T5849] Bluetooth: hci1: command tx timeout [ 463.456028][ T5849] Bluetooth: hci1: command tx timeout [ 464.323120][ T5055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.379165][ T5055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.404904][ T5055] bond0 (unregistering): Released all slaves [ 464.452611][ T8801] team0: Port device team_slave_1 added [ 465.342661][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.373116][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.397007][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.422157][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.426744][ C1] sched: DL replenish lagged too much [ 465.451785][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.476012][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.499538][ T8520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.523996][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.548798][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.568448][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.584728][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.603206][ T8520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.625762][ T8520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.648313][ T8520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.693881][ T8520] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.715212][ T8520] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.735606][ T8520] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.744440][ T8520] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.934493][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.967143][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.028761][ T8528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.061142][ T8528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.659626][ T8927] netlink: 'syz.8.707': attribute type 3 has an invalid length. [ 466.679694][ T8927] netlink: 130984 bytes leftover after parsing attributes in process `syz.8.707'. [ 466.859383][ T8929] netlink: 28 bytes leftover after parsing attributes in process `syz.8.708'. [ 466.880867][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.8.708'. [ 477.837014][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 477.856964][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 477.877853][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 477.887934][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 477.896415][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 477.906602][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 477.931755][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 477.943100][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 477.951141][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 477.959696][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 477.968382][ T5843] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 477.977045][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 478.472618][ T8941] chnl_net:caif_netlink_parms(): no params data found [ 478.716997][ T8941] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.735936][ T8941] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.743182][ T8941] bridge_slave_0: entered allmulticast mode [ 478.761234][ T8941] bridge_slave_0: entered promiscuous mode [ 478.783200][ T8941] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.805722][ T8941] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.813027][ T8941] bridge_slave_1: entered allmulticast mode [ 478.831956][ T8941] bridge_slave_1: entered promiscuous mode [ 478.939671][ T8941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.962835][ T8941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.094814][ T8941] team0: Port device team_slave_0 added [ 479.118118][ T8941] team0: Port device team_slave_1 added [ 479.227763][ T8941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.235294][ T8941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.289425][ T8941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.315315][ T8941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.334973][ T8941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.378912][ T8941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.526809][ T8941] hsr_slave_0: entered promiscuous mode [ 479.540149][ T8941] hsr_slave_1: entered promiscuous mode [ 479.558652][ T8941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.574382][ T8941] Cannot create hsr debugfs directory [ 480.096281][ T5853] Bluetooth: hci7: command tx timeout [ 480.102540][ T5853] Bluetooth: hci0: command tx timeout [ 482.176119][ T5853] Bluetooth: hci0: command tx timeout [ 482.181599][ T5853] Bluetooth: hci7: command tx timeout [ 483.082101][ T5847] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 483.093764][ T5847] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 483.106300][ T5847] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 483.118313][ T5847] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 483.143037][ T5847] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 483.153792][ T5847] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 483.651756][ T8956] chnl_net:caif_netlink_parms(): no params data found [ 483.876090][ T8956] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.883368][ T8956] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.905835][ T8956] bridge_slave_0: entered allmulticast mode [ 483.934777][ T8956] bridge_slave_0: entered promiscuous mode [ 483.948926][ T8956] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.976413][ T8956] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.983770][ T8956] bridge_slave_1: entered allmulticast mode [ 484.003804][ T8956] bridge_slave_1: entered promiscuous mode [ 484.114100][ T8956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.163207][ T8956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.256188][ T5847] Bluetooth: hci7: command tx timeout [ 484.261758][ T5853] Bluetooth: hci0: command tx timeout [ 484.328509][ T8956] team0: Port device team_slave_0 added [ 484.348475][ T8956] team0: Port device team_slave_1 added [ 484.486031][ T8956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.493113][ T8956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.552844][ T8956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.607986][ T8956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.615955][ T8956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.657795][ T8956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.892900][ T8956] hsr_slave_0: entered promiscuous mode [ 484.932760][ T8956] hsr_slave_1: entered promiscuous mode [ 484.971769][ T8956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.986327][ T8956] Cannot create hsr debugfs directory [ 485.225741][ T5853] Bluetooth: hci8: command tx timeout [ 486.337117][ T5853] Bluetooth: hci0: command tx timeout [ 486.342617][ T5853] Bluetooth: hci7: command tx timeout [ 487.052451][ T5847] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 487.063087][ T5847] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 487.072579][ T5847] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 487.090733][ T5847] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 487.102346][ T5847] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 487.110600][ T5847] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 487.297047][ T5847] Bluetooth: hci8: command