last executing test programs: 6m11.728054008s ago: executing program 4 (id=14): socket$netlink(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x240003, 0x42) fsetxattr$system_posix_acl(r1, &(0x7f0000000340)='system.posix_acl_access\x00', 0x0, 0x2c, 0x3) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400, 0xc2) socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r5, 0x5421, &(0x7f0000000440)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000d40)={0x0, 0x7}, 0x8) close(r5) socket$inet6(0xa, 0x80003, 0x6) 6m9.308475477s ago: executing program 4 (id=17): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x44}}, 0x0) r1 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000022000/0x4000)=nil, 0x4000, 0x100000a, 0x13, r1, 0xef89d000) recvfrom(r0, &(0x7f00000002c0)=""/40, 0x28, 0x2000, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0xd007) close(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000851}, 0x40) socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00\t\x00\x00\x00\x00'], 0x30) sendmsg$nl_route(r0, 0x0, 0x0) 6m9.170459087s ago: executing program 3 (id=18): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) write$tun(r1, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0x9, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) 6m4.354347672s ago: executing program 4 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) readv(r4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000180), 0x5, 0x40) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f0000000000)={0x0, 0x10004, 0x1008, 0x1}) 6m2.502372722s ago: executing program 4 (id=23): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0x9, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) 6m1.392819981s ago: executing program 3 (id=26): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) close(0x4) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000060a0104000000000000000002000000500004804c0001800c0001007061796c6f6164003c000280080004400000005a0800054000000002080003400000001708000240000000020800064000000002080007400000000808000840000000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x4) listen(0xffffffffffffffff, 0x5) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r7, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r7, r8, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r3}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60f, 0x2000, 0x1, 0x321, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) 5m58.923225105s ago: executing program 4 (id=29): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0x9, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) 5m58.02143514s ago: executing program 3 (id=30): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0x9, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 5m54.755905832s ago: executing program 3 (id=36): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) close(0x4) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000060a0104000000000000000002000000500004804c0001800c0001007061796c6f6164003c000280080004400000005a0800054000000002080003400000001708000240000000020800064000000002080007400000000808000840000000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x4) listen(0xffffffffffffffff, 0x5) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r8, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r8, r9, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r4}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60f, 0x2000, 0x1, 0x321, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) 5m51.463722333s ago: executing program 4 (id=37): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) connect(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x40}, @in6={0xa, 0x4e22, 0x0, @private1, 0x80000001}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) 5m50.904000408s ago: executing program 3 (id=40): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, 0x0, 0x0, 0x20048301) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffc50c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs$userns(r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x3fc, 0x8, 0x13, 0x0, 0x8}, 0x9c) 5m46.775574146s ago: executing program 3 (id=43): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0x9, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) 5m35.916000857s ago: executing program 32 (id=37): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) connect(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x40}, @in6={0xa, 0x4e22, 0x0, @private1, 0x80000001}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) 5m31.103664929s ago: executing program 33 (id=43): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0x9, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) 3m13.512383449s ago: executing program 1 (id=146): socket$packet(0x11, 0xa, 0x300) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) 3m8.50001881s ago: executing program 1 (id=150): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0x9, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) 3m2.419731771s ago: executing program 1 (id=155): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0x9, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) 2m53.005968025s ago: executing program 1 (id=159): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0x9, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) 2m50.734559029s ago: executing program 1 (id=162): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, 0x0, 0x0, 0x20048301) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffc50c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs$userns(r1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x3fc, 0x8, 0x13, 0x0, 0x8}, 0x9c) 2m47.654072283s ago: executing program 1 (id=163): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0x9, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) 2m31.80659598s ago: executing program 34 (id=163): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0x9, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) 17.610323869s ago: executing program 0 (id=272): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f00000008c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x855) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0x5437fbe4261c9da4, 0x4b) write(r3, &(0x7f0000000300), 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='1', 0x1) 15.344275966s ago: executing program 0 (id=273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0x400122a0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) write(r0, &(0x7f0000000700), 0x0) 14.276003631s ago: executing program 2 (id=274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) connect(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x40}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) 12.755603179s ago: executing program 2 (id=275): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) close(0x4) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000060a0104000000000000000002000000500004804c0001800c0001007061796c6f6164003c000280080004400000005a0800054000000002080003400000001708000240000000020800064000000002080007400000000808000840000000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x4) listen(0xffffffffffffffff, 0x5) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r8, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r8, r9, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r4}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60f, 0x2000, 0x1, 0x321, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) 12.668035692s ago: executing program 0 (id=276): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0x9, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) 8.956083872s ago: executing program 2 (id=277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) write$tun(r1, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x2c9, 0x32314752, 0x0, 0x100000ff, 0x9, 0x0, 0x6, 0x1, 0x6, 0x2, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4085, 0xff5}], 0x1, 0x3ab3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) 8.78824134s ago: executing program 0 (id=278): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) 4.921414714s ago: executing program 2 (id=279): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x65, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00000000000000000000000000000000007300", 0x28}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x37, 0x34, 0x37, 0x30, 0x63, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x240}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233448ee9f20599aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x43}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x61, 0x39, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x39, 0x30, 0x30, 0x0, 0x30, 0x31, 0x30, 0x63, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f00000008c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddee99aabbccddeeff00112233445566778899aabbccddefff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x38, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x31, 0x30]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) 4.611969945s ago: executing program 0 (id=280): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) close(0x4) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000060a0104000000000000000002000000500004804c0001800c0001007061796c6f6164003c000280080004400000005a0800054000000002080003400000001708000240000000020800064000000002080007400000000808000840000000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x4) listen(0xffffffffffffffff, 0x5) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r8, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r8, r9, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r4}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60f, 0x2000, 0x1, 0x321, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) 2.673850786s ago: executing program 0 (id=281): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test/cgroup.procs\x00', 0x1202, 0x2) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000280)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x161142, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000105fefff7ff00010000e0000001000000000000000000000000fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d46c00000000000000000000000000ffffac1e000100000000000000009201000000000000060000000000000000000000000000001c250800000000000200000000000000f8ffffffffffffff7c232e0e00000000090000000000000000000000000000001f00000002000000feffffffffffffff02000000fcffffffff0f00002abd7000043500000200010000000000480003006465666c61746500"/207], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x1000000) socket$nl_xfrm(0x10, 0x3, 0x6) write$6lowpan_enable(r2, &(0x7f0000000300)='0', 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x80000100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x8080000, 0x3c5200}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x4, 0x112000}) 1.07425649s ago: executing program 2 (id=282): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) fcntl$setown(r1, 0x8, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x6, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0xce22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3", 0xa2, 