last executing test programs: 12m53.093013741s ago: executing program 4 (id=740): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) socket$nl_audit(0x10, 0x3, 0x9) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = creat(&(0x7f00000000c0)='./file1\x00', 0x67) socket$unix(0x1, 0x1, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000180)={0x87, 0x29, 0x1, {0x2, [{{0x20, 0x0, 0x4}, 0x7f, 0x5, 0x7, './file0'}, {{0x4, 0x3}, 0x1, 0x6, 0x7, './file0'}, {{0x1, 0x0, 0x10000000000002}, 0x3, 0x6, 0x7, './file0'}, {{0x8, 0x3, 0x7}, 0xffffffffffffffff, 0x4, 0x7, './file0'}]}}, 0x87) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 12m37.076848271s ago: executing program 32 (id=740): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) socket$nl_audit(0x10, 0x3, 0x9) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = creat(&(0x7f00000000c0)='./file1\x00', 0x67) socket$unix(0x1, 0x1, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000180)={0x87, 0x29, 0x1, {0x2, [{{0x20, 0x0, 0x4}, 0x7f, 0x5, 0x7, './file0'}, {{0x4, 0x3}, 0x1, 0x6, 0x7, './file0'}, {{0x1, 0x0, 0x10000000000002}, 0x3, 0x6, 0x7, './file0'}, {{0x8, 0x3, 0x7}, 0xffffffffffffffff, 0x4, 0x7, './file0'}]}}, 0x87) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 6m44.13025298s ago: executing program 5 (id=1925): statx(0xffffffffffffffff, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0) 6m43.791515723s ago: executing program 5 (id=1926): socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb46, 0x8, 0x8, 0x0, 0x3}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='net_cls.classid\x00', 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="600000000206010400000000000000000000000014000780fcff10"], 0x60}}, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080010000060a01040000000000000000010000000900020073797a310000000038000480340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000000900010073797a30000000005e0007"], 0x1f4}}, 0x0) 6m33.976892481s ago: executing program 5 (id=1948): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x30, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 6m30.864167442s ago: executing program 5 (id=1954): io_setup(0x8, &(0x7f0000000540)=0x0) r1 = eventfd2(0x9b5, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000002f00)={0x0, 0x0, 0x0, 0x7, 0x8, r1, &(0x7f0000002ec0)="f60b721fc0", 0x5, 0x1, 0x0, 0x2, r1}]) 6m29.944828454s ago: executing program 33 (id=1922): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000001500)={0x0, 0x5e1f, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080), &(0x7f00000001c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xbc03, 0x0, 0x1, 0x1a}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x10000a47) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x28, 0x0, 0x1, 0x1000000, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, 0x0, 0x0) 6m29.234176967s ago: executing program 5 (id=1960): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x526d, 0x8, 0x2, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6m19.145069043s ago: executing program 5 (id=1963): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x18292, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) truncate(&(0x7f0000000080)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000006500)={0x50, 0x0, r2}, 0x50) 6m9.426218684s ago: executing program 34 (id=1958): socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb46, 0x8, 0x8, 0x0, 0x3}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='net_cls.classid\x00', 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="600000000206010400000000000000000000000014000780fcff10"], 0x60}}, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080010000060a01040000000000000000010000000900020073797a310000000038000480340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000000900010073797a30000000005e0007"], 0x1f4}}, 0x0) 5m57.087107436s ago: executing program 35 (id=1961): socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb46, 0x8, 0x8, 0x0, 0x3}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='net_cls.classid\x00', 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="600000000206010400000000000000000000000014000780fcff10"], 0x60}}, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080010000060a01040000000000000000010000000900020073797a310000000038000480340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000000900010073797a30000000005e0007"], 0x1f4}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x5, 0x6, "059500", 0x10, 0x11, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[@routing={0x3b, 0x0, 0x0, 0x7, 0x300}], {0x4e21, 0x4e23, 0x8}}}}}}, 0x0) statx(0xffffffffffffffff, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0) 5m53.338835169s ago: executing program 36 (id=1962): r0 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x9, 0x14, 0xc2}, &(0x7f00000007c0)=0x0, &(0x7f0000000200)) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) close(0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) recvmsg$can_j1939(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000400)=""/143, 0x8f}], 0x1, &(0x7f00000004c0)=""/66, 0x42}, 0x0) memfd_create(&(0x7f0000000540)=':\x91!/\x00', 0x1) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x74a, 0x410000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc25c4111, &(0x7f0000000100)={0x3, [[0x7, 0x101, 0x80, 0x3, 0x4c7, 0x5, 0x4, 0x8], [0x2, 0x6, 0xd4, 0x7, 0x7fffffff, 0x4, 0x400, 0x3], [0x7ff, 0xffffff21, 0x1, 0x8, 0x5, 0x800000, 0x1, 0x6]], '\x00', [{0x5, 0x9, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x9, 0x1, 0x1, 0x1}, {0x1, 0x7fffffff, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x7fff, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xfffffff7, 0x6, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x1, 0x0, 0x1}, {0xe3, 0x8c4, 0x0, 0x1, 0x1, 0x1}, {0x1000, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x9, 0x4, 0x0, 0x0, 0x1}, {0xb85, 0x4, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x0, 0x1}], '\x00', 0xc823}) 5m52.579130374s ago: executing program 37 (id=1963): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x18292, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) truncate(&(0x7f0000000080)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000006500)={0x50, 0x0, r2}, 0x50) 4m13.018028885s ago: executing program 9 (id=1966): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}]}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 4m12.733316981s ago: executing program 4 (id=1967): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) ioctl$FS_IOC_GETVERSION(r0, 0x80047601, &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000)) 4m11.83532868s ago: executing program 4 (id=1975): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="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", 0x132}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000001040)="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", 0x79e}, {&(0x7f0000000d00)="45e59946bb3d1f200de22958c0a7caeec21cbb55b4b57132720ed833934b1cc026c6acc9f3bfd38593698b5b5a2f52ad64bf03f7cb625c77b1bf615d7856aba241dbbb5f7df1005972de8347ba30ac5e9bfb30c2ca68716fbb33c89b38545d3a27b106daa835e8ef62e68b1b2ad0bb2a52937b8fb0ea117997fd632f2e1c77221a5bfb2df28d9f724c380e69b2ee1b1bd0373c3efa3bb2aa198ac7c06a9b4f7b6c559da6fef1ad31734122ae22474f58e248a7ed19", 0xb5}], 0x2}}], 0x2, 0x4) 4m7.992702575s ago: executing program 4 (id=1978): syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x21445a, &(0x7f00000001c0)=ANY=[], 0x1, 0x1c4, &(0x7f00000003c0)="$eJzs209u00AUx/Gf4xAn5V+hwAIhtRISsGrTAJXY0aOE1lQoBiRg04pF6QU4A+diwwHIArFBXTBo/CcFuzahYI9Rvp+F7fq9Gb+RNfU4UQRgYT3Wmjx56tg/bvWX3694Fdnd5goDUDuT7r+bOX30pHlzAbSc/y3Zr7kuBEDDptsa2Of/5y9vd+T3ZuuC7Gi6LR1m8U5QWD9M30k3u1L81uD1k85+Xl98kO5m7b2lfPOv9szSLH4+F+7F/d+7nV3/gi7qki5rWVd0VSvp9Xdn7W/86fKnOCAAABaAp/XfxUsSzsXbgZ4+i8Kh/GLCkwdxlo1vlvbfi+Ojyri/Wl5fELdf33kZ7VYNA8ApOmee/wnfzr+jYUVG9fwH4M7r/YPJOIrCVy046P9ajwmk05IlfTKr0l9eNGjDkP/fg0D5M93JODLpBypz9WPvdyE0KG11pP1jY0wuZDupf8jH5t92eJg/Y1fTzu/pwcQ/KcP1fyYAddt4cyf9JuD5eC/cC1+MhsNHWw/vb26NNuI3+2TrukwANTh5+ruuBAAAAAAAAAAAAAAAnNU1XXddAgAAAICGNPG7ItdjBACgdX4EAAD//5qhEmQ=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xff10, 0x8000c61) 4m4.390221839s ago: executing program 4 (id=1983): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a000000", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 4m0.71272653s ago: executing program 4 (id=1987): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r2, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000003c0)="a750d2c528509c8fa1904611e7862e4eabe5fa8708efa91147da8ff1ed4366f5aeeba21c19e3e363aa674b8dd7cae3e47970"}, 0x20) shutdown(r5, 0x1) 3m57.438113165s ago: executing program 38 (id=1966): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}]}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 3m45.175403191s ago: executing program 39 (id=1987): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r2, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000003c0)="a750d2c528509c8fa1904611e7862e4eabe5fa8708efa91147da8ff1ed4366f5aeeba21c19e3e363aa674b8dd7cae3e47970"}, 0x20) shutdown(r5, 0x1) 3m5.135734261s ago: executing program 8 (id=2063): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000380)={0x1, 0x2, 0x3, 0x6f7, 0xfcf, 0x85, 0x28, 0x1}, 0x20) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) 3m4.70716991s ago: executing program 8 (id=2066): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xd}, {0x4}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40054) 3m3.968114724s ago: executing program 8 (id=2069): socket$pppoe(0x18, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r2, 0x6}, 0x8) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r4, &(0x7f0000000340)=""/71, 0x47) unlinkat(r4, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f00000002c0)='./control\x00') 3m3.439182902s ago: executing program 8 (id=2071): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x142) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x322020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m2.214419947s ago: executing program 8 (id=2074): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=@framed={{}, [@printk={@p={0x18, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x0, 0xfe00}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) connect$netrom(r1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd', @ANYBLOB, @ANYRESHEX, @ANYRESOCT]) 3m0.526881151s ago: executing program 8 (id=2078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xa9c}}, 0x0) 2m57.278163069s ago: executing program 40 (id=2078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xa9c}}, 0x0) 2m4.835174771s ago: executing program 1 (id=2189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)={0x1, 0x1, [@remote]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m3.113498394s ago: executing program 1 (id=2191): r0 = io_uring_setup(0x30df, &(0x7f0000000000)={0x0, 0x54cd, 0x800, 0x0, 0x1d}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb-twofish-avx)\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 2m1.969546726s ago: executing program 1 (id=2192): ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0844123, &(0x7f0000000180)=0x4) 2m0.991860538s ago: executing program 1 (id=2193): mkdir(&(0x7f0000000000)='./file0\x00', 0x19) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 2m0.580948947s ago: executing program 1 (id=2194): r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) 2m0.051298918s ago: executing program 1 (id=2195): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000280)={0x3, 0x8, 0x1, {0x1, @raw_data="1dfe8307002e974e7a478c459dc0c7d5b3832eee86756dccda2f7471e9a438f86aed38cb084f497cd35501785b8ea2f0d44e1d73a81302136b611cb90a166557d07e76232717d9a98c43eb09d1bbd6a366a0ff6adca3c1eea093304f360f58fcdd2d546b2e77dbed3459e2528fee4f330e631f3ad0304acdc897d5f17fe89cbe453a6bba6fc015952c8604c35b612d12a4bdffb80d832a2a4ce1828df193db420b3ce7c82470a03445ccf2daffe1e36e51b4684f4948fb440a3a737ba44b3c036ea0134e6f821f7b"}, 0x2}) 1m44.514586325s ago: executing program 41 (id=2195): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000280)={0x3, 0x8, 0x1, {0x1, @raw_data="1dfe8307002e974e7a478c459dc0c7d5b3832eee86756dccda2f7471e9a438f86aed38cb084f497cd35501785b8ea2f0d44e1d73a81302136b611cb90a166557d07e76232717d9a98c43eb09d1bbd6a366a0ff6adca3c1eea093304f360f58fcdd2d546b2e77dbed3459e2528fee4f330e631f3ad0304acdc897d5f17fe89cbe453a6bba6fc015952c8604c35b612d12a4bdffb80d832a2a4ce1828df193db420b3ce7c82470a03445ccf2daffe1e36e51b4684f4948fb440a3a737ba44b3c036ea0134e6f821f7b"}, 0x2}) 9.623004076s ago: executing program 6 (id=2495): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0x38, 0x0, 0x42, 0x6e}) 9.123186221s ago: executing program 3 (id=2497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 8.911815414s ago: executing program 6 (id=2500): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 8.514532837s ago: executing program 3 (id=2502): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffdf8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000480)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x400000, 0x12) 8.087643637s ago: executing program 3 (id=2505): openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x7, 0x4}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) 7.87877326s ago: executing program 0 (id=2506): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.723995476s ago: executing program 6 (id=2508): socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket$caif_stream(0x25, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg1\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'hsr0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) socket$kcm(0x10, 0x3, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 6.387300518s ago: executing program 2 (id=2509): socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, 0x0, 0x0) epoll_create(0xaf2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100, 0x80000}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.43794865s ago: executing program 7 (id=2510): syz_emit_vhci(&(0x7f0000000c40)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_ev_le_phy_update_complete={{}, {0xf8, 0xc8, 0x9, 0x2}}}}, 0x9) 4.9073694s ago: executing program 0 (id=2511): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 4.279291337s ago: executing program 6 (id=2512): syz_open_dev$tty1(0xc, 0x4, 0x1) accept4$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, &(0x7f0000000000)=0x6e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040f04000001042af6934d77f5080a56431141485de9babf8221599f331b80635461b73462c966d41c3c247919"], 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x2}, {0x40}}}, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x2, 0x80000000, 0x7f, 0x20080, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001e0001000000000000000000fdff"], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x0, 0x6, 0x6, 0x6, 0x69, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x8000, 0xc597, 0x5}}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x13, 0xffffffffffffffff, 0xcd920000) eventfd2(0x200, 0x800) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000300)=ANY=[@ANYBLOB="940000009cc79c7fba86e5ea42f57d2cfe1354059906b3b5b328934c6ace2cfed7b9677b5d501978bbb6aadb09a4f9e9d3a807f9f482feef74167b53b3a588532432158d4a87b4006d203407bba1a38c8c740fe72a098b7da3bb4dc8572a854796afc4ec4c9ba78b1d07b1c751b087e8cbcb9f4d37e7b968f5825cf9495a25cc2958c1d93a"]) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xe8, 0x5, 0x9, 0x8, 0xe, 0x4, 0x8]}}]}]}]}, 0x38}}, 0x0) 3.711022487s ago: executing program 2 (id=2513): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 3.604269672s ago: executing program 7 (id=2514): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) 2.847403861s ago: executing program 0 (id=2515): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001840)={@val={0x0, 0xf7}, @val={0x6, 0x0, 0x9, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xb, 0x67, 0x0, @rand_addr=0x64010104, @broadcast}}}, 0x22) 2.322880773s ago: executing program 3 (id=2516): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000000)={[0x1, 0x790, 0x80000000002, 0x180, 0x400000004, 0x10001, 0xf1, 0x3, 0xfefffffffffffd7e, 0x45, 0x0, 0x3b9, 0xffffffff00000000, 0x9, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 2.184102919s ago: executing program 2 (id=2517): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006100)=@delchain={0x24, 0x64, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.173784107s ago: executing program 7 (id=2518): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 