last executing test programs: 7m54.257663025s ago: executing program 4 (id=5): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x32, &(0x7f0000000340)={@random="e9a200", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x7, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x6}}}}}}, 0x0) 7m52.441881097s ago: executing program 4 (id=28): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) 7m42.38419631s ago: executing program 4 (id=50): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 7m41.916380897s ago: executing program 4 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109840, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 7m26.848845608s ago: executing program 32 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109840, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 6m14.710596051s ago: executing program 2 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) get_robust_list(0x0, &(0x7f0000000400)=&(0x7f00000003c0), &(0x7f0000000540)=0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) 6m13.112417533s ago: executing program 2 (id=193): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pipe2$9p(&(0x7f0000000240), 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 6m11.751593314s ago: executing program 2 (id=194): timerfd_create(0x7, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x5, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000003, 0x20000006, 0x4a, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x808, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x9, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x9, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x9, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x2, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x9, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0xa, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0xa, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x9, 0x2000004, 0x7fff, 0xffff, 0x8, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6m11.245034662s ago: executing program 2 (id=196): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x2}, {0x7, 0xc1}]}, 0x18, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x280, 0x0) close(0xffffffffffffffff) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, &(0x7f00000001c0)=@multiplanar_mmap={0x9, 0x2, 0x4, 0x8, 0x2, {0x0, 0x2710}, {0x4, 0xc, 0xd, 0x9, 0x61, 0x4, "6b2e1eb8"}, 0x6fb7, 0x1, {&(0x7f00000003c0)=[{0x5, 0x3, {0x5}, 0x3}, {0x3, 0x8, {0x6}, 0x200}]}, 0x7fff}) r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x2, 0x0) write(r2, &(0x7f0000000180)="01", 0x1) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) pwritev2(r0, &(0x7f0000000640)=[{&(0x7f0000000080)="bd441b135b4ddb7a06f592e1cd52c6db415f3388", 0x14}, {&(0x7f00000000c0)="0f0ee4d1b8a74be07063ce2d57cfbd66f2f60af44b357c4c170d689ad91c666cc7cea895193399bc3e17d02206486fec6257391a7957bdc512b5bab701a253e47e1256caa368e614f51717e318f88006870dda00af70f7bf315963dfcc00f43cd3ae1e35eb60be16bc3fb8f0a9bae21acf7bf8d78f3974ebbf8f8bef62c26bbb7c0b292f84912a2516ff125acf4436316db7f9bdc4dcdf5d43fec04560471f897522c8f6958d9a28988a6ec975219a3876471dc823bb93184fef1d158d", 0xbd}, {&(0x7f00000001c0)="da1b56ce06da27ef99998b63e9892e38be61c75f46d5aa1ea3dc022760c182f93adc", 0x22}, {0x0}, {&(0x7f0000000340)="536dff2b807782dfb103ebd0df3032e12ec61d4e9bd7930670922c83114a0cccde887ed47ce432f194b6f1264f9c82c84d45c1d5539280cf1520a88cca115003f2ed9cf4711a8a59d0d64c79b4623e558031292f8209c6a3fa1db17f49404a3a57bb51561fc311f92d45865561", 0x6d}, {&(0x7f00000002c0)}, {&(0x7f00000003c0)="f58eecff9e65ee781ca9ddae89180627f19cd0537fbbe0fd9799582d3996ca68d6e629e1772ce877b6e7d804eb5e56295f4daf3de206c0dc32cf42102226389a59a7e66b00e1cee42e1edd3f4ebba26ee36707a7efb0cdac5fc2be4b8efb42afb1c3bb89643f1d6b35f8d07ed72e0938f65eb9653a2906cab9f0f7fe663037f984721e1b42b948436e202f1dd515a72b9071e15d655c51450116458a2f8f5ab66e18", 0xa2}, {0x0}, {&(0x7f0000000540)}], 0x9, 0x7, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000002c0), 0x4) socket$inet6_udp(0xa, 0x2, 0x0) 6m11.03730525s ago: executing program 2 (id=197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109840, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x400, 0x9004}, 0x4) 6m8.460347227s ago: executing program 2 (id=203): getrlimit(0xc, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) accept$unix(r1, &(0x7f0000000640), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x1, 0x1}, {0x2, 0x1, 0x1}}], 0x8) bind$can_raw(r4, &(0x7f00000000c0), 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 6m8.072242855s ago: executing program 3 (id=205): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r1 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000020c0), 0x1, &(0x7f0000000440)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}]}}) syz_fuse_handle_req(r2, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x5, {0x7, 0x29, 0x20001, 0x0, 0xdcf, 0x7, 0xb, 0x800, 0x0, 0x0, 0x10, 0x9b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x80047456, &(0x7f00000010c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000002100)="a4363eb5bfcc06b4a995838babf37cb5659c8476c4fb1c87d0f4fee0761880fa0285c4cb6dd717c4a32afdd6416c146e7680a7eb3a3f3e3146d9977bd2501397935c15e1c455e1cb93df38afa2bc640b0e3c57a5b8eca8855fbeb2c9a8571612f2bec51fa19d7000dfc85f783c99da72102fca7d98251c8d2afd01c2bcbc2c067fec04f3b6e6d245620a42a47047c0f65b8341ed5b55fc9dfd887a2f3e7e819b004d9e0f08fc5ca1886554091075332086a4f96b3235b5abd3018bbbfcce7ec6d5a23754dee9d797fa8da0267bb280a23a471aa1fcedce9675470a54b754041bf26f1604e01e98b74b58ab9fe56b998fc305dfc80a6d877021cf8347ff13a0c93b603b3d50c40c3fb968d20aba78064dbbc503e63cd4b0be151456bdcbf05923e56c2ed81bf22ec34ea21d05caedf6c6182b6ab893483aab137de07952858218f7d49b69bc3f8cc10a7557692f02fd81b5a0227dada59693df5aa19e3adc709802bfaecbb78c957a05bf92f22f218dd64ebd1d4545d16aa2b02cafd1be5e9325f6f0da39e23ec4798a3dade91e9cfd4251a38c09f95d9c09159a2bcae69eeb2b90d53803c4e6776cb9c61311fb70b790da8c8c32d66fba62a20329c1b13dc50fc1214949c4efc70e5513e380ceb914d2b6291d3b32223919839a11589db42817780e7b197668b979005154aa0484e6704d3f81775bbc2aaa723b68c1f94cca1e8aa358512799399d169db481e424a4bb1feb994f1904045886cecb4847ca8e7c6ef915afc9c254fa6a100c267937ba9db81f61c60aca36a42e11da5a59e2d57f910f18807b750755b44c1f523bcff36416e4324a71572ae23b877d9606ff68a1b8f455e24ab45a402962e64c92b792d535873572c7d314666f04a0090aaf1c905b13888a1d5d960dccad03f03ed2cc0aa69ddc1579206f0a5322b87f393134909f6784515eda282fe94e4acd864baaf967e87bf0ef6c6cd72a6b90bc691183aa4e9fac2ecf4670992b017c655a8cb0d63e8b9fe16ee17df20c57d59f3cfac093bfba1dd32205689b23c63e81a05eaa839bbafcd66e7205b6017a8193298620e6bdec4e8973b85db20fc74478362c6d51c2830f8a86dc440d9ea158b04f62eb795d57407838f09cffe527f547fac76dc9c3899b119c9859c9417565c47b7e52ac0dce2341e4a38282fdd9b1bfc5f272998471d722ee03e5292438941e66dc982ec55121820e7d96e44a0e92380e0d4d2367bbdb91b7fa7370548020b13cebda7841635f5064f69763098c096bf7007634bbc6cb1bd35708a98bad275575c1ebc4df4207985406e27a80aa8ce88237b3e930c2e432f7f46e088a8aec85aaf7e3adb916b4327d85e67197bd5ebfddf7e8d2676ce5f2003ae820c6dad33ac3eeb1a6c718c58120325a0730b940f43c393d11364cc31631be0e7d364e9025208b893a59d3bdc0bde6dfbf7c158c7c04e116fa73491e24f82e1a00b63888f5b6fc3b2e720ccdd47a4eeb9a208121266a6335a1a37b92739b71092099f77f92fb22dfe5d83fa2117a5611591b9620694861ee9feb8e457efe0e4df4bd659aaa0c9010fc3cddc2febc28a0fbc6d9b978430a97b81a5fa13a8712d51db21656da029d89bb1d7c6aa4540bf4de8061a799e8f6899297a32a6a1b9b9ac574e3e6624dcc800744d3464790dbacbdf6aaff6324692501a9118c78ef7ee81e01fd4092e7ebd96cde86a52fe75134976a70d77e3c3ccc1834ee887b0691eb557537c6686ffa8743e5eff6034f9648b5cec9ca110d90f95744a32d3ea28f3dae2ae9397a2670cadd78bb9d21f15aeef7cc801c1670ca85f123d4c4ac2d29bd0a2a0cd1f68e878b65991f78ed6b68c74501329ee38166d379ba12ed3cb5f840f7f1f6215e212bf7f45cc04fb478030d2de6d87920f1a6a67a9fd4151183800c13d49d2a49f06847ab8b3a17b9365cc15cbc01ded1d779e1d3804b6849db00353f9c1f8909db2e84f50f5bd7d92a2411bb44a85e51a26f664d44b88e073dadd53653e52522183ba39661bbe50e0d9d1d979f25a2ac55c06505791cf5354a7504d1f58ac9653fbd97ea53ca949bf68663332c94354f9f350f4027b9175c295ac188188b22146a16b40e7c943fed729ef4f4e27ea3be69e52e420ab10aca5a5840d462f51e40d3f855d8994c3c82448409bd59b6d1bbb2da5afa9f5dee94165f627882b905c60d53773e08d7074132149a54c788cbafed7659f2d27f11792854898d1fd56d61d2330d9a927f930e6e10ff71b132ea5e985f3c2e401fd780738681437c76fd99ab7be0ff4e5d95d3f7633f8828601a2e2b0762bbf5a95e10e7515c779544f794ce12a854df4d1fe298c79a56c0be46f46d10d02771a2ce734b3445abb2c43b5a7481553e8ce7c9085d4e07f1cd734f6e8306da8e24a739e31d5a92dbfd39cfaf3c65bca2e23b1bb15deb71caaaaf030c6fd776b24af4041cadcca4154a836e38ec29f12cbd925e6c671e3842eabf250b0af3a94cb2a6fe5b890c6468d7c8e1f18aeaec731551f89ba50715367e615843a9f9f9fee926c52b002ca20bbb9a48b9a78b463880458cd5e64af6cde959384203da6cac2d90530ed31d6a108c8ef13ba975ba3fe2c882600f70095756eae77af1cb8b513dbfbd369dacbe295aebac11ce623cb5e9de41c8da617e4dc3988d6d63316c04d4130ac3fcb56d6a95f956a9b6b66cfcda6d97ca79af965eaa332779faa18c6266cd89d5dad8bf8b4ce21c681f64052ce8c056467658622b842be42c001afcf513a2f84d886961db8ef7bd3fd6cbb165c93b617040deb74edddb0ba6291e393dee4a85f7b2932a0dea34b9de3bf4cd850d22ce2f40bf87e8bea8d410a7537736e44b999b1a3d548b270fe13d46ae890b0797b50cf8a6a4038e7a7536b1f0ef668f0b864311a9d80ac148c7970141e44cc87dc1bbb2635fcf9ff1e9e8eeb6cc6df298a1b62fa8d30e580c6ea258b7e9e8406d7dc5adc7124c8e304c5b20d8b8c4f0ed93ddb850446c4c752bba7347a3259e794101bba76918df2ba75eeb295ddc13d87257273cda0106c95f9ac1db7074dbdc543cd7970934f361a9441f0fa93e7cebe7bf1e023cb6331795f9ad083b1ee1fadbf8e5da4a71bd3740b4c75c92464bbf40cacdf79bdea281c590a7e11a4b52a875efb0c8f28a3ca926e8463986a70f274b49c19c564d92d46fd9b9d172198a0e2d1dbe4ce9ebcb302826ef0b1c3e28db951a64856b3aadfa024892fc92041dad53f7ea222e22ff767d6543203caeb2407bd2678b82a13d5e2ab29c6e92d2a1abbde32e827483bac455376f77f32e41cd996f875679a9520e29d611dfe289ff510509d467eabece7d17789602039b8e3fc806d21130ea157021d6450c4bce15e88838e4cd86c3cea5b8d5b36d458c4b63a5422e5eb224b228e54eea3162dd219fad59a21e0ac45b3e0b62742d879d052eea285a41a796c3e49c52bada4e8c07ff4cf630285992a11a9287c4385a79dd9f3079a4a304a45c6a480f1604127c248d881b2b4c455f772fef29c114e5ee5e5c6b72a41d3387849352dc9fb3366115a7f2c4f858fb0081ba4e6a7a4534d8e714e308f67ed836cde899478af43704fe7e220b72c6b1ef66912602638ef2a5a616fadc614cfdbd19bdb65430f58605e913b1bbb01ed95f7c480453d0d5ab801d27a26f76588f5fb773a2902b3cfd00500ffdda2f0e3f3852271fd0298815c6d499ec1f4629f312cdafbb5d271f0d0a32434bc0ad7615be658aa6d2c73472dbd99c2c9ae2bdd8470c953dba1697ba0d0a0d1e58a68e2d52159c10d404b69f5476c355dd02762d62d0c9e1641a5e16c80b83f397f06d8e36c60f40bc2a729f3f799adc05467594a608ccd506ce675df8f21fa1eb200ebbe4d003c9333873e1255497e4af58064e4b29d7cab1043189c0cbb399430aae5226e92dd872ec48f1b34cfc6710c6340e2e1817b3fb72b56415d2c30cc8e340ef966d0e9c60a31d3a83c43f48f0030ea554712b21cee47ed9444e1c06aba554d63a6640a6fc8eb79c952d355d7358076c6c34ec21be2542ef358e4a4461bc60435b8fdf99929b477a25dce52a61609a49ec32546fb1cdbb8c33742891d741744bf3884b14fe7e63cdc04bae16b24c2f18521c8f3d42405907148697805a1c5641930b61ccac310ac6fbdba47ca6af20377f613f7221b4e63f9ea57ccc2a45ec34fbe0e74277671ef9a507d38ac5a92057a3a6e7e685c97641b52802d2c1d3cd38624cc0a2897313f4a95b9861cf49d3336e0db551b3659a5102c502f087ce62caa98a35393edf8ccf8fefb5dbf384b145160b857f934c3bd4f9b299f3973920c7b049aa9e7833cc2e42b5033cb16be7e44b00b61db365b59a5e104d5a743d486e1c836055e2e2c96c38a1ba8fabc9d8db5aceb91c45afc518b23c20fa55cb5307ed2782579c04591bd64a71533adf9496114329272486d34c79a4fff19d28128aaf7e5957d33fbf6133496f05f2243f3165b13f9f45f40469b7d4fd6ac7d1268f959b21