last executing test programs: 16m17.875084098s ago: executing program 4 (id=103): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xdae352274fc5dea5, 0x10, 0xffffffffffffffff, 0x2945d000) connect$unix(0xffffffffffffffff, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x4ca40, 0x0) 16m16.541711129s ago: executing program 4 (id=105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}]}], {0x14}}, 0x6c}}, 0x0) 16m15.969109791s ago: executing program 4 (id=107): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r5}, 0xe) socket(0x22, 0xa, 0xfffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000640)={{}, {0x8000000000000000}, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x12b}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) 16m14.40467671s ago: executing program 4 (id=109): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$netrom(0xffffffffffffffff, &(0x7f0000000300)={{}, [@default, @rose, @default, @netrom, @remote, @netrom, @remote, @bcast]}, &(0x7f00000001c0)=0x48) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) close(0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 16m13.299070441s ago: executing program 0 (id=112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a30000000001400048008000240000000000800"], 0xf0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40004) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r3, 0x1) socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) 16m11.472222919s ago: executing program 0 (id=114): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) socket(0x1a, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) shmdt(0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)=0x9) 16m7.908182863s ago: executing program 0 (id=118): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10c6, &(0x7f0000000b40)={0x0, 0xbdee, 0x800, 0x400001, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r2, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) 16m4.63373148s ago: executing program 4 (id=124): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000480)={{}, 0x0, 0x0, @unused=[0x9, 0x4, 0x80, 0xfe5], @name="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"}) r0 = socket(0x1e, 0x4, 0x0) sendmsg$GTP_CMD_ECHOREQ(r0, 0x0, 0x8015) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 16m2.677622848s ago: executing program 4 (id=130): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) dup2(r0, r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x18) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)={r3}) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000080)=0x50, 0x4) accept4(r4, 0x0, 0x0, 0x80000) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) 16m2.570131075s ago: executing program 0 (id=131): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc, 0xf}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) close(0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 16m0.232743236s ago: executing program 0 (id=134): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) dup2(r0, r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x18) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)={r3}) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080)=0x50, 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioperm(0x2, 0x7, 0x13) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r6 = shmget$private(0x0, 0x1000, 0x12bd, &(0x7f0000ffe000/0x1000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 15m58.156328338s ago: executing program 0 (id=140): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0xf7) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x4, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setrlimit(0x7, &(0x7f0000000380)={0x1, 0x9}) accept4(r4, 0x0, 0x0, 0x800) fanotify_init(0x0, 0x0) syslog(0x3, &(0x7f00000004c0)=""/164, 0xa4) 15m45.0824626s ago: executing program 32 (id=130): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) dup2(r0, r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x18) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)={r3}) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000080)=0x50, 0x4) accept4(r4, 0x0, 0x0, 0x80000) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) 15m42.142752527s ago: executing program 33 (id=140): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0xf7) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x4, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setrlimit(0x7, &(0x7f0000000380)={0x1, 0x9}) accept4(r4, 0x0, 0x0, 0x800) fanotify_init(0x0, 0x0) syslog(0x3, &(0x7f00000004c0)=""/164, 0xa4) 8m10.812903005s ago: executing program 3 (id=831): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000220000/0x3000)=nil, 0x3000, 0x300000e, 0x80010, r0, 0x553f5000) mlock2(&(0x7f000027a000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet_smc(0x2b, 0x1, 0x0) fanotify_init(0x40, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) fsmount(0xffffffffffffffff, 0x0, 0x1) 8m8.197917869s ago: executing program 3 (id=834): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) 8m6.672980334s ago: executing program 3 (id=839): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r1, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x40001122, 0x0) ioctl$TIOCPKT(r0, 0x80045430, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r4, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r3, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000f00)=0x3) write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f0000000880)={0xc, 0x8, 0x144, {0x0}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "8c7442ff8f99b8233b0100145274da69"}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x20000080) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r8, 0x701, 0x70bd2b, 0xf0, {0x5}}, 0x14}, 0x1, 0xf0ffff, 0x0, 0x20004074}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) recvmmsg(r11, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x1c000}], 0x1, 0x2, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r9, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8085}, 0x20000004) 8m5.686245297s ago: executing program 3 (id=840): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) mount$9p_virtio(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) pipe(0x0) close(0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 8m4.029027052s ago: executing program 3 (id=842): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0xf7) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x800) fanotify_init(0x0, 0x0) syslog(0x3, &(0x7f00000004c0)=""/164, 0xa4) 8m1.36568071s ago: executing program 3 (id=849): r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x200, 0xc8, 0x8, 0x200, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xffffff00], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b, 0x2}}, @common=@ah={{0x30}, {[0x0, 0x4d5]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x100, 0x8, 0x8, '\x00', 'syz1\x00', {0xe}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000040)) 7m45.618830395s ago: executing program 34 (id=849): r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x200, 0xc8, 0x8, 0x200, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xffffff00], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b, 0x2}}, @common=@ah={{0x30}, {[0x0, 0x4d5]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x100, 0x8, 0x8, '\x00', 'syz1\x00', {0xe}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000040)) 33.200077326s ago: executing program 1 (id=1364): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 32.901649389s ago: executing program 1 (id=1365): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) 29.920937142s ago: executing program 1 (id=1367): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x8000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 29.184127068s ago: executing program 1 (id=1368): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)={0x2, 0x0, [{0x2, 0x7f, &(0x7f00000001c0)=""/127}, {0x11000, 0x89, &(0x7f0000000580)=""/137}]}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 28.63707114s ago: executing program 1 (id=1370): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r1, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 27.388147606s ago: executing program 1 (id=1371): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sysinfo(0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f00000005c0)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) 11.59211195s ago: executing program 35 (id=1371): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sysinfo(0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f00000005c0)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) 6.584198549s ago: executing program 2 (id=1387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 6.565125479s ago: executing program 2 (id=1388): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000003080101000000000000000003000009050003003a0000003c000480080002400000000008000240df05007b08000240000007ff08"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.476926435s ago: executing program 2 (id=1389): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_mcast\x00') pipe2$9p(&(0x7f0000000180), 0x4800) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001300)={&(0x7f0000000740)={0x710, 0x0, 0x5, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [{{0x254, 0x1, {{0x0, 0xe000}, 0x1, 0x2, 0x8000, 0x240, 0x5, 'syz0\x00', "30f1a7f1e7893f5a4c98a01e5c19704caff85e0efcbd7e74a4bf4d298db81a07", "e42a5a426a8ab3da02c7786c5ea6c0ce1d0388c328e5fa67e63bb15252453f34", [{0x0, 0x2, {0x3, 0xfffffff9}}, {0x4, 0x8, {0x2, 0x3be1ae29}}, {0x7f, 0xe, {0x1, 0xb4}}, {0x1, 0x8000, {0x0, 0x5}}, {0x81, 0x10, {0x2, 0x5}}, {0x1, 0x2, {0x1, 0x1000}}, {0x3ff, 0x8, {0x2, 0xffff7fff}}, {0x12, 0x25fd, {0xa078a12dd178018b, 0x10b}}, {0xff, 0x3, {0x2, 0x4}}, {0x6, 0x5, {0x0, 0x2}}, {0xfff, 0xe86, {0x1, 0x1}}, {0x2a73, 0x200, {0x3, 0x3}}, {0x4, 0x7f, {0x2, 0x101}}, {0x9, 0x9, {0x2, 0x9}}, {0x7, 0x80, {0x1, 0x1f}}, {0x4, 0x1, {0x2, 0x9}}, {0x16d, 0x6, {0x1, 0x2a3}}, {0x3, 0x9, {0x2, 0x5}}, {0xfffc, 0xa, {0x2, 0xb}}, {0xb7d, 0x8, {0x0, 0x10001}}, {0x4, 0x749e, {0x3, 0x9}}, {0x8, 0xfff9, {0x3, 0x1}}, {0x5, 0x0, {0x3, 0x2}}, {0x4, 0xec58, {0x24b6c1fde8171efa, 0x8}}, {0x4, 0x1, {0x3, 0x5}}, {0x2, 0xc0cd, {0x3, 0x125896ce}}, {0x55f, 0x4, {0x3, 0x6}}, {0x8, 0x1, {0x0, 0xffffffff}}, {0x400, 0x2, {0x3}}, {0x9e, 0x9, {0x2, 0xe211}}, {0x1, 0x6, {0x1, 0xffffffff}}, {0x3, 0xfffc, {0x3, 0x3}}, {0x8, 0x7, {0x2, 0x4}}, {0x2, 0x0, {0x3, 0x1ff}}, {0x859, 0x2, {0x1, 0xd21}}, {0x9, 0xffff, {0x0, 0xffffff43}}, {0x59, 0x8001, {0x0, 0x80000000}}, {0x3ff, 0x8d82, {0x3, 0x8}}, {0x3e6, 0x7, {0x0, 0x9}}, {0x0, 0x1000, {0x0, 0x75be}}]}}}, {{0x254, 0x1, {{0x0, 0x800}, 0x72, 0x2, 0x3, 0x2c75, 0xf, 'syz1\x00', "7abb81742d91f72562d9ce4aaae1c78250834b54768323fa3b1dab13c3249d7e", "cfb075a789a305ddcfa515eff117634abf180d63379911829b53c9c9d788df59", [{0x7ff, 0x3e0, {0x2, 0x81}}, {0xfffb, 0x200, {0x0, 0x9}}, {0x5, 0xfff7, {0x3, 0x6}}, {0xc, 0x1, {0x1, 0xfffffc00}}, {0x6000, 0x200, {0x2, 0x4}}, {0x6, 0x2, {0x1, 0xfffffff6}}, {0xb, 0x2, {0x2, 0x729}}, {0x1c, 0x9, {0x3, 0x7}}, {0x2, 0x1, {0x1, 0x3}}, {0x9, 0x5}, {0x0, 0x80, {0x1, 0x9}}, {0xd1f, 0x7, {0x1, 0xd2}}, {0x8, 0x2, {0x1, 0x8}}, {0x0, 0xa, {0x0, 0x7f}}, {0x10, 0x5234, {0x0, 0x8}}, {0xd4d7, 0x3ff, {0x0, 0x3003}}, {0x10, 0xfff3, {0x1, 0x8d0}}, {0xb, 0x99, {0x0, 0x7}}, {0xff, 0x3, {0x2, 0x9}}, {0xf, 0x1, {0x1, 0xfffffffe}}, {0xf1, 0x808, {0x2, 0xffffffff}}, {0x6, 0x8, {0x3, 0x889}}, {0x800, 0x0, {0x1, 0x4}}, {0x40, 0x2, {0x1, 0x8}}, {0x4, 0x8001, {0x2, 0x8000}}, {0x5e9b, 0x7ff, {0x1, 0xff}}, {0xa, 0x6, {0x3, 0x5}}, {0xffff, 0x31, {0x2, 0x1}}, {0x7d, 0x1, {0x0, 0x7ff}}, {0x8, 0x737, {0x1, 0x64}}, {0x1ff, 0xb, {0x0, 0xfff}}, {0x0, 0x3, {0x3, 0x7}}, {0xa7b, 0xdff, {0x3, 0xfffffff9}}, {0x18aa, 0x9, {0x0, 0x7f}}, {0x7, 0x1, {0x1, 0x1}}, {0x5, 0x81, {0x1, 0xc6}}, {0x8291, 0x7}, {0xd, 0xfffe, {0x1, 0x1}}, {0x10, 0xb3d, {0x1, 0x1}}, {0x7, 0x5db9, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x3, 0x2}, 0x76, 0x1, 0x80, 0x2, 0x1d, 'syz1\x00', "75e4f8cd1ce4f04348e4622059a8c03fd84090119bdef747c01fe49ff6035707", "d09406a0e7096dd6d2395c19e8996b0c2cf760604e36dfa887202f45ec0153f8", [{0x1, 0x7, {0x2, 0x1}}, {0x7ff, 0x8, {0x3, 0xfffffff8}}, {0xed, 0x2dea, {0x2, 0x1}}, {0x2, 0x9, {0x0, 0x8d0}}, {0x4, 0x3, {0x2, 0x1df20000}}, {0x0, 0x3, {0x3, 0xb045}}, {0x89cb, 0x3, {0x0, 0x5}}, {0xaf, 0x6, {0x41998e8385e00d27, 0x4f}}, {0x4, 0x3, {0x1, 0x4}}, {0x7f, 0x666f, {0x0, 0xcf39}}, {0x8001, 0x9, {0x3, 0x8000}}, {0x101, 0x1000, {0x2, 0x8}}, {0xe, 0xfffa, {0x2, 0xf788}}, {0xed4, 0x80, {0x1, 0x8}}, {0x0, 0x9, {0x0, 0x5}}, {0x7ff, 0x901, {0x1, 0x401}}, {0x9, 0x5, {0x1, 0x80000000}}, {0x10, 0xae25, {0x0, 0x7633}}, {0x2, 0x1, {0x3, 0xfffffffd}}, {0x10, 0xfff8, {0x2, 0x8000}}, {0x8001, 0x9, {0x0, 0x10000}}, {0x4, 0x7, {0x2, 0xa0}}, {0x7ff, 0x0, {0x2, 0x9}}, {0x2, 0x3, {0x3, 0x3}}, {0x7fff, 0x1b0, {0x1, 0x6f5a}}, {0x5, 0x499, {0x0, 0x5}}, {0xfff, 0x3, {0x1, 0xa044}}, {0x0, 0x2, {0x3}}, {0x73, 0xb4, {0x3, 0x4e}}, {0x7, 0x56, {0x1, 0x2}}, {0xf, 0x2, {0x1, 0x7}}, {0x2, 0xffff, {0x3, 0x1}}, {0x5, 0x400, {0x2, 0x5}}, {0xb81e, 0x6, {0x2, 0x8}}, {0x10, 0x2, {0x2, 0x8001}}, {0x7, 0x1, {0x3, 0x1}}, {0x8, 0x7, {0x2, 0x2}}, {0xab, 0x9, {0x1, 0x7ff}}, {0x0, 0x3, {0x3, 0x2}}, {0x8, 0x0, {0x0, 0x8001}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x8010}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000040000000000000000000000851000800500000085000000bb0000006d0000000000000018000000ffff00000000000000000000950000000000000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) unshare(0x8000600) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 4.446549565s ago: executing program 2 (id=1390): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2284, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, 0x0, 0x0) connect$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000180)=0x3, 0x4) 3.220018297s ago: executing program 2 (id=1391): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrlimit(0x4, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r5, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) 0s ago: executing program 2 (id=1392): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80800) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x200a83, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r1 = dup(r0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, &(0x7f0000000240)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x100f2cf, 0x10100, 0x0, 0x163}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r5, &(0x7f0000000300), 0x2, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) kernel console output (not intermixed with test programs): =0 errno=0 [ 613.803197][ T8809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.803215][ T8809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.803242][ T8809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.858885][ T8809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.858912][ T8809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.858939][ T8809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.020675][ T1912] bridge_slave_1: left allmulticast mode [ 614.020705][ T1912] bridge_slave_1: left promiscuous mode [ 614.020958][ T1912] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.254122][ T1912] bridge_slave_0: left allmulticast mode [ 614.254145][ T1912] bridge_slave_0: left promiscuous mode [ 614.256943][ T1912] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.356388][ T1912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.522495][ T1912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.643449][ T1912] bond0 (unregistering): Released all slaves [ 617.146640][ T8809] hsr_slave_0: entered promiscuous mode [ 617.176674][ T8809] hsr_slave_1: entered promiscuous mode [ 617.188449][ T8809] debugfs: 'hsr0' already exists in 'hsr' [ 617.188482][ T8809] Cannot create hsr debugfs directory [ 618.029874][ T1912] hsr_slave_0: left promiscuous mode [ 618.097821][ T1912] hsr_slave_1: left promiscuous mode [ 618.098551][ T1912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.203629][ T1912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.861252][ T1912] team0 (unregistering): Port device team_slave_1 removed [ 620.071150][ T1912] team0 (unregistering): Port device team_slave_0 removed [ 626.878764][ T8792] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 626.958514][ T8792] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 627.004385][ T8792] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 627.149081][ T8792] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 627.584835][ T8809] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 627.738096][ T8809] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 627.897239][ T8809] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 627.973184][ T8809] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 629.716372][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.716446][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.259062][ T8792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.754434][ T8792] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.939742][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.947640][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.979258][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.979351][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.172474][ T8809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.370574][ T9182] tipc: Enabling of bearer rejected, failed to enable media [ 632.568741][ T8809] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.659757][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.665411][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.779413][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.779522][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.516452][ T8792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.759534][ T8809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.505499][ T8792] veth0_vlan: entered promiscuous mode [ 637.642991][ T8792] veth1_vlan: entered promiscuous mode [ 637.872312][ T8809] veth0_vlan: entered promiscuous mode [ 638.015316][ T8809] veth1_vlan: entered promiscuous mode [ 638.127977][ T8792] veth0_macvtap: entered promiscuous mode [ 638.174970][ T8792] veth1_macvtap: entered promiscuous mode [ 638.433630][ T8792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.482767][ T8809] veth0_macvtap: entered promiscuous mode [ 638.516880][ T8809] veth1_macvtap: entered promiscuous mode [ 638.535431][ T8792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.580798][ T1103] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.600060][ T1103] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.616661][ T1103] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.641061][ T1103] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.782306][ T8809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.171955][ T8809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.469848][ T1115] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.563244][ T1115] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.576927][ T1115] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.587583][ T1115] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.601120][ T3590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.601136][ T3590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.566596][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.566613][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.756352][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.756374][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.960187][ T1912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.960211][ T1912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.230378][ T9274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 645.251509][ T9274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 645.254524][ T9274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 645.279841][ T9274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 645.281432][ T9274] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 645.305857][ T5136] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 645.318425][ T5136] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 645.347980][ T5136] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 645.372471][ T5136] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 645.377622][ T5136] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 647.481779][ T9274] Bluetooth: hci0: command tx timeout [ 647.482084][ T9278] Bluetooth: hci3: command tx timeout [ 648.221774][ T38] audit: type=1800 audit(1759351097.570:71): pid=9290 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.804" name="SYSV00000000" dev="tmpfs" ino=16 res=0 errno=0 [ 648.266410][ T3516] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.086187][ T3516] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.557489][ T9278] Bluetooth: hci3: command tx timeout [ 649.557565][ T9278] Bluetooth: hci0: command tx timeout [ 650.015040][ T3516] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.618424][ T9274] Bluetooth: hci0: command tx timeout [ 652.618457][ T9274] Bluetooth: hci3: command tx timeout [ 653.395963][ T3516] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.497346][ T9273] chnl_net:caif_netlink_parms(): no params data found [ 654.108406][ T9332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.814'. [ 654.671493][ T9278] Bluetooth: hci3: command tx timeout [ 654.671528][ T9278] Bluetooth: hci0: command tx timeout [ 658.487195][ T9273] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.487292][ T9273] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.487495][ T9273] bridge_slave_0: entered allmulticast mode [ 658.510945][ T9273] bridge_slave_0: entered promiscuous mode [ 659.029697][ T9277] chnl_net:caif_netlink_parms(): no params data found [ 659.040520][ T9273] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.040676][ T9273] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.040940][ T9273] bridge_slave_1: entered allmulticast mode [ 659.060509][ T9273] bridge_slave_1: entered promiscuous mode [ 659.842322][ T3516] bridge_slave_1: left allmulticast mode [ 659.842343][ T3516] bridge_slave_1: left promiscuous mode [ 659.842505][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.942423][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'. [ 659.942618][ T9374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.823'. [ 660.838887][ T3516] bridge_slave_0: left allmulticast mode [ 660.838909][ T3516] bridge_slave_0: left promiscuous mode [ 660.839144][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.585551][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.721679][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.798496][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.822147][ T3516] bond0 (unregistering): Released all slaves [ 663.929203][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.938885][ T9273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.134060][ T9273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.296501][ C1] vkms_vblank_simulate: vblank timer overrun [ 664.573162][ C1] vkms_vblank_simulate: vblank timer overrun [ 664.905060][ C1] vkms_vblank_simulate: vblank timer overrun [ 665.673034][ C1] vkms_vblank_simulate: vblank timer overrun [ 666.053349][ C1] vkms_vblank_simulate: vblank timer overrun [ 667.333282][ C1] vkms_vblank_simulate: vblank timer overrun [ 667.649754][ C1] vkms_vblank_simulate: vblank timer overrun [ 667.836614][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.622263][ T9273] team0: Port device team_slave_0 added [ 670.772951][ T9273] team0: Port device team_slave_1 added [ 670.952284][ T9435] tipc: Enabling of bearer rejected, failed to enable media [ 671.050710][ T9277] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.050891][ T9277] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.051107][ T9277] bridge_slave_0: entered allmulticast mode [ 671.058426][ T9277] bridge_slave_0: entered promiscuous mode [ 671.312239][ T9277] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.312423][ T9277] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.312633][ T9277] bridge_slave_1: entered allmulticast mode [ 671.315382][ T9277] bridge_slave_1: entered promiscuous mode [ 673.037923][ T3516] hsr_slave_0: left promiscuous mode [ 673.087723][ T3516] hsr_slave_1: left promiscuous mode [ 673.088608][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.088626][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.394021][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.394050][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.690136][ T3516] veth1_macvtap: left promiscuous mode [ 673.690240][ T3516] veth0_macvtap: left promiscuous mode [ 673.690495][ T3516] veth1_vlan: left promiscuous mode [ 673.690682][ T3516] veth0_vlan: left promiscuous mode [ 686.975086][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 687.368570][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 691.158897][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.158976][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.893497][ T9273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.893514][ T9273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.893540][ T9273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.299434][ T9554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.876'. [ 692.524471][ T9557] netlink: 48 bytes leftover after parsing attributes in process `syz.2.877'. [ 692.816164][ T9278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 692.825167][ T9278] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 692.830549][ T9278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 692.834227][ T9278] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 692.835131][ T9278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 693.802771][ T9562] tty tty1: ldisc open failed (-12), clearing slot 0 [ 693.851989][ T9273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.852007][ T9273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.852041][ T9273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.622496][ T9277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.667531][ T9277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.918040][ T9278] Bluetooth: hci4: command tx timeout [ 695.284170][ T9277] team0: Port device team_slave_0 added [ 695.306072][ T9273] hsr_slave_0: entered promiscuous mode [ 695.307610][ T9273] hsr_slave_1: entered promiscuous mode [ 695.313598][ T9273] debugfs: 'hsr0' already exists in 'hsr' [ 695.313629][ T9273] Cannot create hsr debugfs directory [ 695.317272][ T9277] team0: Port device team_slave_1 added [ 695.872592][ T9277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.872610][ T9277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.872638][ T9277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.254221][ T9277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.254240][ T9277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.254268][ T9277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.991155][ T9278] Bluetooth: hci4: command tx timeout [ 700.594599][ T9277] hsr_slave_0: entered promiscuous mode [ 700.613199][ T9277] hsr_slave_1: entered promiscuous mode [ 700.625686][ T9277] debugfs: 'hsr0' already exists in 'hsr' [ 700.625715][ T9277] Cannot create hsr debugfs directory [ 702.039100][ T9278] Bluetooth: hci4: command tx timeout [ 704.108425][ T9278] Bluetooth: hci4: command tx timeout [ 704.668371][ T9274] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 704.680278][ T9274] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 704.687976][ T9274] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 704.708012][ T9274] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 704.716338][ T9274] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 705.277526][ T9274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 705.293889][ T9274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 705.295302][ T9274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 705.319675][ T9274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 705.327574][ T9274] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 707.646756][ T9274] Bluetooth: hci5: command tx timeout [ 707.647155][ T9274] Bluetooth: hci0: command tx timeout [ 708.869690][ T38] audit: type=1800 audit(1759351158.220:72): pid=9653 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.897" name="SYSV00000000" dev="tmpfs" ino=17 res=0 errno=0 [ 709.055600][ T3516] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.590662][ T9278] Bluetooth: hci0: command tx timeout [ 710.597720][ T9274] Bluetooth: hci5: command tx timeout [ 710.834086][ T3516] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.755371][ T3516] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.669882][ T9278] Bluetooth: hci0: command tx timeout [ 712.669985][ T9274] Bluetooth: hci5: command tx timeout [ 712.917960][ T9558] chnl_net:caif_netlink_parms(): no params data found [ 714.760655][ T9274] Bluetooth: hci5: command tx timeout [ 714.760691][ T9274] Bluetooth: hci0: command tx timeout [ 715.065405][ T3516] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.380196][ T9717] fuse: Bad value for 'fd' [ 719.799113][ T9558] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.799296][ T9558] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.799526][ T9558] bridge_slave_0: entered allmulticast mode [ 719.833529][ T9558] bridge_slave_0: entered promiscuous mode [ 719.922267][ T38] audit: type=1800 audit(1759351169.270:73): pid=9731 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.912" name="SYSV00000000" dev="tmpfs" ino=20 res=0 errno=0 [ 719.998392][ T9558] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.998539][ T9558] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.998793][ T9558] bridge_slave_1: entered allmulticast mode [ 720.005476][ T9558] bridge_slave_1: entered promiscuous mode [ 722.082643][ T9558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.196074][ T9558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.066401][ T9626] chnl_net:caif_netlink_parms(): no params data found [ 724.785756][ T9558] team0: Port device team_slave_0 added [ 725.327998][ T38] audit: type=1800 audit(1759351174.620:74): pid=9755 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.918" name="SYSV00000000" dev="tmpfs" ino=21 res=0 errno=0 [ 725.698975][ T9558] team0: Port device team_slave_1 added [ 729.432664][ T3516] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.068709][ T9558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.068729][ T9558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.068760][ T9558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.431974][ T3516] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.440351][ T38] audit: type=1800 audit(1759351180.790:75): pid=9788 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.927" name="SYSV00000000" dev="tmpfs" ino=18 res=0 errno=0 [ 731.539118][ T9558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.539139][ T9558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.539171][ T9558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.821522][ T3516] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.768823][ T9636] chnl_net:caif_netlink_parms(): no params data found [ 735.797799][ T9626] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.797945][ T9626] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.798229][ T9626] bridge_slave_0: entered allmulticast mode [ 735.801137][ T9626] bridge_slave_0: entered promiscuous mode [ 735.903363][ T9626] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.903502][ T9626] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.903762][ T9626] bridge_slave_1: entered allmulticast mode [ 735.906565][ T9626] bridge_slave_1: entered promiscuous mode [ 736.954690][ T3516] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.054368][ T9558] hsr_slave_0: entered promiscuous mode [ 737.065024][ T9558] hsr_slave_1: entered promiscuous mode [ 737.066121][ T9558] debugfs: 'hsr0' already exists in 'hsr' [ 737.066148][ T9558] Cannot create hsr debugfs directory [ 737.159286][ T9626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.594983][ T9626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.049230][ T9833] netlink: 48 bytes leftover after parsing attributes in process `syz.2.940'. [ 740.805132][ T9626] team0: Port device team_slave_0 added [ 741.289307][ T9636] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.289486][ T9636] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.289787][ T9636] bridge_slave_0: entered allmulticast mode [ 741.292663][ T9636] bridge_slave_0: entered promiscuous mode [ 741.319501][ T9626] team0: Port device team_slave_1 added [ 741.352459][ T9636] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.352622][ T9636] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.352849][ T9636] bridge_slave_1: entered allmulticast mode [ 741.366409][ T9636] bridge_slave_1: entered promiscuous mode [ 742.528990][ T9626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.529010][ T9626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.529043][ T9626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.745192][ T9636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.788176][ T9626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.788224][ T9626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.788284][ T9626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.516138][ T9636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.592059][ T9851] netlink: 48 bytes leftover after parsing attributes in process `syz.1.943'. [ 745.861920][ T38] audit: type=1800 audit(1759351195.060:76): pid=9860 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.945" name="SYSV00000000" dev="tmpfs" ino=22 res=0 errno=0 [ 746.291686][ T9636] team0: Port device team_slave_0 added [ 747.572660][ T9636] team0: Port device team_slave_1 added [ 747.610071][ T9626] hsr_slave_0: entered promiscuous mode [ 747.611536][ T9626] hsr_slave_1: entered promiscuous mode [ 747.614630][ T9626] debugfs: 'hsr0' already exists in 'hsr' [ 747.614660][ T9626] Cannot create hsr debugfs directory [ 747.799238][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.949'. [ 748.074026][ T3516] bridge_slave_1: left allmulticast mode [ 748.074056][ T3516] bridge_slave_1: left promiscuous mode [ 748.074323][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.787561][ T3516] bridge_slave_0: left allmulticast mode [ 748.787597][ T3516] bridge_slave_0: left promiscuous mode [ 748.808045][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.186295][ T3516] bridge_slave_1: left allmulticast mode [ 749.186326][ T3516] bridge_slave_1: left promiscuous mode [ 749.186582][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.233875][ T3516] bridge_slave_0: left allmulticast mode [ 749.233906][ T3516] bridge_slave_0: left promiscuous mode [ 749.234222][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.407477][ T9882] netlink: 48 bytes leftover after parsing attributes in process `syz.1.952'. [ 752.434149][ T9274] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 752.460842][ T9274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 752.462543][ T9274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 752.464292][ T9274] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 752.465298][ T9274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 752.518782][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.611030][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.611125][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.614046][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.679632][ T3516] bond0 (unregistering): Released all slaves [ 754.085480][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.149097][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.190909][ T3516] bond0 (unregistering): Released all slaves [ 754.508162][ T9278] Bluetooth: hci3: command tx timeout [ 757.553070][ T9278] Bluetooth: hci3: command tx timeout [ 757.739776][ T9636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.739797][ T9636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.739828][ T9636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.980219][ T9636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.980235][ T9636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.980256][ T9636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.638058][ T9274] Bluetooth: hci3: command tx timeout [ 760.322295][ T9922] overlayfs: failed to resolve './file0': -2 [ 761.718049][ T9274] Bluetooth: hci3: command tx timeout [ 762.254582][ T9942] overlayfs: failed to resolve './file0': -2 [ 764.045181][ T9636] hsr_slave_0: entered promiscuous mode [ 764.046517][ T9636] hsr_slave_1: entered promiscuous mode [ 764.047502][ T9636] debugfs: 'hsr0' already exists in 'hsr' [ 764.047527][ T9636] Cannot create hsr debugfs directory [ 767.585362][ T9278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 767.605012][ T9278] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 767.617903][ T9278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 767.625008][ T9278] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 767.625776][ T9278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 767.639523][ T9966] netlink: 48 bytes leftover after parsing attributes in process `syz.1.974'. [ 769.103730][ T9274] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 769.114743][ T9274] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 769.121932][ T9274] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 769.123339][ T9274] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 769.124231][ T9274] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 769.597317][ T9978] overlayfs: failed to resolve './file0': -2 [ 769.707716][ T9274] Bluetooth: hci4: command tx timeout [ 770.039892][ T3516] hsr_slave_0: left promiscuous mode [ 770.079255][ T3516] hsr_slave_1: left promiscuous mode [ 770.080667][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 770.080694][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.172363][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 770.172392][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.417793][ T9274] Bluetooth: hci5: command tx timeout [ 771.477767][ T3516] hsr_slave_0: left promiscuous mode [ 771.498067][ T3516] hsr_slave_1: left promiscuous mode [ 771.498999][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.499023][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.531083][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 771.531114][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.622079][ T3516] veth1_macvtap: left promiscuous mode [ 771.622189][ T3516] veth0_macvtap: left promiscuous mode [ 771.622468][ T3516] veth1_vlan: left promiscuous mode [ 771.622650][ T3516] veth0_vlan: left promiscuous mode [ 771.748491][ T3516] veth1_macvtap: left promiscuous mode [ 771.748622][ T3516] veth0_macvtap: left promiscuous mode [ 771.748892][ T3516] veth1_vlan: left promiscuous mode [ 771.749088][ T3516] veth0_vlan: left promiscuous mode [ 771.797749][ T9278] Bluetooth: hci4: command tx timeout [ 773.468011][ T9278] Bluetooth: hci5: command tx timeout [ 773.758758][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 773.877814][ T9278] Bluetooth: hci4: command tx timeout [ 773.958623][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 775.548168][ T9278] Bluetooth: hci5: command tx timeout [ 775.957909][ T9278] Bluetooth: hci4: command tx timeout [ 777.628439][ T9278] Bluetooth: hci5: command tx timeout [ 777.658448][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 777.848915][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 781.472572][ T9988] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 782.242913][T10009] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 782.740939][T10020] overlayfs: failed to resolve './file0': -2 [ 782.758080][ T9887] chnl_net:caif_netlink_parms(): no params data found [ 783.547947][ T9965] chnl_net:caif_netlink_parms(): no params data found [ 784.422830][ T9887] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.423034][ T9887] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.423274][ T9887] bridge_slave_0: entered allmulticast mode [ 784.467839][ T9887] bridge_slave_0: entered promiscuous mode [ 784.496085][ T9887] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.496272][ T9887] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.496489][ T9887] bridge_slave_1: entered allmulticast mode [ 784.501268][ T9887] bridge_slave_1: entered promiscuous mode [ 785.609324][ T9887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.610869][ T9973] chnl_net:caif_netlink_parms(): no params data found [ 785.818126][ T9887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.889104][ T9965] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.889348][ T9965] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.889559][ T9965] bridge_slave_0: entered allmulticast mode [ 785.919287][ T9965] bridge_slave_0: entered promiscuous mode [ 786.269623][ T9965] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.269729][ T9965] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.269907][ T9965] bridge_slave_1: entered allmulticast mode [ 786.299109][ T9965] bridge_slave_1: entered promiscuous mode [ 786.392139][T10071] overlayfs: failed to resolve './file0': -2 [ 787.668827][ T38] audit: type=1800 audit(1759351237.020:77): pid=10079 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.997" name="SYSV00000000" dev="tmpfs" ino=19 res=0 errno=0 [ 788.043854][ T9887] team0: Port device team_slave_0 added [ 789.582604][ T9887] team0: Port device team_slave_1 added [ 790.197185][ T9965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.408335][ T9965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.072135][ T9887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.072154][ T9887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.072185][ T9887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.255100][T10111] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1005'. [ 793.383050][T10106] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 793.509673][ T9887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.509688][ T9887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.509708][ T9887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.510399][ T9973] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.510559][ T9973] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.510706][ T9973] bridge_slave_0: entered allmulticast mode [ 793.583858][ T9973] bridge_slave_0: entered promiscuous mode [ 793.618952][ T9965] team0: Port device team_slave_0 added [ 793.621723][ T9973] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.621914][ T9973] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.622128][ T9973] bridge_slave_1: entered allmulticast mode [ 793.658173][ T9973] bridge_slave_1: entered promiscuous mode [ 793.679132][ T9965] team0: Port device team_slave_1 added [ 795.347511][ T9973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.629640][ T38] audit: type=1800 audit(1759351244.980:78): pid=10124 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1009" name="SYSV00000000" dev="tmpfs" ino=23 res=0 errno=0 [ 795.975557][T10126] overlayfs: failed to resolve './file1': -2 [ 796.041216][ T9965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.041237][ T9965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.041267][ T9965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.462642][ T9973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.638324][ T9887] hsr_slave_0: entered promiscuous mode [ 797.639695][ T9887] hsr_slave_1: entered promiscuous mode [ 797.640776][ T9887] debugfs: 'hsr0' already exists in 'hsr' [ 797.640800][ T9887] Cannot create hsr debugfs directory [ 797.642631][ T9965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.642645][ T9965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.642675][ T9965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.644497][T10134] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 799.334166][T10155] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1015'. [ 799.652196][ T3516] bridge_slave_1: left allmulticast mode [ 799.652226][ T3516] bridge_slave_1: left promiscuous mode [ 799.653275][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.723776][ T3516] bridge_slave_0: left allmulticast mode [ 799.723799][ T3516] bridge_slave_0: left promiscuous mode [ 799.723992][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.996823][ T3516] bridge_slave_1: left allmulticast mode [ 800.996857][ T3516] bridge_slave_1: left promiscuous mode [ 800.997116][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.246673][T10166] overlayfs: failed to resolve './file1': -2 [ 801.249423][ T3516] bridge_slave_0: left allmulticast mode [ 801.249451][ T3516] bridge_slave_0: left promiscuous mode [ 801.249733][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.334646][ T3516] bridge_slave_1: left allmulticast mode [ 801.334677][ T3516] bridge_slave_1: left promiscuous mode [ 801.334962][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.480561][ T3516] bridge_slave_0: left allmulticast mode [ 801.480592][ T3516] bridge_slave_0: left promiscuous mode [ 801.480911][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.571740][ T3516] bridge_slave_1: left allmulticast mode [ 801.571781][ T3516] bridge_slave_1: left promiscuous mode [ 801.571963][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.650772][ T3516] bridge_slave_0: left allmulticast mode [ 801.650796][ T3516] bridge_slave_0: left promiscuous mode [ 801.651007][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.977763][ T3516] bridge_slave_1: left allmulticast mode [ 801.977794][ T3516] bridge_slave_1: left promiscuous mode [ 801.993688][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.266359][ T3516] bridge_slave_0: left allmulticast mode [ 802.266391][ T3516] bridge_slave_0: left promiscuous mode [ 802.266646][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.583885][T10177] fuse: Unknown parameter 'grou00000000000000000000' [ 802.677074][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.759008][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 802.844641][ T3516] bond0 (unregistering): Released all slaves [ 803.129120][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.208703][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.281744][ T3516] bond0 (unregistering): Released all slaves [ 803.451590][T10179] overlayfs: failed to resolve './file1': -2 [ 803.608723][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.016985][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.073207][ T3516] bond0 (unregistering): Released all slaves [ 805.309915][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.368605][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.433417][ T3516] bond0 (unregistering): Released all slaves [ 805.618665][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.698767][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.764126][ T3516] bond0 (unregistering): Released all slaves [ 806.012931][T10187] overlayfs: failed to resolve './file1': -2 [ 806.058400][ T9973] team0: Port device team_slave_0 added [ 806.442376][ T9973] team0: Port device team_slave_1 added [ 808.128120][ T9965] hsr_slave_0: entered promiscuous mode [ 808.131024][ T9965] hsr_slave_1: entered promiscuous mode [ 808.132887][ T9965] debugfs: 