1.858948228s ago: executing program 3 (id=2519): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0x18, 0x30, 0x3f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef000000000000000800", @ANYRES32=r3], 0x34}}, 0x400c840) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}}, 0x0) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x40030000000000}, 0x4000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r8 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10) io_uring_enter(r8, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 1.7308777s ago: executing program 6 (id=2520): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/oops_count', 0x26243, 0x103) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x80}}, 0x200000d4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.465843738s ago: executing program 7 (id=2521): syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e040f2d20"], 0x7) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) 1.268480666s ago: executing program 0 (id=2522): socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket$caif_stream(0x25, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg1\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'hsr0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) socket$kcm(0x10, 0x3, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 1.265724817s ago: executing program 2 (id=2523): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r1, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd48", 0x19, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) 892.742009ms ago: executing program 3 (id=2524): socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, 0x0, 0x0) epoll_create(0xaf2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100, 0x80000}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 828.90476ms ago: executing program 7 (id=2525): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000240)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x26) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') 813.238892ms ago: executing program 0 (id=2526): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000ac0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x1, [], [], [0x0, 0xd0c], [0x0, 0x100000000]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000400)={r2}) 651.543995ms ago: executing program 2 (id=2527): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 348.077367ms ago: executing program 7 (id=2528): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0xffffffb6, 0xffffffff}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000000)) 312.000196ms ago: executing program 0 (id=2529): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="61030504ea89230c012f0156d5b3f72b"], 0xb) 159.532773ms ago: executing program 2 (id=2530): syz_open_dev$tty1(0xc, 0x4, 0x1) accept4$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, &(0x7f0000000000)=0x6e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040f04000001042af6934d77f5080a56431141485de9babf8221599f331b80635461b73462c966d41c3c247919"], 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x2}, {0x40}}}, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x2, 0x80000000, 0x7f, 0x20080, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001e0001000000000000000000fdff"], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x0, 0x6, 0x6, 0x6, 0x69, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x8000, 0xc597, 0x5}}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x13, 0xffffffffffffffff, 0xcd920000) eventfd2(0x200, 0x800) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000300)=ANY=[@ANYBLOB="940000009cc79c7fba86e5ea42f57d2cfe1354059906b3b5b328934c6ace2cfed7b9677b5d501978bbb6aadb09a4f9e9d3a807f9f482feef74167b53b3a588532432158d4a87b4006d203407bba1a38c8c740fe72a098b7da3bb4dc8572a854796afc4ec4c9ba78b1d07b1c751b087e8cbcb9f4d37e7b968f5825cf9495a25cc2958c1d93a"]) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xe8, 0x5, 0x9, 0x8, 0xe, 0x4, 0x8]}}]}]}]}, 0x38}}, 0x0) 0s ago: executing program 6 (id=2531): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x3}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) kernel console output (not intermixed with test programs): usb 33-1: enqueue for inactive port 0 [ 879.504669][T10212] vhci_hcd: vhci_device speed not set [ 879.985881][ T5866] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 880.164202][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 880.213062][ T5866] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 880.221990][ T5866] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 880.233354][ T5866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 880.243857][ T5866] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 880.257323][ T5866] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 880.268604][ T5866] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 880.282075][ T5866] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 880.291474][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.241936][T11750] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 881.542922][T11750] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1904'. [ 881.601311][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.075728][T10212] usb 3-1: USB disconnect, device number 7 [ 883.365557][T11761] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 883.882441][T11765] loop5: detected capacity change from 0 to 256 [ 888.464396][T11804] loop1: detected capacity change from 0 to 256 [ 888.715849][T11809] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 889.099070][T11809] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1926'. [ 889.896085][T11812] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 894.435211][T11835] loop0: detected capacity change from 0 to 256 [ 898.501440][T11854] program syz.0.1947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 898.934501][ T5866] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 899.174510][ T5866] usb 1-1: Using ep0 maxpacket: 8 [ 899.313566][ T5866] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 899.323167][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.331603][ T5866] usb 1-1: Product: syz [ 899.336153][ T5866] usb 1-1: Manufacturer: syz [ 899.341095][ T5866] usb 1-1: SerialNumber: syz [ 899.574576][ T5866] usb 1-1: config 0 descriptor?? [ 899.862489][ T5866] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 900.047739][ T5866] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 900.115348][ T5866] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 900.125427][ T5866] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 900.225081][ T5866] usb 1-1: USB disconnect, device number 3 [ 905.638298][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 909.653701][ C1] sched: DL replenish lagged too much [ 921.626376][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 921.686234][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 921.740598][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 921.842082][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 921.868357][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 926.604148][ T5820] Bluetooth: hci4: command tx timeout [ 930.402135][ T5820] Bluetooth: hci4: command tx timeout [ 933.424027][ T5818] Bluetooth: hci4: command tx timeout [ 936.563816][ T5820] Bluetooth: hci4: command tx timeout [ 940.204442][ T5818] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 940.224471][ T5818] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 940.257397][ T5818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 940.354477][ T5818] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 940.372655][ T5818] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 941.746854][T11904] chnl_net:caif_netlink_parms(): no params data found [ 943.635171][ T5818] Bluetooth: hci6: command tx timeout [ 948.308283][ T5820] Bluetooth: hci6: command tx timeout [ 948.421506][ T5825] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 948.794633][ T5818] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 948.864795][ T5818] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 949.766005][T11928] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 949.776492][T11932] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 949.794602][T11928] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 949.826172][T11928] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 949.836838][T11932] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 949.845221][T11932] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 949.895076][T11932] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 949.918456][T11928] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 949.958078][T11932] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 950.010468][T11932] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 950.052896][T11932] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 950.100611][ T5818] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 951.564896][ T5820] Bluetooth: hci6: command tx timeout [ 952.232018][ T5818] Bluetooth: hci7: command tx timeout [ 952.238416][ T5818] Bluetooth: hci8: command tx timeout [ 961.850123][ T5825] Bluetooth: hci6: command tx timeout [ 961.856062][ T5825] Bluetooth: hci8: command tx timeout [ 961.861715][ T5825] Bluetooth: hci7: command tx timeout [ 961.871010][ T5825] Bluetooth: hci9: command tx timeout [ 976.586686][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 976.641946][ T5818] Bluetooth: hci9: command tx timeout [ 976.647883][ T5818] Bluetooth: hci7: command tx timeout [ 976.653530][ T5818] Bluetooth: hci8: command tx timeout [ 978.975385][ T5825] Bluetooth: hci8: command tx timeout [ 978.981137][ T5825] Bluetooth: hci7: command tx timeout [ 978.986975][ T5825] Bluetooth: hci9: command tx timeout [ 983.005926][ T5818] Bluetooth: hci9: command tx timeout [ 984.709395][ T14] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 984.720339][ T14] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.271943][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 985.289713][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 985.300329][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 985.344240][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 985.365780][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 985.421870][ T14] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 985.432841][ T14] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.291075][ T14] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 986.301933][ T14] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.556593][ T14] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 986.567408][ T14] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.782228][T11919] chnl_net:caif_netlink_parms(): no params data found [ 987.072362][T11926] chnl_net:caif_netlink_parms(): no params data found [ 987.154442][T11922] chnl_net:caif_netlink_parms(): no params data found [ 987.425802][ T5818] Bluetooth: hci0: command tx timeout [ 987.562966][ T14] bridge_slave_1: left allmulticast mode [ 987.573039][ T14] bridge_slave_1: left promiscuous mode [ 987.579642][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.643969][ T14] bridge_slave_0: left allmulticast mode [ 987.649983][ T14] bridge_slave_0: left promiscuous mode [ 987.657434][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.404977][ T14] bond1 (unregistering): (slave gretap1): Releasing active interface [ 988.786906][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 988.907153][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 988.942875][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 988.969688][ T14] bond0 (unregistering): Released all slaves [ 988.976356][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 988.994817][ T14] bond1 (unregistering): Released all slaves [ 989.128175][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 989.164651][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 989.176821][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 989.475874][T11929] chnl_net:caif_netlink_parms(): no params data found [ 989.504032][ T5818] Bluetooth: hci0: command tx timeout [ 989.539001][ T14] tipc: Disabling bearer [ 989.545168][ T14] tipc: Left network mode [ 991.345342][ T5818] Bluetooth: hci2: command tx timeout [ 991.584486][ T5818] Bluetooth: hci0: command tx timeout [ 991.820835][T11926] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.829744][T11926] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.837965][T11926] bridge_slave_0: entered allmulticast mode [ 991.849160][T11926] bridge_slave_0: entered promiscuous mode [ 992.459660][T11944] chnl_net:caif_netlink_parms(): no params data found [ 992.486224][T11926] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.494028][T11926] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.502202][T11926] bridge_slave_1: entered allmulticast mode [ 992.512078][T11926] bridge_slave_1: entered promiscuous mode [ 992.818376][ T14] hsr_slave_0: left promiscuous mode [ 992.828283][ T14] hsr_slave_1: left promiscuous mode [ 992.836540][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.844571][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.881148][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.889690][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.920787][ T14] veth1_vlan: left promiscuous mode [ 992.926732][ T14] veth0_vlan: left promiscuous mode [ 993.519379][ T5818] Bluetooth: hci2: command tx timeout [ 993.528294][ T14] team0 (unregistering): Port device team_slave_1 removed [ 993.575376][ T14] team0 (unregistering): Port device team_slave_0 removed [ 993.624127][ T4216] smc: removing ib device syz! [ 993.684296][ T5818] Bluetooth: hci0: command tx timeout [ 994.134909][T11926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 994.210295][T11922] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.218116][T11922] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.230992][T11922] bridge_slave_0: entered allmulticast mode [ 994.240820][T11922] bridge_slave_0: entered promiscuous mode [ 994.413287][T11926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 994.733535][T11929] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.742884][T11929] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.750873][T11929] bridge_slave_0: entered allmulticast mode [ 994.762152][T11929] bridge_slave_0: entered promiscuous mode [ 994.814647][T11922] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.822292][T11922] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.830326][T11922] bridge_slave_1: entered allmulticast mode [ 994.843208][T11922] bridge_slave_1: entered promiscuous mode [ 995.114323][T11929] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.122037][T11929] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.130071][T11929] bridge_slave_1: entered allmulticast mode [ 995.141307][T11929] bridge_slave_1: entered promiscuous mode [ 995.735720][ T5818] Bluetooth: hci2: command tx timeout [ 995.889038][T11922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.931093][T11922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.467658][T11926] team0: Port device team_slave_0 added [ 997.805235][ T5818] Bluetooth: hci2: command tx timeout [ 998.658801][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 998.680157][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 998.695211][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 998.709196][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 998.720814][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 999.469739][T11926] team0: Port device team_slave_1 added [ 999.577335][T11955] chnl_net:caif_netlink_parms(): no params data found [ 1000.236821][T11926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.244175][T11926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.274575][T11926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.549606][T11926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.556948][T11926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.586717][T11926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.626299][T11944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.634634][T11944] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.642540][T11944] bridge_slave_0: entered allmulticast mode [ 1000.652618][T11944] bridge_slave_0: entered promiscuous mode [ 