last executing test programs: 24.593685519s ago: executing program 0 (id=10): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="100000005304"], 0x10}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000000) 24.501233866s ago: executing program 0 (id=11): unshare(0x8040480) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0xfffffffffffffc01, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000080)='8', 0x20000081}], 0x300) socket(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x1418c2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) copy_file_range(r4, 0x0, r3, &(0x7f00000019c0)=0xffffffffffffffc8, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) fstatfs(0xffffffffffffffff, 0x0) 23.62920945s ago: executing program 0 (id=21): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800010400000000000000000a"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000800000000000a00000000000000040004"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x20}}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$inet6(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 23.576983278s ago: executing program 0 (id=22): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x2000000, &(0x7f0000000880)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="4689bd08ca678c20ed3db13d91eaebfc8c0900000000000000d9481850c5ce1b726cdfc36d9cb7b5270bbd77fd75355bffacf1a7c54f4f8861aaa7c0977e776e25eac51adaadd286cbc8909f9b4fab83cd15e1078d7aada1cf9c569a", @ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="15e1ba77442f447cd02d69dfc2161089e3f6dd3252933d034fa5a8c65ca1848437a252d2f5fa1854a50a9650567e2f3f16bd86f6aa84e61d360cf70e8b2bc3f97e558b2c0200ce397dae5443fb75edf95ef253b41f8cb8b5dcd22e9a03571b2af371e6e177fc5a315256df3d77d0363613e72e3e2b6051ebb69557744dbdf9e8cfefb52bde759bb9069b140e78154d5c9217f2b5d81894c2b2", @ANYRES32=0x0], 0x1, 0x2bb, &(0x7f0000000440)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 22.834899006s ago: executing program 0 (id=25): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000400000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)='m', 0x102, 0x0, &(0x7f0000000200)={0x3a, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 19.930777871s ago: executing program 0 (id=78): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfff) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, 0x0, 0x0) shutdown(r0, 0x1) 19.357546331s ago: executing program 32 (id=78): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfff) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, 0x0, 0x0) shutdown(r0, 0x1) 12.608910738s ago: executing program 2 (id=142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x5, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000018"], 0x48) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r2, @ANYBLOB="810000000a0001"], 0x30}}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x5, &(0x7f0000000300)=@framed={{}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 9.692450284s ago: executing program 2 (id=143): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x21, 0x4) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 8.7698759s ago: executing program 2 (id=162): syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="f10f7e9b04970aa92c3f15307f6af9cc6f4cf03d8e7f35e366882c5a2c6883778f3472e2da692b6d95942274148e639fc198bd6e48167488a0ead51905b374f5f665a4a980e32da4bb93b4ceb996b7d852119aa79d7320a1594db15211c03b65d5b2ab7f3c3682dd06f48451fa7355ada7be0e6c4a959cbb557c4683b1f8a6718f5411"], 0x8) r0 = syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x2b7a, 0x400, 0x2, 0x4}, &(0x7f0000000240)=0x0, &(0x7f0000000800)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x40566f, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x2000, 0x3a0, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x8, 0x0, r6, 0x0, 0x0, 0x0, 0x44040}) unshare(0x22020600) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/150, 0x96}], 0x1, 0x0, 0x0) 8.762661258s ago: executing program 4 (id=163): r0 = io_uring_setup(0x6e8f, &(0x7f0000000300)={0x0, 0xc371, 0x8, 0xffffffff, 0x206}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) nanosleep(&(0x7f0000000180)={r1, r2+60000000}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.621260497s ago: executing program 4 (id=165): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x8, "56cfcf", 0x9, 0xf1}) 7.151022178s ago: executing program 3 (id=170): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 6.470249472s ago: executing program 4 (id=171): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(aegis256-generic)\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000080001"], 0x1c}}, 0xe6a4d86a3a7a1790) 6.273157923s ago: executing program 3 (id=173): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 6.120232774s ago: executing program 4 (id=174): socket$alg(0x26, 0x5, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x40040, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x541b, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, 0x0) close(r6) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r4, &(0x7f0000003a00)=[{{&(0x7f0000000b40)={0xa, 0x4f21, 0x900000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000280)="5b0e4fd25848a15907d5f8efd804500a911b13c3ea51c2e90187711191c7b8e16f98d39d54b2882fb4dfefffc3bb76cdfb678a97a22d2c8240ede942c00409f7efeb7c68299d333d93d0cd49bcd077a98c35b0fcdbf31e", 0x57}], 0x1}}], 0x1, 0x48080) read$FUSE(r3, &(0x7f0000000780)={0x2020}, 0x2020) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x10000000) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r8) syz_io_uring_submit(0x0, r7, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5}) r9 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000003c0), 0x0, r9) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)}, 0x10000) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r10, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000)) 6.028951287s ago: executing program 2 (id=175): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x397a, 0x400, 0x6, 0x1017, 0x6]}, &(0x7f00000000c0)=0x50) 5.917002202s ago: executing program 2 (id=176): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed0005, &(0x7f0000000280)={[{@jqfmt_vfsold}, {@noquota}, {@errors_continue}, {@noload}, {@init_itable_val={'init_itable', 0x3d, 0x1000}}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}]}, 0xfe, 0x453, &(0x7f0000000900)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f000000ac40)={0x2020}, 0x2020) 5.201939489s ago: executing program 2 (id=177): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x0, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000007c0)={0x400000000000000, 0x0, 0x0}, 0x20004808) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, 0x0}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) openat$ppp(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 5.186990901s ago: executing program 5 (id=79): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r3, 0xffffffffffffffff, 0x0, 0x20000023893) 4.190697973s ago: executing program 1 (id=179): syz_emit_vhci(&(0x7f0000000900)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x9}, {0x0, "87409211e6ae9224"}}}}, 0xf) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x44080) 4.114698826s ago: executing program 1 (id=180): socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_vhci(&(0x7f0000000680)=ANY=[], 0x8) r0 = syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x2b7a, 0x400, 0x2, 0x4}, &(0x7f0000000240)=0x0, &(0x7f0000000800)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x40566f, 0x0, 0x0, &(0x7f0000000280)) add_key(0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}) unshare(0x22020600) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4.049193262s