'hsr0' already exists in 'hsr' [ 808.132907][ T9965] Cannot create hsr debugfs directory [ 808.133723][ T9973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.133738][ T9973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.133758][ T9973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.153345][ T9973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.153366][ T9973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.153401][ T9973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.139885][ T3516] hsr_slave_0: left promiscuous mode [ 812.153480][ T5891] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 812.217737][ T3516] hsr_slave_1: left promiscuous mode [ 812.218672][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.559000][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.579369][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 812.579875][ T9274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 812.974022][ T5891] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 812.974292][ T5891] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 812.974472][ T5891] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 812.974639][ T5891] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 812.974823][ T5891] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 812.975664][ T5891] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 812.975747][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.529629][ T9274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 813.533089][ T9274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 813.536745][ T9274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 813.561396][ T9274] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 813.793378][ T5891] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 813.811895][ T3516] hsr_slave_0: left promiscuous mode [ 813.850792][ T3516] hsr_slave_1: left promiscuous mode [ 813.851771][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.901933][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.159790][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.160463][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.118036][ T3516] hsr_slave_0: left promiscuous mode [ 815.138104][ T3516] hsr_slave_1: left promiscuous mode [ 815.138828][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.180134][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.238201][ T3516] hsr_slave_0: left promiscuous mode [ 815.257790][ T3516] hsr_slave_1: left promiscuous mode [ 815.258755][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.281255][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.377922][ T3516] hsr_slave_0: left promiscuous mode [ 815.417981][ T3516] hsr_slave_1: left promiscuous mode [ 815.418960][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.443827][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.647875][ T9274] Bluetooth: hci0: command tx timeout [ 815.948391][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 815.998950][ T44] usb 3-1: USB disconnect, device number 2 [ 816.118830][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 817.228598][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 817.326283][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 817.707825][ T9274] Bluetooth: hci0: command tx timeout [ 819.508961][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 820.656532][ T9274] Bluetooth: hci0: command tx timeout [ 821.008977][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 823.397632][ T9274] Bluetooth: hci0: command tx timeout [ 824.083846][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 824.208295][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 825.248446][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 825.388586][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 826.061015][ T9973] hsr_slave_0: entered promiscuous mode [ 826.062326][ T9973] hsr_slave_1: entered promiscuous mode [ 826.078549][ T9973] debugfs: 'hsr0' already exists in 'hsr' [ 826.078582][ T9973] Cannot create hsr debugfs directory [ 828.252857][T10290] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1050'. [ 828.449028][ T9278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 828.480987][ T9278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 828.482268][ T9278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 828.483601][ T9278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 828.515957][ T9278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 831.015923][ T9274] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 831.058119][ T9274] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 831.117221][ T38] audit: type=1800 audit(1759351280.460:79): pid=10321 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1055" name="SYSV00000000" dev="tmpfs" ino=20 res=0 errno=0 [ 831.146917][ T9274] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 831.328705][ T9274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 831.544468][ T9274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 832.317875][ T9278] Bluetooth: hci3: command tx timeout [ 834.095926][ T38] audit: type=1800 audit(1759351283.440:80): pid=10332 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1058" name="SYSV00000000" dev="tmpfs" ino=21 res=0 errno=0 [ 834.350945][ T9278] Bluetooth: hci3: command tx timeout [ 834.354993][ T9274] Bluetooth: hci4: command tx timeout [ 836.651071][ T9278] Bluetooth: hci3: command tx timeout [ 836.655503][ T9274] Bluetooth: hci4: command tx timeout [ 838.668132][ T9274] Bluetooth: hci4: command tx timeout [ 838.668171][ T9274] Bluetooth: hci3: command tx timeout [ 840.753909][T10229] chnl_net:caif_netlink_parms(): no params data found [ 840.757824][ T9278] Bluetooth: hci4: command tx timeout [ 842.212701][T10377] overlayfs: missing 'lowerdir' [ 846.526508][T10292] chnl_net:caif_netlink_parms(): no params data found [ 847.530094][T10229] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.530307][T10229] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.530542][T10229] bridge_slave_0: entered allmulticast mode [ 847.538483][T10229] bridge_slave_0: entered promiscuous mode [ 847.840840][T10315] chnl_net:caif_netlink_parms(): no params data found [ 847.881881][T10229] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.882013][T10229] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.882277][T10229] bridge_slave_1: entered allmulticast mode [ 847.885223][T10229] bridge_slave_1: entered promiscuous mode [ 848.990559][T10427] overlayfs: missing 'lowerdir' [ 850.374141][T10229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 850.375076][T10292] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.375164][T10292] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.375309][T10292] bridge_slave_0: entered allmulticast mode [ 850.377172][T10292] bridge_slave_0: entered promiscuous mode [ 850.458854][T10229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.459147][T10292] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.459288][T10292] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.459431][T10292] bridge_slave_1: entered allmulticast mode [ 850.510975][T10292] bridge_slave_1: entered promiscuous mode [ 851.308444][T10229] team0: Port device team_slave_0 added [ 851.316354][T10292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.471827][T10229] team0: Port device team_slave_1 added [ 851.476127][T10292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 851.476405][T10315] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.476550][T10315] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.476749][T10315] bridge_slave_0: entered allmulticast mode [ 851.488332][T10315] bridge_slave_0: entered promiscuous mode [ 852.790988][T10315] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.791083][T10315] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.791263][T10315] bridge_slave_1: entered allmulticast mode [ 852.793129][T10315] bridge_slave_1: entered promiscuous mode [ 854.356621][T10229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.356635][T10229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.356655][T10229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.420174][T10292] team0: Port device team_slave_0 added [ 854.721634][T10229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.721655][T10229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.721699][T10229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.972406][T10292] team0: Port device team_slave_1 added [ 854.976643][T10315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.129400][T10315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.860240][T10292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.860268][T10292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.860298][T10292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.011551][ T38] audit: type=1800 audit(1759351307.360:81): pid=10486 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1083" name="SYSV00000000" dev="tmpfs" ino=22 res=0 errno=0 [ 859.195679][T10292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.195698][T10292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.195729][T10292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.653868][T10315] team0: Port device team_slave_0 added [ 859.862894][T10229] hsr_slave_0: entered promiscuous mode [ 859.868507][T10229] hsr_slave_1: entered promiscuous mode [ 859.869194][T10229] debugfs: 'hsr0' already exists in 'hsr' [ 859.869212][T10229] Cannot create hsr debugfs directory [ 859.881499][T10315] team0: Port device team_slave_1 added [ 860.955910][T10315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 860.955929][T10315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 860.955959][T10315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.158122][T10315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.158137][T10315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.158157][T10315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.177172][T10292] hsr_slave_0: entered promiscuous mode [ 861.269167][T10292] hsr_slave_1: entered promiscuous mode [ 861.269792][T10292] debugfs: 'hsr0' already exists in 'hsr' [ 861.269810][T10292] Cannot create hsr debugfs directory [ 864.392004][T10315] hsr_slave_0: entered promiscuous mode [ 864.393374][T10315] hsr_slave_1: entered promiscuous mode [ 864.394344][T10315] debugfs: 'hsr0' already exists in 'hsr' [ 864.394370][T10315] Cannot create hsr debugfs directory [ 865.248227][ T3516] bridge_slave_1: left allmulticast mode [ 865.248259][ T3516] bridge_slave_1: left promiscuous mode [ 865.248505][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.518893][ T3516] bridge_slave_0: left allmulticast mode [ 865.518918][ T3516] bridge_slave_0: left promiscuous mode [ 865.519116][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.552097][ T3516] bridge_slave_1: left allmulticast mode [ 866.552129][ T3516] bridge_slave_1: left promiscuous mode [ 866.552367][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.609419][ T3516] bridge_slave_0: left allmulticast mode [ 866.609451][ T3516] bridge_slave_0: left promiscuous mode [ 866.609711][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.680788][ T3516] bridge_slave_1: left allmulticast mode [ 866.680812][ T3516] bridge_slave_1: left promiscuous mode [ 866.680988][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.747350][ T3516] bridge_slave_0: left allmulticast mode [ 866.747383][ T3516] bridge_slave_0: left promiscuous mode [ 866.747723][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.408321][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.510914][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.580632][ T3516] bond0 (unregistering): Released all slaves [ 868.778338][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.868644][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.931995][ T3516] bond0 (unregistering): Released all slaves [ 869.188436][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 869.310103][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 869.380842][ T3516] bond0 (unregistering): Released all slaves [ 873.325519][T10556] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1095'. [ 875.128939][ T9274] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 875.146416][ T9274] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 875.156136][ T9274] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 875.157354][ T9274] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 875.180721][ T9274] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 875.503186][T10566] netlink: 'syz.1.1097': attribute type 16 has an invalid length. [ 875.503263][T10566] netlink: 'syz.1.1097': attribute type 17 has an invalid length. [ 876.268497][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.268586][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.368033][T10566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 878.131739][ T9274] Bluetooth: hci5: command tx timeout [ 879.596054][ T3516] hsr_slave_0: left promiscuous mode [ 879.640715][ T3516] hsr_slave_1: left promiscuous mode [ 879.642418][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 879.716599][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 879.859616][ T3516] hsr_slave_0: left promiscuous mode [ 879.898237][ T3516] hsr_slave_1: left promiscuous mode [ 879.908487][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.188121][ T9274] Bluetooth: hci5: command tx timeout [ 880.228693][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.327974][ T3516] hsr_slave_0: left promiscuous mode [ 881.380066][ T3516] hsr_slave_1: left promiscuous mode [ 881.385989][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.438780][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.117031][ T9274] Bluetooth: hci5: command tx timeout [ 884.607436][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 884.928448][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 885.158141][ T9274] Bluetooth: hci5: command tx timeout [ 886.084335][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1107'. [ 887.448916][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 887.597802][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 889.929253][ T9278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 889.941483][ T9278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 889.942903][ T9278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 889.944295][ T9278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 889.945208][ T9278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 891.021535][ T9274] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 891.025068][ T9274] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 891.059879][ T9274] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 891.066004][ T9274] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 891.066752][ T9274] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 891.469387][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 891.758532][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 892.748020][ T9278] Bluetooth: hci0: command tx timeout [ 893.147865][ T9278] Bluetooth: hci6: command tx timeout [ 895.407696][ T9278] Bluetooth: hci0: command tx timeout [ 895.407732][ T9278] Bluetooth: hci6: command tx timeout [ 896.012860][ T38] audit: type=1800 audit(1759351345.120:82): pid=10644 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1115" name="SYSV00000000" dev="tmpfs" ino=23 res=0 errno=0 [ 897.547221][ T9274] Bluetooth: hci6: command tx timeout [ 897.547230][ T9278] Bluetooth: hci0: command tx timeout [ 899.120773][ T38] audit: type=1800 audit(1759351348.470:83): pid=10660 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1118" name="SYSV00000000" dev="tmpfs" ino=24 res=0 errno=0 [ 899.548976][ T9274] Bluetooth: hci0: command tx timeout [ 899.629717][ T9274] Bluetooth: hci6: command tx timeout [ 902.023971][T10561] chnl_net:caif_netlink_parms(): no params data found [ 903.806279][T10621] chnl_net:caif_netlink_parms(): no params data found [ 903.907989][T10615] chnl_net:caif_netlink_parms(): no params data found [ 911.887334][ T38] audit: type=1800 audit(1759351361.230:84): pid=10718 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1127" name="SYSV00000000" dev="tmpfs" ino=24 res=0 errno=0 [ 913.413566][T10561] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.413707][T10561] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.413978][T10561] bridge_slave_0: entered allmulticast mode [ 913.416861][T10561] bridge_slave_0: entered promiscuous mode [ 914.073073][T10561] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.073212][T10561] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.073448][T10561] bridge_slave_1: entered allmulticast mode [ 914.103234][T10561] bridge_slave_1: entered promiscuous mode [ 915.205541][T10561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.570151][T10561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.773122][T10615] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.775779][T10615] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.776044][T10615] bridge_slave_0: entered allmulticast mode [ 915.799773][T10615] bridge_slave_0: entered promiscuous mode [ 917.334326][T10621] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.334464][T10621] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.334708][T10621] bridge_slave_0: entered allmulticast mode [ 917.367667][T10621] bridge_slave_0: entered promiscuous mode [ 917.375089][T10615] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.375215][T10615] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.375419][T10615] bridge_slave_1: entered allmulticast mode [ 917.379630][T10615] bridge_slave_1: entered promiscuous mode [ 917.913501][ T38] audit: type=1800 audit(1759351367.120:85): pid=10750 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1133" name="SYSV00000000" dev="tmpfs" ino=25 res=0 errno=0 [ 917.975135][T10621] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.975286][T10621] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.975563][T10621] bridge_slave_1: entered allmulticast mode [ 918.013207][T10621] bridge_slave_1: entered promiscuous mode [ 918.168709][T10561] team0: Port device team_slave_0 added [ 918.483969][T10561] team0: Port device team_slave_1 added [ 918.601173][T10615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.889947][T10615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.900623][T10621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.523515][T10621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.524428][T10561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.524443][T10561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.524470][T10561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 924.904224][T10561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 924.904242][T10561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 924.904262][T10561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.906334][T10615] team0: Port device team_slave_0 added [ 926.100916][T10615] team0: Port device team_slave_1 added [ 926.514763][T10621] team0: Port device team_slave_0 added [ 927.085319][T10621] team0: Port device team_slave_1 added [ 927.442054][ T38] audit: type=1800 audit(1759351376.790:86): pid=10786 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1141" name="SYSV00000000" dev="tmpfs" ino=26 res=0 errno=0 [ 927.774830][T10615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.774844][T10615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.774863][T10615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.941921][ T3516] bridge_slave_1: left allmulticast mode [ 927.941942][ T3516] bridge_slave_1: left promiscuous mode [ 927.942145][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.038749][ T3516] bridge_slave_0: left allmulticast mode [ 928.038772][ T3516] bridge_slave_0: left promiscuous mode [ 928.038971][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.177128][ T3516] bridge_slave_1: left allmulticast mode [ 928.177157][ T3516] bridge_slave_1: left promiscuous mode [ 928.177411][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.248862][ T3516] bridge_slave_0: left allmulticast mode [ 928.248883][ T3516] bridge_slave_0: left promiscuous mode [ 928.249060][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.361120][ T3516] bridge_slave_1: left allmulticast mode [ 929.361144][ T3516] bridge_slave_1: left promiscuous mode [ 929.361323][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.499081][ T3516] bridge_slave_0: left allmulticast mode [ 929.499104][ T3516] bridge_slave_0: left promiscuous mode [ 929.499296][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.733747][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 932.828237][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 932.874784][ T3516] bond0 (unregistering): Released all slaves [ 936.921615][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.921804][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.748191][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.860614][ T9278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 937.868702][ T9278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 937.869184][ T9278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 937.877147][ T9278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 937.885386][ T9278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 938.217864][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 939.443572][ T3516] bond0 (unregistering): Released all slaves [ 939.958750][ T9274] Bluetooth: hci3: command tx timeout [ 940.248385][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.378369][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.431817][ T3516] bond0 (unregistering): Released all slaves [ 940.655309][T10615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.655323][T10615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.655345][T10615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.028278][T10621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.028293][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.028313][T10621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.305415][T10621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.305434][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.305466][T10621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.819695][T10615] hsr_slave_0: entered promiscuous mode [ 941.821088][T10615] hsr_slave_1: entered promiscuous mode [ 941.821962][T10615] debugfs: 'hsr0' already exists in 'hsr' [ 941.821986][T10615] Cannot create hsr debugfs directory [ 942.042417][ T9274] Bluetooth: hci3: command tx timeout [ 942.391205][ T3516] hsr_slave_0: left promiscuous mode [ 942.512145][ T3516] hsr_slave_1: left promiscuous mode [ 942.512826][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.686359][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.117963][ T3516] hsr_slave_0: left promiscuous mode [ 943.187857][ T3516] hsr_slave_1: left promiscuous mode [ 943.188810][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.418405][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.928238][ T3516] hsr_slave_0: left promiscuous mode [ 943.964810][ T3516] hsr_slave_1: left promiscuous mode [ 943.965514][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.008430][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.107971][ T9274] Bluetooth: hci3: command tx timeout [ 945.978673][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 946.342148][ T9274] Bluetooth: hci3: command tx timeout [ 947.178738][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 951.320103][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 951.888533][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 952.586889][ T9278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 952.598976][ T9278] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 952.602148][ T9278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 952.603179][ T9278] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 952.603847][ T9278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 952.716474][ T9274] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 952.746021][ T9274] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 952.763011][T10891] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 952.764746][T10891] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 952.765517][T10891] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 953.215872][ T38] audit: type=1800 audit(1759351402.540:87): pid=10894 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1162" name="SYSV00000000" dev="tmpfs" ino=25 res=0 errno=0 [ 954.667686][ T9278] Bluetooth: hci4: command tx timeout [ 954.827778][ T9278] Bluetooth: hci5: command tx timeout [ 956.173607][T10907] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 956.173671][T10907] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 956.748252][T10891] Bluetooth: hci4: command tx timeout [ 956.907800][T10891] Bluetooth: hci5: command tx timeout [ 957.236834][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 957.436794][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 958.828059][T10891] Bluetooth: hci4: command tx timeout [ 958.987816][T10891] Bluetooth: hci5: command tx timeout [ 960.917792][T10891] Bluetooth: hci4: command tx timeout [ 961.237642][T10891] Bluetooth: hci5: command tx timeout [ 962.467934][T10817] chnl_net:caif_netlink_parms(): no params data found [ 963.305317][T10888] chnl_net:caif_netlink_parms(): no params data found [ 963.408752][T10884] chnl_net:caif_netlink_parms(): no params data found [ 965.517992][T10817] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.518086][T10817] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.518244][T10817] bridge_slave_0: entered allmulticast mode [ 965.528080][T10817] bridge_slave_0: entered promiscuous mode [ 965.597899][T10817] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.598044][T10817] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.598264][T10817] bridge_slave_1: entered allmulticast mode [ 965.601338][T10817] bridge_slave_1: entered promiscuous mode [ 966.143648][T10983] ======================================================= [ 966.143648][T10983] WARNING: The mand mount option has been deprecated and [ 966.143648][T10983] and is ignored by this kernel. Remove the mand [ 966.143648][T10983] option from the mount to silence this warning. [ 966.143648][T10983] ======================================================= [ 967.891391][T10888] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.891482][T10888] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.891633][T10888] bridge_slave_0: entered allmulticast mode [ 967.914551][T10888] bridge_slave_0: entered promiscuous mode [ 968.202861][T10817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.205431][T10888] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.205562][T10888] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.205758][T10888] bridge_slave_1: entered allmulticast mode [ 968.208900][T10888] bridge_slave_1: entered promiscuous mode [ 968.211055][T10884] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.211197][T10884] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.211405][T10884] bridge_slave_0: entered allmulticast mode [ 968.214226][T10884] bridge_slave_0: entered promiscuous mode [ 968.327314][T10817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.357448][T10884] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.379353][T10884] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.379565][T10884] bridge_slave_1: entered allmulticast mode [ 971.401676][T10884] bridge_slave_1: entered promiscuous mode [ 972.179598][T10888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.452641][T10888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 972.471853][T10817] team0: Port device team_slave_0 added [ 972.532179][T10884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.831287][T10817] team0: Port device team_slave_1 added [ 972.836512][T10884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 973.795307][T10888] team0: Port device team_slave_0 added [ 974.045574][T10888] team0: Port device team_slave_1 added [ 974.382881][T10817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.382900][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.382930][T10817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.755914][T10884] team0: Port device team_slave_0 added [ 974.757437][T10817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.757453][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.757484][T10817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 977.029711][T10884] team0: Port device team_slave_1 added [ 977.030586][ T3516] bridge_slave_1: left allmulticast mode [ 977.030610][ T3516] bridge_slave_1: left promiscuous mode [ 977.030855][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.409237][ T3516] bridge_slave_0: left allmulticast mode [ 977.409268][ T3516] bridge_slave_0: left promiscuous mode [ 977.409550][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.415621][T11036] tty tty25: ldisc open failed (-12), clearing slot 24 [ 978.478205][ T3516] bridge_slave_1: left allmulticast mode [ 978.478237][ T3516] bridge_slave_1: left promiscuous mode [ 978.478487][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.560052][ T3516] bridge_slave_0: left allmulticast mode [ 978.560084][ T3516] bridge_slave_0: left promiscuous mode [ 978.560337][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.712394][ T3516] bridge_slave_1: left allmulticast mode [ 978.712426][ T3516] bridge_slave_1: left promiscuous mode [ 978.712667][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.071312][T11040] overlayfs: missing 'lowerdir' [ 979.104004][ T3516] bridge_slave_0: left allmulticast mode [ 979.104035][ T3516] bridge_slave_0: left promiscuous mode [ 979.104283][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.781950][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 986.750843][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 986.944740][ T3516] bond0 (unregistering): Released all slaves [ 989.639626][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.735251][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 991.052091][ T3516] bond0 (unregistering): Released all slaves [ 993.582264][T11093] netlink: 'syz.1.1204': attribute type 4 has an invalid length. [ 995.915687][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.268596][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.410791][ T3516] bond0 (unregistering): Released all slaves [ 996.696182][T10888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.697009][T10888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.697042][T10888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.849493][ T9278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 998.694001][ T9278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 998.696729][ T9278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 998.712902][ T9278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 998.726787][ T9278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 998.741556][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.741629][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.786697][T10888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 998.786714][T10888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 