tx timeout [ 487.559532][ T8965] chnl_net:caif_netlink_parms(): no params data found [ 487.830118][ T8965] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.845787][ T8965] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.853106][ T8965] bridge_slave_0: entered allmulticast mode [ 487.874183][ T8965] bridge_slave_0: entered promiscuous mode [ 487.898473][ T8965] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.926288][ T8965] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.933796][ T8965] bridge_slave_1: entered allmulticast mode [ 487.961630][ T8965] bridge_slave_1: entered promiscuous mode [ 488.083643][ T8965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.113491][ T8965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.286718][ T8965] team0: Port device team_slave_0 added [ 488.318872][ T8965] team0: Port device team_slave_1 added [ 489.215715][ T5847] Bluetooth: hci9: command tx timeout [ 489.376497][ T5847] Bluetooth: hci8: command tx timeout [ 489.660556][ T8965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.689091][ T8965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.776228][ T8965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.827846][ T8965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.834834][ T8965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.956642][ T8965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.147247][ T8965] hsr_slave_0: entered promiscuous mode [ 490.171481][ T5853] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 490.181972][ T5853] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 490.192094][ T5853] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 490.207444][ T5853] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 490.216045][ T5853] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 490.224134][ T5853] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 490.248031][ T8965] hsr_slave_1: entered promiscuous mode [ 490.294585][ T8965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 490.315871][ T8965] Cannot create hsr debugfs directory [ 491.295603][ T5853] Bluetooth: hci9: command tx timeout [ 491.456623][ T5853] Bluetooth: hci8: command tx timeout [ 492.344475][ T5853] Bluetooth: hci10: command tx timeout [ 493.376359][ T5853] Bluetooth: hci9: command tx timeout [ 494.415952][ T5853] Bluetooth: hci10: command tx timeout [ 495.462434][ T5853] Bluetooth: hci9: command tx timeout [ 496.495935][ T5853] Bluetooth: hci10: command tx timeout [ 498.575814][ T5853] Bluetooth: hci10: command tx timeout [ 500.985262][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.995718][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 518.356113][ T5847] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 518.365264][ T5847] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 518.374416][ T5847] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 518.412384][ T5847] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 518.425992][ T5847] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 518.433900][ T5847] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 518.908417][ T8980] chnl_net:caif_netlink_parms(): no params data found [ 519.426732][ T8980] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.449594][ T8980] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.465773][ T8980] bridge_slave_0: entered allmulticast mode [ 519.485657][ T8980] bridge_slave_0: entered promiscuous mode [ 519.508541][ T8980] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.525749][ T8980] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.533053][ T8980] bridge_slave_1: entered allmulticast mode [ 519.575802][ T8980] bridge_slave_1: entered promiscuous mode [ 519.723364][ T8980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.754898][ T8980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.907280][ T8980] team0: Port device team_slave_0 added [ 519.927048][ T8980] team0: Port device team_slave_1 added [ 520.076102][ T8980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.083529][ T8980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.146041][ T8980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.178158][ T8980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.195935][ T8980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.267472][ T8980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.432771][ T8980] hsr_slave_0: entered promiscuous mode [ 520.471802][ T8980] hsr_slave_1: entered promiscuous mode [ 520.489080][ T8980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 520.496974][ T5847] Bluetooth: hci11: command tx timeout [ 520.515677][ T8980] Cannot create hsr debugfs directory [ 522.575766][ T5847] Bluetooth: hci11: command tx timeout [ 524.655950][ T5847] Bluetooth: hci11: command tx timeout [ 526.746596][ T5847] Bluetooth: hci11: command tx timeout [ 540.175906][ T5853] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 540.189795][ T5853] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 540.199583][ T5853] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 540.209615][ T5853] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 540.222477][ T5853] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 540.248392][ T5853] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 540.289014][ T5847] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 540.306450][ T5847] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 540.316974][ T5847] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 540.326959][ T5847] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 540.337413][ T5847] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 540.350039][ T5847] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 540.805028][ T8992] chnl_net:caif_netlink_parms(): no params data found [ 541.109548][ T8992] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.128149][ T8992] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.150551][ T8992] bridge_slave_0: entered allmulticast mode [ 541.166989][ T8992] bridge_slave_0: entered promiscuous mode [ 541.187602][ T8992] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.194718][ T8992] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.226627][ T8992] bridge_slave_1: entered allmulticast mode [ 541.245875][ T8992] bridge_slave_1: entered promiscuous mode [ 541.628431][ T8992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.668974][ T8992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.990622][ T8992] team0: Port device team_slave_0 added [ 542.014583][ T8992] team0: Port device team_slave_1 added [ 542.241480][ T8992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.266065][ T8992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.335986][ T5853] Bluetooth: hci12: command tx timeout [ 542.342509][ T8992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.376074][ T8992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.383055][ T8992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.425673][ T5853] Bluetooth: hci13: command tx timeout [ 542.450890][ T8992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.627267][ T8992] hsr_slave_0: entered promiscuous mode [ 542.682740][ T8992] hsr_slave_1: entered promiscuous mode [ 542.733681][ T8992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.762318][ T8992] Cannot create hsr debugfs directory [ 544.016046][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 544.416076][ T5847] Bluetooth: hci12: command tx timeout [ 544.496079][ T5847] Bluetooth: hci13: command tx timeout [ 544.637559][ T5853] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 544.657356][ T5853] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 544.668018][ T5853] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 544.681538][ T5853] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 544.693400][ T5853] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 544.703478][ T5853] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 545.171480][ T9007] chnl_net:caif_netlink_parms(): no params data found [ 545.504119][ T9007] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.531272][ T9007] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.545845][ T9007] bridge_slave_0: entered allmulticast mode [ 545.565922][ T9007] bridge_slave_0: entered promiscuous mode [ 545.588033][ T9007] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.595186][ T9007] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.626123][ T9007] bridge_slave_1: entered allmulticast mode [ 545.645932][ T9007] bridge_slave_1: entered promiscuous mode [ 545.988791][ T9007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.038415][ T9007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.497357][ T5853] Bluetooth: hci12: command tx timeout [ 546.575993][ T5853] Bluetooth: hci13: command tx timeout [ 546.735920][ T5853] Bluetooth: hci14: command tx timeout [ 547.635078][ T5843] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 547.652584][ T5843] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 547.662670][ T5843] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 547.673563][ T5843] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 547.682316][ T5843] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 547.696538][ T5843] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 547.735202][ T9007] team0: Port device team_slave_0 added [ 547.776963][ T9007] team0: Port device team_slave_1 added [ 548.040226][ T9007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.055686][ T9007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.119420][ T9007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.158817][ T9007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.176503][ T9007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.238501][ T9007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.387341][ T9007] hsr_slave_0: entered promiscuous mode [ 548.417427][ T9007] hsr_slave_1: entered promiscuous mode [ 548.435946][ T9007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 548.443566][ T9007] Cannot create hsr debugfs directory [ 548.576291][ T5843] Bluetooth: hci12: command tx timeout [ 548.665213][ T5843] Bluetooth: hci13: command tx timeout [ 548.815847][ T5843] Bluetooth: hci14: command tx timeout [ 549.143621][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 549.777456][ T5847] Bluetooth: hci15: command tx timeout [ 550.650935][ T5843] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 550.664643][ T5843] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 550.676030][ T5843] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 550.691947][ T5843] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 550.702283][ T5843] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 550.710521][ T5843] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 550.896185][ T5843] Bluetooth: hci14: command tx timeout [ 551.163144][ T9020] chnl_net:caif_netlink_parms(): no params data found [ 551.457876][ T9020] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.465037][ T9020] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.485935][ T9020] bridge_slave_0: entered allmulticast mode [ 551.505864][ T9020] bridge_slave_0: entered promiscuous mode [ 551.529448][ T9020] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.548846][ T9020] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.571609][ T9020] bridge_slave_1: entered allmulticast mode [ 551.588015][ T9020] bridge_slave_1: entered promiscuous mode [ 551.698706][ T9020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.748143][ T9020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.856069][ T5843] Bluetooth: hci15: command tx timeout [ 552.228886][ T9020] team0: Port device team_slave_0 added [ 552.247619][ T9020] team0: Port device team_slave_1 added [ 552.341161][ T9020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.365712][ T9020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.435820][ T9020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.466372][ T9020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.473386][ T9020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.556351][ T9020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.736059][ T5843] Bluetooth: hci16: command tx timeout [ 552.977823][ T5843] Bluetooth: hci14: command tx timeout [ 553.011695][ T9020] hsr_slave_0: entered promiscuous mode [ 553.028469][ T9020] hsr_slave_1: entered promiscuous mode [ 553.048022][ T9020] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 553.066088][ T9020] Cannot create hsr debugfs directory [ 553.936141][ T5843] Bluetooth: hci15: command tx timeout [ 554.269135][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 554.815878][ T5853] Bluetooth: hci16: command tx timeout [ 556.016256][ T5853] Bluetooth: hci15: command tx timeout [ 556.895839][ T5853] Bluetooth: hci16: command tx timeout [ 558.975856][ T5853] Bluetooth: hci16: command tx timeout [ 562.421901][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.435964][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 579.863537][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 580.230567][ T5843] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 580.240094][ T5843] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 580.249279][ T5843] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 580.262774][ T5843] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 580.279729][ T5843] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 580.288620][ T5843] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 580.719975][ T9031] chnl_net:caif_netlink_parms(): no params data found [ 582.335757][ T5843] Bluetooth: hci17: command tx timeout [ 583.041419][ T9031] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.075750][ T9031] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.083243][ T9031] bridge_slave_0: entered allmulticast mode [ 583.107244][ T9031] bridge_slave_0: entered promiscuous mode [ 583.127521][ T9031] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.134670][ T9031] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.166189][ T9031] bridge_slave_1: entered allmulticast mode [ 583.198895][ T9031] bridge_slave_1: entered promiscuous mode [ 583.433546][ T9031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.469077][ T9031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.833378][ T9031] team0: Port device team_slave_0 added [ 583.863780][ T9031] team0: Port device team_slave_1 added [ 584.139832][ T9031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.155724][ T9031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.225868][ T9031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.248523][ T9031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.276117][ T9031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.334623][ T9031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.421352][ T5843] Bluetooth: hci17: command tx timeout [ 584.602236][ T9031] hsr_slave_0: entered promiscuous mode [ 584.619026][ T9031] hsr_slave_1: entered promiscuous mode [ 584.893617][ T9031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 584.901572][ T9031] Cannot create hsr debugfs directory [ 586.495981][ T5843] Bluetooth: hci17: command tx timeout [ 588.575840][ T5843] Bluetooth: hci17: command tx timeout [ 600.338543][ T9040] Bluetooth: hci0: command 0x0406 tx timeout [ 600.348731][ T5849] Bluetooth: hci7: command 0x0406 tx timeout [ 600.516755][ T5849] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 600.528846][ T5849] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 600.542265][ T5849] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 600.554060][ T5849] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 600.563767][ T5849] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 600.576920][ T5849] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 600.754101][ T5853] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 600.764588][ T5853] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 600.775522][ T5853] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 600.784287][ T5853] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 600.812533][ T5853] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 600.826981][ T5853] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 601.159970][ T9043] chnl_net:caif_netlink_parms(): no params data found [ 601.451842][ T9043] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.475776][ T9043] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.483162][ T9043] bridge_slave_0: entered allmulticast mode [ 601.525069][ T9043] bridge_slave_0: entered promiscuous mode [ 601.539362][ T9043] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.559024][ T9043] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.575863][ T9043] bridge_slave_1: entered allmulticast mode [ 601.605838][ T9043] bridge_slave_1: entered promiscuous mode [ 602.659095][ T5847] Bluetooth: hci18: command tx timeout [ 602.895795][ T5847] Bluetooth: hci19: command tx timeout [ 604.735829][ T5847] Bluetooth: hci18: command tx timeout [ 604.977907][ T5847] Bluetooth: hci19: command tx timeout [ 605.466404][ T5847] Bluetooth: hci8: command 0x0406 tx timeout [ 605.810867][ T5847] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 605.828586][ T5847] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 605.837174][ T5847] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 605.852768][ T5847] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 605.861788][ T5847] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3 [ 605.870232][ T5847] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 606.817160][ T5847] Bluetooth: hci18: command tx timeout [ 607.061489][ T5847] Bluetooth: hci19: command tx timeout [ 607.857028][ T5853] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 607.867973][ T5853] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 607.878210][ T5853] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 607.890041][ T5853] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 607.899485][ T5853] Bluetooth: hci21: unexpected cc 0x0c25 length: 249 > 3 [ 607.907491][ T5853] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 607.935843][ T5853] Bluetooth: hci20: command tx timeout [ 608.895923][ T5853] Bluetooth: hci18: command tx timeout [ 609.135873][ T5853] Bluetooth: hci19: command tx timeout [ 609.936066][ T5853] Bluetooth: hci21: command tx timeout [ 610.016036][ T5853] Bluetooth: hci20: command tx timeout [ 610.583685][ T5853] Bluetooth: hci9: command 0x0406 tx timeout [ 611.226277][ T5853] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 611.235618][ T5853] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 611.243742][ T5853] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 611.253919][ T5853] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 611.263126][ T5853] Bluetooth: hci22: unexpected cc 0x0c25 length: 249 > 3 [ 611.273968][ T5853] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 612.016723][ T5853] Bluetooth: hci21: command tx timeout [ 612.095879][ T5853] Bluetooth: hci20: command tx timeout [ 613.376807][ T5853] Bluetooth: hci22: command tx timeout [ 614.095853][ T5847] Bluetooth: hci21: command tx timeout [ 614.176410][ T5847] Bluetooth: hci20: command tx timeout [ 615.456015][ T5847] Bluetooth: hci22: command tx timeout [ 615.707190][ T5847] Bluetooth: hci10: command 0x0406 tx timeout [ 616.175844][ T5853] Bluetooth: hci21: command tx timeout [ 617.535742][ T5853] Bluetooth: hci22: command tx timeout [ 619.615782][ T5853] Bluetooth: hci22: command tx timeout [ 623.216081][ T30] INFO: task kworker/u8:4:62 blocked for more than 143 seconds. [ 623.224065][ T30] Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 623.265999][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 623.325703][ T30] task:kworker/u8:4 state:D stack:21480 pid:62 tgid:62 ppid:2 flags:0x00004000 [ 623.375803][ T30] Workqueue: events_unbound linkwatch_event [ 623.381792][ T30] Call Trace: [ 623.495624][ T30] [ 623.498886][ T30] __schedule+0x184f/0x4c30 [ 623.503463][ T30] ? __pfx___schedule+0x10/0x10 [ 623.635927][ T30] ? __pfx_lock_release+0x10/0x10 [ 623.641050][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 623.690623][ T30] ? kthread_data+0x52/0xd0 [ 623.695212][ T30] ? schedule+0x90/0x320 [ 623.746527][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.752227][ T30] ? wq_worker_sleeping+0x66/0x240 [ 623.785619][ T30] ? schedule+0x90/0x320 [ 623.789914][ T30] schedule+0x14b/0x320 [ 623.815568][ T30] schedule_preempt_disabled+0x13/0x30 [ 623.821078][ T30] __mutex_lock+0x6a7/0xd70 [ 623.845972][ T30] ? __mutex_lock+0x52a/0xd70 [ 623.850713][ T30] ? linkwatch_event+0xe/0x60 [ 623.876023][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.882339][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.895944][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 623.901041][ T30] ? process_scheduled_works+0x976/0x1850 [ 623.925916][ T30] linkwatch_event+0xe/0x60 [ 623.930476][ T30] process_scheduled_works+0xa65/0x1850 [ 623.955586][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 623.961676][ T30] ? assign_work+0x364/0x3d0 [ 623.979923][ T30] worker_thread+0x870/0xd30 [ 623.984596][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 623.995566][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.015694][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 624.021731][ T30] ? __kthread_parkme+0x169/0x1d0 [ 624.037245][ T30] ? __pfx_worker_thread+0x10/0x10 [ 624.042497][ T30] kthread+0x2f2/0x390 [ 624.075705][ T30] ? __pfx_worker_thread+0x10/0x10 [ 624.081045][ T30] ? __pfx_kthread+0x10/0x10 [ 624.095633][ T30] ret_from_fork+0x4d/0x80 [ 624.106330][ T30] ? __pfx_kthread+0x10/0x10 [ 624.110967][ T30] ret_from_fork_asm+0x1a/0x30 [ 624.126402][ T30] [ 624.137692][ T30] INFO: task kworker/u8:5:81 blocked for more than 144 seconds. [ 624.159440][ T30] Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 624.185665][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 624.194414][ T30] task:kworker/u8:5 state:D stack:19944 pid:81 tgid:81 ppid:2 flags:0x00004000 [ 624.235879][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 624.241918][ T30] Call Trace: [ 624.245304][ T30] [ 624.265717][ T30] __schedule+0x184f/0x4c30 [ 624.270296][ T30] ? __pfx___schedule+0x10/0x10 [ 624.275183][ T30] ? __pfx_lock_release+0x10/0x10 [ 624.298169][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 624.327194][ T30] ? kthread_data+0x52/0xd0 [ 624.331755][ T30] ? schedule+0x90/0x320 [ 624.345517][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.351203][ T30] ? wq_worker_sleeping+0x66/0x240 [ 624.365872][ T30] ? schedule+0x90/0x320 [ 624.370159][ T30] schedule+0x14b/0x320 [ 624.374345][ T30] schedule_preempt_disabled+0x13/0x30 [ 624.405550][ T30] __mutex_lock+0x6a7/0xd70 [ 624.411629][ T30] ? mark_lock+0x9a/0x360 [ 624.432340][ T30] ? __mutex_lock+0x52a/0xd70 [ 624.445581][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 624.450734][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 624.465679][ T30] addrconf_dad_work+0xd0/0x16f0 [ 624.470704][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.500181][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 624.506296][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 624.529675][ T30] ? process_scheduled_works+0x976/0x1850 [ 624.542844][ T30] process_scheduled_works+0xa65/0x1850 [ 624.556100][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 624.562140][ T30] ? assign_work+0x364/0x3d0 [ 624.585644][ T30] worker_thread+0x870/0xd30 [ 624.590303][ T30] ? __kthread_parkme+0x169/0x1d0 [ 624.609519][ T30] ? __pfx_worker_thread+0x10/0x10 [ 624.622117][ T30] kthread+0x2f2/0x390 [ 624.635941][ T30] ? __pfx_worker_thread+0x10/0x10 [ 624.641296][ T30] ? __pfx_kthread+0x10/0x10 [ 624.666115][ T30] ret_from_fork+0x4d/0x80 [ 624.670586][ T30] ? __pfx_kthread+0x10/0x10 [ 624.675215][ T30] ret_from_fork_asm+0x1a/0x30 [ 624.695659][ T30] [ 624.698908][ T30] INFO: task kworker/u8:8:5055 blocked for more than 144 seconds. [ 624.724534][ T30] Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 624.743746][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 624.775734][ T30] task:kworker/u8:8 state:D stack:20392 pid:5055 tgid:5055 ppid:2 flags:0x00004000 [ 624.795845][ T30] Workqueue: netns cleanup_net [ 624.800668][ T30] Call Trace: [ 624.803960][ T30] [ 624.817677][ T30] __schedule+0x184f/0x4c30 [ 624.822255][ T30] ? __pfx___schedule+0x10/0x10 [ 624.845621][ T30] ? __pfx_lock_release+0x10/0x10 [ 624.850801][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 624.871610][ T30] ? kthread_data+0x52/0xd0 [ 624.885506][ T30] ? schedule+0x90/0x320 [ 624.889792][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 624.909675][ T30] ? wq_worker_sleeping+0x66/0x240 [ 624.914841][ T30] ? schedule+0x90/0x320 [ 624.939706][ T30] schedule+0x14b/0x320 [ 624.943907][ T30] schedule_preempt_disabled+0x13/0x30 [ 624.955851][ T30] __mutex_lock+0x6a7/0xd70 [ 624.960402][ T30] ? __mutex_lock+0x52a/0xd70 [ 624.965116][ T30] ? ieee80211_unregister_hw+0x55/0x2c0 [ 624.995939][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 625.001015][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 625.022385][ T30] ? rcu_is_watching+0x15/0xb0 [ 625.036313][ T30] ieee80211_unregister_hw+0x55/0x2c0 [ 625.041795][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 625.057665][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.063420][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 625.092310][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.105639][ T30] hwsim_exit_net+0x5c1/0x670 [ 625.110382][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 625.135969][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.141655][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.159837][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 625.175786][ T30] cleanup_net+0x804/0xcc0 [ 625.180254][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 625.185235][ T30] ? process_scheduled_works+0x976/0x1850 [ 625.217906][ T30] process_scheduled_works+0xa65/0x1850 [ 625.223560][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 625.245507][ T30] ? assign_work+0x364/0x3d0 [ 625.250415][ T30] worker_thread+0x870/0xd30 [ 625.255062][ T30] ? __kthread_parkme+0x169/0x1d0 [ 625.275871][ T30] ? __pfx_worker_thread+0x10/0x10 [ 625.281033][ T30] kthread+0x2f2/0x390 [ 625.285127][ T30] ? __pfx_worker_thread+0x10/0x10 [ 625.315760][ T30] ? __pfx_kthread+0x10/0x10 [ 625.320391][ T30] ret_from_fork+0x4d/0x80 [ 625.324847][ T30] ? __pfx_kthread+0x10/0x10 [ 625.355836][ T30] ret_from_fork_asm+0x1a/0x30 [ 625.360677][ T30] [ 625.363900][ T30] INFO: task jbd2/sda1-8:5170 blocked for more than 145 seconds. [ 625.396865][ T30] Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 625.404526][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 625.436393][ T30] task:jbd2/sda1-8 state:D stack:22800 pid:5170 tgid:5170 ppid:2 flags:0x00004000 [ 625.465648][ T30] Call Trace: [ 625.468968][ T30] [ 625.472009][ T30] __schedule+0x184f/0x4c30 [ 625.490177][ T30] ? __pfx___schedule+0x10/0x10 [ 625.495079][ T30] ? __pfx_lock_release+0x10/0x10 [ 625.515668][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 625.521722][ T30] ? schedule+0x90/0x320 [ 625.545627][ T30] schedule+0x14b/0x320 [ 625.549852][ T30] io_schedule+0x8d/0x110 [ 625.554218][ T30] bit_wait_io+0x12/0xd0 [ 625.575624][ T30] __wait_on_bit+0xb2/0x2f0 [ 625.580286][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 625.585262][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 625.616171][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 625.621170][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 625.642599][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 625.655608][ T30] jbd2_journal_commit_transaction+0x3df6/0x67e0 [ 625.662050][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 625.685585][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 625.690837][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.713781][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 625.735591][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.742769][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 625.765587][ T30] ? __timer_delete_sync+0x15c/0x310 [ 625.770935][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.789762][ T30] ? __timer_delete_sync+0x25d/0x310 [ 625.795181][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 625.820102][ T30] ? __pfx_do_raw_write_lock+0x10/0x10 [ 625.827713][ T30] ? prepare_to_wait+0x186/0x210 [ 625.832702][ T30] ? schedule+0x90/0x320 [ 625.856236][ T30] kjournald2+0x41c/0x7b0 [ 625.860671][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 625.890174][ T30] ? __pfx_kjournald2+0x10/0x10 [ 625.895101][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 625.915682][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.921369][ T30] ? __kthread_parkme+0x169/0x1d0 [ 625.935930][ T30] ? __pfx_kjournald2+0x10/0x10 [ 625.940845][ T30] kthread+0x2f2/0x390 [ 625.960420][ T30] ? __pfx_kjournald2+0x10/0x10 [ 625.977369][ T30] ? __pfx_kthread+0x10/0x10 [ 625.982048][ T30] ret_from_fork+0x4d/0x80 [ 625.996365][ T30] ? __pfx_kthread+0x10/0x10 [ 626.001009][ T30] ret_from_fork_asm+0x1a/0x30 [ 626.026235][ T30] [ 626.029299][ T30] INFO: task dhcpcd:5502 blocked for more than 146 seconds. [ 626.057423][ T30] Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 626.065081][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 626.095938][ T30] task:dhcpcd state:D stack:20608 pid:5502 tgid:5502 ppid:5501 flags:0x00000002 [ 626.122197][ T30] Call Trace: [ 626.126134][ T30] [ 626.129097][ T30] __schedule+0x184f/0x4c30 [ 626.133701][ T30] ? __pfx___schedule+0x10/0x10 [ 626.167288][ T30] ? __pfx_lock_release+0x10/0x10 [ 626.172373][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 626.185662][ T30] ? schedule+0x90/0x320 [ 626.189992][ T30] schedule+0x14b/0x320 [ 626.194192][ T30] schedule_preempt_disabled+0x13/0x30 [ 626.215920][ T30] __mutex_lock+0x6a7/0xd70 [ 626.220514][ T30] ? __mutex_lock+0x52a/0xd70 [ 626.225238][ T30] ? devinet_ioctl+0x2ce/0x1aa0 [ 626.260166][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 626.265285][ T30] ? apparmor_capable+0x13b/0x1b0 [ 626.286274][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.292237][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.315800][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.321511][ T30] devinet_ioctl+0x2ce/0x1aa0 [ 626.337298][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.342989][ T30] ? get_user_ifreq+0x1bb/0x200 [ 626.369741][ T30] inet_ioctl+0x3d7/0x4f0 [ 626.374237][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 626.396548][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 626.401878][ T30] sock_do_ioctl+0x15a/0x460 [ 626.417619][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 626.422779][ T30] ? __pfx_lock_release+0x10/0x10 [ 626.445685][ T30] sock_ioctl+0x626/0x8e0 [ 626.450087][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 626.473429][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.485494][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 626.491531][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 626.515816][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.521586][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 626.545536][ T30] __se_sys_ioctl+0xfb/0x170 [ 626.550165][ T30] do_syscall_64+0xf3/0x230 [ 626.554699][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 626.582587][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.607661][ T30] RIP: 0033:0x7fa64880ad49 [ 626.612108][ T30] RSP: 002b:00007fff247e3fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 626.636319][ T30] RAX: ffffffffffffffda RBX: 00007fa64873c6c0 RCX: 00007fa64880ad49 [ 626.644341][ T30] RDX: 00007fff247f41c8 RSI: 0000000000008914 RDI: 0000000000000014 [ 626.665484][ T30] RBP: 00007fff24804388 R08: 00007fff247f4188 R09: 00007fff247f4138 [ 626.673491][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.705549][ T30] R13: 00007fff247f41c8 R14: 0000000000000028 R15: 0000000000008914 [ 626.713637][ T30] [ 626.736305][ T30] INFO: task syz-executor:8550 blocked for more than 146 seconds. [ 626.744159][ T30] Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 626.765691][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 626.774382][ T30] task:syz-executor state:D stack:20616 pid:8550 tgid:8550 ppid:1 flags:0x00000004 [ 626.815774][ T30] Call Trace: [ 626.819253][ T30] [ 626.822207][ T30] __schedule+0x184f/0x4c30 [ 626.845694][ T30] ? __pfx___schedule+0x10/0x10 [ 626.850587][ T30] ? __pfx_lock_release+0x10/0x10 [ 626.865183][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 626.875729][ T30] ? schedule+0x90/0x320 [ 626.880008][ T30] schedule+0x14b/0x320 [ 626.884376][ T30] schedule_preempt_disabled+0x13/0x30 [ 626.914716][ T30] __mutex_lock+0x6a7/0xd70 [ 626.935798][ T30] ? __mutex_lock+0x52a/0xd70 [ 626.940522][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 626.956276][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 626.961385][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 626.985744][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 626.990906][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 627.005693][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 627.011462][ T30] ? ref_tracker_free+0x643/0x7e0 [ 627.040408][ T30] netlink_rcv_skb+0x1e5/0x430 [ 627.045240][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 627.065612][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 627.089834][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 627.095083][ T30] netlink_unicast+0x7f8/0x990 [ 627.105612][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 627.110940][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 627.145609][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 627.151332][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 627.172216][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 627.190153][ T30] ? __check_object_size+0x48e/0x900 [ 627.196701][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 627.201614][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.225554][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 627.231242][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 627.265572][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 627.271356][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.285500][ T30] __sock_sendmsg+0x223/0x270 [ 627.290221][ T30] __sys_sendto+0x39b/0x4f0 [ 627.294762][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 627.315905][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 627.321587][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 627.345608][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 627.351998][ T30] __x64_sys_sendto+0xde/0x100 [ 627.381465][ T30] do_syscall_64+0xf3/0x230 [ 627.395869][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 627.401573][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.415668][ T30] RIP: 0033:0x7f4c74d805ac [ 627.420125][ T30] RSP: 002b:00007ffce1a95a10 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 627.445648][ T30] RAX: ffffffffffffffda RBX: 00007f4c75a64620 RCX: 00007f4c74d805ac [ 627.453691][ T30] RDX: 0000000000000040 RSI: 00007f4c75a64670 RDI: 0000000000000003 [ 627.495639][ T30] RBP: 0000000000000000 R08: 00007ffce1a95a64 R09: 000000000000000c [ 627.503661][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 627.535782][ T30] R13: 0000000000000000 R14: 00007f4c75a64670 R15: 0000000000000000 [ 627.543809][ T30] [ 627.555990][ T30] INFO: task syz-executor:8574 blocked for more than 147 seconds. [ 627.563820][ T30] Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 627.601072][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 627.625918][ T30] task:syz-executor state:D stack:19784 pid:8574 tgid:8574 ppid:1 flags:0x00000004 [ 627.645558][ T30] Call Trace: [ 627.648864][ T30] [ 627.651830][ T30] __schedule+0x184f/0x4c30 [ 627.667191][ T30] ? __pfx___schedule+0x10/0x10 [ 627.672095][ T30] ? __pfx_lock_release+0x10/0x10 [ 627.696312][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 627.701905][ T30] ? schedule+0x90/0x320 [ 627.726115][ T30] schedule+0x14b/0x320 [ 627.730366][ T30] schedule_preempt_disabled+0x13/0x30 [ 627.755773][ T30] __mutex_lock+0x6a7/0xd70 [ 627.760370][ T30] ? __mutex_lock+0x52a/0xd70 [ 627.765195][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 627.787739][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 627.793016][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 627.823063][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 627.835614][ T30] ? __lock_acquire+0x1384/0x2050 [ 627.840703][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 627.860133][ T30] netlink_rcv_skb+0x1e5/0x430 [ 627.864943][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 627.885667][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 627.895676][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 627.900918][ T30] netlink_unicast+0x7f8/0x990 [ 627.915707][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 627.921030][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 