e30d18ebda243c2907f6b2acb5f806aef1f7e82f0b160bd87fabb5ee5889a680109caacaad1438929b125338fe02ab9c45699775292ce85394383cbedfbd2e4dbaadba3c511b51549cb57eab1544f8897bb9202d21ffb67af0085d7726490a1d8a556904efc8c51adff2fefcc59a726b9a549cf554da12e34dcb6013e80c254b41aa06ec7a4e938e9e3a0ccdc7cf7d1eb06ddf91c5216156ef5dc027ccb54fcae9562746dbeef6f5fcb27a8b9498f34d115a146c8a37eb3afd99591bffc588a62b088ea17865aea331c089da821f04da7dc951686fed9a5739367ace2b031fe089cb42c15710b8edeff4abcd66fbdb9f273b511904af504f1aaa46fa7a98a5573b2efc919a97ec3170c2ce3d93c382bde008500721686e808ac357f60845d89f418c3f6354e8fb3539df46fedb8ade1631dd5837fd223cc96add869e2c874dc09bc3cd653575daff05e0685511fc4c6b8ffa07c151d8b2d1aeb80bc03e21a5c435adc3e729fca43320a02895f687887d3f3e3ca9a29544924424df32f7a682b5e20173969a5cad9da9f7ecb8b68ef30cd10b2047a1a250664f7107453013901fa72481d43b20bac3253930f395d96ba07d4ff17949a0f1e67dcb1445351fcd2d8cf0e6e3fb7aedc62e824a9f310a4a083a7843639b2afea13b6ae1508acccaa353b19680aa24f1d608a51d5f1a2cba3c94ee81dc20675d13612c3d1aeae95c30820a05be51a569dffae38322554851c29debf31543d7b7e6863b16d52bba45d959e4616bde6bdac2ba6958ed074c6e00c4c7608bddf8e7edd261f2d1ad59e336ea719db96b479141bb8e1db804ddc7ec058fc8371c097245c6d706f7eaad1e2f79a8e6e1e68d01b9c86165c1b945d097bc1edccffd34d523dfd58e801e9d089819ea09eabddb28e0a4985dde34a342c81e7a779cc283af41d5e6b5cb75e5dbaeba8c477262f3f7ed1cce1d1d8a289c0bd9c852a2d3f19babcb83b0573d9ff7f5f6e753e1410ebad1d97bc7dae0a88a678229e63bbe0e5d3b928e9533ab57558cb24064beb12fb89ddc4838a92007ea7b1032425ba20c7ae033c8cdea1469f6a493bb355ccb165d5ac5dcb8d2b2dd376e8a967690f63de0677854ff82e7deef7ccb2b8d6b7af17be8a7101599f53094c3a2ab4dd05878c214f8353883f1262cf8cb0689b79c96e5d7e17e2f58cd89f90b723b8ba168bb96abec02899850a935021b022163ce093be208941599ba6c6afe38c9b0084a550d8b7d1f586d0792e51124fb8131b7f96a0e0325d46a0bfdb43a767121070cfaa492be2b368a668263dd8cecdfac129d82b5223d3bc7c8c2516ba9c14e984a14c5a6a6278e5c3e30edd2b89daf7b9f7724bb4bf418a7dfc51d36343390f67686a1fff5b9aebf80625d6d69f5bf81986cab07327e474cc29f632797d38706610296080fe38e69bcb027929f92077d7c5dd09f1964bc62c3800a73f384347efcbcfddb26da21edf1800bc35f707a720ae4040eeac3f3308c32e629f40e8f28957993b7538961a065bfd4e774392cf7f54a4fcbba169553b0ab63c0e74ce3a91ffaa947031f99194229b97b1577fadc47d29b918e7024dee1a16cd2ee0e17643b86f0c11e1e6940530046c4e399348e732417c8f5d60d5fb97692a9d884875f299fe63d70f5f781c3ef339eab142b8d4e9d3c6020dce33b672d6f686d5423fcb684e2488d29352675e6f2ca148fa234254cce8d070be947a20ec7a9f0956cadb0749b0391da743744e75e36203d1d4ed19e6645985397e362c22a7ce7e092820447ae81ede84abd319e4d1eb3df45e9fa58f0b2d72d01189159bc005bf134da6f17089c23c9bcf902bb75015b4665758db78dd656edb402957be88eed46ac3980681f969d7ff69e88e2bf986a59cd40584e166fff8b3381a8503be41ab794cf046f2a83948700aabca64ff77c1ca9aebf7d556f24bcf14bf7799843128c07f019273a13e58ef20cbcd11d37fd7c799156b76f98d134b85f71e8c3e870306a8d0736390ffe2d59fe86e66f5eb0623c23f50f76c8bca04ec40bbcfba5da36b69448e4492963a97433e59c308a6b8eb8f206f167eadda2c3f092dfe52a93c497ed8933d84cad6079f1da871feca572c624a61b839e2965448034f821d4a842442a4976312570ceddfd65c59fb668c78da42087fdd0bf28af137f8309f6df017890febffe96da658a3f497f2b759d0b6dd45294d354903b709bbf1ff1aa34ec3cdcfc2eb6838f04ad3565f2e95183adc744a52c6f5115e4ccb83eec09576bf1602e43ee5626538ef4ef32cfe3da762235112cd40f43e850eac42ac71a427bb09aa56bbc587b4a45a9e2cb023df7b48dff12d41d3624d7d9be7f3fa2fa12468ca50f0aea6ec22233d41d1e45d037229c285fd75701f32593800aa9e9a756ab930b5b1d9e577ae755b990eec438101dd413fd66e376d899878855d4516f1e9883f2f478f6b3860946e317f0d9a4c8c4c8530b11a0fbcd22babf32676c31f8702cd1f0c38d58f49420e708706797cde8d3cf92c886d65101540a452ad42e0d0b8bc3442902d08af9f44e24f9724d1d8682359dddcd4d06a2c3ad2c4e11291c0a0ab81d49ed98642f0572b5831e5612e7523b0e7b63734ed727e70ff7906ed032162fcb8c53ad5c3960a1fe568b0abd36b1db5a8733a02e5354a78649eed03eccabfca4283570320da44aec7fa0c87589e126285cf993ae69ff483e5eb3902a3e61c6807af4b4d3a3ce774762fe3b656c13cdfd5d21596e4e55b47c6e592aebeeb76b2ccf01da967a263e3db0f9e023735442cbd8730e7b36d9a0b00a86084a9d24c52c25a0f75b668b944527f2886d9b121449abe88f85bac1a654ffb3c214f92f555b424baffafb7cb94619d7cae15aac50c6ff39551495e2e5f2c56b0c71039e67187711af39fb7687efe25b5e9a9bc47dc93591edad2cbde4e104df9ce1e21e6fbed1b519fa661bb587b36dfdce8fd02e5f38cd8cc2ca7485a6aea4f2fe552c7d8484ac88e41db5244dd59746d797c0bb4f5389246c85e97321816082eabeae41da1a85ca7a93dd94f00575636d4a39804f39fb8a016e7d3f0a0c714afd61c6be2256137c23b31634ad31470514d705a66cade945c9b77086b6336b55a756cc4211ebb447adfd4245e64c5134a10d24c89801de45c2e765ea6804ca3c5cd40ef9ad8830ee58c1dfbc6cb3477ebdd89d379a4a5bc4ce34250bd3e82205cefa40211f331aabb1b88fdfc49ad0ebe4b0218f2db2443ed58d7b866230c02d767566086e6557b33d6a4e72d3b7fd7b2a45179ccefbeeea49c184cc5c40527af71d8db8f6bfe917f7f40fd4d4baa9a861aa352a815ecd823cb5264e1cf4e5666efb60c0f1ec91c220e3b17cf50e4572dbd224bf450b5bfe8a3828fb4f2104a452625b04e45223141e61d30e6d93cf7e086cf34c1ea7678c6c3d410ae2022e916d770357ca3dd160b906e033c328628332509cd43985ca62544a9a262b3da018382a07d132c05a467f2a596edd413e288c583227c9448be29b02a4c98ed51c90014d0ac8f0ce7211526732516a09cd40c53efb3656a71bdf5857091e1a204472bc1e9e1db18eff2e689cac6c6dd2248772e2c73d7f418c88f9076d0c4d1ec4bcda9b1c4e5e2f8cdab9fbccb9365c11e4a1cab831e0e173d2ea160aff7c59bf48194e0a44c16ff34950d456caf34fc8bf150931d663df4f6ed2b99a64d4887cbda19000906ccc0ec77eb86e6c67f3bfc6c11b4b27c02b42a55703c8a442601bb7767a3a3c3757ba95fa00c017ddab809e3f17e0243a7540d041db45b5134c30b06027dcb21ed4c162f287f2c9bd4ffffd213ea6638f98c9932b2d8b87e1671b61d95ecd2159e60eae80096fe7fcc38477b0f9e55724bce4c7cc689d7bef3ec428e73a9a0c414f0e0576789695cf043989da3bce5a01ec58737fd0a63c5edb53caa18bfd1e8c69233e926f8bb6506226584ac1c40bca9bd4c9e6d82362a0d927cbdd3f24d92934893a853c4c53589f5266cafe63b5503d744fc11ee635be01986db8b0c466b911cfcc93cad277b2c4d87c21b685a48e1d34c17e75e02ab3155497b9552b51097d8a012761985efea473606ec3202d42b00be355f93ed19c2721353c2723b98c17df7f0fa6759b5b40dc45fc8d170838254103577fcc1c57302578bbcdcfd7e4248d37c451af1a6fbcf5915a96515d11eb57fd1819d50fbda2b66ef881fe984f215aea76ddaa819627daf734fd1d122db4e598e7a804bf090067d6da0bfecaa947d002299f760a0ebfbdcd94db87b9b4a9db7b43b8827897fe96a701de929897d34d127a60036a64c15f851a3e6036a457cc78892d95b7f3f17a5e835293f7cb25e253f3404701a4de02b4231066ee1db416243c2a06db29742f54b3d5c65483c34fc7b6f370503e8b415eacb3e61b0dd4f028239ce9ed98f637949bbfd437338e4b9d5e2be24dfcd79cc6798193aa9396068408946de67dc2614efc8a127f5ccf8bc4de21b3752ead0bc300f558049a00e9c9961aa5f2f51b88f69407d1d9782b6f91d8ad49c06b20ef3a81eda433b633925ff05eb583a3ec7997225a26bd2a1fb2d5b586853c037d69778944a9bfc392c6b2ed3e81ece1b1de50716e3a556ae74adf99a7bfe26a8a9ea7eeba2f3840ea1712de6f558a573f6f1df4718da58d750bce02368140c897fbb7e5a74122306066784005e8e5d2802238e4e860b91db2054c81f815927b77682b5869a9b7b3afedaebc90bb373f6906e9efbe1ca83d2cba8d9dd2bfd5df62fe0a8f812fc840dc36cf975d30ce2c9256e3eaa9d1738531138397af53394fbe4f82565fca9ed207573276818d822624a27a059e5abcde1cd18cc155e8c585d0282b4c5f4062bdd11e4de3c4567177c61bc473c55b12156acc7d94689258b7cd97a9ac1aac60f6aceded07b8d7fcd5c0b8a890ac3eaeb14134b9c089bdb328174de75a4388696e360207cff458226425b3a69eacfd36d6a311d65863dadd2cbef6dbdd8876737aabeba15e65c417128f025975bd91145ccd21dc638d89c5464dd0cab445cf9e90e47223e7d8463fe37e05f438e43f91438b4add55ea877e0cac77573602fb8d6e024bedf586b71f92e34e4336563353ff84b2164e339bcaf6fc369bc47677d05119a7fe45204b56d3750900e8211ac69b8eefb02f9bc7958f8c1771224ae075ca51a99cb02d67462aca1dd2d4e95696c3b55a4a73bd83326128d8c68a6c8c7871f5400db6c730113ab524dc0013b4c4250c98d441531595fdb825c8775ae068e70692f01a7d552a4fef6233698051dfee42494b18ea06d4d4728631292457d245b8c53d4e2d703a76896549726dc2e438f9fbe129826a86cf6fe8b39bf7b09836c06da8f1fe56cff8b5b48be2af62ee9fe93dc44fa8262f3801c9844619f14847ef2d123a18112db1bfe4f325da02f9bd43b928aa6d144abd4df68e38e2a303230a3d381bd7d6692febfce8c571576575b8e1e494b46821a9308a3cfd668e733d16969085a3bdf309651a2a0c521c04455de8aa34c76014edcf2ceea729434a2702072fb617809915b2c5fb598204fd28d09d2a94c6bfe2be93f5753b7ea10a45b06316da2ff4c39b6711c784a614c9a52b83dee0759c0f7339bfb35e2fdcf5a05cdb2f3171224127539c0f7149cd6599fa8929a06db7a4e89e71b992341f24e74575bfcda66c2cf877ec8ccf84e035ee1644869236f3f60a9fb5b2a9b2cf7fb65647dea57ff4e14deb335c79f609c602033d011084570d9d905f61a58f0f589b8cd6447d26a5fbeff0aa5a3185c8a2897ca9ed9bf7cc3944fea73f36ad44712fc04a881d028f786f70f3943a36187aa635e1969bf6b4032726c6da713ce4d110615a404a58cc7bb1ac8a00fa8f7aeb415ff3f91e0f680340da30ce6fdcf0ade8b880cf827b074492f2c365d3e7ba87d572df5c193d968d458c09fbfd541073ff73be92b14ce551c50dd62ccb6fd1a08ef8c7b14a76f9eabfd103d63dfb7766e34c29c8fe2bcc6f857d39a8d478f67783900d0bcbf806b2cd3ec5be5a52bf98b743973a5707b4e16f057145a2e9cae3d9428fe87c50d9ce54d03e76f85bfc522b2f23fb4dc2472eab2e7cb6c55d77f58c4e2a8832ba15f19a72b3abb6595ff1cc94f4587e66aea6fcffc3c8e1f76ffe9be4d8ef2e83fb796d7622d47e88570d5a4fbaf71b0b3142c3aa481aacf8927c6b2ba1730b88885fe858248f8cebce4f3a14ddd294f1c5adb8dcb2a989d32b83ba4d26a9e87088057d7a30d01aecd8c2da6e722d11303c1ac325ce56a972d6aef0a2e12b3d97c5c5918981fc4776eadd9113aafb34f0a6c6784274cf6c55ba862ce1575347196e8e82504ad4935ae30fb725884c5407690350dafb10285a00bdc3cbf75e905e3fb93eb26ce1d118c21d7a8abfc4234b911c65923a1e415f4fe769556d2c0016ea7375647badc443f310933d596a17711474366697c21d0d25a17eae0d0371ead2bb676be2dae6a1521851687e5bfa55fc3c45378225f584bff9eb55be94c6360b97456eb856fd011c564310a4a5959bb0f3f05a02f2585fbe46239fd54c2d0f013ce2795cf1cd7c7849d3b20946f3ff6ad54b1cb49d8696b1d0527815ee56ecff623d173d5738982cc6109192a4d08e6b78f527d56156e28f613f845c0e25de6a81196b640404ede3066e3b2bff2dcd103535851ebc3260f0911372a945f1e8f3ceec3e1ce60b5126cae78622a1ab14951f3a0c5045640d45246faa1ea75cbd0aaade81a96bec1807e975449b79da98a3d2ac02183fc88ca0988f59e7d901b9d9d7a86e8e387352d24f5a27e81f78e568b0804c91461c96e382085beea3e0115cd346393cd5be947309eea8770b2f3d5a5838a013b652dc19d5a85f7349540107ca7b0af5dc77b41d763c838f159c7a187a9db6b45b3fc8e4f699d3f821f66e6904c42fd0fb4e55b1ea75479a230f743dad6b5e2f224f44710597fd3b3c0109f00547fec86bf7e5877d6546d094540592fc6201df1f4fa797c7abe881", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x0, 0x761, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 6m6.857525509s ago: executing program 3 (id=209): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) creat(&(0x7f0000000180)='./file0\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) flock(0xffffffffffffffff, 0x1780f9c373410dea) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket(0x1e, 0x805, 0x0) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1}, 0x2}}, 0x10) 6m0.40233061s ago: executing program 3 (id=214): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000840)=0x2, 0x4) 6m0.22847085s ago: executing program 3 (id=215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) setpriority(0x0, 0x1, 0xa7a8) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) 5m59.2004922s ago: executing program 3 (id=219): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa1}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e0000001000000000000000001"], 0x88}}, 0x0) 5m57.482414327s ago: executing program 3 (id=220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd) 5m53.185284836s ago: executing program 33 (id=203): getrlimit(0xc, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) accept$unix(r1, &(0x7f0000000640), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x1, 0x1}, {0x2, 0x1, 0x1}}], 0x8) bind$can_raw(r4, &(0x7f00000000c0), 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 5m42.26517162s ago: executing program 34 (id=220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd) 4m4.162668819s