998.786741][T10888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.252184][T10884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.252203][T10884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.252234][T10884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.259488][T10884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.259504][T10884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.259539][T10884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.557817][ T9278] Bluetooth: hci0: command tx timeout [ 1001.616729][T10888] hsr_slave_0: entered promiscuous mode [ 1001.628305][T10888] hsr_slave_1: entered promiscuous mode [ 1001.629290][T10888] debugfs: 'hsr0' already exists in 'hsr' [ 1001.629315][T10888] Cannot create hsr debugfs directory [ 1002.316155][T10884] hsr_slave_0: entered promiscuous mode [ 1002.511253][T10884] hsr_slave_1: entered promiscuous mode [ 1002.512305][T10884] debugfs: 'hsr0' already exists in 'hsr' [ 1002.512331][T10884] Cannot create hsr debugfs directory [ 1002.516143][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.558547][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.538889][ T3516] hsr_slave_0: left promiscuous mode [ 1003.764079][T10891] Bluetooth: hci0: command tx timeout [ 1003.785815][ T3516] hsr_slave_1: left promiscuous mode [ 1003.786799][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1003.838361][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.992065][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.028330][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.251002][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 1005.368248][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 1005.788775][T10891] Bluetooth: hci0: command tx timeout [ 1006.185116][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 1006.529216][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 1007.495342][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 1007.609078][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 1007.867737][T10891] Bluetooth: hci0: command tx timeout [ 1008.723535][ T38] audit: type=1800 audit(1759351458.060:88): pid=11166 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1216" name="SYSV00000000" dev="tmpfs" ino=27 res=0 errno=0 [ 1009.358368][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 1012.972479][ T38] audit: type=1800 audit(1759351462.320:89): pid=11209 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1219" name="SYSV00000000" dev="tmpfs" ino=26 res=0 errno=0 [ 1013.775403][T11111] chnl_net:caif_netlink_parms(): no params data found [ 1014.366593][ T9278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1014.380162][ T9278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1014.381546][ T9278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1014.383101][ T9278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1014.384706][ T9278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1015.754897][ T38] audit: type=1800 audit(1759351465.100:90): pid=11240 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1222" name="SYSV00000000" dev="tmpfs" ino=27 res=0 errno=0 [ 1016.418731][T10891] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1016.428073][T10891] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1016.608571][ T9274] Bluetooth: hci3: command tx timeout [ 1017.342119][T10891] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1017.563340][T10891] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1017.564239][T10891] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1018.751688][T10891] Bluetooth: hci3: command tx timeout [ 1018.848091][T11111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.848225][T11111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.848456][T11111] bridge_slave_0: entered allmulticast mode [ 1018.868337][T11111] bridge_slave_0: entered promiscuous mode [ 1018.948820][T11111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.948973][T11111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.949220][T11111] bridge_slave_1: entered allmulticast mode [ 1019.036208][T11111] bridge_slave_1: entered promiscuous mode [ 1019.720868][ T9278] Bluetooth: hci4: command tx timeout [ 1020.827656][ T9278] Bluetooth: hci3: command tx timeout [ 1021.353874][T11111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.392435][T11111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.787673][ T9278] Bluetooth: hci4: command tx timeout [ 1022.917878][ T9278] Bluetooth: hci3: command tx timeout [ 1023.867679][ T9278] Bluetooth: hci4: command tx timeout [ 1024.479772][T11111] team0: Port device team_slave_0 added [ 1024.795097][T11111] team0: Port device team_slave_1 added [ 1025.268003][ T3516] bridge_slave_1: left allmulticast mode [ 1025.268033][ T3516] bridge_slave_1: left promiscuous mode [ 1025.268294][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.339183][ T3516] bridge_slave_0: left allmulticast mode [ 1025.339213][ T3516] bridge_slave_0: left promiscuous mode [ 1025.339473][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.464765][ T3516] bridge_slave_1: left allmulticast mode [ 1025.464796][ T3516] bridge_slave_1: left promiscuous mode [ 1025.465050][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.600290][ T3516] bridge_slave_0: left allmulticast mode [ 1025.600321][ T3516] bridge_slave_0: left promiscuous mode [ 1025.600589][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.954913][ T9278] Bluetooth: hci4: command tx timeout [ 1026.598124][ T9472] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1026.598418][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1026.693445][ T3516] bridge_slave_1: left allmulticast mode [ 1026.693476][ T3516] bridge_slave_1: left promiscuous mode [ 1026.693736][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.760551][ T9472] usb 2-1: device descriptor read/64, error -32 [ 1026.849324][ T3516] bridge_slave_0: left allmulticast mode [ 1026.849352][ T3516] bridge_slave_0: left promiscuous mode [ 1026.849624][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.031255][ T9472] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1027.534953][ T9472] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.535015][ T9472] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1027.535033][ T9472] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.557766][ T9472] usb 2-1: config 0 descriptor?? [ 1027.586058][ T9472] pwc: Askey VC010 type 2 USB webcam detected. [ 1027.841693][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.971470][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.977713][ T9472] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1027.982302][ T9472] pwc: recv_control_msg error -32 req 02 val 2700 [ 1027.988029][ T9472] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1027.992752][ T9472] pwc: recv_control_msg error -32 req 04 val 1000 [ 1028.012538][ T9472] pwc: recv_control_msg error -32 req 04 val 1300 [ 1028.014780][ T9472] pwc: recv_control_msg error -32 req 04 val 1400 [ 1028.017167][ T9472] pwc: recv_control_msg error -32 req 02 val 2000 [ 1028.019602][ T9472] pwc: recv_control_msg error -32 req 02 val 2100 [ 1028.105571][ T3516] bond0 (unregistering): Released all slaves [ 1028.236643][ T9472] pwc: recv_control_msg error -71 req 02 val 2500 [ 1028.237271][ T9472] pwc: recv_control_msg error -71 req 02 val 2400 [ 1028.238018][ T9472] pwc: recv_control_msg error -71 req 02 val 2600 [ 1028.238537][ T9472] pwc: recv_control_msg error -71 req 02 val 2900 [ 1028.247641][ T9472] pwc: recv_control_msg error -71 req 02 val 2800 [ 1028.248379][ T9472] pwc: recv_control_msg error -71 req 04 val 1100 [ 1028.258047][ T9472] pwc: recv_control_msg error -71 req 04 val 1200 [ 1028.361775][ T9472] pwc: Registered as video103. [ 1028.425672][ T9472] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 1028.549457][ T9472] usb 2-1: USB disconnect, device number 4 [ 1028.907032][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1029.032034][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1029.137395][ T3516] bond0 (unregistering): Released all slaves [ 1029.303971][ T9472] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1029.467919][ T9472] usb 2-1: Using ep0 maxpacket: 32 [ 1029.505091][ T9472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.505123][ T9472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.505162][ T9472] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1029.505184][ T9472] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.536150][ T9472] usb 2-1: config 0 descriptor?? [ 1029.595169][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1029.610324][ T9472] hub 2-1:0.0: USB hub found [ 1029.724152][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1029.786823][ T3516] bond0 (unregistering): Released all slaves [ 1029.856377][ T9472] hub 2-1:0.0: 1 port detected [ 1030.307367][T11111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.307385][T11111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1030.307412][T11111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.317960][ T9472] usb 2-1: USB disconnect, device number 5 [ 1030.432676][T11111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.432694][T11111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1030.432724][T11111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.097264][T11111] hsr_slave_0: entered promiscuous mode [ 1031.115479][T11111] hsr_slave_1: entered promiscuous mode [ 1031.116386][T11111] debugfs: 'hsr0' already exists in 'hsr' [ 1031.116411][T11111] Cannot create hsr debugfs directory [ 1031.219167][T11230] chnl_net:caif_netlink_parms(): no params data found [ 1032.157712][ T3516] hsr_slave_0: left promiscuous mode [ 1032.339222][ T3516] hsr_slave_1: left promiscuous mode [ 1032.340160][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.416927][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.237895][ T3516] hsr_slave_0: left promiscuous mode [ 1033.278919][ T3516] hsr_slave_1: left promiscuous mode [ 1033.279556][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1033.328680][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.348555][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1033.368383][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.948556][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 1034.059176][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 1035.048530][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 1035.168299][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 1035.788475][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 1035.928467][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 1038.290459][T11230] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.290759][T11230] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.291246][T11230] bridge_slave_0: entered allmulticast mode [ 1038.298234][T11230] bridge_slave_0: entered promiscuous mode [ 1038.301262][T11250] chnl_net:caif_netlink_parms(): no params data found [ 1038.991064][T11230] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.991207][T11230] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.991446][T11230] bridge_slave_1: entered allmulticast mode [ 1038.995250][T11230] bridge_slave_1: entered promiscuous mode [ 1040.989016][T11449] syz.2.1253 (11449) used greatest stack depth: 15288 bytes left [ 1041.091136][T11230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.167458][T11230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.593717][T11463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1255'. [ 1044.538586][T11230] team0: Port device team_slave_0 added [ 1044.651081][T11230] team0: Port device team_slave_1 added [ 1044.651756][T11250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.651888][T11250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.652072][T11250] bridge_slave_0: entered allmulticast mode [ 1044.661760][T11250] bridge_slave_0: entered promiscuous mode [ 1044.803022][ T9278] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 1045.171749][T11250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.171907][T11250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.172074][T11250] bridge_slave_1: entered allmulticast mode [ 1045.217460][T11250] bridge_slave_1: entered promiscuous mode [ 1045.624071][T11230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1045.624089][T11230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1045.624116][T11230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1045.667802][ T5905] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1046.155872][T11230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1046.155898][T11230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.155927][T11230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.216837][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 1046.221959][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1046.234498][ T5905] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1046.234535][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.234559][ T5905] usb 2-1: Product: syz [ 1046.234576][ T5905] usb 2-1: Manufacturer: syz [ 1046.234593][ T5905] usb 2-1: SerialNumber: syz [ 1046.252508][ T5905] usb 2-1: config 0 descriptor?? [ 1046.280173][ T5905] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1046.280206][ T5905] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1046.347316][T11250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.392411][T11250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.529834][T11111] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1046.775541][T11111] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1046.868751][ T5905] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1046.939610][T11250] team0: Port device team_slave_0 added [ 1046.943554][T11111] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1047.041463][T11230] hsr_slave_0: entered promiscuous mode [ 1047.046345][T11230] hsr_slave_1: entered promiscuous mode [ 1047.050497][T11230] debugfs: 'hsr0' already exists in 'hsr' [ 1047.050592][T11230] Cannot create hsr debugfs directory [ 1047.066532][T11250] team0: Port device team_slave_1 added [ 1047.546957][ T5905] em28xx 2-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=179) [ 1047.546993][ T5905] em28xx 2-1:0.0: board has no eeprom [ 1047.800565][T11111] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1047.807752][ T5905] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1047.807797][ T5905] em28xx 2-1:0.0: dvb set to bulk mode. [ 1047.824326][ T10] em28xx 2-1:0.0: Binding DVB extension [ 1047.846485][ T5905] usb 2-1: USB disconnect, device number 6 [ 1047.868088][ T5905] em28xx 2-1:0.0: Disconnecting em28xx [ 1048.116288][ T10] em28xx 2-1:0.0: Registering input extension [ 1048.121273][ T5905] em28xx 2-1:0.0: Closing input extension [ 1049.009955][ T5905] em28xx 2-1:0.0: Freeing device [ 1052.944146][T11250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.944164][T11250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.944194][T11250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.238191][T11250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.238205][T11250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.238223][T11250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1057.034287][T11250] hsr_slave_0: entered promiscuous mode [ 1057.036796][T11250] hsr_slave_1: entered promiscuous mode [ 1057.057811][T11250] debugfs: 'hsr0' already exists in 'hsr' [ 1057.057840][T11250] Cannot create hsr debugfs directory [ 1057.529787][T11595] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1277'. [ 1059.879257][T10891] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1059.898660][T10891] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1059.899847][T10891] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1059.901076][T10891] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1059.901921][T10891] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1059.926684][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.926755][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.167846][T11435] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1061.317743][T11435] usb 