627.956107][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 627.961804][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 627.985690][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 627.992158][ T30] ? __check_object_size+0x48e/0x900 [ 628.005587][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 628.010421][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.035762][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.041453][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 628.062358][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.075943][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.081270][ T30] __sock_sendmsg+0x223/0x270 [ 628.105585][ T30] __sys_sendto+0x39b/0x4f0 [ 628.110228][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 628.115312][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.131392][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 628.157870][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 628.164258][ T30] __x64_sys_sendto+0xde/0x100 [ 628.185655][ T30] do_syscall_64+0xf3/0x230 [ 628.190203][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.215850][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.221808][ T30] RIP: 0033:0x7f14bd5805ac [ 628.235579][ T30] RSP: 002b:00007fffec684cc0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 628.244045][ T30] RAX: ffffffffffffffda RBX: 00007f14be264620 RCX: 00007f14bd5805ac [ 628.275790][ T30] RDX: 000000000000002c RSI: 00007f14be264670 RDI: 0000000000000003 [ 628.283895][ T30] RBP: 0000000000000000 R08: 00007fffec684d14 R09: 000000000000000c [ 628.315794][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 628.323831][ T30] R13: 0000000000000000 R14: 00007f14be264670 R15: 0000000000000000 [ 628.363378][ T30] [ 628.377325][ T30] INFO: task syz-executor:8801 blocked for more than 148 seconds. [ 628.396296][ T30] Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 628.421872][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 628.445570][ T30] task:syz-executor state:D stack:21728 pid:8801 tgid:8801 ppid:1 flags:0x00000004 [ 628.468406][ T30] Call Trace: [ 628.471708][ T30] [ 628.474666][ T30] __schedule+0x184f/0x4c30 [ 628.495790][ T30] ? __pfx___schedule+0x10/0x10 [ 628.500686][ T30] ? __pfx_lock_release+0x10/0x10 [ 628.515619][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 628.521133][ T30] ? schedule+0x90/0x320 [ 628.545675][ T30] schedule+0x14b/0x320 [ 628.549959][ T30] schedule_preempt_disabled+0x13/0x30 [ 628.565688][ T30] __mutex_lock+0x6a7/0xd70 [ 628.570237][ T30] ? __mutex_lock+0x52a/0xd70 [ 628.575041][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 628.606210][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 628.611333][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 628.646073][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 628.651238][ T30] ? __lock_acquire+0x1384/0x2050 [ 628.708337][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 628.713885][ T30] netlink_rcv_skb+0x1e5/0x430 [ 628.738593][ T8915] netlink: 'syz.4.704': attribute type 29 has an invalid length. [ 628.805673][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 628.812011][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 628.896769][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 628.902058][ T30] netlink_unicast+0x7f8/0x990 [ 628.939078][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 628.944440][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 628.995690][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.001447][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.030640][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.056216][ T30] ? __check_object_size+0x48e/0x900 [ 629.061595][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 629.095785][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.101180][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.138932][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 629.143961][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.175527][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.180888][ T30] __sock_sendmsg+0x223/0x270 [ 629.210560][ T30] __sys_sendto+0x39b/0x4f0 [ 629.215156][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 629.249096][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.254914][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 629.302308][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 629.315952][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 629.346173][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 629.352597][ T30] __x64_sys_sendto+0xde/0x100 [ 629.394988][ T30] do_syscall_64+0xf3/0x230 [ 629.425104][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.445751][ T30] RIP: 0033:0x7fc5c69805ac [ 629.450224][ T30] RSP: 002b:00007ffe80308810 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 629.495958][ T30] RAX: ffffffffffffffda RBX: 00007fc5c7664620 RCX: 00007fc5c69805ac [ 629.504008][ T30] RDX: 000000000000006c RSI: 00007fc5c7664670 RDI: 0000000000000003 [ 629.555760][ T30] RBP: 0000000000000000 R08: 00007ffe80308864 R09: 000000000000000c [ 629.563814][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 629.609008][ T30] R13: 0000000000000000 R14: 00007fc5c7664670 R15: 0000000000000000 [ 629.644968][ T30] [ 629.666668][ T30] INFO: task syz-executor:8942 blocked for more than 149 seconds. [ 629.674523][ T30] Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 629.765803][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 629.774533][ T30] task:syz-executor state:D stack:23208 pid:8942 tgid:8942 ppid:1 flags:0x00004004 [ 629.865531][ T30] Call Trace: [ 629.868879][ T30] [ 629.871836][ T30] __schedule+0x184f/0x4c30 [ 629.925571][ T30] ? __pfx___schedule+0x10/0x10 [ 629.930518][ T30] ? __pfx_lock_release+0x10/0x10 [ 629.978372][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 629.983937][ T30] ? schedule+0x90/0x320 [ 630.035626][ T30] schedule+0x14b/0x320 [ 630.055870][ T30] schedule_preempt_disabled+0x13/0x30 [ 630.061413][ T30] __mutex_lock+0x6a7/0xd70 [ 630.101790][ T30] ? __mutex_lock+0x52a/0xd70 [ 630.135827][ T30] ? register_nexthop_notifier+0x84/0x290 [ 630.142467][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 630.176048][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 630.181769][ T30] ? __asan_memset+0x23/0x50 [ 630.225581][ T30] register_nexthop_notifier+0x84/0x290 [ 630.231333][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 630.267000][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 630.273352][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 630.322275][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 630.335995][ T30] ? __asan_memset+0x23/0x50 [ 630.340641][ T30] ops_init+0x320/0x590 [ 630.344929][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 630.386315][ T30] setup_net+0x287/0x9e0 [ 630.390644][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 630.432237][ T30] ? __pfx_setup_net+0x10/0x10 [ 630.445553][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 630.475963][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 630.481860][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 630.517744][ T30] copy_net_ns+0x33f/0x570 [ 630.522329][ T30] create_new_namespaces+0x425/0x7b0 [ 630.557256][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 630.563168][ T30] ksys_unshare+0x57d/0xa70 [ 630.598780][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 