0x840, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000540)=ANY=[], 0x298}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004801) r5 = syz_open_dev$dri(0x0, 0xffffffffff000000, 0x2000) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f0000001800)={0x0, 0x0, 0x0}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f0000000c80)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x10, 0x80002, 0x0) 0s ago: executing program 2 (id=283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0x400122a0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) write(r0, &(0x7f0000000700), 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.37' (ED25519) to the list of known hosts. [ 90.984582][ T5575] cgroup: Unknown subsys name 'net' [ 91.247540][ T5575] cgroup: Unknown subsys name 'cpuset' [ 91.310926][ T5575] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.111920][ T998] cfg80211: failed to load regulatory.db [ 93.543469][ T5575] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.377523][ T5595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.378551][ T5595] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.423676][ T5601] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.429115][ T5601] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.436420][ T5601] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.439140][ T5601] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.461692][ T5601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.479930][ T5601] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.499041][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.499535][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.515736][ T5602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.516058][ T5601] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.517811][ T5601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.538232][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.539015][ T5602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.543535][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.546175][ T5602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.547359][ T5602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.556748][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.579169][ T4903] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.596419][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.623379][ T4903] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.635487][ T4903] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.659744][ T5596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.689506][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.621797][ T5595] Bluetooth: hci4: command tx timeout [ 98.710923][ T5595] Bluetooth: hci3: command tx timeout [ 98.711042][ T5595] Bluetooth: hci2: command tx timeout [ 98.780110][ T5603] Bluetooth: hci1: command tx timeout [ 98.860399][ T5603] Bluetooth: hci0: command tx timeout [ 99.532294][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.533610][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.533781][ T5591] bridge_slave_0: entered allmulticast mode [ 99.536126][ T5591] bridge_slave_0: entered promiscuous mode [ 99.620949][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.621068][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.623485][ T5591] bridge_slave_1: entered allmulticast mode [ 99.625520][ T5591] bridge_slave_1: entered promiscuous mode [ 99.661280][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.661428][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.661592][ T5589] bridge_slave_0: entered allmulticast mode [ 99.663479][ T5589] bridge_slave_0: entered promiscuous mode [ 99.698107][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.698222][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.698363][ T5588] bridge_slave_0: entered allmulticast mode [ 99.703091][ T5588] bridge_slave_0: entered promiscuous mode [ 99.762295][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.762473][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.762846][ T5589] bridge_slave_1: entered allmulticast mode [ 99.765031][ T5589] bridge_slave_1: entered promiscuous mode [ 99.809617][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.809743][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.809869][ T5588] bridge_slave_1: entered allmulticast mode [ 99.823206][ T5588] bridge_slave_1: entered promiscuous mode [ 99.924580][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.924841][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.924977][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.925161][ T5592] bridge_slave_0: entered allmulticast mode [ 99.927469][ T5592] bridge_slave_0: entered promiscuous mode [ 99.990722][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.990919][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.991482][ T5590] bridge_slave_0: entered allmulticast mode [ 99.993515][ T5590] bridge_slave_0: entered promiscuous mode [ 100.055233][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.056366][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.056476][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.056854][ T5592] bridge_slave_1: entered allmulticast mode [ 100.065973][ T5592] bridge_slave_1: entered promiscuous mode [ 100.103197][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.103442][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.103574][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.103747][ T5590] bridge_slave_1: entered allmulticast mode [ 100.105982][ T5590] bridge_slave_1: entered promiscuous mode [ 100.119844][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.198401][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.228053][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.339813][ T5591] team0: Port device team_slave_0 added [ 100.351829][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.379509][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.423505][ T5591] team0: Port device team_slave_1 added [ 100.426087][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.428640][ T5589] team0: Port device team_slave_0 added [ 100.447973][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.457640][ T5588] team0: Port device team_slave_0 added [ 100.495896][ T5589] team0: Port device team_slave_1 added [ 100.521912][ T5588] team0: Port device team_slave_1 added [ 100.604356][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.604377][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.604407][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.608448][ T5592] team0: Port device team_slave_0 added [ 100.665080][ T5590] team0: Port device team_slave_0 added [ 100.684932][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.684953][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.684984][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.689528][ T5592] team0: Port device team_slave_1 added [ 100.700874][ T5603] Bluetooth: hci4: command tx timeout [ 100.704507][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.704559][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.704634][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.728846][ T5590] team0: Port device team_slave_1 added [ 100.736100][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.736162][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.736236][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.780876][ T5603] Bluetooth: hci2: command tx timeout [ 100.780963][ T5603] Bluetooth: hci3: command tx timeout [ 100.860073][ T5595] Bluetooth: hci1: command tx timeout [ 100.883911][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.883926][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.883947][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.886171][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.886184][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.886205][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.940374][ T5595] Bluetooth: hci0: command tx timeout [ 101.345365][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.345388][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.345419][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.348086][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.348104][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.348133][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.447691][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.447713][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.447744][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.449620][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.449636][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.449667][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.603297][ T5591] hsr_slave_0: entered promiscuous mode [ 101.604819][ T5591] hsr_slave_1: entered promiscuous mode [ 101.703074][ T5589] hsr_slave_0: entered promiscuous mode [ 101.704540][ T5589] hsr_slave_1: entered promiscuous mode [ 101.706649][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 101.706787][ T5589] Cannot create hsr debugfs directory [ 101.743834][ T5588] hsr_slave_0: entered promiscuous mode [ 101.745910][ T5588] hsr_slave_1: entered promiscuous mode [ 101.746679][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 101.746706][ T5588] Cannot create hsr debugfs directory [ 101.855517][ T5592] hsr_slave_0: entered promiscuous mode [ 101.856540][ T5592] hsr_slave_1: entered promiscuous mode [ 101.857248][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 101.857278][ T5592] Cannot create hsr debugfs directory [ 101.898800][ T5590] hsr_slave_0: entered promiscuous mode [ 101.899760][ T5590] hsr_slave_1: entered promiscuous mode [ 101.913395][ T5590] debugfs: 'hsr0' already exists in 'hsr' [ 101.913423][ T5590] Cannot create hsr debugfs directory [ 102.780082][ T5595] Bluetooth: hci4: command tx timeout [ 102.861427][ T5595] Bluetooth: hci3: command tx timeout [ 102.861461][ T5595] Bluetooth: hci2: command tx timeout [ 102.940090][ T5603] Bluetooth: hci1: command tx timeout [ 102.995491][ T5591] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.021689][ T5603] Bluetooth: hci0: command tx timeout [ 103.063666][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.073124][ T5591] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.117275][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.129847][ T5591] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.175042][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.202386][ T5591] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.226982][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.398385][ T5588] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.424285][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.429555][ T5588] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.485733][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.489307][ T5588] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.512396][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.553097][ T5588] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.588775][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.744560][ T5592] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.785548][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.803825][ T5592] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.844737][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.849487][ T5592] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.897011][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.935929][ T5592] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.975585][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.134624][ T5590] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.175723][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.191760][ T5590] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.214770][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.255711][ T5590] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.308035][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.344114][ T5590] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.374965][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.534736][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.593210][ T5589] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.641400][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.646703][ T5589] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.683981][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.688661][ T5589] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.749512][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.770697][ T5589] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.804501][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.859490][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.860540][ T5603] Bluetooth: hci4: command tx timeout [ 104.906517][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.930811][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.931040][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.946265][ T5603] Bluetooth: hci2: command tx timeout [ 104.946372][ T5603] Bluetooth: hci3: command tx timeout [ 104.996162][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.996331][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.021992][ T5595] Bluetooth: hci1: command tx timeout [ 105.084523][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.100698][ T5595] Bluetooth: hci0: command tx timeout [ 105.146487][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.146795][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.177589][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.232092][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.232228][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.328462][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.363890][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.400964][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.401115][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.477866][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.478361][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.589039][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.675867][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.676103][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.708935][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.793599][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.793710][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.944261][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.041291][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.041443][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.176825][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.176967][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.702922][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.248031][ T5591] veth0_vlan: entered promiscuous mode [ 107.292640][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.356518][ T5591] veth1_vlan: entered promiscuous mode [ 107.647837][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.684515][ T5591] veth0_macvtap: entered promiscuous mode [ 107.703775][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.746432][ T5591] veth1_macvtap: entered promiscuous mode [ 107.938764][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.022472][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.170316][ T5592] veth0_vlan: entered promiscuous mode [ 108.188545][ T5590] veth0_vlan: entered promiscuous mode [ 108.259733][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.321149][ T5592] veth1_vlan: entered promiscuous mode [ 108.437748][ T5590] veth1_vlan: entered promiscuous mode [ 108.701284][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.701317][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.765259][ T5588] veth0_vlan: entered promiscuous mode [ 108.858434][ T5592] veth0_macvtap: entered promiscuous mode [ 108.872478][ T5588] veth1_vlan: entered promiscuous mode [ 108.888873][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.888891][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.974149][ T5592] veth1_macvtap: entered promiscuous mode [ 108.988623][ T5590] veth0_macvtap: entered promiscuous mode [ 109.012705][ T5589] veth0_vlan: entered promiscuous mode [ 109.054110][ T5590] veth1_macvtap: entered promiscuous mode [ 109.127000][ T5589] veth1_vlan: entered promiscuous mode [ 109.145380][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.190182][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.238109][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.252097][ T5588] veth0_macvtap: entered promiscuous mode [ 109.269242][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.296672][ T5588] veth1_macvtap: entered promiscuous mode [ 109.317650][ T5591] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.596056][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.713096][ T5589] veth0_macvtap: entered promiscuous mode [ 109.823987][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.055830][ T5589] veth1_macvtap: entered promiscuous mode [ 110.548801][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.548823][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.736822][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.783150][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.783168][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.983922][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.235933][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.235951][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.612622][ T1049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.612648][ T1049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.015166][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.015185][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.325859][ T1175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.733143][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.733170][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.942314][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.967279][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.039996][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.040021][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.065785][ T1472] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.239644][ T5796] Zero length message leads to an empty skb [ 113.268277][ T1472] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.283220][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.283633][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.361084][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.397411][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.397644][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.398200][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.398671][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.398870][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.009948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.029954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.039947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.049939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.059938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.069941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.079944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.089949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.099958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.109968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.889479][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.889520][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.123493][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.302035][ T1113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.302471][ T1472] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.477054][ T157] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.477693][ T157] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.477845][ T157] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.478026][ T157] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.826231][ T5839] Process accounting resumed [ 128.124139][ T5319] Process accounting resumed [ 133.042148][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.042250][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.318285][ T1949] Process accounting resumed [ 137.328760][ T5933] syz.0.31 (5933) used greatest stack depth: 17448 bytes left [ 147.301813][ T998] Process accounting resumed [ 148.164102][ T5987] syz.1.44 uses obsolete (PF_INET,SOCK_PACKET) [ 148.223932][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'. [ 152.744588][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 154.776397][ T6003] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 158.831184][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 158.865610][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 158.878849][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 158.957522][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 159.042004][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 161.192813][ T5603] Bluetooth: hci5: command tx timeout [ 163.051825][ T5595] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 163.145001][ T5595] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 163.154176][ T5595] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 163.165077][ T5595] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 163.168606][ T5595] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 163.261115][ T5603] Bluetooth: hci5: command tx timeout [ 165.340671][ T5595] Bluetooth: hci5: command tx timeout [ 165.437231][ T5595] Bluetooth: hci6: command tx timeout [ 167.420301][ T5595] Bluetooth: hci5: command tx timeout [ 167.505591][ T5595] Bluetooth: hci6: command tx timeout [ 168.198543][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 168.694189][ T5891] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 168.959928][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 168.961718][ T5891] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 168.997274][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 42662, setting to 1024 [ 169.049647][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.049670][ T5891] usb 1-1: Product: syz [ 169.049681][ T5891] usb 1-1: Manufacturer: syz [ 169.049692][ T5891] usb 1-1: SerialNumber: syz [ 169.494802][ T5891] usb 1-1: config 0 descriptor?? [ 169.580187][ T5595] Bluetooth: hci6: command tx timeout [ 170.004220][ T5891] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 170.138197][ T1123] usb 1-1: Failed to submit usb control message: -71 [ 170.138229][ T1123] usb 1-1: unable to send the bmi data to the device: -71 [ 170.138257][ T1123] usb 1-1: unable to get target info from device [ 170.138273][ T1123] usb 1-1: could not get target info (-71) [ 170.138445][ T1123] usb 1-1: could not probe fw (-71) [ 170.512029][ T5891] usb 1-1: USB disconnect, device number 2 [ 170.618635][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.739518][ T5595] Bluetooth: hci6: command tx timeout [ 175.546124][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.335127][ T6117] capability: warning: `syz.0.63' uses deprecated v2 capabilities in a way that may be insecure [ 176.403452][ T6104] Process accounting resumed [ 177.612727][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.282201][ T5857] Process accounting resumed [ 180.673395][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.610059][ T9] Process accounting resumed [ 186.013517][ T6162] overlayfs: missing 'lowerdir' [ 189.060106][ T5781] Process accounting resumed [ 189.882972][ T9] Process accounting resumed [ 192.920993][ T12] bridge_slave_1: left allmulticast mode [ 192.921095][ T12] bridge_slave_1: left promiscuous mode [ 192.985591][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.269717][ T12] bridge_slave_0: left allmulticast mode [ 193.269747][ T12] bridge_slave_0: left promiscuous mode [ 193.282282][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.469584][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.469640][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.338018][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.501419][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.586143][ T12] bond0 (unregistering): Released all slaves [ 199.304499][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.304635][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.304849][ T6016] bridge_slave_0: entered allmulticast mode [ 199.354970][ T6016] bridge_slave_0: entered promiscuous mode [ 200.380797][ T6239] overlayfs: missing 'lowerdir' [ 208.399174][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.399279][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.399439][ T6016] bridge_slave_1: entered allmulticast mode [ 208.417077][ T5781] Process accounting resumed [ 208.431975][ T6016] bridge_slave_1: entered promiscuous mode [ 209.553397][ T5319] Process accounting resumed [ 210.114025][ T5248] 8021q: adding VLAN 0 to HW filter on device eth1 [ 210.632586][ T6016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.823113][ T6016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.089504][ T6044] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.089663][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.112720][ T6044] bridge_slave_0: entered allmulticast mode [ 211.129586][ T6044] bridge_slave_0: entered promiscuous mode [ 214.746188][ T6044] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.746316][ T6044] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.746479][ T6044] bridge_slave_1: entered allmulticast mode [ 214.785764][ T6044] bridge_slave_1: entered promiscuous mode [ 214.827441][ T6016] team0: Port device team_slave_0 added [ 217.161468][ T6016] team0: Port device team_slave_1 added [ 218.693824][ T6044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.715505][ T6044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.793243][ T5603] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.842047][ T5603] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.871867][ T5603] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.884240][ T5603] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.901489][ T5603] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.600447][ T12] hsr_slave_0: left promiscuous mode [ 219.814622][ T12] hsr_slave_1: left promiscuous mode [ 219.815757][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.815837][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.968613][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.968641][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.150152][ T5781] Process accounting resumed [ 221.010828][ T6325] overlayfs: missing 'lowerdir' [ 221.024259][ T5603] Bluetooth: hci1: command tx timeout [ 222.152645][ T5603] Bluetooth: hci2: command 0x0406 tx timeout [ 222.152694][ T5603] Bluetooth: hci3: command 0x0406 tx timeout [ 222.152722][ T5603] Bluetooth: hci0: command 0x0406 tx timeout [ 223.102905][ T5601] Bluetooth: hci1: command tx timeout [ 223.379355][ T12] veth1_macvtap: left promiscuous mode [ 223.379557][ T12] veth0_macvtap: left promiscuous mode [ 223.440051][ T12] veth1_vlan: left promiscuous mode [ 223.440704][ T12] veth0_vlan: left promiscuous mode [ 225.191352][ T5595] Bluetooth: hci1: command tx timeout [ 227.261726][ T5595] Bluetooth: hci1: command tx timeout [ 227.419708][ T5596] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 227.445322][ T5596] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 227.448235][ T5596] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 227.476283][ T5596] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 227.478341][ T5596] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.415736][ T5596] Bluetooth: hci4: command tx timeout [ 232.150092][ T12] team0 (unregistering): Port device team_slave_1 removed [ 232.300068][ T12] team0 (unregistering): Port device team_slave_0 removed [ 232.471096][ T5596] Bluetooth: hci4: command tx timeout [ 234.542258][ T5596] Bluetooth: hci4: command tx timeout [ 235.481108][ T6402] overlayfs: missing 'lowerdir' [ 236.635269][ T5596] Bluetooth: hci4: command tx timeout [ 237.497712][ T5781] Process accounting resumed [ 240.478440][ T5248] 8021q: adding VLAN 0 to HW filter on device eth2 [ 241.356609][ T998] Process accounting resumed [ 247.014611][ T1949] Process accounting resumed [ 250.596869][ T6476] overlayfs: missing 'lowerdir' [ 253.441640][ T6482] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 255.257081][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.655622][ T5248] 8021q: adding VLAN 0 to HW filter on device eth3 [ 255.924386][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.924440][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.035922][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.367680][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.777522][ T5697] Process accounting resumed [ 266.965385][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.441933][ T6545] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 274.146033][ T6315] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.147874][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.148037][ T6315] bridge_slave_0: entered allmulticast mode [ 274.249532][ T6315] bridge_slave_0: entered promiscuous mode [ 274.856444][ T6315] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.856578][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.856745][ T6315] bridge_slave_1: entered allmulticast mode [ 274.886406][ T6315] bridge_slave_1: entered promiscuous mode [ 277.029375][ T6353] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.029482][ T6353] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.029638][ T6353] bridge_slave_0: entered allmulticast mode [ 277.071794][ T6353] bridge_slave_0: entered promiscuous mode [ 277.109195][ T6315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.144236][ T5248] 8021q: adding VLAN 0 to HW filter on device eth4 [ 278.690517][ T6353] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.692405][ T6353] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.692606][ T6353] bridge_slave_1: entered allmulticast mode [ 278.730144][ T6353] bridge_slave_1: entered promiscuous mode [ 278.792241][ T6315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.601090][ T6353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.704053][ T5595] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.758473][ T5595] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.769721][ T5595] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.771419][ T5595] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.778213][ T5595] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.916686][ T6353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.001510][ T5595] Bluetooth: hci5: command tx timeout [ 284.363582][ T5595] Bluetooth: hci5: command tx timeout [ 286.323143][ T12] bridge_slave_1: left allmulticast mode [ 286.323174][ T12] bridge_slave_1: left promiscuous mode [ 286.323444][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.381335][ T5595] Bluetooth: hci5: command tx timeout [ 288.153610][ T5596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 288.192266][ T5596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 288.194503][ T5596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.196306][ T5596] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.197047][ T5596] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.386071][ T12] bridge_slave_0: left allmulticast mode [ 288.386101][ T12] bridge_slave_0: left promiscuous mode [ 288.402802][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.469990][ T5595] Bluetooth: hci5: command tx timeout [ 288.778194][ T12] bridge_slave_1: left allmulticast mode [ 288.778225][ T12] bridge_slave_1: left promiscuous mode [ 288.778413][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.095452][ T12] bridge_slave_0: left allmulticast mode [ 289.095482][ T12] bridge_slave_0: left promiscuous mode [ 289.095683][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.707677][ T12] bridge_slave_1: left allmulticast mode [ 289.707707][ T12] bridge_slave_1: left promiscuous mode [ 289.707896][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.011625][ T12] bridge_slave_0: left allmulticast mode [ 290.011666][ T12] bridge_slave_0: left promiscuous mode [ 290.011925][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.300008][ T5595] Bluetooth: hci1: command tx timeout [ 291.596587][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.770460][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.845973][ T12] bond0 (unregistering): Released all slaves [ 292.380151][ T5595] Bluetooth: hci1: command tx timeout [ 292.396110][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.478916][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.568331][ T12] bond0 (unregistering): Released all slaves [ 293.741134][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.800720][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.849180][ T12] bond0 (unregistering): Released all slaves [ 293.967291][ T6353] team0: Port device team_slave_0 added [ 294.459915][ T5595] Bluetooth: hci1: command tx timeout [ 296.539974][ T5595] Bluetooth: hci1: command tx timeout [ 300.002092][ T5319] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 300.149936][ T5319] usb 2-1: device descriptor