2-1: Using ep0 maxpacket: 8 [ 1061.323732][T11435] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1061.323760][T11435] usb 2-1: config 0 has no interface number 0 [ 1061.323808][T11435] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1061.323852][T11435] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1061.323877][T11435] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.389443][T11435] usb 2-1: config 0 descriptor?? [ 1061.444509][T11435] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1061.655918][T11435] usb 2-1: USB disconnect, device number 7 [ 1062.027805][ T9278] Bluetooth: hci5: command tx timeout [ 1064.187773][ T9278] Bluetooth: hci5: command tx timeout [ 1064.544987][T11230] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1065.610749][T11230] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1065.905729][T11230] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1066.271680][ T9278] Bluetooth: hci5: command tx timeout [ 1066.290821][T11230] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1068.501426][ T9278] Bluetooth: hci5: command tx timeout [ 1072.257693][T11250] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1072.731293][T11703] evm: overlay not supported [ 1072.773044][T11250] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1072.886267][T11250] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1072.952120][T11250] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1073.129482][T11604] chnl_net:caif_netlink_parms(): no params data found [ 1073.539219][ T1402] bridge_slave_1: left allmulticast mode [ 1073.539249][ T1402] bridge_slave_1: left promiscuous mode [ 1073.539501][ T1402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.619453][ T1402] bridge_slave_0: left allmulticast mode [ 1073.619485][ T1402] bridge_slave_0: left promiscuous mode [ 1073.619772][ T1402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.928482][ T1402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.039559][ T1402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.101709][ T1402] bond0 (unregistering): Released all slaves [ 1074.254852][T11716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1300'. [ 1074.607435][T11722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1300'. [ 1075.359136][T10891] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1075.370919][T10891] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1075.373948][T10891] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1075.375929][T10891] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1075.376899][T10891] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1075.708345][T11604] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.708480][T11604] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.708728][T11604] bridge_slave_0: entered allmulticast mode [ 1075.711476][T11604] bridge_slave_0: entered promiscuous mode [ 1077.242758][ T1402] hsr_slave_0: left promiscuous mode [ 1077.297894][ T1402] hsr_slave_1: left promiscuous mode [ 1077.298843][ T1402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1077.347268][T10891] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1077.357267][T10891] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1077.368792][T10891] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1077.370173][T10891] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1077.371036][T10891] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1077.470441][ T9278] Bluetooth: hci0: command tx timeout [ 1077.635978][ T1402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1077.875283][T11747] Bluetooth: MGMT ver 1.23 [ 1078.026670][T11750] program syz.2.1306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1078.180155][T11753] Failed to get privilege flags for destination (handle=0x2:0x2) [ 1079.468089][ T9278] Bluetooth: hci3: command tx timeout [ 1079.596705][T11758] ufs: You didn't specify the type of your ufs filesystem [ 1079.596705][T11758] [ 1079.596705][T11758] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1079.596705][T11758] [ 1079.596705][T11758] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1079.596952][T11758] ufs: ufstype=old is supported read-only [ 1079.713396][T11758] /dev/nullb0: Can't open blockdev [ 1079.783150][ T9278] Bluetooth: hci0: command tx timeout [ 1080.876256][T11762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1309'. [ 1080.876412][T11762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1309'. [ 1081.557038][ T9278] Bluetooth: hci3: command tx timeout [ 1081.875915][T10891] Bluetooth: hci0: command tx timeout [ 1085.086624][T10891] Bluetooth: hci3: command tx timeout [ 1085.088789][T10891] Bluetooth: hci0: command tx timeout [ 1086.548623][ T1402] team0 (unregistering): Port device team_slave_1 removed [ 1086.711004][ T1402] team0 (unregistering): Port device team_slave_0 removed [ 1087.148525][T10891] Bluetooth: hci3: command tx timeout [ 1087.313377][T11768] lo speed is unknown, defaulting to 1000 [ 1087.318519][T11768] lo speed is unknown, defaulting to 1000 [ 1087.322691][T11768] lo speed is unknown, defaulting to 1000 [ 1087.351523][T11604] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.351743][T11604] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.351997][T11604] bridge_slave_1: entered allmulticast mode [ 1087.362793][T11604] bridge_slave_1: entered promiscuous mode [ 1087.603831][T11768] infiniband sz1: set down [ 1087.603853][T11768] infiniband sz1: added lo [ 1087.606397][T11768] sz1: rxe_create_cq: returned err = -12 [ 1087.606538][T11768] infiniband sz1: Couldn't create ib_mad CQ [ 1087.607544][T11768] infiniband sz1: Couldn't open port 1 [ 1087.647677][T11768] RDS/IB: sz1: added [ 1087.648711][T11768] smc: adding ib device sz1 with port count 1 [ 1087.649040][T11768] smc: ib device sz1 port 1 has pnetid [ 1088.039967][T11768] lo speed is unknown, defaulting to 1000 [ 1089.018984][ T5891] lo speed is unknown, defaulting to 1000 [ 1089.078644][T11768] lo speed is unknown, defaulting to 1000 [ 1089.429249][T11435] lo speed is unknown, defaulting to 1000 [ 1089.432326][T11768] lo speed is unknown, defaulting to 1000 [ 1089.950212][T11800] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1318'. [ 1090.789628][T11768] lo speed is unknown, defaulting to 1000 [ 1090.991972][T11604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.008384][T11604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.182430][T11768] lo speed is unknown, defaulting to 1000 [ 1092.430799][T11725] lo speed is unknown, defaulting to 1000 [ 1092.558631][T11604] team0: Port device team_slave_0 added [ 1092.622812][T11604] team0: Port device team_slave_1 added [ 1092.925770][T11604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1092.925786][T11604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1092.925807][T11604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1092.943927][T11604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1092.943947][T11604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1092.943981][T11604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.244940][T11604] hsr_slave_0: entered promiscuous mode [ 1093.246380][T11604] hsr_slave_1: entered promiscuous mode [ 1093.247422][T11604] debugfs: 'hsr0' already exists in 'hsr' [ 1093.267588][T11604] Cannot create hsr debugfs directory [ 1093.316926][T11744] lo speed is unknown, defaulting to 1000 [ 1095.056932][T10891] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 1095.164120][T11829] kernel profiling enabled (shift: 6) [ 1097.805618][T11841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1329'. [ 1097.805653][T11841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1329'. [ 1098.209218][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1333'. [ 1099.973130][T11725] chnl_net:caif_netlink_parms(): no params data found [ 1100.345016][T11867] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1337'. [ 1103.436505][T11744] chnl_net:caif_netlink_parms(): no params data found [ 1106.230784][T11725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.231022][T11725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.231274][T11725] bridge_slave_0: entered allmulticast mode [ 1106.234444][T11725] bridge_slave_0: entered promiscuous mode [ 1106.313457][T11725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.313575][T11725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.313797][T11725] bridge_slave_1: entered allmulticast mode [ 1106.321462][T11725] bridge_slave_1: entered promiscuous mode [ 1106.735473][T11725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.973352][T11913] syz.2.1345 uses obsolete (PF_INET,SOCK_PACKET) [ 1107.044838][T11725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1107.045030][T11744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.045331][T11744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.045576][T11744] bridge_slave_0: entered allmulticast mode [ 1107.048258][T11744] bridge_slave_0: entered promiscuous mode [ 1107.198935][T11744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.199345][T11744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.199524][T11744] bridge_slave_1: entered allmulticast mode [ 1107.204068][T11744] bridge_slave_1: entered promiscuous mode [ 1110.669407][T11725] team0: Port device team_slave_0 added [ 1110.957060][ C0] vkms_vblank_simulate: vblank timer overrun [ 1111.177993][ C0] vkms_vblank_simulate: vblank timer overrun [ 1111.669939][T11725] team0: Port device team_slave_1 added [ 1111.674837][T11744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.883505][ C0] vkms_vblank_simulate: vblank timer overrun [ 1113.845431][ T44] IPVS: starting estimator thread 0... [ 1113.948427][T11942] IPVS: using max 7 ests per chain, 16800 per kthread [ 1119.189656][T11604] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1119.424982][T11744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1119.920398][ T9278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1119.924410][ T9278] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1119.925669][ T9278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1119.934045][ T9278] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1119.936097][ T9278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1120.071180][T11725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1120.071198][T11725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.071228][T11725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.331402][T11725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1120.331421][T11725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.331451][T11725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1121.638175][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.638248][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.043298][T10891] Bluetooth: hci4: command tx timeout [ 1122.100079][T11744] team0: Port device team_slave_0 added [ 1122.156833][T11744] team0: Port device team_slave_1 added [ 1126.680835][T10891] Bluetooth: hci4: command tx timeout [ 1128.208541][T11744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1128.208559][T11744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1128.208589][T11744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1128.751393][T10891] Bluetooth: hci4: command tx timeout [ 1129.602106][T11744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.602125][T11744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1129.602155][T11744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.657366][T11725] hsr_slave_0: entered promiscuous mode [ 1129.664527][T11725] hsr_slave_1: entered promiscuous mode [ 1129.665413][T11725] debugfs: 'hsr0' already exists in 'hsr' [ 1129.665437][T11725] Cannot create hsr debugfs directory [ 1129.691712][T11974] lo speed is unknown, defaulting to 1000 [ 1131.280378][T11744] hsr_slave_0: entered promiscuous mode [ 1131.281686][T11744] hsr_slave_1: entered promiscuous mode [ 1131.282607][T11744] debugfs: 'hsr0' already exists in 'hsr' [ 1131.282631][T11744] Cannot create hsr debugfs directory [ 1131.307814][T10891] Bluetooth: hci4: command tx timeout [ 1131.375767][ T1402] bridge_slave_1: left allmulticast mode [ 1131.375799][ T1402] bridge_slave_1: left promiscuous mode [ 1131.376057][ T1402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.702690][ T1402] bridge_slave_0: left allmulticast mode [ 1131.702720][ T1402] bridge_slave_0: left promiscuous mode [ 1131.744560][ T1402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.219537][ C0] vkms_vblank_simulate: vblank timer overrun [ 1132.617524][ C0] vkms_vblank_simulate: vblank timer overrun [ 1132.626607][ T1402] bridge_slave_1: left allmulticast mode [ 1132.626638][ T1402] bridge_slave_1: left promiscuous mode [ 1132.626886][ T1402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.794288][ C0] vkms_vblank_simulate: vblank timer overrun [ 1132.839584][ T1402] bridge_slave_0: left allmulticast mode [ 1132.839616][ T1402] bridge_slave_0: left promiscuous mode [ 1132.839872][ T1402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.930462][ C0] vkms_vblank_simulate: vblank timer overrun [ 1133.442634][ C0] vkms_vblank_simulate: vblank timer overrun [ 1133.920215][ C0] vkms_vblank_simulate: vblank timer overrun [ 1133.995327][ C0] vkms_vblank_simulate: vblank timer overrun [ 1134.068782][ T1402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1134.149629][ T1402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1134.210850][ T1402] bond0 (unregistering): Released all slaves [ 1134.268935][ C0] vkms_vblank_simulate: vblank timer overrun [ 1134.360880][ C0] vkms_vblank_simulate: vblank timer overrun [ 1134.489030][ T1402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1134.598476][ T1402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1134.663769][ T1402] bond0 (unregistering): Released all slaves [ 1134.679504][T12038] warning: `syz.2.1376' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1134.680700][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1376'. [ 1136.147864][ T1402] hsr_slave_0: left promiscuous mode [ 1136.154313][T12044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1377'. [ 1136.207687][ T1402] hsr_slave_1: left promiscuous mode [ 1136.208579][ T1402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1136.238669][ T1402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1136.398239][ T1402] hsr_slave_0: left promiscuous mode [ 1136.425369][ T9278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1136.438399][ T1402] hsr_slave_1: left promiscuous mode [ 1136.439313][ T1402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1136.441594][ T9278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1136.442919][ T9278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1136.445486][ T9278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1136.450540][ T9278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1136.499093][ T1402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.248662][ T1402] team0 (unregistering): Port device team_slave_1 removed [ 1137.389012][ T1402] team0 (unregistering): Port device team_slave_0 removed [ 1138.049147][T10891] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1138.061710][T10891] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1138.065919][T10891] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1138.067277][T10891] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1138.068322][T10891] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1138.528347][ T9278] Bluetooth: hci0: command tx timeout [ 1138.738142][ T1402] team0 (unregistering): Port device team_slave_1 removed [ 1138.878454][ T1402] team0 (unregistering): Port device team_slave_0 removed [ 1139.765589][T12049] lo speed is unknown, defaulting to 1000 [ 