630.603885][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 630.635887][ T30] ? do_syscall_64+0x100/0x230 [ 630.640780][ T30] __x64_sys_unshare+0x38/0x40 [ 630.672293][ T30] do_syscall_64+0xf3/0x230 [ 630.696062][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.702211][ T30] RIP: 0033:0x7fd5acf7ff17 [ 630.735975][ T30] RSP: 002b:00007ffd78f76d08 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 630.744502][ T30] RAX: ffffffffffffffda RBX: 00007fd5ad135f40 RCX: 00007fd5acf7ff17 [ 630.805497][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 630.813637][ T30] RBP: 00007fd5ad136a38 R08: 0000000000000000 R09: 0000000000000000 [ 630.852607][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 630.880619][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 630.922771][ T30] [ 630.940396][ T30] [ 630.940396][ T30] Showing all locks held in the system: [ 631.022562][ T30] 4 locks held by kworker/1:0/25: [ 631.065649][ T30] 1 lock held by khungtaskd/30: [ 631.070588][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 631.128852][ T30] 3 locks held by kworker/u8:4/62: [ 631.134032][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 631.181535][ T30] #1: ffffc900015d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 631.238484][ T30] #2: ffffffff8fcd3e08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 631.265706][ T30] 3 locks held by kworker/u8:5/81: [ 631.285767][ T30] #0: ffff88814d506948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 631.335681][ T30] #1: ffffc900020ffd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 631.380503][ T30] #2: ffffffff8fcd3e08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 631.424244][ T30] 3 locks held by kworker/u8:6/1142: [ 631.458856][ T30] #0: ffff888146e81148 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 631.506053][ T30] #1: ffffc90004207d00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 631.548803][ T30] #2: ffffffff8fcd3e08 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xbf/0x610 [ 631.593273][ T30] 2 locks held by kworker/u8:7/2937: [ 631.614679][ T30] 5 locks held by kworker/u8:8/5055: [ 631.643299][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 631.680203][ T30] #1: ffffc9000fb6fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 631.716179][ T30] #2: ffffffff8fcc72d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 631.753276][ T30] #3: ffffffff8fcd3e08 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 631.815656][ T30] #4: ffff888052f50768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_stop+0x3e9/0x4a0 [ 631.835711][ T30] 2 locks held by getty/5598: [ 631.840466][ T30] #0: ffff8880315390a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 631.882571][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 631.922010][ T30] 3 locks held by kworker/1:4/5904: [ 631.945730][ T30] 3 locks held by kworker/1:6/5946: [ 631.950989][ T30] 2 locks held by kworker/1:7/5947: [ 631.986687][ T30] 2 locks held by kworker/1:8/5948: [ 631.991956][ T30] 1 lock held by syz-executor/8550: [ 632.027052][ T30] #0: ffffffff8fcd3e08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 632.056012][ T30] 1 lock held by syz-executor/8574: [ 632.061273][ T30] #0: ffffffff8fcd3e08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 632.109112][ T30] 1 lock held by syz-executor/8801: [ 632.114408][ T30] #0: ffffffff8e93d478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 632.156111][ T30] 1 lock held by syz.8.711/8937: [ 632.161130][ T30] 7 locks held by syz-executor/8941: [ 632.180345][ T30] #0: ffff888070cb0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd30 [ 632.205780][ T30] #1: ffff88807f0be888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 632.226217][ T30] #2: ffff8881437c7878 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 632.259836][ T30] #3: ffffffff8f571bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 632.285879][ T30] #4: ffff88805eb7c0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 632.305793][ T30] #5: ffff88805eb7d250 (&devlink->lock_key#6){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 632.336606][ T30] #6: ffffffff8fcd3e08 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x7b2/0x1000 [ 632.375872][ T30] 2 locks held by syz-executor/8942: [ 632.381207][ T30] #0: ffffffff8fcc72d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 632.405663][ T30] #1: ffffffff8fcd3e08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 632.433526][ T30] 4 locks held by syz-executor/8956: [ 632.445724][ T30] #0: ffff888070cb0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd30 [ 632.454800][ T30] #1: ffff88803160ec88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 632.497458][ T30] #2: ffff8881437c7878 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 632.515810][ T30] #3: ffffffff8f571bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 632.546127][ T30] 4 locks held by syz-executor/8965: [ 632.551528][ T30] #0: ffff888070cb0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd30 [ 632.580701][ T30] #1: ffff88806f50b888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 632.605691][ T30] #2: ffff8881437c7878 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 632.626078][ T30] #3: ffffffff8f571bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 632.652759][ T30] 1 lock held by syz-executor/8977: [ 632.666138][ T30] #0: ffffffff8fcd3e08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 632.694611][ T30] 4 locks held by syz-executor/8980: [ 632.715823][ T30] #0: ffff888070cb0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd30 [ 632.724828][ T30] #1: ffff88807c6ac088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 632.761952][ T30] #2: ffff8881437c7878 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 632.785812][ T30] #3: ffffffff8f571bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 632.816893][ T30] 4 locks held by syz-executor/8992: [ 632.822332][ T30] #0: ffff888070cb0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd30 [ 632.846681][ T30] #1: ffff88805d8bd488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 632.885744][ T30] #2: ffff8881437c7878 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 632.905705][ T30] #3: ffffffff8f571bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 632.938376][ T30] 1 lock held by syz-executor/8995: [ 632.943673][ T30] #0: ffffffff8fcd3e08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 632.965973][ T30] 4 locks held by syz-executor/9007: [ 632.971309][ T30] #0: ffff888070cb0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd30 [ 633.005704][ T30] #1: ffff888141f6f488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 633.036773][ T30] #2: ffff8881437c7878 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 633.065816][ T30] #3: ffffffff8f571bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 633.085690][ T30] 1 lock held by syz-executor/9017: [ 633.091193][ T30] #0: ffffffff8fcd3e08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 633.127234][ T30] 4 locks held by syz-executor/9020: [ 633.132584][ T30] #0: ffff888070cb0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd30 [ 633.165718][ T30] #1: ffff888045e7b088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 633.185963][ T30] #2: ffff8881437c7878 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 633.205980][ T30] #3: ffffffff8f571bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480