ago: executing program 0 (id=377): socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000380)={'syz0\x00', {0x4, 0x6, 0x7fff, 0x8d5}, 0x2, [0x10000, 0x6, 0xfff, 0xffffffff, 0x8, 0x1, 0x6, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0x842, 0x6, 0x3ff, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0xd27e, 0x1, 0x1, 0x7, 0x9, 0x1000f, 0xb, 0x9, 0x7ffffffc, 0x9, 0xb50, 0x0, 0x800, 0x5, 0x0, 0x2000007, 0xfffffffe, 0xfffffffa, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x3, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x80000001, 0x9, 0x4, 0x85, 0x8, 0x7, 0x9, 0x8001, 0x6, 0x8, 0x2, 0xb, 0xfff, 0x7ff, 0x7ff, 0x7, 0xb, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0x6, 0x9, 0x9, 0x4d26, 0x10000, 0x4, 0x2, 0x7, 0xfffffffc, 0x4, 0x6, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x7d, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x100008fd, 0xfffffffb, 0xe0, 0x8e, 0x7, 0x4, 0x401, 0x20000ade, 0x7f, 0x9], [0x8396, 0x7, 0x10000, 0x9, 0x8000, 0x2, 0x9, 0xe, 0x8, 0xff, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7fffffff, 0x3, 0x6, 0x5, 0x2, 0xcb, 0x2, 0x3, 0x0, 0x2, 0x8001, 0xc, 0x5, 0xb0f, 0x1e, 0x1, 0x800, 0x80009, 0x9, 0x3, 0x200, 0x800fc, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x7f, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5e, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x359, 0x3, 0x0, 0x4, 0x9, 0x1, 0x6], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0x2, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0x7ff, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000440, 0xffffffff, 0xfffffffb, 0x40, 0x1, 0x4, 0x7, 0xfff, 0x4, 0x9, 0x0, 0x6, 0x1, 0x0, 0x3, 0x8ac1, 0x3, 0x1, 0x80000002, 0x80040002, 0xff, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37d, 0xfffffff8, 0xd, 0x6, 0xf, 0x8, 0x6eaf, 0x0, 0x8, 0x5e02, 0x2, 0x3, 0x5, 0x2]}, 0x45c) r5 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6}, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) 4m1.592285252s ago: executing program 0 (id=379): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) 4m1.566325181s ago: executing program 0 (id=380): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) 4m1.441608931s ago: executing program 0 (id=381): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000001840)={0x0, 0x0}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000c80)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546", 0x63}], 0x1}}], 0x1, 0x4085) read$FUSE(r2, &(0x7f0000003000)={0x2020}, 0x2020) recvfrom$inet(r2, &(0x7f0000000180)=""/37, 0x25, 0x0, 0x0, 0xff04) 4m1.309041104s ago: executing program 0 (id=382): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000680)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f00000000c0)) 3m59.548330772s ago: executing program 0 (id=384): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000304af43a16395f7f5dcb79c4278a14e8343e0a05bdef18fa78bcb9616de723023034"], 0x113c}, 0x1, 0x0, 0x0, 0x48000}, 0x400c004) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xe0b, 0x0, 0x4, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xfff1}}}, 0x24}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x100000c, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x6, 0x500, 0x6, 0x4, 0x0, @link_local, @dev={0xac, 0x14, 0x14, 0x28}, @link_local, @multicast2}}}}, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r8, r8, 0x0, 0x200000) 3m44.295946843s ago: executing program 35 (id=384): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000304af43a16395f7f5dcb79c4278a14e8343e0a05bdef18fa78bcb9616de723023034"], 0x113c}, 0x1, 0x0, 0x0, 0x48000}, 0x400c004) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xe0b, 0x0, 0x4, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xfff1}}}, 0x24}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x100000c, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x6, 0x500, 0x6, 0x4, 0x0, @link_local, @dev={0xac, 0x14, 0x14, 0x28}, @link_local, @multicast2}}}}, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r8, r8, 0x0, 0x200000) 5.044044273s ago: executing program 1 (id=591): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, 0x0) 4.930759825s ago: executing program 1 (id=592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) 3.191018335s ago: executing program 1 (id=593): socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000380)={'syz0\x00', {0x4, 0x6, 0x7fff, 0x8d5}, 0x2, [0x10000, 0x6, 0xfff, 0xffffffff, 0x8, 0x1, 0x6, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0x842, 0x6, 0x3ff, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0xd27e, 0x1, 0x1, 0x7, 0x9, 0x1000f, 0xb, 0x9, 0x7ffffffc, 0x9, 0xb50, 0x0, 0x800, 0x5, 0x0, 0x2000007, 0xfffffffe, 0xfffffffa, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x3, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x80000001, 0x9, 0x4, 0x85, 0x8, 0x7, 0x9, 0x8001, 0x6, 0x8, 0x2, 0xb, 0xfff, 0x7ff, 0x7ff, 0x7, 0xb, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0x6, 0x9, 0x9, 0x4d26, 0x10000, 0x4, 0x2, 0x7, 0xfffffffc, 0x4, 0x6, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x7d, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x100008fd, 0xfffffffb, 0xe0, 0x8e, 0x7, 0x4, 0x401, 0x20000ade, 0x7f, 0x9], [0x8396, 0x7, 0x10000, 0x9, 0x8000, 0x2, 0x9, 0xe, 0x8, 0xff, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7fffffff, 0x3, 0x6, 0x5, 0x2, 0xcb, 0x2, 0x3, 0x0, 0x2, 0x8001, 0xc, 0x5, 0xb0f, 0x1e, 0x1, 0x800, 0x80009, 0x9, 0x3, 0x200, 0x800fc, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x7f, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5e, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x359, 0x3, 0x0, 0x4, 0x9, 0x1, 0x6], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0x2, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0x7ff, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000440, 0xffffffff, 0xfffffffb, 0x40, 0x1, 0x4, 0x7, 0xfff, 0x4, 0x9, 0x0, 0x6, 0x1, 0x0, 0x3, 0x8ac1, 0x3, 0x1, 0x80000002, 0x80040002, 0xff, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37d, 0xfffffff8, 0xd, 0x6, 0xf, 0x8, 0x6eaf, 0x0, 0x8, 0x5e02, 0x2, 0x3, 0x5, 0x2]}, 0x45c) r6 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6}, 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x0) 1.191390076s ago: executing program 1 (id=594): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48812, &(0x7f0000000000)={0x2, 0x1, @broadcast}, 0x10) 1.101112061s ago: executing program 1 (id=595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x470101, 0x0) r4 = socket(0x10, 0x2, 0x0) r5 = dup2(r4, r4) sendto$inet6(r5, &(0x7f0000000000)="7800000018001f05b9409b0dffff000d0203be040205060506014007430008003f000000fac8388827a685a168d9a4c6040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400160012000a00000000000000000000080756ede4ccbe5880", 0x78, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=596): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'veth1_macvtap\x00', &(0x7f0000000240)=@ethtool_rxfh_indir={0x38}}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x3, 0x80}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000400095000000000000005bd2c07fef414a909b66adb11cf085392c"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r4, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r4, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) kernel console output (not intermixed with test programs): nd0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.778534][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.982632][ T5837] Bluetooth: hci0: command tx timeout [ 100.982739][ T59] Bluetooth: hci2: command tx timeout [ 100.992079][ T59] Bluetooth: hci1: command tx timeout [ 101.036440][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.039675][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.062240][ T59] Bluetooth: hci3: command tx timeout [ 101.177737][ T5831] team0: Port device team_slave_0 added [ 101.180953][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.222154][ T59] Bluetooth: hci4: command tx timeout [ 101.268997][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.271694][ T5842] team0: Port device team_slave_0 added [ 101.289447][ T5831] team0: Port device team_slave_1 added [ 101.428695][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.431361][ T5842] team0: Port device team_slave_1 added [ 101.835497][ T5832] team0: Port device team_slave_0 added [ 102.063783][ T5840] team0: Port device team_slave_0 added [ 102.066252][ T5832] team0: Port device team_slave_1 added [ 102.207104][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.207118][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.207132][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.210715][ T5840] team0: Port device team_slave_1 added [ 102.321122][ T5845] team0: Port device team_slave_0 added [ 102.323938][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.323953][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.323975][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.325360][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.325370][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.325392][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.502624][ T5845] team0: Port device team_slave_1 added [ 102.503633][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.503644][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.503658][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.610666][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.610684][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.610711][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.815681][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.815700][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.815728][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.819200][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.819214][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.819241][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.917568][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.917582][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.917597][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.938635][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.938651][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.938673][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.062424][ T5151] Bluetooth: hci0: command tx timeout [ 103.062529][ T5837] Bluetooth: hci2: command tx timeout [ 103.062611][ T59] Bluetooth: hci1: command tx timeout [ 103.064176][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.064190][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.064207][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.142120][ T59] Bluetooth: hci3: command tx timeout [ 103.302423][ T59] Bluetooth: hci4: command tx timeout [ 103.335445][ T5831] hsr_slave_0: entered promiscuous mode [ 103.336773][ T5831] hsr_slave_1: entered promiscuous mode [ 103.436588][ T5842] hsr_slave_0: entered promiscuous mode [ 103.438067][ T5842] hsr_slave_1: entered promiscuous mode [ 103.438751][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 103.438825][ T5842] Cannot create hsr debugfs directory [ 103.796140][ T5832] hsr_slave_0: entered promiscuous mode [ 103.797018][ T5832] hsr_slave_1: entered promiscuous mode [ 103.797627][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 103.797649][ T5832] Cannot create hsr debugfs directory [ 103.910986][ T5840] hsr_slave_0: entered promiscuous mode [ 103.920884][ T5840] hsr_slave_1: entered promiscuous mode [ 103.925930][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 103.925957][ T5840] Cannot create hsr debugfs directory [ 104.216476][ T5845] hsr_slave_0: entered promiscuous mode [ 104.217354][ T5845] hsr_slave_1: entered promiscuous mode [ 104.217961][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 104.217979][ T5845] Cannot create hsr debugfs directory [ 105.142124][ T5151] Bluetooth: hci0: command tx timeout [ 105.142175][ T5837] Bluetooth: hci2: command tx timeout [ 105.142209][ T59] Bluetooth: hci1: command tx timeout [ 105.222383][ T59] Bluetooth: hci3: command tx timeout [ 105.382616][ T59] Bluetooth: hci4: command tx timeout [ 105.937576][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.965512][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.000204][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.061171][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.211316][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.261442][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.310472][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.371436][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.542644][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.586714][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.627799][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.688633][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.900110][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.962665][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.010278][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.076555][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.189541][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.317927][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.365232][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.416790][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.469411][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.518976][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.580475][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.580927][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.646031][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.656550][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.656794][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.837277][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.911569][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.911885][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.920746][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.004220][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.004395][ T3520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.111254][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.160627][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.177814][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.178791][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.260160][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.260866][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.352683][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.410587][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.454031][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.454313][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.547094][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.547421][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.675563][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.747459][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.747705][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.815630][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.816478][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.911094][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.171259][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.392602][ T5831] veth0_vlan: entered promiscuous mode [ 109.501568][ T5831] veth1_vlan: entered promiscuous mode [ 109.619431][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.701304][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.756474][ T5832] veth0_vlan: entered promiscuous mode [ 109.835772][ T5831] veth0_macvtap: entered promiscuous mode [ 109.854471][ T5832] veth1_vlan: entered promiscuous mode [ 109.885701][ T5831] veth1_macvtap: entered promiscuous mode [ 109.962179][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.055429][ T5842] veth0_vlan: entered promiscuous mode [ 110.102345][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.138262][ T5842] veth1_vlan: entered promiscuous mode [ 110.165273][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.228548][ T5832] veth0_macvtap: entered promiscuous mode [ 110.255871][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.277450][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.284374][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.300360][ T5832] veth1_macvtap: entered promiscuous mode [ 110.317568][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.470196][ T5845] veth0_vlan: entered promiscuous mode [ 110.566343][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.653601][ T5842] veth0_macvtap: entered promiscuous mode [ 110.673981][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.681660][ T5845] veth1_vlan: entered promiscuous mode [ 110.723793][ T5842] veth1_macvtap: entered promiscuous mode [ 110.789927][ T1129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.805774][ T1129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.809665][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.809686][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.844354][ T1129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.878248][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.897134][ T5840] veth0_vlan: entered promiscuous mode [ 110.976693][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.066446][ T5840] veth1_vlan: entered promiscuous mode [ 111.070681][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.070700][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.103402][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.259913][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.263763][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.298097][ T5845] veth0_macvtap: entered promiscuous mode [ 111.300779][ T3008] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.328027][ T3008] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.373253][ T5845] veth1_macvtap: entered promiscuous mode [ 111.395845][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.395865][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.724548][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.731685][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.731708][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.017153][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.022295][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.550048][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.561316][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.482681][ T5840] veth0_macvtap: entered promiscuous mode [ 113.516946][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.572131][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.620900][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.665501][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.703543][ T5840] veth1_macvtap: entered promiscuous mode [ 113.719341][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.760731][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.760755][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.770588][ T3008] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.788550][ T3008] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.809103][ T3008] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.859125][ T3008] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.906656][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.249751][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.370777][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.380736][ T5966] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.427486][ T5966] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.829217][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.829240][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.938964][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.945794][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.974776][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.041949][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.346713][ T5984] Zero length message leads to an empty skb [ 118.317305][ T3520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.317328][ T3520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.557722][ T5988] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.770781][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.770807][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.925008][ T5993] tmpfs: Unknown parameter 'nolazytimeÿÿ' [ 120.280549][ T3520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.280571][ T3520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.857700][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.857722][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.912227][ T37] audit: type=1326 audit(1756978715.466:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6005 comm="syz.1.19" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c3391ebe9 code=0x0 [ 124.196453][ T5908] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 124.233764][ T5922] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.371855][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 124.395205][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 124.398245][ T5922] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.398278][ T5922] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.401387][ T5922] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 124.401416][ T5922] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 124.401437][ T5922] usb 3-1: Product: syz [ 124.401450][ T5922] usb 3-1: Manufacturer: syz [ 124.401907][ T5908] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.401931][ T5908] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.412601][ T5908] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.412633][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.412654][ T5908] usb 2-1: Product: syz [ 124.412668][ T5908] usb 2-1: Manufacturer: syz [ 124.412681][ T5908] usb 2-1: SerialNumber: syz [ 124.683522][ T5922] hub 3-1:4.0: USB hub found [ 124.926499][ T5922] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 125.121283][ T5908] usb 2-1: 0:2 : does not exist [ 125.265094][ T5907] usb 3-1: USB disconnect, device number 2 [ 126.112335][ T5908] usb 2-1: USB disconnect, device number 2 [ 129.816408][ T6069] bridge: RTM_NEWNEIGH with invalid ether address [ 132.848315][ T6109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.43'. [ 133.896805][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.896916][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.396777][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.438130][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.497209][ T37] audit: type=1326 audit(1756978731.926:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6145 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa788baebe9 code=0x7ffc0000 [ 137.500841][ T37] audit: type=1326 audit(1756978731.926:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6145 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa788baebe9 code=0x7ffc0000 [ 137.517652][ T37] audit: type=1326 audit(1756978731.926:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6145 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa788baebe9 code=0x7ffc0000 [ 137.705524][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.793540][ T37] audit: type=1326 audit(1756978731.926:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6145 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa788baebe9 code=0x7ffc0000 [ 137.840336][ T37] audit: type=1326 audit(1756978731.926:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6145 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa788baebe9 code=0x7ffc0000 [ 137.879454][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.918484][ T37] audit: type=1326 audit(1756978731.926:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6145 comm="syz.0.