1139.911291][T11974] chnl_net:caif_netlink_parms(): no params data found [ 1140.187789][ T9278] Bluetooth: hci5: command tx timeout [ 1140.547641][T12046] lo speed is unknown, defaulting to 1000 [ 1140.587734][ T9278] Bluetooth: hci0: command tx timeout [ 1141.170791][T11974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.170963][T11974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.171169][T11974] bridge_slave_0: entered allmulticast mode [ 1141.187895][T11974] bridge_slave_0: entered promiscuous mode [ 1141.207039][T11974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.207185][T11974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.207374][T11974] bridge_slave_1: entered allmulticast mode [ 1141.210550][T11974] bridge_slave_1: entered promiscuous mode [ 1141.572356][T11974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1141.595509][T11974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1141.954005][T11974] team0: Port device team_slave_0 added [ 1141.991316][T11974] team0: Port device team_slave_1 added [ 1142.261789][T11974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1142.261808][T11974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1142.261829][T11974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1142.267738][ T9278] Bluetooth: hci5: command tx timeout [ 1142.350955][T11974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1142.350976][T11974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1142.351006][T11974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1142.667952][ T9278] Bluetooth: hci0: command tx timeout [ 1142.702433][T12049] chnl_net:caif_netlink_parms(): no params data found [ 1142.938353][T11974] hsr_slave_0: entered promiscuous mode [ 1143.001063][T11974] hsr_slave_1: entered promiscuous mode [ 1143.030088][T11974] debugfs: 'hsr0' already exists in 'hsr' [ 1143.030390][T11974] Cannot create hsr debugfs directory [ 1144.351468][ T9278] Bluetooth: hci5: command tx timeout [ 1145.194801][ T9278] Bluetooth: hci0: command tx timeout [ 1145.781530][T10891] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1145.798424][T10891] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1145.799711][T10891] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1145.800874][T10891] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1145.802404][T10891] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1146.005185][T12046] chnl_net:caif_netlink_parms(): no params data found [ 1146.427584][ T9278] Bluetooth: hci5: command tx timeout [ 1146.583755][T12049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.583981][T12049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.584163][T12049] bridge_slave_0: entered allmulticast mode [ 1146.586278][T12049] bridge_slave_0: entered promiscuous mode [ 1146.792358][T12049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.792499][T12049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.793846][T12049] bridge_slave_1: entered allmulticast mode [ 1146.796775][T12049] bridge_slave_1: entered promiscuous mode [ 1147.867586][ T9278] Bluetooth: hci3: command tx timeout [ 1148.694737][T12082] lo speed is unknown, defaulting to 1000 [ 1149.933059][T12049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1149.955910][ T9278] Bluetooth: hci3: command tx timeout [ 1150.150205][T12049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1150.613048][T12046] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.613246][T12046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.613449][T12046] bridge_slave_0: entered allmulticast mode [ 1150.616971][T12046] bridge_slave_0: entered promiscuous mode [ 1150.727064][T12046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.727172][T12046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.727304][T12046] bridge_slave_1: entered allmulticast mode [ 1150.738454][T12046] bridge_slave_1: entered promiscuous mode [ 1150.756789][T12049] team0: Port device team_slave_0 added [ 1150.850280][T12049] team0: Port device team_slave_1 added [ 1151.033877][T12046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.229698][T12046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1151.233763][T12049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1151.233779][T12049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1151.233809][T12049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1151.399177][T12049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1151.399197][T12049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1151.399216][T12049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1152.028780][ T9278] Bluetooth: hci3: command tx timeout [ 1152.738983][T12046] team0: Port device team_slave_0 added [ 1153.398502][T12046] team0: Port device team_slave_1 added [ 1154.668132][ T9278] Bluetooth: hci3: command tx timeout [ 1154.992912][T12046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1154.992929][T12046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1154.992954][T12046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1155.024111][T12049] hsr_slave_0: entered promiscuous mode [ 1155.027277][T12049] hsr_slave_1: entered promiscuous mode [ 1155.030239][T12049] debugfs: 'hsr0' already exists in 'hsr' [ 1155.030269][T12049] Cannot create hsr debugfs directory [ 1155.033302][T12046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1155.033319][T12046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1155.033351][T12046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1155.222179][ T1402] bridge_slave_1: left allmulticast mode [ 1155.222199][ T1402] bridge_slave_1: left promiscuous mode [ 1155.222361][ T1402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.280258][ T1402] bridge_slave_0: left allmulticast mode [ 1155.280288][ T1402] bridge_slave_0: left promiscuous mode [ 1155.280539][ T1402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.362272][ T1402] bridge_slave_1: left allmulticast mode [ 1155.362302][ T1402] bridge_slave_1: left promiscuous mode [ 1155.362529][ T1402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.421963][ T1402] bridge_slave_0: left allmulticast mode [ 1155.421995][ T1402] bridge_slave_0: left promiscuous mode [ 1155.422293][ T1402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.495226][ T1402] bridge_slave_1: left allmulticast mode [ 1155.495259][ T1402] bridge_slave_1: left promiscuous mode [ 1155.495504][ T1402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.548722][ T1402] bridge_slave_0: left allmulticast mode [ 1155.548745][ T1402] bridge_slave_0: left promiscuous mode [ 1155.548924][ T1402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.868266][ T1402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1155.952344][ T1402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1156.009822][ T1402] bond0 (unregistering): Released all slaves [ 1156.238456][ T1402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1156.319651][ T1402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1156.380924][ T1402] bond0 (unregistering): Released all slaves [ 1156.620860][ T1402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1156.821619][ T1402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1156.905549][ T1402] bond0 (unregistering): Released all slaves [ 1156.968924][T12122] ------------[ cut here ]------------ [ 1156.968947][T12122] WARNING: CPU: 1 PID: 12122 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 1156.969083][T12122] Modules linked in: [ 1156.969121][T12122] CPU: 1 UID: 0 PID: 12122 Comm: syz.2.1392 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1156.969146][T12122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1156.969163][T12122] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 1156.969192][T12122] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 e1 43 67 00 e9 da f9 ff ff e8 17 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 1156.969211][T12122] RSP: 0018:ffffc90003cf78e0 EFLAGS: 00010287 [ 1156.969228][T12122] RAX: ffffffff81b6c6a9 RBX: 0000000000000000 RCX: 0000000000080000 [ 1156.969242][T12122] RDX: ffffc9000f536000 RSI: 00000000000000da RDI: 00000000000000db [ 1156.969256][T12122] RBP: ffffc90003cf7a70 R08: 0000000000000000 R09: 0000000000000000 [ 1156.969269][T12122] R10: dffffc0000000000 R11: fffffbfff1d6d2a7 R12: dffffc0000000000 [ 1156.969285][T12122] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888035692791 [ 1156.969298][T12122] FS: 00007fe347afd6c0(0000) GS:ffff888127117000(0000) knlGS:0000000000000000 [ 1156.969316][T12122] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1156.969330][T12122] CR2: 0000200000215000 CR3: 00000000614ea000 CR4: 00000000003526f0 [ 1156.969348][T12122] Call Trace: [ 1156.969361][T12122] [ 1156.969376][T12122] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1156.969519][T12122] ? __pfx_cgroup_freeze+0x10/0x10 [ 1156.969545][T12122] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1156.969578][T12122] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1156.969609][T12122] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1156.969647][T12122] ? mutex_lock_nested+0x154/0x1d0 [ 1156.969671][T12122] ? cgroup_kn_lock_live+0x13c/0x230 [ 1156.969722][T12122] cgroup_freeze_write+0x156/0x1c0 [ 1156.969747][T12122] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1156.969767][T12122] ? kernfs_root+0x1c/0x230 [ 1156.969809][T12122] ? kernfs_root+0x1c/0x230 [ 1156.969831][T12122] ? kernfs_root+0x1ea/0x230 [ 1156.969849][T12122] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1156.969872][T12122] cgroup_file_write+0x39b/0x740 [ 1156.969908][T12122] ? __pfx_cgroup_file_write+0x10/0x10 [ 1156.969952][T12122] ? __pfx_cgroup_file_write+0x10/0x10 [ 1156.969982][T12122] kernfs_fop_write_iter+0x3b0/0x540 [ 1156.970017][T12122] vfs_write+0x5d5/0xb40 [ 1156.970066][T12122] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1156.970095][T12122] ? __pfx_vfs_write+0x10/0x10 [ 1156.970118][T12122] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1156.970154][T12122] ? mutex_lock_nested+0x154/0x1d0 [ 1156.970180][T12122] ? fdget_pos+0x253/0x320 [ 1156.970223][T12122] ksys_write+0x14b/0x260 [ 1156.970250][T12122] ? __pfx_ksys_write+0x10/0x10 [ 1156.970273][T12122] ? rcu_is_watching+0x15/0xb0 [ 1156.970327][T12122] ? do_syscall_64+0xbe/0x3b0 [ 1156.970384][T12122] do_syscall_64+0xfa/0x3b0 [ 1156.970407][T12122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.970450][T12122] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1156.970471][T12122] ? clear_bhb_loop+0x60/0xb0 [ 1156.970499][T12122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.970520][T12122] RIP: 0033:0x7fe3498beec9 [ 1156.970544][T12122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1156.970562][T12122] RSP: 002b:00007fe347afd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1156.970589][T12122] RAX: ffffffffffffffda RBX: 00007fe349b16090 RCX: 00007fe3498beec9 [ 1156.970606][T12122] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000a [ 1156.970620][T12122] RBP: 00007fe349941f91 R08: 0000000000000000 R09: 0000000000000000 [ 1156.970652][T12122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1156.970667][T12122] R13: 00007fe349b16128 R14: 00007fe349b16090 R15: 00007ffd1f51caf8 [ 1156.970711][T12122] [ 1156.970728][T12122] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1156.970744][T12122] CPU: 1 UID: 0 PID: 12122 Comm: syz.2.1392 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1156.970771][T12122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1156.970784][T12122] Call Trace: [ 1156.970793][T12122] [ 1156.970802][T12122] dump_stack_lvl+0x99/0x250 [ 1156.970843][T12122] ? __asan_memcpy+0x40/0x70 [ 1156.970878][T12122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1156.970900][T12122] ? __pfx__printk+0x10/0x10 [ 1156.970945][T12122] vpanic+0x281/0x750 [ 1156.970969][T12122] ? __pfx__printk+0x10/0x10 [ 1156.970998][T12122] ? __pfx_vpanic+0x10/0x10 [ 1156.971021][T12122] ? is_bpf_text_address+0x26/0x2b0 [ 1156.971075][T12122] panic+0xb9/0xc0 [ 1156.971097][T12122] ? __pfx_panic+0x10/0x10 [ 1156.971138][T12122] __warn+0x31b/0x4b0 [ 1156.971159][T12122] ? cgroup_freeze+0x80a/0xf90 [ 1156.971193][T12122] ? cgroup_freeze+0x80a/0xf90 [ 1156.971223][T12122] report_bug+0x2be/0x4f0 [ 1156.971312][T12122] ? cgroup_freeze+0x80a/0xf90 [ 1156.971345][T12122] ? cgroup_freeze+0x80a/0xf90 [ 1156.971377][T12122] ? cgroup_freeze+0x80c/0xf90 [ 1156.971408][T12122] handle_bug+0x84/0x160 [ 1156.971434][T12122] exc_invalid_op+0x1a/0x50 [ 1156.971460][T12122] asm_exc_invalid_op+0x1a/0x20 [ 1156.971482][T12122] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 1156.971511][T12122] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 e1 43 67 00 e9 da f9 ff ff e8 17 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 1156.971530][T12122] RSP: 0018:ffffc90003cf78e0 EFLAGS: 00010287 [ 1156.971549][T12122] RAX: ffffffff81b6c6a9 RBX: 0000000000000000 RCX: 0000000000080000 [ 1156.971564][T12122] RDX: ffffc9000f536000 RSI: 00000000000000da RDI: 00000000000000db [ 1156.971579][T12122] RBP: ffffc90003cf7a70 R08: 0000000000000000 R09: 0000000000000000 [ 1156.971593][T12122] R10: dffffc0000000000 R11: fffffbfff1d6d2a7 R12: dffffc0000000000 [ 1156.971610][T12122] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888035692791 [ 1156.971634][T12122] ? cgroup_freeze+0x809/0xf90 [ 1156.971686][T12122] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1156.971726][T12122] ? __pfx_cgroup_freeze+0x10/0x10 [ 1156.971755][T12122] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1156.971804][T12122] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1156.971850][T12122] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1156.971887][T12122] ? mutex_lock_nested+0x154/0x1d0 [ 1156.971911][T12122] ? cgroup_kn_lock_live+0x13c/0x230 [ 1156.971952][T12122] cgroup_freeze_write+0x156/0x1c0 [ 1156.971976][T12122] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1156.971997][T12122] ? kernfs_root+0x1c/0x230 [ 1156.972016][T12122] ? kernfs_root+0x1c/0x230 [ 1156.972037][T12122] ? kernfs_root+0x1ea/0x230 [ 1156.972055][T12122] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1156.972079][T12122] cgroup_file_write+0x39b/0x740 [ 1156.972114][T12122] ? __pfx_cgroup_file_write+0x10/0x10 [ 1156.972159][T12122] ? __pfx_cgroup_file_write+0x10/0x10 [ 1156.972186][T12122] kernfs_fop_write_iter+0x3b0/0x540 [ 1156.972223][T12122] vfs_write+0x5d5/0xb40 [ 1156.972252][T12122] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1156.972281][T12122] ? __pfx_vfs_write+0x10/0x10 [ 1156.972301][T12122] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1156.972338][T12122] ? mutex_lock_nested+0x154/0x1d0 [ 1156.972363][T12122] ? fdget_pos+0x253/0x320 [ 1156.972402][T12122] ksys_write+0x14b/0x260 [ 1156.972430][T12122] ? __pfx_ksys_write+0x10/0x10 [ 1156.972452][T12122] ? rcu_is_watching+0x15/0xb0 [ 1156.972480][T12122] ? do_syscall_64+0xbe/0x3b0 [ 1156.972505][T12122] do_syscall_64+0xfa/0x3b0 [ 1156.972526][T12122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.972546][T12122] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1156.972565][T12122] ? clear_bhb_loop+0x60/0xb0 [ 1156.972591][T12122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.972611][T12122] RIP: 0033:0x7fe3498beec9 [ 1156.972628][T12122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1156.972644][T12122] RSP: 002b:00007fe347afd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1156.972663][T12122] RAX: ffffffffffffffda RBX: 00007fe349b16090 RCX: 00007fe3498beec9 [ 1156.972684][T12122] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000a [ 1156.972699][T12122] RBP: 00007fe349941f91 R08: 0000000000000000 R09: 0000000000000000 [ 1156.972712][T12122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1156.972725][T12122] R13: 00007fe349b16128 R14: 00007fe349b16090 R15: 00007ffd1f51caf8 [ 1156.972758][T12122] [ 1156.973081][T12122] Kernel Offset: disabled