read/64, error -71 [ 300.479991][ T5319] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 300.620035][ T5319] usb 2-1: device descriptor read/64, error -71 [ 300.740386][ T5319] usb usb2-port1: attempt power cycle [ 301.249918][ T5319] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 301.276967][ T5319] usb 2-1: device descriptor read/8, error -71 [ 301.790016][ T5319] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 301.810908][ T5319] usb 2-1: device descriptor read/8, error -71 [ 301.920395][ T5319] usb usb2-port1: unable to enumerate USB device [ 307.931666][ T5248] 8021q: adding VLAN 0 to HW filter on device eth5 [ 310.484366][ T12] hsr_slave_0: left promiscuous mode [ 310.531870][ T12] hsr_slave_1: left promiscuous mode [ 310.532850][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.532871][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.600998][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.601030][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.762186][ T12] veth1_macvtap: left promiscuous mode [ 310.793992][ T12] veth0_macvtap: left promiscuous mode [ 310.825716][ T12] veth1_vlan: left promiscuous mode [ 310.825939][ T12] veth0_vlan: left promiscuous mode [ 316.720273][ T6775] Process accounting resumed [ 317.200803][ T12] team0 (unregistering): Port device team_slave_1 removed [ 318.164354][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.164427][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.351541][ T12] team0 (unregistering): Port device team_slave_0 removed [ 318.759928][ T5781] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 318.891367][ T5781] usb 1-1: device descriptor read/64, error -71 [ 319.129888][ T5781] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 319.148621][ T12] team0 (unregistering): Port device team_slave_1 removed [ 319.217114][ T12] team0 (unregistering): Port device team_slave_0 removed [ 319.280459][ T5781] usb 1-1: device descriptor read/64, error -71 [ 319.390129][ T5781] usb usb1-port1: attempt power cycle [ 319.749882][ T5781] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 319.784274][ T5781] usb 1-1: device descriptor read/8, error -71 [ 320.034748][ T5781] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 320.057113][ T5781] usb 1-1: device descriptor read/8, error -71 [ 320.164217][ T5781] usb usb1-port1: unable to enumerate USB device [ 324.642749][ T5781] Process accounting resumed [ 328.333538][ T6620] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.333628][ T6620] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.333803][ T6620] bridge_slave_0: entered allmulticast mode [ 328.347306][ T6620] bridge_slave_0: entered promiscuous mode [ 328.471406][ T6620] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.471553][ T6620] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.471772][ T6620] bridge_slave_1: entered allmulticast mode [ 328.541719][ T6620] bridge_slave_1: entered promiscuous mode [ 328.718806][ T5248] 8021q: adding VLAN 0 to HW filter on device eth6 [ 332.314182][ T6660] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.314274][ T6660] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.314437][ T6660] bridge_slave_0: entered allmulticast mode [ 332.325499][ T6660] bridge_slave_0: entered promiscuous mode [ 332.417656][ T6620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.418585][ T6660] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.418715][ T6660] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.418911][ T6660] bridge_slave_1: entered allmulticast mode [ 332.683625][ T6660] bridge_slave_1: entered promiscuous mode [ 332.718349][ T6620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.000969][ T6660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.078731][ T6620] team0: Port device team_slave_0 added [ 334.095889][ T6660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.118084][ T6620] team0: Port device team_slave_1 added [ 334.265422][ T6660] team0: Port device team_slave_0 added [ 334.268754][ T6620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.268767][ T6620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.268828][ T6620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.335134][ T6660] team0: Port device team_slave_1 added [ 334.355784][ T6620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.355800][ T6620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.355822][ T6620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.659976][ T6660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.659998][ T6660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.660028][ T6660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.740807][ T6660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.740822][ T6660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.740844][ T6660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.060141][ T6620] hsr_slave_0: entered promiscuous mode [ 335.068383][ T6620] hsr_slave_1: entered promiscuous mode [ 335.083539][ T6620] debugfs: 'hsr0' already exists in 'hsr' [ 335.083563][ T6620] Cannot create hsr debugfs directory [ 335.699957][ T12] bridge_slave_1: left allmulticast mode [ 335.701879][ T12] bridge_slave_1: left promiscuous mode [ 335.702097][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.003269][ T12] bridge_slave_0: left allmulticast mode [ 336.003298][ T12] bridge_slave_0: left promiscuous mode [ 336.003503][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.049895][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 336.209968][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 336.214254][ T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 336.216212][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.216230][ T9] usb 1-1: config 0 has no interfaces? [ 336.341578][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.341601][ T9] usb 1-1: Product: syz [ 336.341612][ T9] usb 1-1: Manufacturer: syz [ 336.341623][ T9] usb 1-1: SerialNumber: syz [ 336.426901][ T12] bridge_slave_1: left allmulticast mode [ 336.426931][ T12] bridge_slave_1: left promiscuous mode [ 336.427110][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.653956][ T9] usb 1-1: config 0 descriptor?? [ 336.790802][ T12] bridge_slave_0: left allmulticast mode [ 336.790841][ T12] bridge_slave_0: left promiscuous mode [ 336.791107][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.938393][ T9] usb 1-1: USB disconnect, device number 7 [ 340.553379][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.992931][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.072555][ T12] bond0 (unregistering): Released all slaves [ 341.472055][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.475255][ T5601] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.540069][ T5601] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.542261][ T5601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.547156][ T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.567753][ T5601] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.592463][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.594082][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.610474][ T5595] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.614296][ T5595] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.678116][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.866340][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.980026][ T12] bond0 (unregistering): Released all slaves [ 342.066296][ T6660] hsr_slave_0: entered promiscuous mode [ 342.069200][ T6660] hsr_slave_1: entered promiscuous mode [ 342.091546][ T6660] debugfs: 'hsr0' already exists in 'hsr' [ 342.091577][ T6660] Cannot create hsr debugfs directory [ 342.249379][ T5248] 8021q: adding VLAN 0 to HW filter on device eth7 [ 343.740721][ T5595] Bluetooth: hci6: command tx timeout [ 343.741054][ T5595] Bluetooth: hci4: command tx timeout [ 343.797409][ T12] team0 (unregistering): Port device team_slave_0 removed [ 345.831894][ T5596] Bluetooth: hci4: command tx timeout [ 345.831910][ T5595] Bluetooth: hci6: command tx timeout [ 346.908115][ T5596] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 346.932103][ T5596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 346.964881][ T5596] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 346.966219][ T5596] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 346.967344][ T5596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.900566][ T5595] Bluetooth: hci6: command tx timeout [ 347.900608][ T5595] Bluetooth: hci4: command tx timeout [ 349.979897][ T5596] Bluetooth: hci4: command tx timeout [ 350.049589][ T5596] Bluetooth: hci5: command tx timeout [ 350.053412][ T5596] Bluetooth: hci6: command tx timeout [ 352.060432][ T5595] Bluetooth: hci5: command tx timeout [ 355.536854][ T5595] Bluetooth: hci5: command tx timeout [ 356.206074][ T5248] 8021q: adding VLAN 0 to HW filter on device eth8 [ 356.375818][ T5857] Process accounting resumed [ 358.308071][ T5595] Bluetooth: hci5: command tx timeout [ 362.399551][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.616306][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.002721][ T7072] Process accounting resumed [ 368.260914][ T5704] Process accounting resumed [ 368.688624][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.842893][ T6901] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.842987][ T6901] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.843125][ T6901] bridge_slave_0: entered allmulticast mode [ 368.845078][ T6901] bridge_slave_0: entered promiscuous mode [ 368.964768][ T6901] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.964977][ T6901] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.965164][ T6901] bridge_slave_1: entered allmulticast mode [ 368.968250][ T6901] bridge_slave_1: entered promiscuous mode [ 369.146645][ T6902] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.146759][ T6902] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.146905][ T6902] bridge_slave_0: entered allmulticast mode [ 369.148948][ T6902] bridge_slave_0: entered promiscuous mode [ 369.328597][ T6902] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.328710][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.328857][ T6902] bridge_slave_1: entered allmulticast mode [ 369.361203][ T6902] bridge_slave_1: entered promiscuous mode [ 371.323166][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.513265][ T6901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.597717][ T6901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.784438][ T6902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.850850][ T6902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.881315][ T6938] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.881539][ T6938] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.881724][ T6938] bridge_slave_0: entered allmulticast mode [ 373.884986][ T6938] bridge_slave_0: entered promiscuous mode [ 373.942835][ T6901] team0: Port device team_slave_0 added [ 373.943139][ T6938] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.943312][ T6938] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.943488][ T6938] bridge_slave_1: entered allmulticast mode [ 