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa788baebe9 code=0x7ffc0000 [ 137.979786][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.341250][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.363758][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.496421][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.936093][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.416181][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.592572][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.930089][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.032604][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.129884][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.235307][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.586713][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.708814][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.187330][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.340182][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.362180][ T6158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.59'. [ 143.395679][ T6177] capability: warning: `syz.2.66' uses deprecated v2 capabilities in a way that may be insecure [ 149.878510][ T6216] process 'syz.2.79' launched './file0' with NULL argv: empty string added [ 157.458765][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.461372][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.464658][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.466500][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.467593][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 159.313282][ T6258] netlink: 'syz.0.90': attribute type 3 has an invalid length. [ 159.313674][ T6258] netlink: 'syz.0.90': attribute type 3 has an invalid length. [ 159.542046][ T5837] Bluetooth: hci5: command tx timeout [ 161.624151][ T5837] Bluetooth: hci5: command tx timeout [ 164.430038][ T5837] Bluetooth: hci5: command tx timeout [ 165.859855][ T43] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.371762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.381789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.391762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.401770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.411767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.421763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.422281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.428662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.431777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.501919][ T5837] Bluetooth: hci5: command tx timeout [ 169.603111][ T43] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.393058][ T43] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.212474][ T43] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.487280][ T6252] chnl_net:caif_netlink_parms(): no params data found [ 173.701782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 175.651911][ T5907] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 175.809613][ T5907] usb 1-1: Using ep0 maxpacket: 8 [ 175.818208][ T5907] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 175.818237][ T5907] usb 1-1: config 179 has no interface number 0 [ 175.818291][ T5907] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 175.818318][ T5907] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 175.818346][ T5907] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 175.818372][ T5907] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 175.818395][ T5907] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 175.818421][ T5907] usb 1-1: config 179 interface 65 has no altsetting 0 [ 175.818459][ T5907] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 175.818481][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.400451][ T5907] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input8 [ 178.152718][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 178.157747][ T5907] usb 1-1: USB disconnect, device number 2 [ 179.176924][ T6413] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 180.008520][ T6252] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.008691][ T6252] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.008911][ T6252] bridge_slave_0: entered allmulticast mode [ 180.132090][ T6252] bridge_slave_0: entered promiscuous mode [ 180.243912][ T6252] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.244084][ T6252] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.244342][ T6252] bridge_slave_1: entered allmulticast mode [ 180.311616][ T6252] bridge_slave_1: entered promiscuous mode [ 184.074020][ T6252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.079135][ T6252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.787466][ T43] bridge_slave_1: left allmulticast mode [ 186.789614][ T43] bridge_slave_1: left promiscuous mode [ 186.830185][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.027191][ T43] bridge_slave_0: left allmulticast mode [ 187.027217][ T43] bridge_slave_0: left promiscuous mode [ 187.028533][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.371426][ T1129] Bluetooth: hci2: Frame reassembly failed (-84) [ 189.403039][ T1129] Bluetooth: hci2: Frame reassembly failed (-84) [ 191.338017][ T5837] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 192.347656][ T5907] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 192.423101][ T5907] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 196.126315][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.126403][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.158259][ T6480] fido_id[6480]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 196.440095][ T6500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.156'. [ 197.282779][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.402461][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.447943][ T43] bond0 (unregistering): Released all slaves [ 197.978983][ T6512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.159'. [ 200.010738][ T6252] team0: Port device team_slave_0 added [ 200.030723][ T6252] team0: Port device team_slave_1 added [ 204.701930][ T6539] syz.0.166 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 209.864709][ T5837] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 210.645907][ T6552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.170'. [ 211.053124][ T6252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.053141][ T6252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.053169][ T6252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.132332][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.172'. [ 211.623622][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.642096][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.643797][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.645623][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.648316][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.695794][ T43] hsr_slave_0: left promiscuous mode [ 212.726289][ T43] hsr_slave_1: left promiscuous mode [ 212.727694][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.727788][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.778908][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.780834][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.010630][ T43] veth1_macvtap: left promiscuous mode [ 213.010904][ T43] veth0_macvtap: left promiscuous mode [ 213.013998][ T43] veth1_vlan: left promiscuous mode [ 213.016472][ T43] veth0_vlan: left promiscuous mode [ 214.213654][ T5837] Bluetooth: hci2: command tx timeout [ 216.456969][ T5837] Bluetooth: hci2: command tx timeout [ 217.734672][ T43] team0 (unregistering): Port device team_slave_1 removed [ 217.902869][ T43] team0 (unregistering): Port device team_slave_0 removed [ 218.504691][ T5837] Bluetooth: hci2: command tx timeout [ 220.408775][ T6604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.186'. [ 220.761849][ T6599] Bluetooth: hci2: command tx timeout [ 221.940932][ T6617] fuse: Bad value for 'fd' [ 222.272103][ T6599] Bluetooth: hci3: command 0x0406 tx timeout [ 222.274287][ T6599] Bluetooth: hci4: command 0x0406 tx timeout [ 222.274406][ T6599] Bluetooth: hci0: command 0x0406 tx timeout [ 222.485833][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 225.580040][ T6559] chnl_net:caif_netlink_parms(): no params data found [ 227.870108][ T6677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.201'. [ 228.993578][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.993864][ T6559] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.994114][ T6559] bridge_slave_0: entered allmulticast mode [ 229.039563][ T6559] bridge_slave_0: entered promiscuous mode [ 229.099357][ T6559] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.099535][ T6559] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.100676][ T6559] bridge_slave_1: entered allmulticast mode [ 229.115180][ T6559] bridge_slave_1: entered promiscuous mode [ 229.585402][ T6559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.811552][ T6559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.217270][ T6717] syz.3.209(6717): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 231.774675][ T43] bridge_slave_1: left allmulticast mode [ 231.774793][ T43] bridge_slave_1: left promiscuous mode [ 231.785833][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.655399][ T43] bridge_slave_0: left allmulticast mode [ 232.655435][ T43] bridge_slave_0: left promiscuous mode [ 232.655805][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.212877][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.293048][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.408164][ T43] bond0 (unregistering): Released all slaves [ 233.893350][ T6559] team0: Port device team_slave_0 added [ 233.932718][ T6559] team0: Port device team_slave_1 added [ 234.401663][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.334808][ T43] team0 (unregistering): Port device team_slave_1 removed [ 236.602966][ T43] team0 (unregistering): Port device team_slave_0 removed [ 239.409363][ T6559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.409381][ T6559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.409408][ T6559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.484139][ T6559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.484158][ T6559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.484183][ T6559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.812750][ T6748] syzkaller0: entered promiscuous mode [ 240.812785][ T6748] syzkaller0: entered allmulticast mode [ 245.728244][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 245.746142][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 245.751008][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 245.769466][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 245.770417][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 247.321231][ T6801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.231'. [ 247.871908][ T5837] Bluetooth: hci5: command tx timeout [ 249.941959][ T5837] Bluetooth: hci5: command tx timeout [ 252.021996][ T5837] Bluetooth: hci5: command tx timeout [ 254.101859][ T5837] Bluetooth: hci5: command tx timeout [ 254.926142][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 254.948524][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 254.968579][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 254.970437][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 254.971275][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 257.080047][ T5837] Bluetooth: hci6: command tx timeout [ 258.778609][ T6559] hsr_slave_0: entered promiscuous mode [ 258.794955][ T6559] hsr_slave_1: entered promiscuous mode [ 258.802082][ T6559] debugfs: 'hsr0' already exists in 'hsr' [ 258.802117][ T6559] Cannot create hsr debugfs directory [ 259.343686][ T5837] Bluetooth: hci6: command tx timeout [ 264.956699][ T5837] Bluetooth: hci6: command tx timeout [ 265.168839][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.168958][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.262330][ T6835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.241'. [ 266.982726][ T5836] Bluetooth: hci6: command tx timeout [ 271.772723][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.802153][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.805760][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.807445][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.808482][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.248072][ T6876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.251'. [ 273.363198][ T43] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.941922][ T5837] Bluetooth: hci3: command tx timeout [ 273.956974][ T43] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.021925][ T5837] Bluetooth: hci3: command tx timeout [ 277.208868][ T6919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.260'. [ 277.260880][ T43] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.105164][ T5837] Bluetooth: hci3: command tx timeout [ 278.990190][ T43] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.181957][ T5837] Bluetooth: hci3: command tx timeout [ 281.975874][ T6795] chnl_net:caif_netlink_parms(): no params data found [ 282.151374][ T6805] chnl_net:caif_netlink_parms(): no params data found [ 283.191008][ T43] bridge_slave_1: left allmulticast mode [ 283.191045][ T43] bridge_slave_1: left promiscuous mode [ 283.193112][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.266692][ T43] bridge_slave_0: left allmulticast mode [ 283.266729][ T43] bridge_slave_0: left promiscuous mode [ 283.268851][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.371160][ T37] audit: type=1326 audit(1756978877.936:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6967 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 283.371220][ T37] audit: type=1326 audit(1756978877.936:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6967 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 283.374193][ T37] audit: type=1326 audit(1756978877.946:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6967 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 283.374244][ T37] audit: type=1326 audit(1756978877.946:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6967 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 283.374283][ T37] audit: type=1326 audit(1756978877.946:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6967 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 285.039269][ T6988] overlayfs: failed to resolve './file1': -2 [ 288.892791][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.976867][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.021617][ T43] bond0 (unregistering): Released all slaves [ 289.242708][ T6869] chnl_net:caif_netlink_parms(): no params data found [ 289.735528][ T7016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.278'. [ 289.950932][ T7014] tipc: Started in network mode [ 289.950964][ T7014] tipc: Node identity ac14140f, cluster identity 4711 [ 289.967467][ T7014] tipc: New replicast peer: 255.255.255.255 [ 289.970017][ T7014] tipc: Enabled bearer , priority 10 [ 290.824755][ T6795] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.824927][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.825193][ T6795] bridge_slave_0: entered allmulticast mode [ 290.863080][ T6795] bridge_slave_0: entered promiscuous mode [ 291.031762][ T6805] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.031938][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.032212][ T6805] bridge_slave_0: entered allmulticast mode [ 291.050225][ T6805] bridge_slave_0: entered promiscuous mode [ 291.084113][ T9] tipc: Node number set to 2886997007 [ 291.092157][ T6795] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.092333][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.092581][ T6795] bridge_slave_1: entered allmulticast mode [ 291.095400][ T6795] bridge_slave_1: entered promiscuous mode [ 291.642112][ T6805] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.642281][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.642559][ T6805] bridge_slave_1: entered allmulticast mode [ 291.645863][ T6805] bridge_slave_1: entered promiscuous mode [ 292.921843][ T7030] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 293.632248][ T7030] wireguard0: entered promiscuous mode [ 293.632285][ T7030] wireguard0: entered allmulticast mode [ 293.743277][ T6795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.866083][ T6805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.875624][ T6795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.211944][ T43] hsr_slave_0: left promiscuous mode [ 295.182241][ T43] hsr_slave_1: left promiscuous mode [ 295.183298][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.183330][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.344153][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.344183][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.698565][ T43] veth1_macvtap: left promiscuous mode [ 296.699461][ T43] veth0_macvtap: left promiscuous mode [ 296.699811][ T43] veth1_vlan: left promiscuous mode [ 296.700055][ T43] veth0_vlan: left promiscuous mode [ 304.552688][ T43] team0 (unregistering): Port device team_slave_1 removed [ 305.022755][ T43] team0 (unregistering): Port device team_slave_0 removed [ 305.459656][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 305.484124][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.489726][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 305.667995][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 305.685291][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 307.721990][ T5836] Bluetooth: hci2: command tx timeout [ 308.854624][ T6805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.465907][ T6869] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.466082][ T6869] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.466331][ T6869] bridge_slave_0: entered allmulticast mode [ 309.522690][ T6869] bridge_slave_0: entered promiscuous mode [ 309.798184][ T5836] Bluetooth: hci2: command tx timeout [ 311.203986][ T6869] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.207331][ T6869] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.273308][ T6869] bridge_slave_1: entered allmulticast mode [ 311.385495][ T6869] bridge_slave_1: entered promiscuous mode [ 312.196648][ T5836] Bluetooth: hci2: command tx timeout [ 313.011447][ T6805] team0: Port device team_slave_0 added [ 313.476945][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 314.291940][ T5837] Bluetooth: hci2: command tx timeout [ 314.397118][ T6805] team0: Port device team_slave_1 added [ 314.433055][ T6869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.655894][ T6869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.283652][ T6869] team0: Port device team_slave_0 added [ 315.381832][ T5836] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 315.381866][ T5837] Bluetooth: hci4: command 0x1003 tx timeout [ 315.482911][ T6869] team0: Port device team_slave_1 added [ 315.694128][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 315.717745][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 315.719159][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 315.736592][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 315.750530][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.884907][ T5837] Bluetooth: hci4: command tx timeout [ 320.904143][ T5837] Bluetooth: hci4: command tx timeout [ 322.063094][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.063112][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.063140][ T6869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.185948][ T6869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.185967][ T6869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.185995][ T6869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.952673][ T6869] hsr_slave_0: entered promiscuous mode [ 322.962589][ T6869] hsr_slave_1: entered promiscuous mode [ 322.963532][ T6869] debugfs: 'hsr0' already exists in 'hsr' [ 322.963555][ T6869] Cannot create hsr debugfs directory [ 323.138675][ T5837] Bluetooth: hci4: command tx timeout [ 323.317347][ T7188] netlink: 20 bytes leftover after parsing attributes in process `syz.0.317'. [ 325.378292][ T5837] Bluetooth: hci4: command tx timeout [ 325.757690][ T43] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.420483][ T43] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.306378][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.308309][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.454909][ T43] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.170168][ T43] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.280751][ T7096] chnl_net:caif_netlink_parms(): no params data found [ 333.743781][ T7139] chnl_net:caif_netlink_parms(): no params data found [ 333.932339][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 333.973267][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 333.980744][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 334.001313][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 334.016258][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 334.073240][ T7096] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.073634][ T7096] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.073920][ T7096] bridge_slave_0: entered allmulticast mode [ 334.082730][ T7096] bridge_slave_0: entered promiscuous mode [ 334.128590][ T7096] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.128785][ T7096] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.129067][ T7096] bridge_slave_1: entered allmulticast mode [ 334.137294][ T7096] bridge_slave_1: entered promiscuous mode [ 334.738260][ T7096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.814389][ T7096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.655968][ T43] bridge_slave_1: left allmulticast mode [ 335.656004][ T43] bridge_slave_1: left promiscuous mode [ 335.656300][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.744189][ T43] bridge_slave_0: left allmulticast mode [ 335.744225][ T43] bridge_slave_0: left promiscuous mode [ 335.744546][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.141900][ T5837] Bluetooth: hci5: command tx timeout [ 336.150410][ T43] bridge_slave_1: left allmulticast mode [ 336.150445][ T43] bridge_slave_1: left promiscuous mode [ 336.150724][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.021212][ T43] bridge_slave_0: left allmulticast mode [ 337.021250][ T43] bridge_slave_0: left promiscuous mode [ 337.021772][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.228753][ T43] bridge_slave_1: left allmulticast mode [ 337.228792][ T43] bridge_slave_1: left promiscuous mode [ 337.229115][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.583510][ T43] bridge_slave_0: left allmulticast mode [ 337.583546][ T43] bridge_slave_0: left promiscuous mode [ 337.583836][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.637991][ T43] bridge_slave_1: left allmulticast mode [ 337.638028][ T43] bridge_slave_1: left promiscuous mode [ 337.638312][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.778506][ T43] bridge_slave_0: left allmulticast mode [ 337.780381][ T43] bridge_slave_0: left promiscuous mode [ 337.782147][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.184290][ T5837] Bluetooth: hci5: command tx timeout [ 338.523090][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.612650][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.667593][ T43] bond0 (unregistering): Released all slaves [ 339.014391][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.114015][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.176207][ T43] bond0 (unregistering): Released all slaves [ 339.543010][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.647099][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.706656][ T43] bond0 (unregistering): Released all slaves [ 340.261993][ T5837] Bluetooth: hci5: command tx timeout [ 340.981035][ T7331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.356'. [ 342.348147][ T5837] Bluetooth: hci5: command tx timeout [ 342.589649][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.642723][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.673588][ T43] bond0 (unregistering): Released all slaves [ 342.744852][ T7096] team0: Port device team_slave_0 added [ 342.906590][ T7139] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.906755][ T7139] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.906953][ T7139] bridge_slave_0: entered allmulticast mode [ 342.910204][ T7139] bridge_slave_0: entered promiscuous mode [ 343.014395][ T7096] team0: Port device team_slave_1 added [ 343.095111][ T7139] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.095278][ T7139] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.095495][ T7139] bridge_slave_1: entered allmulticast mode [ 343.127950][ T7139] bridge_slave_1: entered promiscuous mode [ 344.097657][ T7096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.097675][ T7096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.097697][ T7096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.147233][ T7139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.214837][ T7096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.214856][ T7096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.214884][ T7096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.246313][ T7139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.356990][ T7139] team0: Port device team_slave_0 added [ 345.808949][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.364'. [ 347.062435][ T7139] team0: Port device team_slave_1 added [ 348.749347][ T7096] hsr_slave_0: entered promiscuous mode [ 348.751014][ T7096] hsr_slave_1: entered promiscuous mode [ 348.764675][ T7096] debugfs: 'hsr0' already exists in 'hsr' [ 348.764706][ T7096] Cannot create hsr debugfs directory [ 348.932029][ T7139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.932047][ T7139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.932074][ T7139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.406574][ T7139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.406591][ T7139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.406618][ T7139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.804807][ T43] hsr_slave_0: left promiscuous mode [ 352.256315][ T43] hsr_slave_1: left promiscuous mode [ 352.257437][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.419203][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.921122][ T43] hsr_slave_0: left promiscuous mode [ 352.952061][ T43] hsr_slave_1: left promiscuous mode [ 352.953159][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.953190][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.019002][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.019036][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.240298][ T43] veth1_macvtap: left promiscuous mode [ 353.240452][ T43] veth0_macvtap: left promiscuous mode [ 353.240798][ T43] veth1_vlan: left promiscuous mode [ 353.241039][ T43] veth0_vlan: left promiscuous mode [ 354.333938][ T43] team0 (unregistering): Port device team_slave_1 removed [ 354.512770][ T43] team0 (unregistering): Port device team_slave_0 removed [ 357.356548][ T7420] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.384'. [ 357.465744][ T7423] mmap: syz.0.384 (7423) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 358.402611][ T43] team0 (unregistering): Port device team_slave_1 removed [ 358.592727][ T43] team0 (unregistering): Port device team_slave_0 removed [ 364.652857][ T43] team0 (unregistering): Port device team_slave_1 removed [ 365.033406][ T43] team0 (unregistering): Port device team_slave_0 removed [ 365.231222][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.258703][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.260065][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.265923][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.272022][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 367.705456][ T5837] Bluetooth: hci3: command tx timeout [ 369.782111][ T5837] Bluetooth: hci3: command tx timeout [ 371.862056][ T5837] Bluetooth: hci3: command tx timeout [ 372.534542][ T7139] hsr_slave_0: entered promiscuous mode [ 372.537486][ T7139] hsr_slave_1: entered promiscuous mode [ 372.554862][ T7139] debugfs: 'hsr0' already exists in 'hsr' [ 372.554894][ T7139] Cannot create hsr debugfs directory [ 373.312316][ T7297] chnl_net:caif_netlink_parms(): no params data found [ 373.473403][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 373.521423][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 373.529617][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 373.539839][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 373.540674][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 373.941806][ T5837] Bluetooth: hci3: command tx timeout [ 375.621940][ T5837] Bluetooth: hci2: command tx timeout [ 377.676533][ T7297] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.676706][ T7297] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.676968][ T7297] bridge_slave_0: entered allmulticast mode [ 377.681230][ T7297] bridge_slave_0: entered promiscuous mode [ 377.702158][ T5837] Bluetooth: hci2: command tx timeout [ 377.812131][ T7297] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.812299][ T7297] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.812552][ T7297] bridge_slave_1: entered allmulticast mode [ 377.832057][ T7297] bridge_slave_1: entered promiscuous mode [ 377.889203][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.895930][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.898652][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.900181][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.900992][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 379.732507][ T7297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.753686][ T7297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.791813][ T5836] Bluetooth: hci2: command tx timeout [ 380.021812][ T5836] Bluetooth: hci1: command tx timeout [ 380.048498][ T7297] team0: Port device team_slave_0 added [ 380.128362][ T7297] team0: Port device team_slave_1 added [ 380.521209][ T7297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.521226][ T7297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.521352][ T7297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.562933][ T7297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.562950][ T7297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.562973][ T7297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.509803][ T7297] hsr_slave_0: entered promiscuous mode [ 381.511412][ T7297] hsr_slave_1: entered promiscuous mode [ 381.524898][ T7297] debugfs: 'hsr0' already exists in 'hsr' [ 381.524925][ T7297] Cannot create hsr debugfs directory [ 381.561555][ T7442] chnl_net:caif_netlink_parms(): no params data found [ 381.861848][ T5836] Bluetooth: hci2: command tx timeout [ 382.331057][ T5836] Bluetooth: hci1: command tx timeout [ 382.384648][ T7472] chnl_net:caif_netlink_parms(): no params data found [ 384.455723][ T5836] Bluetooth: hci1: command tx timeout [ 386.503294][ T5836] Bluetooth: hci1: command tx timeout [ 386.802930][ T7442] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.803259][ T7442] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.803539][ T7442] bridge_slave_0: entered allmulticast mode [ 386.810231][ T7442] bridge_slave_0: entered promiscuous mode [ 386.908650][ T7442] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.908853][ T7442] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.909101][ T7442] bridge_slave_1: entered allmulticast mode [ 386.943843][ T7442] bridge_slave_1: entered promiscuous mode [ 387.591001][ T7442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.617193][ T7472] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.617947][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.618166][ T7472] bridge_slave_0: entered allmulticast mode [ 387.629230][ T7472] bridge_slave_0: entered promiscuous mode [ 387.633819][ T7508] chnl_net:caif_netlink_parms(): no params data found [ 387.664496][ T7442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.678324][ T7472] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.678737][ T7472] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.678947][ T7472] bridge_slave_1: entered allmulticast mode [ 387.683034][ T7472] bridge_slave_1: entered promiscuous mode [ 388.493418][ T7442] team0: Port device team_slave_0 added [ 388.509688][ T7472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.548232][ T7442] team0: Port device team_slave_1 added [ 388.566004][ T7472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.195013][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.196383][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.117285][ T7442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.117303][ T7442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.117331][ T7442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.185041][ T7472] team0: Port device team_slave_0 added [ 