1000.705749][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1000.750611][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1000.764934][T11944] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.765575][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1000.772448][T11944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.790920][T11944] bridge_slave_1: entered allmulticast mode [ 1000.794191][ T5818] Bluetooth: hci3: command tx timeout [ 1000.801553][T11944] bridge_slave_1: entered promiscuous mode [ 1000.952193][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1000.988265][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1001.031479][ T14] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1001.045089][ T14] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.618978][ T14] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1001.629998][ T14] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.847550][T11944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.966567][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1001.995854][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1002.034359][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1002.039294][ T14] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1002.052725][ T14] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.101271][T11944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.165659][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1002.193146][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1002.322891][ T14] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1002.333828][ T14] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.596647][T11944] team0: Port device team_slave_0 added [ 1002.863936][ T5820] Bluetooth: hci3: command tx timeout [ 1002.937069][T11944] team0: Port device team_slave_1 added [ 1002.993523][T11955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.001444][T11955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.009528][T11955] bridge_slave_0: entered allmulticast mode [ 1003.019503][T11955] bridge_slave_0: entered promiscuous mode [ 1003.103860][ T5820] Bluetooth: hci4: command tx timeout [ 1003.176850][T11980] chnl_net:caif_netlink_parms(): no params data found [ 1003.320266][T11955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.328209][T11955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.337238][T11955] bridge_slave_1: entered allmulticast mode [ 1003.347883][T11955] bridge_slave_1: entered promiscuous mode [ 1003.624777][T11944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1003.632130][T11944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1003.661327][T11944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.029483][T11944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.036973][T11944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1004.064913][T11944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.206345][T11955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.403911][ T5820] Bluetooth: hci5: command tx timeout [ 1004.507726][T11955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1004.999080][ T5820] Bluetooth: hci3: command tx timeout [ 1005.125908][T11944] hsr_slave_0: entered promiscuous mode [ 1005.136554][T11944] hsr_slave_1: entered promiscuous mode [ 1005.145710][T11944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1005.153504][T11944] Cannot create hsr debugfs directory [ 1005.214010][ T5820] Bluetooth: hci4: command tx timeout [ 1005.271701][T11955] team0: Port device team_slave_0 added [ 1005.517408][T11955] team0: Port device team_slave_1 added [ 1005.563526][T11980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.571510][T11980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.579820][T11980] bridge_slave_0: entered allmulticast mode [ 1005.594397][T11980] bridge_slave_0: entered promiscuous mode [ 1005.741260][T11986] chnl_net:caif_netlink_parms(): no params data found [ 1005.937827][T11980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.945860][T11980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.954088][T11980] bridge_slave_1: entered allmulticast mode [ 1005.964019][T11980] bridge_slave_1: entered promiscuous mode [ 1006.302597][T11955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1006.313106][T11955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.340669][T11955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.379134][T11980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.480394][ T5820] Bluetooth: hci5: command tx timeout [ 1006.621698][T11980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1006.719245][T11955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.727701][T11955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.754476][T11955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.024288][T11992] chnl_net:caif_netlink_parms(): no params data found [ 1007.057751][ T14] bridge_slave_1: left allmulticast mode [ 1007.066159][ T14] bridge_slave_1: left promiscuous mode [ 1007.072890][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.083417][ T5820] Bluetooth: hci3: command tx timeout [ 1007.108914][ T14] bridge_slave_0: left allmulticast mode [ 1007.115077][ T14] bridge_slave_0: left promiscuous mode [ 1007.121833][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.153510][ T14] bridge_slave_1: left allmulticast mode [ 1007.161741][ T14] bridge_slave_1: left promiscuous mode [ 1007.170429][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.196461][ T14] bridge_slave_0: left allmulticast mode [ 1007.202406][ T14] bridge_slave_0: left promiscuous mode [ 1007.209293][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.231105][ T14] bridge_slave_1: left allmulticast mode [ 1007.239054][ T14] bridge_slave_1: left promiscuous mode [ 1007.246504][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.259572][ T14] bridge_slave_0: left allmulticast mode [ 1007.266770][ T14] bridge_slave_0: left promiscuous mode [ 1007.266840][ T5820] Bluetooth: hci4: command tx timeout [ 1007.273404][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.612833][ T14] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1007.808358][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1007.827181][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1007.852092][ T14] bond0 (unregistering): Released all slaves [ 1007.881026][ T14] bond1 (unregistering): (slave batadv1): Releasing active interface [ 1007.897606][ T14] bond1 (unregistering): Released all slaves [ 1007.951156][ T14] bond2 (unregistering): Released all slaves [ 1008.170330][ T14] bond0 (unregistering): Released all slaves [ 1008.357818][ T14] bond0 (unregistering): Released all slaves [ 1008.544158][ T5820] Bluetooth: hci5: command tx timeout [ 1008.616059][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.636262][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.648764][ T14] bond0 (unregistering): Released all slaves [ 1009.024231][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1009.040944][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1009.073260][ T14] bond0 (unregistering): Released all slaves [ 1009.107072][T11980] team0: Port device team_slave_0 added [ 1009.148350][T11980] team0: Port device team_slave_1 added [ 1009.253940][T11955] hsr_slave_0: entered promiscuous mode [ 1009.265523][T11955] hsr_slave_1: entered promiscuous mode [ 1009.274769][T11955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1009.285670][T11955] Cannot create hsr debugfs directory [ 1009.346871][ T5820] Bluetooth: hci4: command tx timeout [ 1009.657262][T11980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.665641][T11980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.693348][T11980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.709025][ T14] tipc: Left network mode [ 1009.922078][T11980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.931236][T11980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.957953][T11980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.080729][T11986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.088558][T11986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.099825][T11986] bridge_slave_0: entered allmulticast mode [ 1010.109778][T11986] bridge_slave_0: entered promiscuous mode [ 1010.255816][T11986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.263424][T11986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.271392][T11986] bridge_slave_1: entered allmulticast mode [ 1010.281455][T11986] bridge_slave_1: entered promiscuous mode [ 1010.631754][ T5820] Bluetooth: hci5: command tx timeout [ 1010.669687][T11986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.695552][T11980] hsr_slave_0: entered promiscuous mode [ 1010.706836][T11980] hsr_slave_1: entered promiscuous mode [ 1010.718984][T11980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1010.727003][T11980] Cannot create hsr debugfs directory [ 1010.779245][T11986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1011.023250][T11992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.031083][T11992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.039418][T11992] bridge_slave_0: entered allmulticast mode [ 1011.049395][T11992] bridge_slave_0: entered promiscuous mode [ 1011.219188][T11992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.227195][T11992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.235430][T11992] bridge_slave_1: entered allmulticast mode [ 1011.245302][T11992] bridge_slave_1: entered promiscuous mode [ 1011.306556][T11944] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1011.339617][T11986] team0: Port device team_slave_0 added [ 1011.476648][T11944] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1011.512418][T11986] team0: Port device team_slave_1 added [ 1011.541264][T11944] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1011.642495][T11992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1011.777228][T11986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1011.785695][T11986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.812387][T11986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.828361][T11944] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1011.892437][T11992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.018767][T11986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.026129][T11986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.054684][T11986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1012.088635][ T14] hsr_slave_0: left promiscuous mode [ 1012.097571][ T14] hsr_slave_1: left promiscuous mode [ 1012.108913][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1012.116965][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.132650][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1012.140630][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.166561][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.178100][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.206837][ T14] hsr_slave_0: left promiscuous mode [ 1012.219780][ T14] hsr_slave_1: left promiscuous mode [ 1012.227964][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.243363][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.271771][ T14] veth1_macvtap: left promiscuous mode [ 1012.278659][ T14] veth0_macvtap: left promiscuous mode [ 1012.284730][ T14] veth1_vlan: left promiscuous mode [ 1012.290332][ T14] veth0_vlan: left promiscuous mode [ 1012.894971][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1012.957676][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1013.960315][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1014.013747][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1014.690780][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1014.743765][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1015.432036][T11992] team0: Port device team_slave_0 added [ 1015.497933][T11992] team0: Port device team_slave_1 added [ 1015.676153][T11986] hsr_slave_0: entered promiscuous mode [ 1015.686491][T11986] hsr_slave_1: entered promiscuous mode [ 1015.695431][T11986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1015.703206][T11986] Cannot create hsr debugfs directory [ 1015.761476][T11955] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1015.963097][T11955] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1016.057136][T11992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.066261][T11992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.093071][T11992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.111331][T11955] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1016.142887][T11955] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1016.277536][T11992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.285082][T11992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.311768][T11992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.725950][T11992] hsr_slave_0: entered promiscuous mode [ 1016.736527][T11992] hsr_slave_1: entered promiscuous mode [ 1016.745546][T11992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1016.755531][T11992] Cannot create hsr debugfs directory [ 1017.136831][T11980] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1017.164677][T11980] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1017.210129][T11980] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1017.239802][T11980] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1017.507904][ T14] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.520303][ T14] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.667488][ T14] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.680239][ T14] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.773302][ T14] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.784316][ T14] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.923077][T11944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.986358][ T14] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.997359][ T14] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.187331][T11986] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1018.235344][T11986] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1018.327366][T11986] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1018.352305][T11986] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1018.441564][T11944] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.626744][T11955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.695164][ T3649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.702734][ T3649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.719094][ T3649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.726803][ T3649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1018.804495][ T14] bridge_slave_1: left allmulticast mode [ 1018.810435][ T14] bridge_slave_1: left promiscuous mode [ 1018.817341][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.846670][ T14] bridge_slave_0: left allmulticast mode [ 1018.852546][ T14] bridge_slave_0: left promiscuous mode [ 1018.859199][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.884337][ T14] bridge_slave_1: left allmulticast mode [ 1018.890808][ T14] bridge_slave_1: left promiscuous mode [ 1018.899507][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.917187][ T14] bridge_slave_0: left allmulticast mode [ 1018.923090][ T14] bridge_slave_0: left promiscuous mode [ 1018.931501][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.959522][ T14] bridge_slave_1: left allmulticast mode [ 1018.966946][ T14] bridge_slave_1: left promiscuous mode [ 1018.974879][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.987976][ T14] bridge_slave_0: left allmulticast mode [ 1018.995948][ T14] bridge_slave_0: left promiscuous mode [ 1019.004390][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.026514][ T14] bridge_slave_1: left allmulticast mode [ 1019.032362][ T14] bridge_slave_1: left promiscuous mode [ 1019.039192][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.052319][ T14] bridge_slave_0: left allmulticast mode [ 1019.058384][ T14] bridge_slave_0: left promiscuous mode [ 1019.070817][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.745192][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1019.763480][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1019.783057][ T14] bond0 (unregistering): Released all slaves [ 1019.964116][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1019.981259][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.004578][ T14] bond0 (unregistering): Released all slaves [ 1020.185430][ T14] bond0 (unregistering): Released all slaves [ 1020.351108][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.384813][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.401316][ T14] bond0 (unregistering): Released all slaves [ 1020.588833][T11955] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.705844][ T3600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.713401][ T3600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.888459][T11980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.976737][ T3600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.984430][ T3600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.238804][T11980] 8021q: adding VLAN 0 to HW filter on device team0 [ 1021.400854][T11992] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1021.544019][T11992] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1021.628499][ T14] hsr_slave_0: left promiscuous mode [ 1021.641712][ T14] hsr_slave_1: left promiscuous mode [ 1021.650106][ T14] batman_adv: batadv0: Interface deactivated: dummy0 [ 1021.657400][ T14] batman_adv: batadv0: Removing interface: dummy0 [ 1021.691013][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1021.699616][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.726406][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1021.734304][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.761963][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.792495][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.838762][ T14] veth1_macvtap: left promiscuous mode [ 1021.845405][ T14] veth0_macvtap: left promiscuous mode [ 1021.851273][ T14] veth1_vlan: left promiscuous mode [ 1021.858378][ T14] veth0_vlan: left promiscuous mode [ 1022.445550][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1022.506017][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1022.765020][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1022.822158][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1023.684087][T11992] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1023.822001][T11986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.857201][T11992] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1023.886286][ T3600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.893945][ T3600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.979502][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.987222][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.181994][T11986] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.263269][T11944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.327780][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.335483][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.450845][T11980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1024.462999][T11980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1024.501446][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.509165][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.644571][T11992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.847843][T11992] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.976871][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.984531][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.112352][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.120035][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.491970][T11955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.779105][T11980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.047240][T11986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.383139][T11944] veth0_vlan: entered promiscuous mode [ 1027.501551][T11944] veth1_vlan: entered promiscuous mode [ 1027.871616][T11944] veth0_macvtap: entered promiscuous mode [ 1027.950086][T11944] veth1_macvtap: entered promiscuous mode [ 1028.121224][T11944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1028.209486][T11944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1028.306480][T11992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1028.350143][T11944] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.359353][T11944] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.368456][T11944] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.377708][T11944] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.428196][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1029.452354][T11955] veth0_vlan: entered promiscuous mode [ 1029.580992][T11955] veth1_vlan: entered promiscuous mode [ 1029.817468][T11980] veth0_vlan: entered promiscuous mode [ 1029.945422][T11980] veth1_vlan: entered promiscuous mode [ 1030.080764][T11955] veth0_macvtap: entered promiscuous mode [ 1030.095829][T11986] veth0_vlan: entered promiscuous mode [ 1030.153519][T11955] veth1_macvtap: entered promiscuous mode [ 1030.255057][T11986] veth1_vlan: entered promiscuous mode [ 1030.402103][T11955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1030.442548][T11980] veth0_macvtap: entered promiscuous mode [ 1030.468996][T11955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.560727][T11980] veth1_macvtap: entered promiscuous mode [ 1030.573073][T11955] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.582377][T11955] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.591720][T11955] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.601010][T11955] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.713367][T11986] veth0_macvtap: entered promiscuous mode [ 1030.798349][T11986] veth1_macvtap: entered promiscuous mode [ 1030.859923][T11980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1031.007845][T11980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1031.062797][T11986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1031.112007][T11980] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.121371][T11980] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.130741][T11980] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.140126][T11980] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.176958][T11986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1031.268799][T11986] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.278133][T11986] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.287307][T11986] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.296535][T11986] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.458054][T11992] veth0_vlan: entered promiscuous mode [ 1031.590838][T11992] veth1_vlan: entered promiscuous mode [ 1031.920391][T11992] veth0_macvtap: entered promiscuous mode [ 1032.002167][T11992] veth1_macvtap: entered promiscuous mode [ 1032.199354][T11992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.298377][T11992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.365914][T11992] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.375336][T11992] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.387060][T11992] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.397466][T11992] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.687910][ T4216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.696452][ T4216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.809762][ T2937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.818895][ T2937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.317820][T11938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.326221][T11938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.579831][ T3600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.588229][ T3600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.690746][ T3600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.700155][ T3600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.091211][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.099696][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.334573][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.342724][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.481140][T12162] loop6: detected capacity change from 0 to 2048 [ 1038.546850][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.556013][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.743020][T12162] loop6: p1 < > p4 [ 1038.750728][T12162] loop6: p4 size 8388608 extends beyond EOD, truncated [ 1038.786536][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.795201][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.056561][ T5030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.064967][ T5030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.135140][T12168] syzkaller1: entered promiscuous mode [ 1039.141059][T12168] syzkaller1: entered allmulticast mode [ 1044.497299][T12200] loop4: detected capacity change from 0 to 47 [ 1044.778142][T12204] loop8: detected capacity change from 0 to 128 [ 1051.024472][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1983'. [ 1056.665474][T12244] loop8: detected capacity change from 0 to 2048 [ 1056.737540][T12244] loop8: p1 < > p4 [ 1056.824588][T12244] loop8: p4 size 8388608 extends beyond EOD, truncated [ 1056.834939][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1056.846175][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1056.897697][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1056.917119][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1056.930076][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1059.047939][ T5818] Bluetooth: hci1: command tx timeout [ 1060.844558][T12246] chnl_net:caif_netlink_parms(): no params data found [ 1061.103956][ T5818] Bluetooth: hci1: command tx timeout [ 1061.434423][ T5869] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1061.654311][ T5869] usb 7-1: Using ep0 maxpacket: 32 [ 1061.726595][ T5869] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1061.797981][ T5869] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1061.812661][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.822289][ T5869] usb 7-1: Product: syz [ 1061.826906][ T5869] usb 7-1: Manufacturer: syz [ 1061.831660][ T5869] usb 7-1: SerialNumber: syz [ 1061.981110][ T5869] usb 7-1: config 0 descriptor?? [ 1062.464477][ T5869] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 1062.877841][ T5924] usb 7-1: USB disconnect, device number 2 [ 1063.204429][ T5818] Bluetooth: hci1: command tx timeout [ 1063.707084][T12246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.714655][T12246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.722338][T12246] bridge_slave_0: entered allmulticast mode [ 1063.730886][T12246] bridge_slave_0: entered promiscuous mode [ 1064.665944][T12246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.674328][T12246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.686839][T12246] bridge_slave_1: entered allmulticast mode [ 1064.696818][T12246] bridge_slave_1: entered promiscuous mode [ 1065.374581][ T5818] Bluetooth: hci1: command tx timeout [ 1065.528794][T12246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1065.666054][T12246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1065.997243][T12246] team0: Port device team_slave_0 added [ 1066.054780][T12246] team0: Port device team_slave_1 added [ 1066.071639][T12285] loop7: detected capacity change from 0 to 2048 [ 1066.256718][T12285] loop7: p1 < > p4 [ 1066.367721][T12285] loop7: p4 size 8388608 extends beyond EOD, truncated [ 1066.437389][T12246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1066.444858][T12246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1066.471688][T12246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.510105][T12246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.521858][T12246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1066.549418][T12246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.162901][T12246] hsr_slave_0: entered promiscuous mode [ 1067.174547][T12246] hsr_slave_1: entered promiscuous mode [ 1067.516159][T12296] loop7: detected capacity change from 0 to 512 [ 1067.603925][T12296] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1067.695786][T12296] EXT4-fs (loop7): 1 truncate cleaned up [ 1067.704640][T12296] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1067.925453][T12296] EXT4-fs error (device loop7): ext4_find_dest_de:2052: inode #2: block 13: comm syz.7.2009: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1068.512683][ T5820] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1068.525266][ T5820] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1068.570312][ T5820] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1068.651177][T11955] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.662052][ T5820] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1068.744030][ T5825] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1070.020920][T12246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1070.124868][T12246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1070.234727][T12246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1070.375178][T12246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1070.864659][ T5820] Bluetooth: hci6: command tx timeout [ 1071.695392][ T5924] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1071.766073][ T5924] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1072.071751][ T2937] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.136102][T12304] chnl_net:caif_netlink_parms(): no params data found [ 1072.237793][ T2937] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.451318][T12327] loop7: detected capacity change from 0 to 2048 [ 1072.484740][ T2937] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.570814][T12327] loop7: p1 < > p4 [ 1072.578423][T12327] loop7: p4 size 8388608 extends beyond EOD, truncated [ 1072.778905][ T2937] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.948356][ T5820] Bluetooth: hci6: command tx timeout [ 1073.633236][T12331] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1073.641433][T12331] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1073.656979][ T2937] bridge_slave_1: left allmulticast mode [ 1073.662893][ T2937] bridge_slave_1: left promiscuous mode [ 1073.670327][ T2937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.682895][T12331] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1073.745561][ T2937] bridge_slave_0: left allmulticast mode [ 1073.751478][ T2937] bridge_slave_0: left promiscuous mode [ 1073.758276][ T2937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.865350][T12331] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1073.871851][T12331] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1073.927315][T12331] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1074.086814][T12331] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1074.093286][T12331] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1074.157663][T12331] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1074.328111][T12331] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1074.334758][T12331] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1074.440904][T12331] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1074.456848][T12331] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1074.463366][T12331] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1074.474439][ T2937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.490270][T12331] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1074.534426][T12331] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1074.536644][ T2937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.541047][T12331] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1074.571177][ T2937] bond0 (unregistering): Released all slaves [ 1074.615676][T12331] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1075.104696][ T5820] Bluetooth: hci0: command 0x0c1a tx timeout [ 1075.904738][T12351] loop6: detected capacity change from 0 to 2048 [ 1075.911826][ T5820] Bluetooth: hci2: command 0x0c1a tx timeout [ 1075.964170][T12304] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.971951][T12304] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.980086][T12304] bridge_slave_0: entered allmulticast mode [ 1075.990340][T12304] bridge_slave_0: entered promiscuous mode [ 1076.583081][T12246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.613292][ T5820] Bluetooth: hci3: command 0x0c1a tx timeout [ 1076.620058][ T5818] Bluetooth: hci1: command 0x0c1a tx timeout [ 1076.627449][ T5825] Bluetooth: hci6: command 0x0419 tx timeout [ 1076.827378][ T2937] hsr_slave_0: left promiscuous mode [ 1077.650476][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 1077.769063][ T2937] hsr_slave_1: left promiscuous mode [ 1077.777852][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1077.791762][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.778076][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 