374.959755][ T6938] bridge_slave_1: entered promiscuous mode [ 375.204099][ T6901] team0: Port device team_slave_1 added [ 375.669804][ T6902] team0: Port device team_slave_0 added [ 375.863894][ T6902] team0: Port device team_slave_1 added [ 376.109451][ T6938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.398861][ T6901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.398877][ T6901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.398905][ T6901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.464163][ T6938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.656777][ T6901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.656794][ T6901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.656821][ T6901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.160640][ T6902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.160661][ T6902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.160691][ T6902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.640705][ T6902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.640726][ T6902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.640754][ T6902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.742258][ T6938] team0: Port device team_slave_0 added [ 377.844017][ T6938] team0: Port device team_slave_1 added [ 378.628845][ T6901] hsr_slave_0: entered promiscuous mode [ 378.647023][ T6901] hsr_slave_1: entered promiscuous mode [ 378.672927][ T6901] debugfs: 'hsr0' already exists in 'hsr' [ 378.672954][ T6901] Cannot create hsr debugfs directory [ 378.797204][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.797274][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.991514][ T6938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.991529][ T6938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.991548][ T6938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.087308][ T6902] hsr_slave_0: entered promiscuous mode [ 379.088310][ T6902] hsr_slave_1: entered promiscuous mode [ 379.112386][ T6902] debugfs: 'hsr0' already exists in 'hsr' [ 379.112409][ T6902] Cannot create hsr debugfs directory [ 379.221462][ T6938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.221484][ T6938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.221514][ T6938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.786839][ T12] bridge_slave_1: left allmulticast mode [ 379.786871][ T12] bridge_slave_1: left promiscuous mode [ 379.787083][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.217834][ T12] bridge_slave_0: left allmulticast mode [ 380.217862][ T12] bridge_slave_0: left promiscuous mode [ 380.241787][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.763587][ T5704] Process accounting resumed [ 381.751357][ T12] bridge_slave_1: left allmulticast mode [ 381.751393][ T12] bridge_slave_1: left promiscuous mode [ 381.751640][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.226614][ T12] bridge_slave_0: left allmulticast mode [ 382.226652][ T12] bridge_slave_0: left promiscuous mode [ 382.226914][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.414165][ T9] Process accounting resumed [ 384.189192][ T12] bridge_slave_1: left allmulticast mode [ 384.189224][ T12] bridge_slave_1: left promiscuous mode [ 384.189411][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.333430][ T12] bridge_slave_0: left allmulticast mode [ 384.333470][ T12] bridge_slave_0: left promiscuous mode [ 384.333722][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.263906][ T5697] Process accounting resumed [ 387.133549][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.345142][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.418536][ T12] bond0 (unregistering): Released all slaves [ 389.131274][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.220704][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.296062][ T12] bond0 (unregistering): Released all slaves [ 391.911974][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.091527][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.191449][ T12] bond0 (unregistering): Released all slaves [ 401.445204][ T6938] hsr_slave_0: entered promiscuous mode [ 401.477895][ T6938] hsr_slave_1: entered promiscuous mode [ 401.478842][ T6938] debugfs: 'hsr0' already exists in 'hsr' [ 401.478865][ T6938] Cannot create hsr debugfs directory [ 402.440686][ T5857] Process accounting resumed [ 405.040717][ T5595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 405.095558][ T5595] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 405.129818][ T5595] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 405.211038][ T5595] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 405.217613][ T5595] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 406.811852][ T5596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 406.854780][ T5596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 406.906828][ T5596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 407.038991][ T5596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 407.054918][ T5596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 407.345303][ T5595] Bluetooth: hci1: command tx timeout [ 409.180738][ T5595] Bluetooth: hci3: command tx timeout [ 409.419719][ T5595] Bluetooth: hci1: command tx timeout [ 409.626418][ T5596] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 409.639154][ T5596] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 409.669029][ T5596] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 409.686784][ T5596] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 409.687622][ T5596] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 411.269884][ T5595] Bluetooth: hci3: command tx timeout [ 411.520574][ T5595] Bluetooth: hci1: command tx timeout [ 411.819978][ T5595] Bluetooth: hci4: command tx timeout [ 413.340445][ T5595] Bluetooth: hci3: command tx timeout [ 414.407062][ T5595] Bluetooth: hci1: command tx timeout [ 414.407077][ T5596] Bluetooth: hci4: command tx timeout [ 415.730414][ T5595] Bluetooth: hci3: command tx timeout [ 416.346162][ T5697] Process accounting resumed [ 416.382678][ T12] hsr_slave_0: left promiscuous mode [ 416.507901][ T5596] Bluetooth: hci4: command tx timeout [ 416.700470][ T12] hsr_slave_1: left promiscuous mode [ 416.701735][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.748708][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.961272][ T31] Process accounting resumed [ 416.982167][ T12] hsr_slave_0: left promiscuous mode [ 417.159954][ T12] hsr_slave_1: left promiscuous mode [ 417.166757][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.166784][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.225227][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.225259][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.549766][ T12] hsr_slave_0: left promiscuous mode [ 418.577780][ T5596] Bluetooth: hci4: command tx timeout [ 418.590157][ T12] hsr_slave_1: left promiscuous mode [ 418.591450][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.653924][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.755627][ T12] veth1_macvtap: left promiscuous mode [ 418.755731][ T12] veth0_macvtap: left promiscuous mode [ 418.778693][ T12] veth1_vlan: left promiscuous mode [ 418.778906][ T12] veth0_vlan: left promiscuous mode [ 424.551815][ T12] team0 (unregistering): Port device team_slave_1 removed [ 424.670400][ T12] team0 (unregistering): Port device team_slave_0 removed [ 426.051397][ T12] team0 (unregistering): Port device team_slave_1 removed [ 426.130385][ T12] team0 (unregistering): Port device team_slave_0 removed [ 427.110165][ T12] team0 (unregistering): Port device team_slave_1 removed [ 427.190370][ T12] team0 (unregistering): Port device team_slave_0 removed [ 427.734644][ T5248] 8021q: adding VLAN 0 to HW filter on device eth9 [ 432.959710][ T998] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 432.961472][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 433.129714][ T998] usb 3-1: device descriptor read/64, error -32 [ 433.399735][ T998] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 433.551100][ T998] usb 3-1: Using ep0 maxpacket: 16 [ 433.553671][ T998] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 433.608401][ T998] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 433.701761][ T998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.701794][ T998] usb 3-1: Product: syz [ 433.701822][ T998] usb 3-1: Manufacturer: syz [ 433.701854][ T998] usb 3-1: SerialNumber: syz [ 433.803595][ T998] usb 3-1: config 0 descriptor?? [ 433.913265][ T998] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 434.250328][ T998] usb 3-1: USB disconnect, device number 3 [ 434.323321][ T1049] usb 3-1: Failed to submit usb control message: -71 [ 434.323370][ T1049] usb 3-1: unable to send the bmi data to the device: -71 [ 434.323472][ T1049] usb 3-1: unable to get target info from device [ 434.323497][ T1049] usb 3-1: could not get target info (-71) [ 434.323610][ T1049] usb 3-1: could not probe fw (-71) [ 437.274274][ T7444] batman_adv: batadv0: Adding interface: syzkaller0 [ 437.274297][ T7444] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.274335][ T7444] batman_adv: batadv0: Interface activated: syzkaller0 [ 437.390082][ T7438] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 438.427106][ T7438] batman_adv: batadv0: Removing interface: syzkaller0 [ 439.296796][ T5248] 8021q: adding VLAN 0 to HW filter on device eth10 [ 439.643553][ T7243] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.643799][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.644020][ T7243] bridge_slave_0: entered allmulticast mode [ 439.646747][ T7243] bridge_slave_0: entered promiscuous mode [ 440.952101][ T7243] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.952225][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.952438][ T7243] bridge_slave_1: entered allmulticast mode [ 440.957576][ T7243] bridge_slave_1: entered promiscuous mode [ 442.026866][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.027040][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.864606][ T7243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.866034][ T7230] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.866167][ T7230] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.866372][ T7230] bridge_slave_0: entered allmulticast mode [ 442.903329][ T7230] bridge_slave_0: entered promiscuous mode [ 442.998974][ T7243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.009263][ T7230] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.009389][ T7230] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.024765][ T7230] bridge_slave_1: entered allmulticast mode [ 443.045628][ T7230] bridge_slave_1: entered promiscuous mode [ 446.232260][ T7258] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.233219][ T7258] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.233430][ T7258] bridge_slave_0: entered allmulticast mode [ 446.265081][ T7258] bridge_slave_0: entered promiscuous mode [ 446.289979][ T7243] team0: Port device team_slave_0 added [ 446.313395][ T7230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.318727][ T7258] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.318822][ T7258] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.318964][ T7258] bridge_slave_1: entered allmulticast mode [ 446.477532][ T7258] bridge_slave_1: entered promiscuous mode [ 446.531624][ T7243] team0: Port device team_slave_1 added [ 446.549074][ T7230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.259821][ T12] bridge_slave_1: left allmulticast mode [ 448.259855][ T12] bridge_slave_1: left promiscuous mode [ 448.261955][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.391111][ T12] bridge_slave_0: left allmulticast mode [ 448.391140][ T12] bridge_slave_0: left promiscuous mode [ 448.392851][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.599826][ T12] bridge_slave_1: left allmulticast mode [ 448.599855][ T12] bridge_slave_1: left promiscuous mode [ 448.600035][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.711167][ T12] bridge_slave_0: left allmulticast mode [ 448.711196][ T12] bridge_slave_0: left promiscuous mode [ 448.712403][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.909856][ T12] bridge_slave_1: left allmulticast mode [ 448.909889][ T12] bridge_slave_1: left promiscuous mode [ 448.910081][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.040953][ T12] bridge_slave_0: left allmulticast mode [ 449.040984][ T12] bridge_slave_0: left promiscuous mode [ 449.041197][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.531489][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.610545][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.676571][ T12] bond0 (unregistering): Released all slaves [ 450.012736][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.091260][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.151393][ T12] bond0 (unregistering): Released all slaves [ 450.411777][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.510490][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.591978][ T12] bond0 (unregistering): Released all slaves [ 450.631708][ T7258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.782525][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.782548][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.782604][ T7243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.851756][ T7511] batman_adv: batadv0: Adding interface: syzkaller0 [ 450.851820][ T7511] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.851909][ T7511] batman_adv: batadv0: Interface activated: syzkaller0 [ 450.873841][ T7230] team0: Port device team_slave_0 added [ 450.901525][ T7258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.903497][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.903509][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.903530][ T7243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.009850][ T7509] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 451.165976][ T7509] batman_adv: batadv0: Removing interface: syzkaller0 [ 451.710363][ T7230] team0: Port device team_slave_1 added [ 453.362589][ T7258] team0: Port device team_slave_0 added [ 453.516149][ T7230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.516285][ T7230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.516511][ T7230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.660653][ T7258] team0: Port device team_slave_1 added [ 454.279368][ T7230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.280028][ T7230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.280225][ T7230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.413492][ T12] hsr_slave_0: left promiscuous mode [ 455.449727][ T12] hsr_slave_1: left promiscuous mode [ 455.593374][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.597664][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.860931][ T12] hsr_slave_0: left promiscuous mode [ 457.111391][ T12] hsr_slave_1: left promiscuous mode [ 457.112662][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.163328][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.322827][ T5704] Process accounting resumed [ 459.730390][ T12] hsr_slave_0: left promiscuous mode [ 459.963204][ T12] hsr_slave_1: left promiscuous mode [ 460.000986][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.136752][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.354371][ T5857] Process accounting resumed [ 461.819747][ T12] team0 (unregistering): Port device team_slave_1 removed [ 461.901219][ T12] team0 (unregistering): Port device team_slave_0 removed [ 462.324527][ T5595] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 462.392010][ T5595] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 463.346524][ T5595] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 463.360996][ T5595] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 463.361808][ T5595] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 463.851006][ T12] team0 (unregistering): Port device team_slave_1 removed [ 463.900919][ T12] team0 (unregistering): Port device team_slave_0 removed [ 464.262193][ T5595] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 464.266284][ T5595] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 464.268805][ T5595] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 464.276261][ T5595] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 464.291175][ T5595] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 464.657039][ T12] team0 (unregistering): Port device team_slave_1 removed [ 464.721279][ T12] team0 (unregistering): Port device team_slave_0 removed [ 465.168482][ T7243] hsr_slave_0: entered promiscuous mode [ 465.174690][ T7243] hsr_slave_1: entered promiscuous mode [ 465.192488][ T7258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.192507][ T7258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.192546][ T7258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.270680][ T7547] batman_adv: batadv0: Adding interface: syzkaller0 [ 465.270700][ T7547] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.270753][ T7547] batman_adv: batadv0: Interface activated: syzkaller0 [ 465.383285][ T7258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.383305][ T7258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.383335][ T7258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.460097][ T7546] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 465.499633][ T5596] Bluetooth: hci5: command tx timeout [ 465.761870][ T7546] batman_adv: batadv0: Removing interface: syzkaller0 [ 466.328284][ T7258] hsr_slave_0: entered promiscuous mode [ 466.343957][ T7258] hsr_slave_1: entered promiscuous mode [ 466.345099][ T7258] debugfs: 'hsr0' already exists in 'hsr' [ 466.345125][ T7258] Cannot create hsr debugfs directory [ 466.390394][ T5596] Bluetooth: hci6: command tx timeout [ 467.611108][ T5596] Bluetooth: hci5: command tx timeout [ 468.479949][ T5596] Bluetooth: hci6: command tx timeout [ 469.659790][ T5596] Bluetooth: hci5: command tx timeout [ 470.769556][ T5596] Bluetooth: hci6: command tx timeout [ 470.951053][ T5595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 470.999330][ T5595] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 471.009316][ T5595] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 471.053971][ T5595] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 471.060767][ T5595] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 471.749671][ T5595] Bluetooth: hci5: command tx timeout [ 472.380632][ T5857] Process accounting resumed [ 472.918829][ T5595] Bluetooth: hci6: command tx timeout [ 473.531037][ T5595] Bluetooth: hci1: command tx timeout [ 475.456584][ T7643] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 475.688766][ T7644] netlink: 72 bytes leftover after parsing attributes in process `syz.2.271'. [ 476.059705][ T5595] Bluetooth: hci1: command tx timeout [ 477.262304][ T5248] 8021q: adding VLAN 0 to HW filter on device eth11 [ 477.263274][ T7641] netlink: 830 bytes leftover after parsing attributes in process `syz.2.271'. [ 477.861958][ T7651] batman_adv: batadv0: Adding interface: syzkaller0 [ 477.861976][ T7651] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.862000][ T7651] batman_adv: batadv0: Interface activated: syzkaller0 [ 478.022571][ T7648] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 478.139830][ T5595] Bluetooth: hci1: command tx timeout [ 478.314005][ T7648] batman_adv: batadv0: Removing interface: syzkaller0 [ 480.229565][ T5595] Bluetooth: hci1: command tx timeout [ 480.544945][ T5857] Process accounting resumed [ 484.232974][ T12] bridge_slave_1: left allmulticast mode [ 484.233004][ T12] bridge_slave_1: left promiscuous mode [ 484.233207][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.402221][ T12] bridge_slave_0: left allmulticast mode [ 484.402251][ T12] bridge_slave_0: left promiscuous mode [ 484.404966][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.716445][ T12] bridge_slave_1: left allmulticast mode [ 484.716481][ T12] bridge_slave_1: left promiscuous mode [ 484.716663][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.829271][ T12] bridge_slave_0: left allmulticast mode [ 484.829299][ T12] bridge_slave_0: left promiscuous mode [ 484.832269][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.111557][ T12] bridge_slave_1: left allmulticast mode [ 485.111587][ T12] bridge_slave_1: left promiscuous mode [ 485.111772][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.250671][ T12] bridge_slave_0: left allmulticast mode [ 485.250700][ T12] bridge_slave_0: left promiscuous mode [ 485.250879][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.780239][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.863356][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.950576][ T12] bond0 (unregistering): Released all slaves [ 486.290809][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.342886][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.401176][ T12] bond0 (unregistering): Released all slaves [ 486.650254][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.730303][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.791655][ T12] bond0 (unregistering): Released all slaves [ 488.093502][ T7567] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.093810][ T7567] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.094031][ T7567] bridge_slave_0: entered allmulticast mode [ 488.137304][ T7567] bridge_slave_0: entered promiscuous mode [ 488.492539][ T5319] Process accounting resumed [ 489.618235][ T12] hsr_slave_0: left promiscuous mode [ 489.649674][ T12] hsr_slave_1: left promiscuous mode [ 489.650651][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.711576][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.758564][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.813172][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.931260][ T12] hsr_slave_0: left promiscuous mode [ 489.976983][ T12] hsr_slave_1: left promiscuous mode [ 490.002348][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.034951][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.357050][ T7733] netlink: 72 bytes leftover after parsing attributes in process `syz.0.281'. [ 490.609090][ T7731] syz.0.281 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 490.609140][ T7731] CPU: 0 UID: 0 PID: 7731 Comm: syz.0.281 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 