ago: executing program 5 (id=181): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x30}}, 0x0) 3.542231493s ago: executing program 5 (id=182): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x88, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @initial, {}, @value=@ver_80211n={0x0, 0x7f7f, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x0, @random=0x4, 0x2, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x24, 0x1}]}, @void, @val={0x4, 0x6, {0x80, 0x0, 0x0, 0x7}}, @void, @void, @val={0x25, 0x3, {0x1, 0x9c5fa755e4287b74, 0x9}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x0, 0x2, 0x4, 0x0, {0x4000001fc, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x7cfadfd09456c782, 0x401, 0x7}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0x8, 0x1, 0xd, 0x41}}, @void}}]}, 0x88}}, 0x0) 3.115151857s ago: executing program 5 (id=183): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x40, 0x1410, 0x1, 0x70bd30, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) futex_waitv(&(0x7f0000001700)=[{0x8ba, &(0x7f0000000180)=0xfffffffffffffff5, 0x2}, {0x7, &(0x7f00000001c0), 0x82}, {0x7, &(0x7f0000000200)=0x66, 0x2}, {0x10000, 0x0}, {0x5, &(0x7f00000002c0)=0x2, 0x82}, {0x3, &(0x7f0000000300)=0xe5, 0x82}, {0xffff, &(0x7f0000000340)=0x3ff, 0x2}, {0x7, &(0x7f0000000500)=0x80000001, 0x82}, {0xe1b, 0x0, 0x2}, {0x9, &(0x7f0000000400)=0x9, 0x82}, {0x2, &(0x7f0000000480)=0xfff, 0x82}, {0x5, &(0x7f00000004c0)=0x69b, 0x82}, {0x0, &(0x7f0000000240)=0x6, 0x2}, {0x8001, &(0x7f0000000540)=0x7, 0x82}, {0x78e55cfd, &(0x7f00000005c0)=0x1, 0x82}, {0x4, &(0x7f0000000600)=0x200, 0x82}, {0x25fa7ef3, &(0x7f0000000640)=0x2, 0x2}, {0xfff, &(0x7f00000006c0)=0x10000, 0x2}, {0xd55e, &(0x7f0000000740)=0xc, 0x2}, {0x252dedfd, 0x0}, {0xf61b, 0x0, 0x82}, {0x80000001, &(0x7f0000000800)=0xb, 0x82}, {0x2, &(0x7f0000000880)=0x3, 0x2}, {0xffffffff, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x80, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x3, &(0x7f0000000d80)=0x4, 0x2}, {0x1, 0x0, 0x2}], 0x1d, 0x0, &(0x7f0000001f40), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "b4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95d83ffffa407677d18bc"}}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}}, 0x119) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) bind$inet6(r4, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendto$inet6(r4, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 3.091131615s ago: executing program 1 (id=184): openat$dsp(0xffffffffffffff9c, 0x0, 0x2e4002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'team_slave_1\x00', &(0x7f0000000700)=@ethtool_eeprom={0xc, 0x5, 0x5}}) dup(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x42, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndmidi(0x0, 0x10000, 0xc0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, 0x0, 0x0) 2.980874134s ago: executing program 3 (id=185): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mlockall(0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = io_uring_setup(0xc34, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100), 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0xc2, 0x7}, 0x8) syz_open_procfs$namespace(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.979849982s ago: executing program 4 (id=186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x6, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x0) 1.231095122s ago: executing program 1 (id=187): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) 1.230534653s ago: executing program 4 (id=188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.197301667s ago: executing program 3 (id=189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x110, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0xf3, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast}, 0x0, 0x0, @default, @val={0x1, 0x5, [{0x6}, {0x77, 0x1}, {0x12, 0x1}, {0x16, 0x1}, {0x1}]}, @void, [{0xdd, 0x6, "8b7668a21729"}, {0xdd, 0x4a, "d8a062cc132f8c370f255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb7398d4b5509078"}, {0xdd, 0x74, "be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b67336957356a02e1c5bdcbd4acf120d5d44f07910bdee6eabe82f6c76ecc7c98d5a107f6eab471672d7179671906048fe7622486b35f02bac5c2f9f0c923711e82767"}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 1.125107814s ago: executing program 3 (id=190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}], {0x14}}, 0x6c}}, 0x0) 1.077144685s ago: executing program 5 (id=191): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r4, r3, 0x0, 0x20000023893) 1.076791921s ago: executing program 1 (id=192): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_provisioning(&(0x7f0000000300), 0x0, 0x0, 0x0, r0) 808.233866ms ago: executing program 3 (id=193): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0205710, &(0x7f0000000000)={0x1, 0x35, 0x100000, 0x0, 0xffffffff}) syz_open_dev$tty20(0xc, 0x4, 0x0) unshare(0x62040200) socket$nl_generic(0x10, 0x3, 0x10) 761.415965ms ago: executing program 1 (id=194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) listen(0xffffffffffffffff, 0xffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000004c0)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r2, &(0x7f0000000040), &(0x7f0000000080), 0x0) 0s ago: executing program 5 (id=195): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80003, @dev, 0x7}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00') openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_io_uring_setup(0x3678, &(0x7f0000000080)={0x0, 0x1ffffd, 0x10100, 0x40000000, 0x1d3}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r7, 0x400454c9, 0xba98575a95aeb70d) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xb, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000300)={0x84, @loopback, 0x4e22, 0x1, 'nq\x00', 0x0, 0x10000}, 0x2c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000500)={[&(0x7f00000003c0)='/dev/net/tun\x00', &(0x7f0000000400)='\x00', &(0x7f00000004c0)='\x00', 0xfffffffffffffffe]}, &(0x7f0000000700)={[&(0x7f0000000540)='\x00', &(0x7f0000000580)='$&,\x00', &(0x7f00000005c0)='nq\x00', &(0x7f0000000600)='&\'\x00', &(0x7f0000000640)='/^\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='nq\x00']}, 0x100) listen(r9, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x20000000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x2, 0x0, 0x800000000000}) kernel console output (not intermixed with test programs): forked to background, child pid 6094 [ 14.744405][ T6095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 14.747199][ T6095] eql: remember to turn off Van-Jacobson compression on your slave devices [ 14.799816][ T2013] gve 0000:00:00.0 enp0s0: Device link is up. Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts. syzkaller login: [ 35.203470][ T6414] cgroup: Unknown subsys name 'net' [ 35.449649][ T6414] cgroup: Unknown subsys name 'cpuset' [ 35.453288][ T6414] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.805235][ T6414] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 38.163885][ T6427] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.166413][ T6429] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.168555][ T6429] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.170892][ T6427] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.172922][ T6427] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.175100][ T6427] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.177009][ T6427] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 38.179280][ T6427] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.181096][ T6427] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.184522][ T6427] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.186529][ T6427] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.189730][ T6429] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.200163][ T6429] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.202565][ T6429] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.204558][ T6429] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.206684][ T6429] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.208774][ T6429] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 38.210699][ T6429] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.249675][ T6429] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.257938][ T6429] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 38.260055][ T6429] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 38.262125][ T6429] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 38.264290][ T6429] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 38.266200][ T6429] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 38.268392][ T6429] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.272467][ T6429] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 38.286940][ T6429] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.289548][ T6429] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.291799][ T6429] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 38.293930][ T6429] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.490426][ T6430] chnl_net:caif_netlink_parms(): no params data found [ 38.503888][ T6426] chnl_net:caif_netlink_parms(): no params data found [ 38.511526][ T6424] chnl_net:caif_netlink_parms(): no params data found [ 38.544021][ T6434] chnl_net:caif_netlink_parms(): no params data found [ 38.600528][ T6430] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.602077][ T6430] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.603638][ T6430] bridge_slave_0: entered allmulticast mode [ 38.606308][ T6430] bridge_slave_0: entered promiscuous mode [ 38.638238][ T6430] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.639901][ T6430] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.641620][ T6430] bridge_slave_1: entered allmulticast mode [ 38.643343][ T6430] bridge_slave_1: entered promiscuous mode [ 38.662398][ T6435] chnl_net:caif_netlink_parms(): no params data found [ 38.710550][ T6434] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.712185][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.713791][ T6434] bridge_slave_0: entered allmulticast mode [ 38.715376][ T6434] bridge_slave_0: entered promiscuous mode [ 38.718493][ T6434] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.720003][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.721604][ T6434] bridge_slave_1: entered allmulticast mode [ 38.723921][ T6434] bridge_slave_1: entered promiscuous mode [ 38.728808][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.730287][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.731801][ T6426] bridge_slave_0: entered allmulticast mode [ 38.733769][ T6426] bridge_slave_0: entered promiscuous mode [ 38.736185][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.738494][ T6426] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.740056][ T6426] bridge_slave_1: entered allmulticast mode [ 38.741781][ T6426] bridge_slave_1: entered promiscuous mode [ 38.743633][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.745169][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.746703][ T6424] bridge_slave_0: entered allmulticast mode [ 38.749530][ T6424] bridge_slave_0: entered promiscuous mode [ 38.753454][ T6430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.755472][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.757095][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.758881][ T6424] bridge_slave_1: entered allmulticast mode [ 38.760682][ T6424] bridge_slave_1: entered promiscuous mode [ 38.799436][ T6430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.812398][ T6434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.841024][ T6426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.852351][ T6434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.855599][ T6424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.862974][ T6426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.877808][ T6424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.894749][ T6430] team0: Port device team_slave_0 added [ 38.897411][ T6426] team0: Port device team_slave_0 added [ 38.912271][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.913994][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.915641][ T6435] bridge_slave_0: entered allmulticast mode [ 38.918524][ T6435] bridge_slave_0: entered promiscuous mode [ 38.921265][ T6430] team0: Port device team_slave_1 added [ 38.922699][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.924233][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.925886][ T6435] bridge_slave_1: entered allmulticast mode [ 38.928120][ T6435] bridge_slave_1: entered promiscuous mode [ 38.931282][ T6426] team0: Port device team_slave_1 added [ 38.934657][ T6434] team0: Port device team_slave_0 added [ 38.943217][ T6424] team0: Port device team_slave_0 added [ 38.968514][ T6434] team0: Port device team_slave_1 added [ 38.970316][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.971819][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.977420][ T6426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.982104][ T6424] team0: Port device team_slave_1 added [ 39.000897][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.002520][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.009046][ T6426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.017356][ T6435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.021122][ T6435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.023504][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.025086][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.030635][ T6430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.039647][ T6434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.041109][ T6434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.046799][ T6434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.058892][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.060354][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.066021][ T6424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.074095][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.075553][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.081437][ T6430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.084583][ T6434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.085990][ T6434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.092600][ T6434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.096736][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.101645][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.106906][ T6424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.122612][ T6435] team0: Port device team_slave_0 added [ 39.179627][ T6426] hsr_slave_0: entered promiscuous mode [ 39.217739][ T6426] hsr_slave_1: entered promiscuous mode [ 39.272672][ T6435] team0: Port device team_slave_1 added [ 39.340060][ T6424] hsr_slave_0: entered promiscuous mode [ 39.378018][ T6424] hsr_slave_1: entered promiscuous mode [ 39.417666][ T6424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.419417][ T6424] Cannot create hsr debugfs directory [ 39.459231][ T6434] hsr_slave_0: entered promiscuous mode [ 39.507941][ T6434] hsr_slave_1: entered promiscuous mode [ 39.548243][ T6434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.549900][ T6434] Cannot create hsr debugfs directory [ 39.557147][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.558767][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.564163][ T6435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.609351][ T6430] hsr_slave_0: entered promiscuous mode [ 39.648135][ T6430] hsr_slave_1: entered promiscuous mode [ 39.687663][ T6430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.689340][ T6430] Cannot create hsr debugfs directory [ 39.714279][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.715698][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.721451][ T6435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.849821][ T6435] hsr_slave_0: entered promiscuous mode [ 39.887941][ T6435] hsr_slave_1: entered promiscuous mode [ 39.937690][ T6435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.939232][ T6435] Cannot create hsr debugfs directory [ 40.055206][ T6424] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.059194][ T6424] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.062232][ T6424] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.065226][ T6424] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.109538][ T6426] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.118376][ T6426] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.124627][ T6426] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.128512][ T6426] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.139601][ T6424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.174930][ T6424] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.188007][ T6434] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.196047][ T2180] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.197841][ T2180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.204447][ T6434] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.210908][ T2075] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.212476][ T2075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.222537][ T6434] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.226867][ T6434] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.258582][ T6429] Bluetooth: hci1: command tx timeout [ 40.258587][ T5993] Bluetooth: hci2: command tx timeout [ 40.267819][ T6429] Bluetooth: hci0: command tx timeout [ 40.270003][ T6435] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.285600][ T6435] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.293477][ T6435] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.311742][ T6426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.318618][ T6426] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.336070][ T6435] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.337687][ T6429] Bluetooth: hci4: command tx timeout [ 40.337789][ T5993] Bluetooth: hci3: command tx timeout [ 40.349268][ T6430] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.370537][ T2013] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.372127][ T2013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.374605][ T2013] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.376142][ T2013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.385196][ T6430] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.392907][ T6430] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.396762][ T6430] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.421605][ T6424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.446913][ T6426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.495498][ T6434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.538658][ T6424] veth0_vlan: entered promiscuous mode [ 40.551763][ T6434] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.555679][ T6430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.560650][ T1393] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.562173][ T1393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.564553][ T1393] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.566069][ T1393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.578810][ T6424] veth1_vlan: entered promiscuous mode [ 40.592031][ T6426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.620810][ T6430] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.632864][ T6424] veth0_macvtap: entered promiscuous mode [ 40.640717][ T1393] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.642198][ T1393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.650801][ T6424] veth1_macvtap: entered promiscuous mode [ 40.666328][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.683581][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.696035][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.697673][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.702487][ T6435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.715343][ T6424] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.719109][ T6424] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.723999][ T6424] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.725885][ T6424] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.754391][ T6435] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.799499][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.801128][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.804692][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.806189][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.838248][ T6434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.880296][ T6426] veth0_vlan: entered promiscuous mode [ 40.884884][ T6426] veth1_vlan: entered promiscuous mode [ 40.934876][ T2013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.936883][ T2013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.952918][ T6434] veth0_vlan: entered promiscuous mode [ 40.973723][ T6435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.983677][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.985407][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.985826][ T6434] veth1_vlan: entered promiscuous mode [ 41.001493][ T6426] veth0_macvtap: entered promiscuous mode [ 41.006402][ T6426] veth1_macvtap: entered promiscuous mode [ 41.013564][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.016252][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.019821][ T6426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.053638][ T6434] veth0_macvtap: entered promiscuous mode [ 41.057001][ T6434] veth1_macvtap: entered promiscuous mode [ 41.067359][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.071231][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.074094][ T6426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.081871][ T6435] veth0_vlan: entered promiscuous mode [ 41.086967][ T6435] veth1_vlan: entered promiscuous mode [ 41.096343][ T6424] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.096569][ T6430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.119825][ T6426] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.121777][ T6426] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.123571][ T6426] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.125389][ T6426] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.148387][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.150633][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.152851][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.155008][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.158582][ T6434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.161449][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.163710][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.165680][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.173732][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.177024][ T6434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.200182][ T6434] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.202304][ T6434] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.204241][ T6434] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.206112][ T6434] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.212579][ T6435] veth0_macvtap: entered promiscuous mode [ 41.215660][ T6435] veth1_macvtap: entered promiscuous mode [ 41.266034][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.269094][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.271263][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.273665][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.275586][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.278066][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.281117][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.308987][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.311485][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.313625][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.315844][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.323036][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.325271][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.329252][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.333653][ T6430] veth0_vlan: entered promiscuous mode [ 41.356155][ T6430] veth1_vlan: entered promiscuous mode [ 41.375009][ T6435] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.377027][ T6435] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.382124][ T6435] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.384126][ T6435] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.390635][ T6511] loop0: detected capacity change from 0 to 1024 [ 41.445763][ T2013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.453267][ T2013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.469100][ T6430] veth0_macvtap: entered promiscuous mode [ 41.472417][ T6430] veth1_macvtap: entered promiscuous mode [ 41.505530][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.507217][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.516194][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.523214][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.525300][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.528411][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.530523][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.532744][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.535461][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.539449][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.542696][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.563517][ T1393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.565227][ T1393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.603208][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.623010][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.626216][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.628515][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.630788][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.632923][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.635616][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.638176][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.643106][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.650481][ T1393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.651073][ T6430] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.654271][ T1393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.654446][ T6430] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.658615][ T6430] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.660477][ T6430] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.674858][ T2075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.679999][ T2075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.751275][ T2075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.752975][ T2075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.832613][ T2180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.834379][ T2180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.846131][ T6524] loop4: detected capacity change from 0 to 2048 [ 41.891294][ T6524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.898635][ T2180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.902583][ T2180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.956851][ T6529] loop2: detected capacity change from 0 to 2048 [ 42.045078][ T6426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.049824][ T6529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.062273][ T6529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 42.080847][ T6434] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.087761][ T6540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.091997][ T6540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.120464][ T6542] netlink: 56 bytes leftover after parsing attributes in process `syz.1.17'. [ 42.123694][ T6542] netlink: 'syz.1.17': attribute type 15 has an invalid length. [ 42.125337][ T6542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17'. [ 42.129104][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 42.161768][ T6544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.163859][ T6544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.174076][ T6544] loop4: detected capacity change from 0 to 256 [ 42.220634][ T6544] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 42.261377][ T6542] bond0: (slave bond_slave_0): Releasing backup interface [ 42.263584][ T6548] ax25_connect(): syz.2.18 uses autobind, please contact jreuter@yaina.de [ 42.339606][ T5993] Bluetooth: hci2: command tx timeout [ 42.339670][ T6429] Bluetooth: hci0: command tx timeout [ 42.340950][ T5993] Bluetooth: hci1: command tx timeout [ 42.418209][ T5993] Bluetooth: hci3: command tx timeout [ 42.418298][ T6427] Bluetooth: hci4: command tx timeout [ 42.533389][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'. [ 42.536844][ T6554] netlink: 'syz.0.21': attribute type 4 has an invalid length. [ 42.541118][ T6554] netlink: 17 bytes leftover after parsing attributes in process `syz.0.21'. [ 42.594026][ T6557] loop0: detected capacity change from 0 to 128 [ 42.596793][ T6557] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.605156][ T6557] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.223065][ T6557] ======================================================= [ 43.223065][ T6557] WARNING: The mand mount option has been deprecated and [ 43.223065][ T6557] and is ignored by this kernel. Remove the mand [ 43.223065][ T6557] option from the mount to silence this warning. [ 43.223065][ T6557] ======================================================= [ 43.334225][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 43.556710][ T6572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29'. [ 43.700821][ T6578] loop3: detected capacity change from 0 to 2048 [ 43.724543][ T6578] UDF-fs: error (device loop3): udf_read_inode: (ino 1312) failed !bh [ 43.731167][ T6578] UDF-fs: Scanning with blocksize 512 failed [ 43.740108][ T6578] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 43.748788][ T6578] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 43.755151][ T6578] UDF-fs: Scanning with blocksize 1024 failed [ 43.761150][ T6578] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 43.769399][ T6578] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 43.786578][ T6578] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 43.793186][ T6578] UDF-fs: Scanning with blocksize 2048 failed [ 43.796002][ T6578] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 43.800702][ T6578] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 43.805607][ T6578] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 43.809495][ T6578] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 43.812311][ T6578] UDF-fs: Scanning with blocksize 4096 failed [ 43.814805][ T6578] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 44.184833][ T6604] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.355534][ T6606] loop3: detected capacity change from 0 to 256 [ 44.431950][ T6427] Bluetooth: hci2: command tx timeout [ 44.433203][ T6427] Bluetooth: hci1: command tx timeout [ 44.501805][ T5993] Bluetooth: hci4: command tx timeout [ 44.514416][ T5993] Bluetooth: hci3: command tx timeout [ 44.700124][ T6618] netlink: 60 bytes leftover after parsing attributes in process `syz.2.51'. [ 45.471744][ T6647] netlink: 60 bytes leftover after parsing attributes in process `syz.2.65'. [ 45.627129][ T6654] loop2: detected capacity change from 0 to 256 [ 45.651846][ T6654] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3f486145, utbl_chksum : 0xe619d30d) [ 45.808830][ T6658] loop3: detected capacity change from 0 to 512 [ 45.843690][ T6658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.871547][ T6664] loop1: detected capacity change from 0 to 512 [ 45.915741][ T6435] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.930066][ T6664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.017262][ T6430] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.196402][ T6678] loop1: detected capacity change from 0 to 256 [ 46.280555][ T6678] FAT-fs (loop1): Directory bread(block 64) failed [ 46.281954][ T6678] FAT-fs (loop1): Directory bread(block 65) failed [ 46.290760][ T6678] FAT-fs (loop1): Directory bread(block 66) failed [ 46.292091][ T6678] FAT-fs (loop1): Directory bread(block 67) failed [ 46.293389][ T6678] FAT-fs (loop1): Directory bread(block 68) failed [ 46.300766][ T6678] FAT-fs (loop1): Directory bread(block 69) failed [ 46.302225][ T6678] FAT-fs (loop1): Directory bread(block 70) failed [ 46.304750][ T6678] FAT-fs (loop1): Directory bread(block 71) failed [ 46.310918][ T6678] FAT-fs (loop1): Directory bread(block 72) failed [ 46.312226][ T6678] FAT-fs (loop1): Directory bread(block 73) failed [ 46.596028][ T5993] Bluetooth: hci1: command tx timeout [ 46.598568][ T5993] Bluetooth: hci2: command tx timeout [ 46.601294][ T5993] Bluetooth: hci3: command tx timeout [ 46.602921][ T5993] Bluetooth: hci4: command tx timeout [ 47.010395][ T44] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.040511][ T6685] loop3: detected capacity change from 0 to 1024 [ 47.087678][ T6685] hfsplus: unable to find HFS+ superblock [ 47.127327][ T6685] loop3: detected capacity change from 0 to 1024 [ 47.214710][ T5993] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.826972][ T5993] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.853527][ T1393] hfsplus: b-tree write err: -5, ino 4 [ 47.870241][ T6690] loop2: detected capacity change from 0 to 512 [ 47.894730][ T44] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.908413][ T5993] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.949856][ T6690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.965824][ T5993] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.980585][ T6690] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 18: comm syz.2.81: lblock 23 mapped to illegal pblock 18 (length 1) [ 47.993855][ T6690] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 18: comm syz.2.81: lblock 23 mapped to illegal pblock 18 (length 1) [ 48.003129][ T6690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.007995][ T5993] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 48.012060][ T5993] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.013989][ T6690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.017661][ T6699] loop1: detected capacity change from 0 to 512 [ 48.060244][ T6699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.115413][ T6430] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.122322][ T6690] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #2: comm syz.2.81: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 48.189832][ T44] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.324417][ T6719] loop3: detected capacity change from 0 to 2048 [ 48.340919][ T44] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.347748][ T6719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.388128][ T6435] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.456199][ T6733] loop1: detected capacity change from 0 to 256 [ 48.464475][ T6733] vfat: Unknown parameter 'showexme' [ 48.515073][ T6738] netlink: 36 bytes leftover after parsing attributes in process `syz.1.96'. [ 48.689147][ T6434] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.698482][ T6686] chnl_net:caif_netlink_parms(): no params data found [ 48.720282][ T6731] Zero length message leads to an empty skb [ 48.726366][ T6748] loop4: detected capacity change from 0 to 1764 [ 48.785118][ T6752] loop1: detected capacity change from 0 to 512 [ 48.835157][ T6752] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 48.836717][ T6752] EXT4-fs (loop1): mount failed [ 48.847256][ T44] bridge_slave_1: left allmulticast mode [ 48.873685][ T44] bridge_slave_1: left promiscuous mode [ 48.875816][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.904665][ T44] bridge_slave_0: left allmulticast mode [ 48.905977][ T44] bridge_slave_0: left promiscuous mode [ 48.916528][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.135415][ T6777] netlink: 68 bytes leftover after parsing attributes in process `syz.4.104'. [ 50.101672][ T5993] Bluetooth: hci0: command tx timeout [ 50.352469][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.391058][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.441388][ T44] bond0 (unregistering): Released all slaves [ 50.562872][ T6794] loop4: detected capacity change from 0 to 512 [ 50.568868][ T6686] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.570581][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.590221][ T6686] bridge_slave_0: entered allmulticast mode [ 50.599170][ T6686] bridge_slave_0: entered promiscuous mode [ 50.618182][ T6794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.622053][ T6686] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.640452][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.642076][ T6686] bridge_slave_1: entered allmulticast mode [ 50.643987][ T6686] bridge_slave_1: entered promiscuous mode [ 50.722156][ T6793] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.109: bg 0: block 321: padding at end of block bitmap is not set [ 50.723541][ T6806] loop3: detected capacity change from 0 to 1024 [ 50.755328][ T6806] hfsplus: xattr search failed [ 50.853033][ T6426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.883962][ T6815] loop1: detected capacity change from 0 to 2048 [ 50.936195][ T6815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.941449][ T30] audit: type=1326 audit(50.914:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6826 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9094c768 code=0x7ffc0000 [ 50.950487][ T30] audit: type=1326 audit(50.914:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6826 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9094c768 code=0x7ffc0000 [ 50.959095][ T30] audit: type=1326 audit(50.914:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6826 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9094c768 