1078.784681][ T5825] Bluetooth: hci6: command 0x0419 tx timeout [ 1078.791017][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 1078.797477][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 1078.861217][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.869179][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1079.684366][ T5818] Bluetooth: hci0: command 0x0c1a tx timeout [ 1079.851458][ T2937] veth1_macvtap: left promiscuous mode [ 1079.858112][ T2937] veth0_macvtap: left promiscuous mode [ 1079.864106][ T2937] veth1_vlan: left promiscuous mode [ 1079.869657][ T2937] veth0_vlan: left promiscuous mode [ 1080.397293][T12354] loop7: detected capacity change from 0 to 2048 [ 1080.505756][T12354] loop7: p1 < > p4 [ 1080.569204][T12354] loop7: p4 size 8388608 extends beyond EOD, truncated [ 1080.869742][ T5818] Bluetooth: hci3: command 0x0c1a tx timeout [ 1080.876641][ T5818] Bluetooth: hci1: command 0x0c1a tx timeout [ 1080.883232][ T5818] Bluetooth: hci6: command 0x0419 tx timeout [ 1080.885954][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 1081.911666][ T2937] team0 (unregistering): Port device team_slave_1 removed [ 1082.019999][ T2937] team0 (unregistering): Port device team_slave_0 removed [ 1082.395539][T12304] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.403254][T12304] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.411306][T12304] bridge_slave_1: entered allmulticast mode [ 1082.421002][T12304] bridge_slave_1: entered promiscuous mode [ 1082.590291][T12246] 8021q: adding VLAN 0 to HW filter on device team0 [ 1082.631060][T11923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.638786][T11923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1082.839262][T11923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.847012][T11923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1083.115485][T12304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.274592][ T5818] Bluetooth: hci6: command 0x0419 tx timeout [ 1083.384141][T12304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1083.896371][ T2937] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.011828][T12304] team0: Port device team_slave_0 added [ 1084.097042][T12304] team0: Port device team_slave_1 added [ 1084.264830][ T2937] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.929675][ T2937] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.962286][T12386] netlink: 41 bytes leftover after parsing attributes in process `syz.6.2037'. [ 1084.972247][T12386] netlink: 268 bytes leftover after parsing attributes in process `syz.6.2037'. [ 1084.981832][T12386] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2037'. [ 1085.025402][T12304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.033218][T12304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1085.065602][T12304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.187350][ T2937] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.775329][T12304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.782558][T12304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1085.809310][T12304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.977216][T12394] loop6: detected capacity change from 0 to 2048 [ 1087.029415][ T2937] bridge_slave_1: left allmulticast mode [ 1087.036351][ T2937] bridge_slave_1: left promiscuous mode [ 1087.042975][ T2937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.127741][T12394] loop6: p1 < > p4 [ 1087.159273][ T2937] bridge_slave_0: left allmulticast mode [ 1087.165374][ T2937] bridge_slave_0: left promiscuous mode [ 1087.172120][ T2937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.211131][T12394] loop6: p4 size 8388608 extends beyond EOD, truncated [ 1087.936831][ T2937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1088.005676][ T2937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1088.046800][ T2937] bond0 (unregistering): Released all slaves [ 1088.279705][T12304] hsr_slave_0: entered promiscuous mode [ 1088.290495][T12304] hsr_slave_1: entered promiscuous mode [ 1088.300870][T12304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1088.309278][T12304] Cannot create hsr debugfs directory [ 1088.413739][T12398] loop2: detected capacity change from 0 to 7 [ 1088.481521][T12398] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1088.497581][T12398] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1088.505217][T12398] Dev loop2: unable to read RDB block 7 [ 1088.511167][T12398] loop2: AHDI p2 p3 [ 1088.516315][T12398] loop2: partition table partially beyond EOD, truncated [ 1088.524602][T12398] loop2: p3 start 335544320 is beyond EOD, truncated [ 1089.441009][ T2937] hsr_slave_0: left promiscuous mode [ 1089.450639][ T2937] hsr_slave_1: left promiscuous mode [ 1089.464801][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.472541][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1089.489045][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1089.497071][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.570827][ T2937] veth1_macvtap: left promiscuous mode [ 1089.576847][ T2937] veth0_macvtap: left promiscuous mode [ 1089.582855][ T2937] veth1_vlan: left promiscuous mode [ 1089.588674][ T2937] veth0_vlan: left promiscuous mode [ 1090.091653][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1090.703158][T12404] loop6: detected capacity change from 0 to 32768 [ 1090.755348][T12404] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2042 (12404) [ 1090.796612][T12404] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1090.807521][T12404] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 1090.817091][T12404] BTRFS info (device loop6): using free-space-tree [ 1090.824821][ T2937] team0 (unregistering): Port device team_slave_1 removed [ 1091.027640][ T2937] team0 (unregistering): Port device team_slave_0 removed [ 1091.538803][ T30] audit: type=1800 audit(1752932325.184:1607): pid=12404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2042" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 1091.932027][T12246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1092.143223][T11944] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1093.032605][T12246] veth0_vlan: entered promiscuous mode [ 1093.196390][T12246] veth1_vlan: entered promiscuous mode [ 1093.345804][T12304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1093.407965][T12246] veth0_macvtap: entered promiscuous mode [ 1093.453235][T12304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1093.517265][T12246] veth1_macvtap: entered promiscuous mode [ 1093.545666][T12304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1093.609632][T12304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1093.692194][T12431] netlink: 41 bytes leftover after parsing attributes in process `syz.8.2047'. [ 1093.702851][T12431] netlink: 268 bytes leftover after parsing attributes in process `syz.8.2047'. [ 1093.712622][T12431] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2047'. [ 1093.719806][T12246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1093.830929][T12246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1093.908238][T12246] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.917828][T12246] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.928050][T12246] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.937252][T12246] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.281393][T12434] loop7: detected capacity change from 0 to 2048 [ 1094.448308][T12437] loop7: p1 < > p4 [ 1094.502843][T12437] loop7: p4 size 8388608 extends beyond EOD, truncated [ 1094.675256][T12434] loop7: p1 < > p4 [ 1094.761177][T12434] loop7: p4 size 8388608 extends beyond EOD, truncated [ 1095.245701][T12304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1095.519387][T12304] 8021q: adding VLAN 0 to HW filter on device team0 [ 1095.706724][ T4216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.714908][ T4216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1095.869874][ T4216] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.877788][ T4216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1097.174508][T12449] syzkaller1: entered promiscuous mode [ 1097.180606][T12449] syzkaller1: entered allmulticast mode [ 1100.185984][T12304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1100.662592][T12475] netlink: 41 bytes leftover after parsing attributes in process `syz.8.2057'. [ 1100.672143][T12475] netlink: 268 bytes leftover after parsing attributes in process `syz.8.2057'. [ 1100.681640][T12475] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2057'. [ 1100.738209][T12304] veth0_vlan: entered promiscuous mode [ 1100.885138][T12304] veth1_vlan: entered promiscuous mode [ 1101.140199][T12304] veth0_macvtap: entered promiscuous mode [ 1101.228560][T12304] veth1_macvtap: entered promiscuous mode [ 1101.467856][T12304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1101.585109][T12304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.672039][T12304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.685703][T12304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.696828][T12304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.705969][T12304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.813061][T12487] loop7: detected capacity change from 0 to 16 [ 1101.881240][T12487] erofs (device loop7): mounted with root inode @ nid 36. [ 1102.878967][T12492] random: crng reseeded on system resumption [ 1107.462033][T12501] Bluetooth: MGMT ver 1.23 [ 1108.017660][T12509] netlink: 41 bytes leftover after parsing attributes in process `syz.7.2067'. [ 1108.027709][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2067'. [ 1108.036926][T12509] netlink: 268 bytes leftover after parsing attributes in process `syz.7.2067'. [ 1108.046338][T12509] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2067'. [ 1108.228324][ T5030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.236893][ T5030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1108.420115][T11938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.429389][T11938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.004656][T12522] loop8: detected capacity change from 0 to 512 [ 1109.028989][T12522] EXT4-fs: Ignoring removed bh option [ 1109.041671][T12522] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1109.140151][T12522] EXT4-fs (loop8): 1 truncate cleaned up [ 1109.148465][T12522] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1109.419031][T12530] overlayfs: upper fs needs to support d_type. [ 1109.816050][T12533] block nbd7: shutting down sockets [ 1109.895165][T11980] EXT4-fs error (device loop8): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 1109.938896][T11980] EXT4-fs error (device loop8): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 1110.733531][T11980] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.586167][ T79] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.831452][ T79] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.080537][ T79] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.301300][ T79] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.835909][ T79] bridge_slave_1: left allmulticast mode [ 1112.841848][ T79] bridge_slave_1: left promiscuous mode [ 1112.849643][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.960134][ T79] bridge_slave_0: left allmulticast mode [ 1112.966124][ T79] bridge_slave_0: left promiscuous mode [ 1112.972538][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.545625][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1113.656840][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1113.716357][ T79] bond0 (unregistering): Released all slaves [ 1114.301323][ T79] hsr_slave_0: left promiscuous mode [ 1114.347660][ T79] hsr_slave_1: left promiscuous mode [ 1114.356516][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1114.364337][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1114.405719][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1114.413467][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1114.474414][ T79] veth1_macvtap: left promiscuous mode [ 1114.480261][ T79] veth0_macvtap: left promiscuous mode [ 1114.486882][ T79] veth1_vlan: left promiscuous mode [ 1114.492495][ T79] veth0_vlan: left promiscuous mode [ 1115.459210][T12567] loop7: detected capacity change from 0 to 512 [ 1115.757103][ T79] team0 (unregistering): Port device team_slave_1 removed [ 1115.816534][T12567] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1115.830200][T12567] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1115.880939][ T79] team0 (unregistering): Port device team_slave_0 removed [ 1118.784149][ T5818] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1118.842504][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1118.954881][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1118.989817][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1119.021038][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1119.074456][T12585] loop2: detected capacity change from 0 to 512 [ 1119.104493][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1119.131500][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1119.172008][T12585] EXT4-fs: Ignoring removed bh option [ 1119.217484][T12585] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1119.273915][T12585] EXT4-fs (loop2): 1 truncate cleaned up [ 1119.282589][T12585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1119.345150][T12585] overlayfs: failed to resolve './bus': -2 [ 1119.961277][ T4216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1119.972184][ T4216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.149864][ T2937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.158350][ T2937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.207572][T11955] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.951305][T12246] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.229743][ T5818] Bluetooth: hci3: command tx timeout [ 1122.083955][T12604] tipc: Started in network mode [ 1122.089228][T12604] tipc: Node identity 7, cluster identity 4711 [ 1122.095996][T12604] tipc: Node number set to 7 [ 1122.835013][T12575] chnl_net:caif_netlink_parms(): no params data found [ 1123.343922][ T5818] Bluetooth: hci3: command tx timeout [ 1125.695463][ T5818] Bluetooth: hci3: command tx timeout [ 1127.756835][ T5818] Bluetooth: hci3: command tx timeout [ 1129.914064][T12575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.921693][T12575] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.930254][T12575] bridge_slave_0: entered allmulticast mode [ 1129.940068][T12575] bridge_slave_0: entered promiscuous mode [ 1129.988516][T12575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.996606][T12575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.004671][T12575] bridge_slave_1: entered allmulticast mode [ 1130.021058][T12575] bridge_slave_1: entered promiscuous mode [ 1130.741576][T12640] loop2: detected capacity change from 0 to 128 [ 1130.787284][T12640] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1130.800253][T12640] hpfs: filesystem error: improperly stopped [ 1130.806692][T12640] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1130.814948][T12640] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 1131.784162][T12575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1131.861068][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 1131.867848][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 1131.931854][T12575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1132.931642][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 1132.938023][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 1133.195480][T12641] ceph: No mds server is up or the cluster is laggy [ 1133.392771][T12575] team0: Port device team_slave_0 added [ 1133.418089][T12575] team0: Port device team_slave_1 added [ 1133.601374][T12575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.608742][T12575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1133.635716][T12575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1133.810546][T12575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1133.818505][T12575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1133.845224][T12575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1133.972540][T12651] 9pnet_fd: Insufficient options for proto=fd [ 1134.485970][T12575] hsr_slave_0: entered promiscuous mode [ 1134.498565][T12575] hsr_slave_1: entered promiscuous mode [ 1134.507597][T12575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1134.520538][T12575] Cannot create hsr debugfs directory [ 1139.826159][T12575] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1139.885316][T12575] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1139.975257][T12575] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1140.085597][T12575] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1141.055152][T12575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1141.215316][T12575] 8021q: adding VLAN 0 to HW filter on device team0 [ 1141.296754][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.304450][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.421156][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.428981][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1144.309335][T11941] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1144.487442][T12730] overlayfs: failed to decode file handle (len=6, type=65535, flags=0, err=-22) [ 1144.505768][T11941] usb 7-1: Using ep0 maxpacket: 32 [ 1144.553157][T11941] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1144.591533][T11941] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1144.601260][T11941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.609765][T11941] usb 7-1: Product: syz [ 1144.614445][T11941] usb 7-1: Manufacturer: syz [ 1144.619310][T11941] usb 7-1: SerialNumber: syz [ 1144.647976][T12575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1144.674724][T11941] usb 7-1: config 0 descriptor?? [ 1145.013739][ T5818] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 1145.155634][T12575] veth0_vlan: entered promiscuous mode [ 1145.191163][T12740] tipc: Started in network mode [ 1145.196867][T12740] tipc: Node identity aaeb749ce8c6, cluster identity 4711 [ 1145.198885][T11941] gs_usb 7-1:0.0: Configuring for 214 interfaces [ 1145.205030][T12740] tipc: Enabled bearer , priority 0 [ 1145.210952][T11941] gs_usb 7-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 1145.225965][T11941] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -22 [ 1145.310449][T12575] veth1_vlan: entered promiscuous mode [ 1145.324983][T12739] syzkaller0: entered promiscuous mode [ 1145.330962][T12739] syzkaller0: entered allmulticast mode [ 1145.407295][T12739] tipc: Resetting bearer [ 1145.420672][T12737] tipc: Resetting bearer [ 1145.439442][T12737] tipc: Disabling bearer [ 1145.452524][ T5924] usb 7-1: USB disconnect, device number 3 [ 1145.611385][T12575] veth0_macvtap: entered promiscuous mode [ 1145.653313][T12575] veth1_macvtap: entered promiscuous mode [ 1145.881579][T12575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1145.956318][T12575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1146.049073][T12575] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.058588][T12575] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.067804][T12575] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.077095][T12575] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.256769][ T5924] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1146.481072][ T5924] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.496811][ T5924] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.508398][ T5924] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1146.522200][ T5924] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1146.531794][ T5924] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.626745][ T5924] usb 8-1: config 0 descriptor?? [ 1147.064881][ T5924] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 1147.221678][ T5924] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1147.351637][ T5924] usb 8-1: USB disconnect, device number 2 [ 1148.095086][ T5924] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1148.305788][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 1148.327570][ T5924] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1148.340929][ T5924] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1148.352610][ T5924] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1148.362928][ T5924] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1148.373405][ T5924] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1148.387287][ T5924] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1148.396891][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.604630][T11941] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1148.803213][T11941] usb 8-1: Using ep0 maxpacket: 32 [ 1148.826947][T12246] cgroup: fork rejected by pids controller in /syz2 [ 1148.835317][T11941] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1148.855792][ T5924] usb 1-1: usb_control_msg returned -32 [ 1148.861791][ T5924] usbtmc 1-1:16.0: can't read capabilities [ 1148.914891][T11941] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1148.924665][T11941] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.932957][T11941] usb 8-1: Product: syz [ 1148.937606][T11941] usb 8-1: Manufacturer: syz [ 1148.942486][T11941] usb 8-1: SerialNumber: syz [ 1148.985972][T11941] usb 8-1: config 0 descriptor?? [ 1149.402321][T12785] kvm: kvm [12766]: vcpu1, guest rIP: 0xfff0 Unhandled RDMSR(0x4000007c) [ 1149.405017][ T14] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.420497][T11941] gs_usb 8-1:0.0: Configuring for 214 interfaces [ 1149.420624][T11941] gs_usb 8-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 1149.420768][T11941] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -22 [ 1149.504831][T12785] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2148'. [ 1149.569592][ T14] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.645943][T11941] usb 8-1: USB disconnect, device number 3 [ 1149.730170][ T14] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.861160][ T14] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.252630][ T14] bridge_slave_1: left allmulticast mode [ 1150.258916][ T14] bridge_slave_1: left promiscuous mode [ 1150.266293][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.303928][ T14] bridge_slave_0: left allmulticast mode [ 1150.309966][ T14] bridge_slave_0: left promiscuous mode [ 1150.318177][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.805796][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1150.846246][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1150.869789][ T14] bond0 (unregistering): Released all slaves [ 1151.045318][ T14] tipc: Left network mode [ 1151.315943][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1151.459258][ T5924] usb 1-1: USB disconnect, device number 4 [ 1151.526681][ T14] hsr_slave_0: left promiscuous mode [ 1151.546466][ T14] hsr_slave_1: left promiscuous mode [ 1151.556052][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1151.564086][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1151.591707][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1151.600034][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1151.639772][ T14] veth1_macvtap: left promiscuous mode [ 1151.645833][ T14] veth0_macvtap: left promiscuous mode [ 1151.651864][ T14] veth1_vlan: left promiscuous mode [ 1151.657667][ T14] veth0_vlan: left promiscuous mode [ 1152.520230][T12800] kvm: pic: level sensitive irq not supported [ 1152.590675][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1152.673478][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1153.143378][T12797] sch_tbf: burst 88 is lower than device veth0_vlan mtu (1514) ! [ 1153.144759][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1153.304531][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1153.318314][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1153.332877][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1153.348542][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1153.831286][ T3600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1153.839639][ T3600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.981564][T11938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1153.990164][T11938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1154.273249][T12813] kvm: pic: non byte read [ 1154.307541][T12813] kvm: pic: level sensitive irq not supported [ 1154.307881][T12813] kvm: pic: non byte read [ 1154.429056][T12813] kvm: pic: level sensitive irq not supported [ 1154.435819][T12813] kvm: pic: non byte read [ 1154.494863][T12813] kvm: pic: level sensitive irq not supported [ 1154.495574][T12813] kvm: pic: non byte read [ 1154.541744][T12813] kvm: pic: level sensitive irq not supported [ 1154.542215][T12813] kvm: pic: non byte read [ 1154.606668][T12813] kvm: pic: level sensitive irq not supported [ 1154.607026][T12813] kvm: pic: non byte read [ 1154.655305][T12813] kvm: pic: level sensitive irq not supported [ 1154.655777][T12813] kvm: pic: non byte read [ 1154.711159][T12813] kvm: pic: level sensitive irq not supported [ 1154.711825][T12813] kvm: pic: non byte read [ 1154.745677][T12813] kvm: pic: level sensitive irq not supported [ 1154.746388][T12813] kvm: pic: non byte read [ 1154.800642][T11955] cgroup: fork rejected by pids controller in /syz7 [ 1154.949896][T12805] chnl_net:caif_netlink_parms(): no params data found [ 1155.101539][T12826] syz_tun: entered allmulticast mode [ 1155.140296][T12825] syz_tun: left allmulticast mode [ 1155.508620][ T5825] Bluetooth: hci1: command tx timeout [ 1155.615101][T12834] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 1155.629707][ T3600] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.861292][ T3600] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.993430][ T3600] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.131786][ T3600] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.413177][T12805] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.434839][T12805] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.442767][T12805] bridge_slave_0: entered allmulticast mode [ 1156.452406][T12805] bridge_slave_0: entered promiscuous mode [ 1156.496914][T12805] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.504643][T12805] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.512544][T12805] bridge_slave_1: entered allmulticast mode [ 1156.522353][T12805] bridge_slave_1: entered promiscuous mode [ 1156.661154][T12805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.697820][T12805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.886530][T12805] team0: Port device team_slave_0 added [ 1156.894763][ T3600] bridge_slave_1: left allmulticast mode [ 1156.900693][ T3600] bridge_slave_1: left promiscuous mode [ 1156.907808][ T3600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.922282][ T3600] bridge_slave_0: left allmulticast mode [ 1156.928626][ T3600] bridge_slave_0: left promiscuous mode [ 1156.935441][ T3600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.465560][ T3600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1157.504369][ T3600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1157.540791][ T3600] bond0 (unregistering): Released all slaves [ 1157.584328][ T5825] Bluetooth: hci1: command tx timeout [ 1157.639047][T12805] team0: Port device team_slave_1 added [ 1157.665733][ C1] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 1158.280476][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1158.300404][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1158.319176][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1158.339276][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1158.352569][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1159.678678][ T5825] Bluetooth: hci1: command tx timeout [ 1159.854205][ T3600] tipc: Left network mode [ 1159.959030][T12805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1159.966376][T12805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1159.993062][T12805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.240611][T12304] cgroup: fork rejected by pids controller in /syz0 [ 1160.292689][T12805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.300317][T12805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.328484][T12805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.464217][ T5825] Bluetooth: hci2: command tx timeout [ 1160.550566][ T3600] hsr_slave_0: left promiscuous mode [ 1160.639473][ T3600] hsr_slave_1: left promiscuous mode [ 1160.651779][ T3600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1160.662594][ T3600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1160.706912][ T3600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1160.714869][ T3600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1160.761820][ T3600] veth1_macvtap: left promiscuous mode [ 1160.767934][ T3600] veth0_macvtap: left promiscuous mode [ 1160.774016][ T3600] veth1_vlan: left promiscuous mode [ 1160.779638][ T3600] veth0_vlan: left promiscuous mode [ 1161.377284][ T30] audit: type=1326 audit(1752932395.034:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12856 comm="syz.1.2178" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7face718e9a9 code=0x0 [ 1161.498473][ T3600] team0 (unregistering): Port device team_slave_1 removed [ 1161.536980][ T3600] team0 (unregistering): Port device team_slave_0 removed [ 1161.752367][ T5825] Bluetooth: hci1: command tx timeout [ 1162.082784][T12857] warning: `syz.6.2177' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1162.304612][T12805] hsr_slave_0: entered promiscuous mode [ 1162.314860][T12805] hsr_slave_1: entered promiscuous mode [ 1162.544491][ T5825] Bluetooth: hci2: command tx timeout [ 1162.844480][T12865] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1162.891203][ T3600] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.008766][ T3600] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.160555][ T3600] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.234811][T12843] chnl_net:caif_netlink_parms(): no params data found [ 1163.313216][ T3600] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.870667][ T3600] bridge_slave_1: left allmulticast mode [ 1163.878022][ T3600] bridge_slave_1: left promiscuous mode [ 1163.884901][ T3600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.913002][ T3600] bridge_slave_0: left allmulticast mode [ 1163.919266][ T3600] bridge_slave_0: left promiscuous mode [ 1163.926271][ T3600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.496135][ T3600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1164.550353][ T3600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1164.581107][ T3600] bond0 (unregistering): Released all slaves [ 1164.642594][ T5825] Bluetooth: hci2: command tx timeout [ 1164.654296][T12873] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1164.663091][T12873] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1165.120580][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1165.135224][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1165.145892][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1165.165455][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1165.179678][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1165.323010][ T3600] hsr_slave_0: left promiscuous mode [ 1165.343708][ T3600] hsr_slave_1: left promiscuous mode [ 1165.351934][ T3600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1165.359898][ T3600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1165.389804][ T3600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1165.397852][ T3600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1165.452816][ T3600] veth1_macvtap: left promiscuous mode [ 1165.459311][ T3600] veth0_macvtap: left promiscuous mode [ 1165.465537][ T3600] veth1_vlan: left promiscuous mode [ 1165.471146][ T3600] veth0_vlan: left promiscuous mode [ 1165.478890][T11944] cgroup: fork rejected by pids controller in /syz6 [ 1166.227994][ T3600] team0 (unregistering): Port device team_slave_1 removed [ 1166.263821][ T3600] team0 (unregistering): Port device team_slave_0 removed [ 1166.714286][ T5825] Bluetooth: hci2: command tx timeout [ 1166.739106][T12805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1167.077881][T12805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1167.141741][T12805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1167.234842][T12805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1167.289203][ T5818] Bluetooth: hci4: command tx timeout [ 1167.299033][T12843] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.306912][T12843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.314898][T12843] bridge_slave_0: entered allmulticast mode [ 1167.324756][T12843] bridge_slave_0: entered promiscuous mode [ 1167.487891][T12843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.496192][T12843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.504411][T12843] bridge_slave_1: entered allmulticast mode [ 1167.514196][T12843] bridge_slave_1: entered promiscuous mode [ 1167.779862][ T3600] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.825000][T12894] tipc: Started in network mode [ 1167.830251][T12894] tipc: Node identity 8e14f759a884, cluster identity 4711 [ 1167.838618][T12894] tipc: Enabled bearer , priority 0 [ 1167.920303][T12898] syzkaller0: entered promiscuous mode [ 1167.926559][T12898] syzkaller0: entered allmulticast mode [ 1167.985937][ T3600] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.034759][T12843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1168.048311][T12893] tipc: Resetting bearer [ 1168.080695][T12893] tipc: Disabling bearer [ 1168.102206][T12880] chnl_net:caif_netlink_parms(): no params data found [ 1168.141035][T12843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1168.205799][ T3600] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.434691][ T3600] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.527470][T12843] team0: Port device team_slave_0 added [ 1168.605179][T12843] team0: Port device team_slave_1 added [ 1168.875277][ T3600] bridge_slave_1: left allmulticast mode [ 1168.881251][ T3600] bridge_slave_1: left promiscuous mode [ 1168.888844][ T3600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.909417][ T3600] bridge_slave_0: left allmulticast mode [ 1168.915740][ T3600] bridge_slave_0: left promiscuous mode [ 1168.922480][ T3600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.384502][ T5818] Bluetooth: hci4: command tx timeout [ 1169.415551][ T3600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1169.435079][ T3600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.450058][ T3600] bond0 (unregistering): Released all slaves [ 1169.496889][T12843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.505648][T12843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1169.535341][T12843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.672491][T12843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.679929][T12843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1169.706543][T12843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1169.916468][T12805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1170.168842][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1170.182212][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1170.196912][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1170.211155][ T3600] hsr_slave_0: left promiscuous mode [ 1170.214655][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1170.236879][ T3600] hsr_slave_1: left promiscuous mode [ 1170.245186][ T3600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1170.252946][ T3600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1170.265273][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1170.316589][ T3600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1170.324607][ T3600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1170.360381][ T3600] veth1_macvtap: left promiscuous mode [ 1170.366947][ T3600] veth0_macvtap: left promiscuous mode [ 1170.372969][ T3600] veth1_vlan: left promiscuous mode [ 1170.378765][ T3600] veth0_vlan: left promiscuous mode [ 1170.930303][ T3600] team0 (unregistering): Port device team_slave_1 removed [ 1170.989190][ T3600] team0 (unregistering): Port device team_slave_0 removed [ 1171.257611][T12915] overlay: filesystem on ./bus not supported as upperdir [ 1171.433264][ T5818] Bluetooth: hci4: command tx timeout [ 1171.499928][T12843] hsr_slave_0: entered promiscuous mode [ 1171.510656][T12843] hsr_slave_1: entered promiscuous mode [ 1171.522549][T12843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1171.531199][T12843] Cannot create hsr debugfs directory [ 1171.876170][T12805] 8021q: adding VLAN 0 to HW filter on device team0 [ 1171.930788][T12880] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.938622][T12880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.947089][T12880] bridge_slave_0: entered allmulticast mode [ 1171.956859][T12880] bridge_slave_0: entered promiscuous mode [ 1172.088976][T11923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.096628][T11923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1172.114936][T12880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.122533][T12880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.130511][T12880] bridge_slave_1: entered allmulticast mode [ 1172.140981][T12880] bridge_slave_1: entered promiscuous mode [ 1172.304836][ T5818] Bluetooth: hci0: command tx timeout [ 1172.509514][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.517302][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1172.577511][T12880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.734695][T12880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1172.958039][T12880] team0: Port device team_slave_0 added [ 1173.045800][T12880] team0: Port device team_slave_1 added [ 1173.242268][T12880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1173.250066][T12880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1173.277570][T12880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1173.362919][T12880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1173.370867][T12880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1173.397799][T12880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1173.410558][T12909] chnl_net:caif_netlink_parms(): no params data found [ 1173.503989][ T5818] Bluetooth: hci4: command tx timeout [ 1173.962666][T12880] hsr_slave_0: entered promiscuous mode [ 1173.973095][T12880] hsr_slave_1: entered promiscuous mode [ 1173.982093][T12880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1173.990086][T12880] Cannot create hsr debugfs directory [ 1174.384021][ T5818] Bluetooth: hci0: command tx timeout [ 1174.570365][T12843] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1174.746466][T12843] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1174.825457][T12909] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.833085][T12909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.841807][T12909] bridge_slave_0: entered allmulticast mode [ 1174.851776][T12909] bridge_slave_0: entered promiscuous mode [ 1174.869808][T12843] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1174.965050][T12909] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.972751][T12909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.982665][T12909] bridge_slave_1: entered allmulticast mode [ 1174.992869][T12909] bridge_slave_1: entered promiscuous mode [ 1175.004056][T12843] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1175.460542][T12909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1175.541137][T12909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1175.873204][T12805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1175.916442][T12909] team0: Port device team_slave_0 added [ 1176.019817][T12909] team0: Port device team_slave_1 added [ 1176.386879][T12909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1176.396076][T12909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1176.423322][T12909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1176.489043][ T5818] Bluetooth: hci0: command tx timeout [ 1176.500991][T12909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1176.510185][T12909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1176.536845][T12909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1176.769536][T12805] veth0_vlan: entered promiscuous mode [ 1177.075776][T12909] hsr_slave_0: entered promiscuous mode [ 1177.086317][T12909] hsr_slave_1: entered promiscuous mode [ 1177.095161][T12909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1177.102982][T12909] Cannot create hsr debugfs directory [ 1177.113898][T12880] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1177.183025][T12805] veth1_vlan: entered promiscuous mode [ 1177.205450][T12880] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1177.288701][T12880] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1177.356756][T12880] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1177.493978][T12843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.659050][T12843] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.737818][T12805] veth0_macvtap: entered promiscuous mode [ 1177.794230][T11937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.801934][T11937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1177.835998][T12805] veth1_macvtap: entered promiscuous mode [ 1177.937322][T11937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.945024][T11937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1178.312122][T12805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1178.411842][T12805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1178.563933][ T5818] Bluetooth: hci0: command tx timeout [ 1178.614561][T12805] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.625408][T12805] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.635116][T12805] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.644322][T12805] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.323933][T12880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1179.485963][T12880] 8021q: adding VLAN 0 to HW filter on device team0 [ 1179.518988][T12909] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1179.605307][T12909] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1179.684287][T11923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.691994][T11923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1179.728089][T12909] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1179.819067][T11923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.826800][T11923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1179.866565][T12909] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1180.850904][T12843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1181.418919][T12909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.612871][T12909] 8021q: adding VLAN 0 to HW filter on device team0 [ 1181.739040][ T3600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.746912][ T3600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1181.886435][ T3600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.894206][ T3600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1182.427975][T12880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1183.032301][T12880] veth0_vlan: entered promiscuous mode [ 1183.160569][T12880] veth1_vlan: entered promiscuous mode [ 1183.582825][T12880] veth0_macvtap: entered promiscuous mode [ 1183.629593][T12880] veth1_macvtap: entered promiscuous mode [ 1183.820994][T12880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1184.023022][T12880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1184.121104][T12880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.130419][T12880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.139703][T12880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.150076][T12880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.255384][T12843] veth0_vlan: entered promiscuous mode [ 1184.396826][T12843] veth1_vlan: entered promiscuous mode [ 1184.451765][T12909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1184.744302][T12843] veth0_macvtap: entered promiscuous mode [ 1184.840872][T12843] veth1_macvtap: entered promiscuous mode [ 1185.069508][T12843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1185.182582][T12843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1185.280503][T12843] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.289845][T12843] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.299089][T12843] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.308490][T12843] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.551065][T12909] veth0_vlan: entered promiscuous mode [ 1187.606482][ T3649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1187.616418][ T3649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1187.736453][T12909] veth1_vlan: entered promiscuous mode [ 1187.837158][T11938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1187.845590][T11938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.141923][T12909] veth0_macvtap: entered promiscuous mode [ 1188.232997][T12909] veth1_macvtap: entered promiscuous mode [ 1188.432480][T12909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1188.500246][T12909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1188.658844][T12909] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.669048][T12909] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.678270][T12909] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.689745][T12909] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.831726][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1188.841930][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1188.861556][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1188.883327][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1188.925742][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1190.877003][T13000] chnl_net:caif_netlink_parms(): no params data found [ 1191.027963][ T5825] Bluetooth: hci5: command tx timeout [ 1191.894668][T11937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.902777][T11937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.365176][T11937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.375216][T11937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.062002][T13000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.069998][T13000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.078113][T13000] bridge_slave_0: entered allmulticast mode [ 1193.092135][T13000] bridge_slave_0: entered promiscuous mode [ 1193.118817][ T5825] Bluetooth: hci5: command tx timeout [ 1193.145814][T13000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.153992][T13000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.162076][T13000] bridge_slave_1: entered allmulticast mode [ 1193.172429][T13000] bridge_slave_1: entered promiscuous mode [ 1193.568815][T13000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1193.669054][T13000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1194.086032][T13000] team0: Port device team_slave_0 added [ 1194.242408][T13000] team0: Port device team_slave_1 added [ 1194.532467][T13061] tipc: Started in network mode [ 1194.541151][T11938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.541251][T11938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.558707][T13061] tipc: Node identity 968c16f26268, cluster identity 4711 [ 1194.567086][T13061] tipc: Enabled bearer , priority 0 [ 1194.585751][T13060] syzkaller0: entered promiscuous mode [ 1194.591600][T13060] syzkaller0: entered allmulticast mode [ 1194.608544][T13000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1194.615889][T13000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1194.646535][T13000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1194.746304][T13059] tipc: Resetting bearer [ 1194.829781][T13059] tipc: Disabling bearer [ 1194.932737][T13000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1194.941214][T13000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1194.968702][T13000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1195.015347][T11923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.023927][T11923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.185095][ T5825] Bluetooth: hci5: command tx timeout [ 1195.702707][T13000] hsr_slave_0: entered promiscuous mode [ 1195.713300][T13000] hsr_slave_1: entered promiscuous mode [ 1195.722993][T13000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1195.732292][T13000] Cannot create hsr debugfs directory [ 1195.752835][T13073] binder: BINDER_SET_CONTEXT_MGR already set [ 1195.760701][T13073] binder: 13070:13073 ioctl 4018620d 200000000040 returned -16 [ 1195.780877][T13075] sch_tbf: burst 88 is lower than device gre0 mtu (1500) ! [ 1197.165404][T11923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.175630][T11923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.298258][ T5825] Bluetooth: hci5: command tx timeout [ 1197.617438][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.628196][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.135962][T13000] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1198.183136][T13000] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1198.238702][T13000] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1198.280332][T13000] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1198.691283][T13097] loop2: detected capacity change from 0 to 1024 [ 1199.223295][ T3600] hfsplus: b-tree write err: -5, ino 4 [ 1199.511472][T13000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1199.635605][T13101] tipc: Started in network mode [ 1199.647109][T13101] tipc: Node identity f62a4ce07886, cluster identity 4711 [ 1199.665634][T13101] tipc: Enabled bearer , priority 0 [ 1199.720566][T13103] binder_alloc: 13102: binder_alloc_buf, no vma [ 1199.778883][T13000] 8021q: adding VLAN 0 to HW filter on device team0 [ 1199.808629][T13106] syzkaller0: entered promiscuous mode [ 1199.815976][T13106] syzkaller0: entered allmulticast mode [ 1199.817482][T13105] binder_alloc: 13102: binder_alloc_buf, no vma [ 1199.915077][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.924214][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1199.979007][T13107] sch_tbf: burst 88 is lower than device bond_slave_0 mtu (1514) ! [ 1200.037169][T13100] tipc: Resetting bearer [ 1200.105807][T13100] tipc: Disabling bearer [ 1200.199483][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.208639][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1200.742232][T13112] Bluetooth: MGMT ver 1.23 [ 1204.172313][T13126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2222'. [ 1204.710564][T13128] loop7: detected capacity change from 0 to 1024 [ 1205.262422][T13000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1205.899822][T13000] veth0_vlan: entered promiscuous mode [ 1205.936121][ T79] hfsplus: b-tree write err: -5, ino 4 [ 1205.969667][T13000] veth1_vlan: entered promiscuous mode [ 1207.093386][T13000] veth0_macvtap: entered promiscuous mode [ 1207.296557][T13000] veth1_macvtap: entered promiscuous mode [ 1207.515737][T13000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1207.858614][T13000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1208.015751][T13000] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.026890][T13000] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.045287][T13000] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.056263][T13000] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1208.725077][T13140] tipc: Started in network mode [ 1208.731278][T13140] tipc: Node identity 4669a582da3a, cluster identity 4711 [ 1208.741184][T13140] tipc: Enabled bearer , priority 0 [ 1208.996404][T13143] syzkaller0: entered promiscuous mode [ 1209.003312][T13143] syzkaller0: entered allmulticast mode [ 1209.321152][T13138] tipc: Resetting bearer [ 1209.397824][T13138] tipc: Disabling bearer [ 1211.793752][T13165] loop2: detected capacity change from 0 to 1024 [ 1212.460343][ T2999] hfsplus: b-tree write err: -5, ino 4 [ 1212.558821][T13174] kvm: pic: non byte read [ 1212.601375][T13174] kvm: pic: level sensitive irq not supported [ 1212.601831][T13174] kvm: pic: non byte read [ 1212.666787][T13174] kvm: pic: level sensitive irq not supported [ 1212.674357][T13174] kvm: pic: non byte read [ 1212.766840][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1212.800156][T13174] kvm: pic: level sensitive irq not supported [ 1212.805703][T13174] kvm: pic: non byte read [ 1212.905450][T13174] kvm: pic: level sensitive irq not supported [ 1212.905798][T13174] kvm: pic: non byte read [ 1213.015533][T13174] kvm: pic: level sensitive irq not supported [ 1213.015987][T13174] kvm: pic: non byte read [ 1215.294058][T13203] No control pipe specified [ 1215.665136][T13206] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2247'. [ 1215.676695][T13206] : renamed from bond0 (while UP) [ 1216.884023][T12014] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1217.113132][T12014] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1217.129728][T12014] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1217.140963][T12014] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.245371][T12014] usb 7-1: config 0 descriptor?? [ 1217.367272][T12014] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1218.141101][T10212] usb 7-1: USB disconnect, device number 4 [ 1221.070698][ T3649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.081291][ T3649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.179827][T13262] No control pipe specified [ 1221.812152][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.822111][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1224.028108][T13283] input: syz1 as /devices/virtual/input/input7 [ 1225.684767][T13306] binder_alloc: 13302: binder_alloc_buf, no vma [ 1226.789324][T13312] No control pipe specified [ 1227.024112][ T5818] Bluetooth: hci6: command 0x1003 tx timeout [ 1227.032220][ T5825] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1229.460301][T13332] binder: 13331:13332 unknown command 0 [ 1229.467730][T13332] binder: 13331:13332 ioctl c0306201 200000000080 returned -22 [ 1230.044308][T13342] binder_alloc: 13340: binder_alloc_buf, no vma [ 1230.281190][T11937] Bluetooth: hci6: Frame reassembly failed (-84) [ 1232.331280][ T5818] Bluetooth: hci6: command 0x1003 tx timeout [ 1232.339308][ T5825] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1233.387168][T13374] binder: 13373:13374 unknown command 0 [ 1233.394306][T13374] binder: 13373:13374 ioctl c0306201 200000000080 returned -22 [ 1235.901779][ T3649] Bluetooth: hci6: Frame reassembly failed (-84) [ 1237.954429][ T5825] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1241.983318][ T14] Bluetooth: hci6: Frame reassembly failed (-84) [ 1244.014636][ T5818] Bluetooth: hci6: command 0x1003 tx timeout [ 1244.022839][ T5825] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1245.191837][T13478] binder: 13476:13478 unknown command 0 [ 1245.199647][T13478] binder: 13476:13478 ioctl c0306201 200000000080 returned -22 [ 1245.558617][T12014] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1245.871499][T12014] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1245.887519][T12014] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1245.900589][T12014] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1245.911896][T12014] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.429224][T13477] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1246.519789][T12014] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1246.805894][T12014] usb 8-1: USB disconnect, device number 4 [ 1247.080300][ T5825] Bluetooth: hci0: connection err: -111 [ 1247.758811][ T2999] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.035684][ T2999] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.289905][ T2999] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.565485][ T2999] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.164715][ T2999] bridge_slave_1: left allmulticast mode [ 1249.171784][ T2999] bridge_slave_1: left promiscuous mode [ 1249.179898][ T2999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.346309][ T2999] bridge_slave_0: left allmulticast mode [ 1249.353780][ T2999] bridge_slave_0: left promiscuous mode [ 1249.361602][ T2999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.724377][ T5818] Bluetooth: hci3: command 0x1003 tx timeout [ 1250.732572][ T5825] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1251.687753][ T2999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.887238][ T2999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1251.990402][ T2999] bond0 (unregistering): Released all slaves [ 1252.390369][ T5825] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1252.843905][ T2999] tipc: Left network mode [ 1253.529426][ T2999] hsr_slave_0: left promiscuous mode [ 1253.565071][ T2999] hsr_slave_1: left promiscuous mode [ 1253.575618][ T2999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1253.585332][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1253.682039][ T2999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1253.691744][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1253.898393][ T2999] veth1_macvtap: left promiscuous mode [ 1253.905678][ T2999] veth0_macvtap: left promiscuous mode [ 1253.919790][ T2999] veth1_vlan: left promiscuous mode [ 1253.926603][ T2999] veth0_vlan: left promiscuous mode [ 1254.648638][T11937] Bluetooth: hci3: Frame reassembly failed (-84) [ 1255.230732][ T2999] team0 (unregistering): Port device team_slave_1 removed [ 1255.296052][ T2999] team0 (unregistering): Port device team_slave_0 removed [ 1256.724520][ T5825] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1260.170114][ T3649] Bluetooth: hci3: Frame reassembly failed (-84) [ 1262.284861][ T5818] Bluetooth: hci3: command 0x1003 tx timeout [ 1262.292992][ T5825] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1263.038472][T13669] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2410'. [ 1263.236688][T13669] smc: net device bond0 applied user defined pnetid SYZ0 [ 1265.573046][T10273] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1265.796378][T10273] usb 1-1: Using ep0 maxpacket: 16 [ 1265.832906][T10273] usb 1-1: config 53 has an invalid interface number: 240 but max is 0 [ 1265.843803][T10273] usb 1-1: config 53 has no interface number 0 [ 1265.885093][T10273] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=ec.89 [ 1265.901821][T10273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.913430][T10273] usb 1-1: Product: syz [ 1265.918830][T10273] usb 1-1: Manufacturer: syz [ 1265.924764][T10273] usb 1-1: SerialNumber: syz [ 1266.279859][T10273] kvaser_usb 1-1:53.240: error -ENODEV: Cannot get usb endpoint(s) [ 1266.377517][T10273] usb 1-1: USB disconnect, device number 5 [ 1268.752356][T13747] tipc: Enabled bearer , priority 0 [ 1268.842924][T13741] tipc: Resetting bearer [ 1269.026046][T13741] tipc: Disabling bearer [ 1270.325456][ T5825] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1270.336044][ T5825] Bluetooth: hci4: Injecting HCI hardware error event [ 1270.364704][ T5825] Bluetooth: hci4: hardware error 0x00 [ 1271.533832][ T30] audit: type=1326 audit(1752932505.134:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13774 comm="syz.3.2450" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb062b8e9a9 code=0x0 [ 1272.268881][T13781] tipc: Started in network mode [ 1272.275312][T13781] tipc: Node identity f68ac1caabc5, cluster identity 4711 [ 1272.285054][T13781] tipc: Enabled bearer , priority 0 [ 1272.355270][T13780] tipc: Resetting bearer [ 1272.386555][ T5825] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1272.570633][T13780] tipc: Disabling bearer [ 1273.714592][T13798] loop2: detected capacity change from 0 to 2048 [ 1274.170832][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1275.804778][ T30] audit: type=1326 audit(1752932509.414:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.7.2468" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06a0f8e9a9 code=0x0 [ 1276.108947][T13826] tipc: Enabled bearer , priority 0 [ 1276.168285][T13819] tipc: Resetting bearer [ 1276.224994][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 1276.379030][T13819] tipc: Disabling bearer [ 1281.424217][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 1282.503102][T13882] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1283.840337][ T30] audit: type=1326 audit(1752932517.434:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13901 comm="syz.2.2501" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f74d4d8e9a9 code=0x0 [ 1285.107501][T13915] tipc: Enabled bearer , priority 0 [ 1285.275201][T13917] syzkaller0: entered promiscuous mode [ 1285.282357][T13917] syzkaller0: entered allmulticast mode [ 1285.546805][T13915] tipc: Resetting bearer [ 1285.669506][T13914] tipc: Resetting bearer [ 1285.772736][T13914] tipc: Disabling bearer [ 1286.556773][T13921] siw: device registration error -23 [ 1286.963284][ T30] audit: type=1326 audit(1752932520.614:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13923 comm="syz.2.2509" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f74d4d8e9a9 code=0x0 [ 1289.197301][T13935] binder: 13932:13935 ioctl 4018620d 0 returned -22 [ 1289.711721][T13937] netlink: 'syz.6.2512': attribute type 10 has an invalid length. [ 1290.545484][T13953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2519'. [ 1290.910974][ T5825] Bluetooth: hci2: unexpected event for opcode 0x202d [ 1291.486048][ T30] audit: type=1326 audit(1752932525.134:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13964 comm="syz.3.2524" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb062b8e9a9 code=0x0 [ 1291.612764][T13972] binder: 13971:13972 ioctl 4018620d 0 returned -22 [ 1292.114018][ T2937] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x89 [ 1292.124390][ T2937] ===================================================== [ 1292.132992][ T2937] BUG: KMSAN: uninit-value in nci_ntf_packet+0x2b0b/0x42b0 [ 1292.142038][ T2937] nci_ntf_packet+0x2b0b/0x42b0 [ 1292.148283][ T2937] nci_rx_work+0x403/0x750 [ 1292.153944][ T2937] process_scheduled_works+0xb91/0x1d80 [ 1292.160883][ T2937] worker_thread+0xedf/0x1590 [ 1292.167379][ T2937] kthread+0xd59/0xf00 [ 1292.172460][ T2937] ret_from_fork+0x1e0/0x310 [ 1292.178890][ T2937] ret_from_fork_asm+0x1a/0x30 [ 1292.184969][ T2937] [ 1292.187878][ T2937] Uninit was created at: [ 1292.193242][ T2937] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 1292.200828][ T2937] kmalloc_reserve+0x13c/0x4b0 [ 1292.210899][ T2937] __alloc_skb+0x347/0x7d0 [ 1292.217579][ T2937] virtual_ncidev_write+0x6b/0x430 [ 1292.225604][ T2937] vfs_write+0x463/0x1580 [ 1292.231040][ T2937] __x64_sys_write+0x1fb/0x4d0 [ 1292.237348][ T2937] x64_sys_call+0x38c3/0x3db0 [ 1292.243219][ T2937] do_syscall_64+0xd9/0x210 [ 1292.249040][ T2937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.257221][ T2937] [ 1292.260158][ T2937] CPU: 1 UID: 0 PID: 2937 Comm: kworker/u8:9 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(none) [ 1292.275179][ T2937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1292.287692][ T2937] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 1292.294843][ T2937] ===================================================== [ 1292.303312][ T2937] Disabling lock debugging due to kernel taint [ 1292.314738][ T2937] Kernel panic - not syncing: kmsan.panic set ... [ 1292.322645][ T2937] CPU: 1 UID: 0 PID: 2937 Comm: kworker/u8:9 Tainted: G B 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(none) [ 1292.339413][ T2937] Tainted: [B]=BAD_PAGE [ 1292.344572][ T2937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1292.356858][ T2937] Workqueue: nfc2_nci_rx_wq nci_rx_work SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1292.363874][ T2937] Call Trace: [ 1292.367971][ T2937] [ 1292.371632][ T2937] __dump_stack+0x26/0x30 [ 1292.377061][ T2937] dump_stack_lvl+0x53/0x270 [ 1292.382811][ T2937] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1292.390017][ T2937] dump_stack+0x1e/0x25 [ 1292.395210][ T2937] panic+0x4bd/0xd50 [ 1292.400138][ T2937] kmsan_report+0x31c/0x320 [ 1292.405728][ T2937] ? __msan_warning+0x1b/0x30 [ 1292.411513][ T2937] ? nci_ntf_packet+0x2b0b/0x42b0 [ 1292.417817][ T2937] ? nci_rx_work+0x403/0x750 [ 1292.423538][ T2937] ? process_scheduled_works+0xb91/0x1d80 [ 1292.430669][ T2937] ? worker_thread+0xedf/0x1590 [ 1292.436705][ T2937] ? kthread+0xd59/0xf00 [ 1292.441965][ T2937] ? ret_from_fork+0x1e0/0x310 [ 1292.447851][ T2937] ? ret_from_fork_asm+0x1a/0x30 [ 1292.453992][ T2937] ? ret_from_fork_asm+0x1a/0x30 [ 1292.460136][ T2937] ? vprintk_emit+0xab3/0xcd0 [ 1292.465959][ T2937] ? vprintk_default+0x3f/0x50 [ 1292.471856][ T2937] ? vprintk+0x36/0x50 [ 1292.476935][ T2937] ? _printk+0x17e/0x1b0 [ 1292.482266][ T2937] ? kmsan_get_metadata+0xfb/0x160 [ 1292.488597][ T2937] __msan_warning+0x1b/0x30 [ 1292.494182][ T2937] nci_ntf_packet+0x2b0b/0x42b0 [ 1292.500211][ T2937] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1292.507722][ T2937] ? sk_skb_reason_drop+0x13f/0x440 [ 1292.514186][ T2937] nci_rx_work+0x403/0x750 [ 1292.519706][ T2937] ? __pfx_nci_rx_work+0x10/0x10 [ 1292.525843][ T2937] process_scheduled_works+0xb91/0x1d80 [ 1292.532808][ T2937] worker_thread+0xedf/0x1590 [ 1292.538668][ T2937] kthread+0xd59/0xf00 [ 1292.543730][ T2937] ? __pfx_worker_thread+0x10/0x10 [ 1292.550124][ T2937] ? __pfx_kthread+0x10/0x10 [ 1292.555831][ T2937] ret_from_fork+0x1e0/0x310 [ 1292.561520][ T2937] ? __pfx_kthread+0x10/0x10 [ 1292.567194][ T2937] ret_from_fork_asm+0x1a/0x30 [ 1292.573138][ T2937] [ 1292.577319][ T2937] Kernel Offset: disabled [ 1292.582594][ T2937] Rebooting in 86400 seconds..