490.609162][ T7731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 490.609178][ T7731] Call Trace: [ 490.609256][ T7731] [ 490.609287][ T7731] dump_stack_lvl+0xe8/0x150 [ 490.609459][ T7731] dump_header+0xd3/0x4b0 [ 490.609489][ T7731] oom_kill_process+0x3ab/0x9e0 [ 490.609528][ T7731] out_of_memory+0x1064/0x1480 [ 490.609562][ T7731] ? __pfx_out_of_memory+0x10/0x10 [ 490.609585][ T7731] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 490.609660][ T7731] ? _mutex_lock_killable+0x152/0x1d0 [ 490.609678][ T7731] ? try_charge_memcg+0xcc3/0x16f0 [ 490.609705][ T7731] try_charge_memcg+0xd82/0x16f0 [ 490.609737][ T7731] ? __pfx_try_charge_memcg+0x10/0x10 [ 490.609759][ T7731] ? percpu_ref_tryget+0x15/0x180 [ 490.609786][ T7731] ? __obj_cgroup_charge+0x36/0x2c0 [ 490.609814][ T7731] __obj_cgroup_charge+0x1fd/0x2c0 [ 490.609839][ T7731] ? __obj_cgroup_charge+0x36/0x2c0 [ 490.609866][ T7731] __memcg_slab_post_alloc_hook+0x7a2/0xde0 [ 490.609904][ T7731] ? vm_area_dup+0x28/0x750 [ 490.609925][ T7731] kmem_cache_alloc_noprof+0x421/0x690 [ 490.609954][ T7731] ? vm_area_dup+0x28/0x750 [ 490.609968][ T7731] ? vm_area_dup+0x28/0x750 [ 490.609988][ T7731] vm_area_dup+0x28/0x750 [ 490.610002][ T7731] ? __split_vma+0x1b7/0xa00 [ 490.610020][ T7731] __split_vma+0x1d7/0xa00 [ 490.610043][ T7731] ? __pfx___split_vma+0x10/0x10 [ 490.610078][ T7731] vma_modify+0x1483/0x1ba0 [ 490.610110][ T7731] vma_modify_flags+0x2a4/0x3c0 [ 490.610130][ T7731] ? __pfx_vma_modify_flags+0x10/0x10 [ 490.610159][ T7731] ? rcu_is_watching+0x16/0xb0 [ 490.610188][ T7731] ? percpu_counter_add_batch+0xec/0x1d0 [ 490.610240][ T7731] ? __vm_enough_memory+0x11a/0x380 [ 490.610263][ T7731] mprotect_fixup+0x51a/0xad0 [ 490.610285][ T7731] ? __pfx_mprotect_fixup+0x10/0x10 [ 490.610303][ T7731] ? mas_next_slot+0xc94/0xd70 [ 490.610378][ T7731] do_mprotect_pkey+0x8e7/0xd10 [ 490.610418][ T7731] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 490.610445][ T7731] ? vm_mmap_pgoff+0x35d/0x4e0 [ 490.610470][ T7731] ? __pfx___se_sys_futex+0x10/0x10 [ 490.610518][ T7731] ? rcu_is_watching+0x16/0xb0 [ 490.610540][ T7731] __x64_sys_mprotect+0x80/0x90 [ 490.610573][ T7731] do_syscall_64+0x166/0x520 [ 490.610656][ T7731] ? trace_irq_disable+0x3b/0x140 [ 490.610683][ T7731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.610709][ T7731] ? clear_bhb_loop+0x70/0xc0 [ 490.610729][ T7731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.610748][ T7731] RIP: 0033:0x7f74f725dfd7 [ 490.610790][ T7731] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.610804][ T7731] RSP: 002b:00007ffee6da9b18 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 490.610847][ T7731] RAX: ffffffffffffffda RBX: 00007f74f50516c0 RCX: 00007f74f725dfd7 [ 490.610859][ T7731] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f74f5032000 [ 490.610870][ T7731] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 490.610879][ T7731] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffee6da9c70 [ 490.610890][ T7731] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 490.610914][ T7731] [ 490.625567][ T7731] memory: usage 0kB, limit 0kB, failcnt 19 [ 490.625603][ T7731] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 490.625643][ T7731] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 490.625675][ T7731] Memory cgroup stats for /syz0/test: [ 490.657863][ T7731] cache 0 [ 490.657894][ T7731] rss 0 [ 490.657913][ T7731] shmem 0 [ 490.657933][ T7731] mapped_file 0 [ 490.657953][ T7731] dirty 0 [ 490.657973][ T7731] writeback 0 [ 490.657993][ T7731] workingset_refault_anon 0 [ 490.658013][ T7731] workingset_refault_file 0 [ 490.658034][ T7731] swap 0 [ 490.658047][ T7731] swapcached 0 [ 490.658061][ T7731] pgpgin 0 [ 490.658081][ T7731] pgpgout 0 [ 490.658101][ T7731] pgfault 0 [ 490.658120][ T7731] pgmajfault 0 [ 490.658140][ T7731] inactive_anon 0 [ 490.658160][ T7731] active_anon 0 [ 490.671335][ T7731] inactive_file 0 [ 490.671374][ T7731] active_file 0 [ 490.671401][ T7731] unevictable 0 [ 490.671420][ T7731] hierarchical_memory_limit 0 [ 490.671448][ T7731] hierarchical_memsw_limit 9223372036854771712 [ 490.671470][ T7731] total_cache 0 [ 490.671496][ T7731] total_rss 0 [ 490.671509][ T7731] total_shmem 0 [ 490.671528][ T7731] total_mapped_file 0 [ 490.671556][ T7731] total_dirty 0 [ 490.671575][ T7731] total_writeback 0 [ 490.671595][ T7731] total_workingset_refault_anon 0 [ 490.671617][ T7731] total_workingset_refault_file 0 [ 490.671637][ T7731] total_swap 0 [ 490.671657][ T7731] total_swapcached 0 [ 490.671687][ T7731] total_pgpgin 0 [ 490.671707][ T7731] total_pgpgout 0 [ 490.671728][ T7731] total_pgfault 0 [ 490.671747][ T7731] total_pgmajfault 0 [ 490.671767][ T7731] total_inactive_anon 0 [ 490.671788][ T7731] total_active_anon 0 [ 490.671808][ T7731] total_inactive_file 0 [ 490.671829][ T7731] total_active_file 0 [ 490.671850][ T7731] total_unevictable 0 [ 490.671869][ T7731] anon_cost 0 [ 490.671888][ T7731] file_cost 0 [ 490.671909][ T7731] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.281,pid=7731,uid=0 [ 490.783905][ T7731] Memory cgroup out of memory: Killed process 7731 (syz.0.281) total-vm:106760kB, anon-rss:1456kB, file-rss:27092kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 491.147101][ T12] team0 (unregistering): Port device team_slave_1 removed [ 491.293874][ T12] team0 (unregistering): Port device team_slave_0 removed [ 492.641081][ T12] team0 (unregistering): Port device team_slave_1 removed [ 492.700676][ T12] team0 (unregistering): Port device team_slave_0 removed [ 492.863351][ T40] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 492.863370][ T40] in_atomic(): 0, irqs_disabled(): 0, non_block: 1, pid: 40, name: oom_reaper [ 492.863383][ T40] preempt_count: 0, expected: 0 [ 492.863391][ T40] RCU nest depth: 0, expected: 0 [ 492.863429][ T40] locks held by oom_reaper/40: 4, last CPU#1: [ 492.863525][ T40] #0: ffff888032be37b8 (&mm->mmap_lock){++++}-{4:4}, at: oom_reaper+0x2b4/0xc10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 492.863676][ T40] #1: ffffffff8f30b180 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: zap_vma_for_reaping+0x193/0x380 [ 492.863724][ T40] #2: ffffffff8f30b1d8 (srcu){.+.+}-{0:0}, at: __mmu_notifier_invalidate_range_start+0x5c6/0xb80 [ 492.864466][ T40] #3: ffff88803699d360 (&kvm->mn_invalidate_lock){+.+.}-{3:3}, at: kvm_mmu_notifier_invalidate_range_start+0x1b6/0xc10 [ 492.864542][ T40] CPU: 1 UID: 0 PID: 40 Comm: oom_reaper Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 492.864560][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 492.864571][ T40] Call Trace: [ 492.864578][ T40] [ 492.864587][ T40] dump_stack_lvl+0xe8/0x150 [ 492.864614][ T40] __might_resched+0x31b/0x470 [ 492.864655][ T40] rt_spin_lock+0xc2/0x400 [ 492.864673][ T40] ? check_noncircular+0xdb/0x150 [ 492.864692][ T40] ? __pfx_rt_spin_lock+0x10/0x10 [ 492.864712][ T40] ? lockdep_unlock+0x5c/0xd0 [ 492.864732][ T40] ? __lock_acquire+0x1511/0x2de0 [ 492.864758][ T40] kvm_mmu_notifier_invalidate_range_start+0x1b6/0xc10 [ 492.864795][ T40] ? __pfx_kvm_mmu_notifier_invalidate_range_start+0x10/0x10 [ 492.864824][ T40] ? __srcu_check_read_flavor+0x117/0x260 [ 492.864853][ T40] __mmu_notifier_invalidate_range_start+0x709/0xb80 [ 492.864887][ T40] ? __mmu_notifier_invalidate_range_start+0x5c6/0xb80 [ 492.864914][ T40] ? __pfx___mmu_notifier_invalidate_range_start+0x10/0x10 [ 492.864955][ T40] ? zap_vma_for_reaping+0x193/0x380 [ 492.864975][ T40] zap_vma_for_reaping+0x1f7/0x380 [ 492.864997][ T40] ? __pfx_zap_vma_for_reaping+0x10/0x10 [ 492.865042][ T40] oom_reaper+0x519/0xc10 [ 492.865062][ T40] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 492.865096][ T40] ? __pfx_oom_reaper+0x10/0x10 [ 492.865153][ T40] ? __pfx_autoremove_wake_function+0x10/0x10 [ 492.865184][ T40] ? __kthread_parkme+0x71/0x1f0 [ 492.865235][ T40] ? __kthread_parkme+0x199/0x1f0 [ 492.865276][ T40] kthread+0x38b/0x470 [ 492.865294][ T40] ? __pfx_oom_reaper+0x10/0x10 [ 492.865313][ T40] ? __pfx_kthread+0x10/0x10 [ 492.865331][ T40] ret_from_fork+0x514/0xb70 [ 492.865360][ T40] ? __pfx_ret_from_fork+0x10/0x10 [ 492.865377][ T40] ? __switch_to+0xc89/0x1420 [ 492.865409][ T40] ? __pfx_kthread+0x10/0x10 [ 492.865428][ T40] ret_from_fork_asm+0x1a/0x30 [ 492.865460][ T40] [ 493.192356][ T40] oom_reaper: reaped process 7731 (syz.0.281), now anon-rss:0kB, file-rss:25992kB, shmem-rss:0kB [ 493.350435][ T12] team0 (unregistering): Port device team_slave_1 removed [ 493.410416][ T12] team0 (unregistering): Port device team_slave_0 removed [ 493.620900][ T7567] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.621047][ T7567] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.621202][ T7567] bridge_slave_1: entered allmulticast mode [ 493.623088][ T7567] bridge_slave_1: entered promiscuous mode [ 493.715806][ T7732] netlink: 830 bytes leftover after parsing attributes in process `syz.0.281'. [ 493.747705][ T7744] batman_adv: batadv0: Adding interface: syzkaller0 [ 493.747725][ T7744] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.747761][ T7744] batman_adv: batadv0: Interface activated: syzkaller0 [ 496.259854][ T7744] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 496.381924][ T7744] batman_adv: batadv0: Removing interface: syzkaller0 [ 497.234799][ T5248] 8021q: adding VLAN 0 to HW filter on device eth12 [ 497.896018][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.204981][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.474900][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.689062][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.323886][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.634567][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.664574][ T5248] 8021q: adding VLAN 0 to HW filter on device eth13 [ 499.964833][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.307825][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.352435][ T5248] 8021q: adding VLAN 0 to HW filter on device eth14 [ 500.900193][ T12] bridge_slave_1: left allmulticast mode [ 500.900232][ T12] bridge_slave_1: left promiscuous mode [ 500.900528][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.070987][ T12] bridge_slave_0: left allmulticast mode [ 501.071017][ T12] bridge_slave_0: left promiscuous mode [ 501.071298][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.280575][ T12] bridge_slave_1: left allmulticast mode [ 501.280605][ T12] bridge_slave_1: left promiscuous mode [ 501.280794][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.380770][ T12] bridge_slave_0: left allmulticast mode [ 501.380800][ T12] bridge_slave_0: left promiscuous mode [ 501.381051][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.679778][ T12] bridge_slave_1: left allmulticast mode [ 501.679808][ T12] bridge_slave_1: left promiscuous mode [ 501.679998][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.781194][ T12] bridge_slave_0: left allmulticast mode [ 501.781224][ T12] bridge_slave_0: left promiscuous mode [ 501.781422][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.520253][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.600220][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.623864][ T12] bond0 (unregistering): Released all slaves