code=0x7ffc0000 [ 50.972702][ T30] audit: type=1326 audit(50.924:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6826 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9094c768 code=0x7ffc0000 [ 50.977235][ T30] audit: type=1326 audit(50.924:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6826 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9094c768 code=0x7ffc0000 [ 50.981600][ T30] audit: type=1326 audit(50.924:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6826 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9094c768 code=0x7ffc0000 [ 50.986250][ T30] audit: type=1326 audit(50.924:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6826 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9094c768 code=0x7ffc0000 [ 50.990940][ T30] audit: type=1326 audit(50.924:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6826 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9094c768 code=0x7ffc0000 [ 50.996378][ T30] audit: type=1326 audit(50.924:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6826 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9094c768 code=0x7ffc0000 [ 51.000913][ T30] audit: type=1326 audit(50.924:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6826 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9094c768 code=0x7ffc0000 [ 51.103167][ T6686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.108456][ T6686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.130488][ T6686] team0: Port device team_slave_0 added [ 51.134963][ T6686] team0: Port device team_slave_1 added [ 51.254082][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'. [ 51.261534][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'. [ 51.274357][ T6841] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 51.278668][ T6841] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 51.281168][ T6841] EXT4-fs (loop1): This should not happen!! Data will be lost [ 51.281168][ T6841] [ 51.283218][ T6841] EXT4-fs (loop1): Total free blocks count 0 [ 51.284416][ T6841] EXT4-fs (loop1): Free/Dirty block details [ 51.285656][ T6841] EXT4-fs (loop1): free_blocks=2415919104 [ 51.286857][ T6841] EXT4-fs (loop1): dirty_blocks=16 [ 51.287988][ T6841] EXT4-fs (loop1): Block reservation details [ 51.289244][ T6841] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 51.823292][ T6846] loop2: detected capacity change from 0 to 1024 [ 51.859147][ T13] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 51.974214][ T6854] Bluetooth: MGMT ver 1.23 [ 52.103186][ T6870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.105257][ T6870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.112265][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.117067][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.130181][ T6686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.190947][ T5993] Bluetooth: hci0: command tx timeout [ 52.200042][ T44] hsr_slave_0: left promiscuous mode [ 52.237659][ T44] hsr_slave_1: left promiscuous mode [ 52.318472][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.320207][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.322916][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.325154][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.340004][ T44] veth1_macvtap: left promiscuous mode [ 52.342108][ T44] veth0_macvtap: left promiscuous mode [ 52.343441][ T44] veth1_vlan: left promiscuous mode [ 52.345150][ T44] veth0_vlan: left promiscuous mode [ 52.882168][ T6895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.884231][ T6895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.475961][ T6900] loop2: detected capacity change from 0 to 1764 [ 53.478027][ T6900] iso9660: Bad value for 'sbsector' [ 54.081083][ T44] team0 (unregistering): Port device team_slave_1 removed [ 54.250383][ T44] team0 (unregistering): Port device team_slave_0 removed [ 54.269112][ T5993] Bluetooth: hci0: command tx timeout [ 56.338114][ T5993] Bluetooth: hci0: command tx timeout [ 56.411544][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.413126][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.419118][ T6686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.437954][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'. [ 56.551024][ T6686] hsr_slave_0: entered promiscuous mode [ 56.561132][ T6910] loop4: detected capacity change from 0 to 2048 [ 56.595339][ T6686] hsr_slave_1: entered promiscuous mode [ 56.603788][ T6802] loop4: p2 < > [ 56.611733][ T6910] loop4: p2 < > [ 56.641061][ T6686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.642865][ T6686] Cannot create hsr debugfs directory [ 56.838509][ T6532] udevd[6532]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 56.972253][ T6686] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 56.975466][ T6532] udevd[6532]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 56.979061][ T6686] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 56.998218][ T6686] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 57.021823][ T6686] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 57.082589][ T6948] loop1: detected capacity change from 0 to 512 [ 57.256911][ T6686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.260008][ T6948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.265114][ T6686] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.289649][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.291960][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.299451][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.300882][ T6960] loop3: detected capacity change from 0 to 8 [ 57.300896][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.457326][ T6430] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.666796][ T6686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.587904][ T5993] Bluetooth: hci0: command tx timeout [ 58.784373][ T6686] veth0_vlan: entered promiscuous mode [ 58.814694][ T6686] veth1_vlan: entered promiscuous mode [ 59.000370][ T6686] veth0_macvtap: entered promiscuous mode [ 59.003913][ T6686] veth1_macvtap: entered promiscuous mode [ 59.635609][ T7008] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 59.672405][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.674797][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.676857][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.679023][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.681037][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.683705][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.686010][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.694459][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.698083][ T6686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.700931][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.703258][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.705479][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.708464][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.710729][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.713119][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.715278][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.719407][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.722457][ T6686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.735749][ T6686] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.747636][ T6686] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.749382][ T6686] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.751131][ T6686] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.788033][ T7030] futex_wake_op: syz.3.170 tries to shift op by -1; fix this program [ 60.022940][ T7040] loop1: detected capacity change from 0 to 32768 [ 60.214782][ T7040] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 60.243253][ T7058] loop2: detected capacity change from 0 to 512 [ 60.246996][ T7058] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 60.251768][ T7058] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349) [ 60.256558][ T7058] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 60.266745][ T2100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.272284][ T2100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.306815][ T7058] EXT4-fs (loop2): orphan cleanup on readonly fs [ 60.326884][ T7058] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 4: comm syz.2.176: lblock 0 mapped to illegal pblock 4 (length 1) [ 60.372235][ T7058] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 60.375886][ T7058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.391598][ T2180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.393329][ T2180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.664359][ T5993] Bluetooth: hci0: command 0x0401 tx timeout [ 60.980702][ T6434] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.133069][ T6430] ocfs2: Unmounting device (7,1) on (node local) [ 61.998039][ T7054] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 62.000290][ T7054] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 62.012255][ T7054] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 62.024123][ T7054] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 62.026908][ T5993] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 62.034302][ T7054] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 62.056155][ T7054] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 62.091308][ T7097] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.119068][ T7054] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 62.125557][ T7054] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 62.132253][ T7054] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 62.295608][ T5993] Bluetooth: hci1: command 0x0c1a tx timeout [ 62.299364][ T7054] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 62.300960][ T7054] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 62.304079][ T7054] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 62.305853][ T7054] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 62.307056][ T7054] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 62.747862][ T7054] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 63.316136][ T7172] netlink: 'syz.3.185': attribute type 4 has an invalid length. [ 64.323822][ T6427] Bluetooth: hci2: command 0x0c1a tx timeout [ 64.327266][ T6427] Bluetooth: hci4: command 0x0c1a tx timeout [ 64.349314][ T5993] Bluetooth: hci0: command 0x0401 tx timeout [ 64.350718][ T6427] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.352028][ T6427] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.528496][ T2348] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.530970][ T2348] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.604120][ T7182] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 64.618861][ T7182] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 66.027785][ T7190] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 66.035662][ T7190] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 66.163037][ T7190] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 66.225345][ T7190] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 66.328034][ T7190] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 66.328067][ T7190] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 66.337577][ C0] ------------[ cut here ]------------ [ 66.338848][ C0] WARNING: CPU: 0 PID: 6041 at kernel/workqueue.c:2257 __queue_work+0xe50/0x1308 [ 66.340725][ C0] Modules linked in: [ 66.341499][ C0] CPU: 0 UID: 0 PID: 6041 Comm: udevd Not tainted 6.12.0-syzkaller-g7b1d1d4cfac0 #0 [ 66.343416][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 66.345453][ C0] pstate: 404000c5 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 66.347267][ C0] pc : __queue_work+0xe50/0x1308 [ 66.348393][ C0] lr : __queue_work+0xe50/0x1308 [ 66.349456][ C0] sp : ffff800080007b20 [ 66.350324][ C0] x29: ffff800080007b70 x28: 1fffe0001b20a791 x27: dfff800000000000 [ 66.352015][ C0] x26: dfff800000000000 x25: ffff0000ed0fb800 x24: 0000000000000008 [ 66.353758][ C0] x23: 1fffe0001b20a791 x22: ffff0000ed0fb9c0 x21: 0000000000000100 [ 66.355361][ C0] x20: ffff0000d9053c80 x19: ffff0000cfe00930 x18: ffff80009cb87a10 [ 66.357105][ C0] x17: ffff800123dfd000 x16: ffff8000831615b0 x15: 0000000000000002 [ 66.358803][ C0] x14: ffff80008f8d05e8 x13: dfff800000000000 x12: 00000000787f80d1 [ 66.360509][ C0] x11: 0000000081f5667f x10: 0000000000ff0100 x9 : 0000000000000000 [ 66.362259][ C0] x8 : ffff0000d9053c80 x7 : ffff800080470ed8 x6 : 0000000000000000 [ 66.363924][ C0] x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008decc740 [ 66.365584][ C0] x2 : ffff0000cfe00930 x1 : 0000000000000100 x0 : 0000000000000000 [ 66.367176][ C0] Call trace: [ 66.367937][ C0] __queue_work+0xe50/0x1308 (P) [ 66.368965][ C0] __queue_work+0xe50/0x1308 (L) [ 66.370019][ C0] delayed_work_timer_fn+0x74/0x90 [ 66.371033][ C0] call_timer_fn+0x1b4/0x8f0 [ 66.371993][ C0] __run_timer_base+0x59c/0x7b4 [ 66.372968][ C0] run_timer_softirq+0xcc/0x194 [ 66.373993][ C0] handle_softirqs+0x2e0/0xbf8 [ 66.375058][ C0] __do_softirq+0x14/0x20 [ 66.375934][ C0] ____do_softirq+0x14/0x20 [ 66.376882][ C0] call_on_irq_stack+0x24/0x4c [ 66.377821][ C0] do_softirq_own_stack+0x20/0x2c [ 66.378832][ C0] __irq_exit_rcu+0x1d8/0x544 [ 66.379888][ C0] irq_exit_rcu+0x14/0x84 [ 66.380707][ C0] el1_interrupt+0x38/0x68 [ 66.381698][ C0] el1h_64_irq_handler+0x18/0x24 [ 66.382797][ C0] el1h_64_irq+0x6c/0x70 [ 66.383730][ C0] kasan_quarantine_put+0xb8/0x1c8 (P) [ 66.384794][ C0] kasan_quarantine_put+0x1a0/0x1c8 (L) [ 66.386001][ C0] __kasan_slab_free+0x70/0x8c [ 66.387015][ C0] kmem_cache_free+0x19c/0x560 [ 66.387980][ C0] putname+0x11c/0x180 [ 66.388848][ C0] do_sys_openat2+0x164/0x1b8 [ 66.389796][ C0] __arm64_sys_openat+0x1f0/0x240 [ 66.390870][ C0] invoke_syscall+0x98/0x2b8 [ 66.391837][ C0] el0_svc_common+0x130/0x23c [ 66.392898][ C0] do_el0_svc+0x48/0x58 [ 66.393748][ C0] el0_svc+0x54/0x168 [ 66.394563][ C0] el0t_64_sync_handler+0x84/0x108 [ 66.395755][ C0] el0t_64_sync+0x198/0x19c [ 66.396713][ C0] irq event stamp: 1680929 [ 66.397610][ C0] hardirqs last enabled at (1680928): [] handle_softirqs+0x1c0/0xbf8 [ 66.399699][ C0] hardirqs last disabled at (1680929): [] _raw_spin_lock_irq+0x28/0x70 [ 66.401861][ C0] softirqs last enabled at (1679338): [] local_bh_enable+0x10/0x34 [ 66.403899][ C0] softirqs last disabled at (1680927): [] __do_softirq+0x14/0x20 [ 66.405774][ C0] ---[ end trace 0000000000000000 ]--- [ 66.418000][ T5993] Bluetooth: hci0: command 0x0401 tx timeout [ 66.419488][ T5993] Bluetooth: hci3: command 0x0c1a tx timeout [ 66.615368][ T7223] syzkaller0: entered promiscuous mode [ 66.616547][ T7223] syzkaller0: entered allmulticast mode [ 66.652676][ T7153] syzkaller0: tun_net_xmit 48 [ 66.664173][ T7225] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 66.674120][ T7225] syzkaller0: Linktype set failed because interface is up [ 66.705828][ T6495] IPVS: starting estimator thread 0... [ 66.710825][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.195'. [ 66.724086][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.195'. [ 66.840195][ T7227] IPVS: using max 26 ests per chain, 62400 per kthread [ 68.497699][ T5993] Bluetooth: hci0: command 0x0401 tx timeout [ 68.499011][ T6429] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.628247][ T3826] cfg80211: failed to load regulatory.db