392.690306][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 392.708435][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 392.710473][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 392.735844][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 392.737466][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 392.916157][ T7442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.916176][ T7442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.916203][ T7442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.145160][ T7472] team0: Port device team_slave_1 added [ 394.693333][ T7508] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.693493][ T7508] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.693723][ T7508] bridge_slave_0: entered allmulticast mode [ 394.700095][ T7508] bridge_slave_0: entered promiscuous mode [ 394.821841][ T5837] Bluetooth: hci4: command tx timeout [ 394.894582][ T7508] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.894761][ T7508] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.895023][ T7508] bridge_slave_1: entered allmulticast mode [ 394.911298][ T7508] bridge_slave_1: entered promiscuous mode [ 395.510697][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.710314][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.710331][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.710356][ T7472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.004297][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.004315][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.004352][ T7472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.195195][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.366988][ T7508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.584758][ T7508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.636815][ T7442] hsr_slave_0: entered promiscuous mode [ 396.638329][ T7442] hsr_slave_1: entered promiscuous mode [ 396.639377][ T7442] debugfs: 'hsr0' already exists in 'hsr' [ 396.639403][ T7442] Cannot create hsr debugfs directory [ 396.901788][ T5837] Bluetooth: hci4: command tx timeout [ 397.937358][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.988883][ T5837] Bluetooth: hci4: command tx timeout [ 400.358605][ T7508] team0: Port device team_slave_0 added [ 401.437472][ T5837] Bluetooth: hci4: command tx timeout [ 401.759363][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.817074][ T7508] team0: Port device team_slave_1 added [ 401.841789][ T7472] hsr_slave_0: entered promiscuous mode [ 401.843596][ T7472] hsr_slave_1: entered promiscuous mode [ 401.844751][ T7472] debugfs: 'hsr0' already exists in 'hsr' [ 401.844778][ T7472] Cannot create hsr debugfs directory [ 402.174731][ T7508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.174750][ T7508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.174778][ T7508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.322277][ T7508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.322304][ T7508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.322332][ T7508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.204647][ T7508] hsr_slave_0: entered promiscuous mode [ 403.206244][ T7508] hsr_slave_1: entered promiscuous mode [ 403.207331][ T7508] debugfs: 'hsr0' already exists in 'hsr' [ 403.207357][ T7508] Cannot create hsr debugfs directory [ 406.639511][ T43] bridge_slave_1: left allmulticast mode [ 406.649250][ T43] bridge_slave_1: left promiscuous mode [ 406.649574][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.726261][ T43] bridge_slave_0: left allmulticast mode [ 406.726298][ T43] bridge_slave_0: left promiscuous mode [ 406.726625][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.825864][ T43] bridge_slave_1: left allmulticast mode [ 406.825901][ T43] bridge_slave_1: left promiscuous mode [ 406.826188][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.233607][ T43] bridge_slave_0: left allmulticast mode [ 407.233644][ T43] bridge_slave_0: left promiscuous mode [ 407.233939][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.337496][ T43] bridge_slave_1: left allmulticast mode [ 408.337534][ T43] bridge_slave_1: left promiscuous mode [ 408.337853][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.403769][ T43] bridge_slave_0: left allmulticast mode [ 408.403805][ T43] bridge_slave_0: left promiscuous mode [ 408.404111][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.499689][ T43] bridge_slave_1: left allmulticast mode [ 408.499714][ T43] bridge_slave_1: left promiscuous mode [ 408.499887][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.553846][ T43] bridge_slave_0: left allmulticast mode [ 408.553885][ T43] bridge_slave_0: left promiscuous mode [ 408.554256][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.223079][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.342719][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.410292][ T43] bond0 (unregistering): Released all slaves [ 409.675596][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.763043][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.827089][ T43] bond0 (unregistering): Released all slaves [ 411.423983][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.482885][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.527350][ T43] bond0 (unregistering): Released all slaves [ 411.843152][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.922815][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.987981][ T43] bond0 (unregistering): Released all slaves [ 412.719548][ T7672] overlayfs: failed to clone upperpath [ 412.925894][ T7442] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 413.004819][ T43] tipc: Disabling bearer [ 413.005759][ T43] tipc: Left network mode [ 413.009978][ T7586] chnl_net:caif_netlink_parms(): no params data found [ 413.036451][ T7442] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 413.135812][ T7442] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 413.652021][ T7442] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 417.779242][ T7586] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.779544][ T7586] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.779797][ T7586] bridge_slave_0: entered allmulticast mode [ 417.785498][ T7586] bridge_slave_0: entered promiscuous mode [ 417.818708][ T7472] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 418.028052][ T7586] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.028309][ T7586] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.028568][ T7586] bridge_slave_1: entered allmulticast mode [ 418.032684][ T7586] bridge_slave_1: entered promiscuous mode [ 418.036676][ T7472] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 418.055618][ T7705] overlayfs: failed to clone upperpath [ 418.198706][ T7472] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 418.410316][ T7472] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 418.460522][ T7586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.532278][ T43] hsr_slave_0: left promiscuous mode [ 418.572169][ T43] hsr_slave_1: left promiscuous mode [ 418.574880][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.602892][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.932578][ T43] hsr_slave_0: left promiscuous mode [ 419.731660][ T43] hsr_slave_1: left promiscuous mode [ 419.732963][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.103189][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.312186][ T43] hsr_slave_0: left promiscuous mode [ 420.332131][ T43] hsr_slave_1: left promiscuous mode [ 420.333276][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.333308][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.393164][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.393200][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.562613][ T43] hsr_slave_0: left promiscuous mode [ 420.603963][ T43] hsr_slave_1: left promiscuous mode [ 420.611405][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.625346][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.742396][ T43] veth1_macvtap: left promiscuous mode [ 420.742540][ T43] veth0_macvtap: left promiscuous mode [ 420.742884][ T43] veth1_vlan: left promiscuous mode [ 420.743137][ T43] veth0_vlan: left promiscuous mode [ 422.642963][ T43] team0 (unregistering): Port device team_slave_1 removed [ 423.732990][ T43] team0 (unregistering): Port device team_slave_0 removed [ 425.492692][ T43] team0 (unregistering): Port device team_slave_1 removed [ 426.023474][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 426.025598][ T43] team0 (unregistering): Port device team_slave_0 removed [ 426.036355][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 426.052207][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 426.077851][ T7733] overlayfs: failed to clone upperpath [ 426.087585][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 426.088660][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 428.212701][ T5837] Bluetooth: hci5: command tx timeout [ 430.478482][ T5837] Bluetooth: hci5: command tx timeout [ 431.834014][ T43] team0 (unregistering): Port device team_slave_1 removed [ 432.165139][ T43] team0 (unregistering): Port device team_slave_0 removed [ 432.501937][ T5837] Bluetooth: hci5: command tx timeout [ 433.407254][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 433.425736][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 433.427017][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 433.428711][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 433.431153][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 434.595968][ T5837] Bluetooth: hci5: command tx timeout [ 435.482828][ T43] team0 (unregistering): Port device team_slave_1 removed [ 435.541907][ T5837] Bluetooth: hci6: command tx timeout [ 435.632923][ T43] team0 (unregistering): Port device team_slave_0 removed [ 436.352871][ T7586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.346524][ T7586] team0: Port device team_slave_0 added [ 437.390076][ T7586] team0: Port device team_slave_1 added [ 437.621817][ T5837] Bluetooth: hci6: command tx timeout [ 438.169150][ T5836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 438.455678][ T5836] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 438.509543][ T5836] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 438.512888][ T5836] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 438.513854][ T5836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 439.851757][ T59] Bluetooth: hci6: command tx timeout [ 440.582000][ T59] Bluetooth: hci7: command tx timeout [ 441.325246][ T7586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.325263][ T7586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.325300][ T7586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.415507][ T7586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.415526][ T7586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.415554][ T7586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.939228][ T59] Bluetooth: hci6: command tx timeout [ 442.224376][ T7586] hsr_slave_0: entered promiscuous mode [ 442.226092][ T7586] hsr_slave_1: entered promiscuous mode [ 442.243942][ T7586] debugfs: 'hsr0' already exists in 'hsr' [ 442.243975][ T7586] Cannot create hsr debugfs directory [ 442.661789][ T59] Bluetooth: hci7: command tx timeout [ 444.891572][ T59] Bluetooth: hci7: command tx timeout [ 445.638674][ T7757] chnl_net:caif_netlink_parms(): no params data found [ 446.913961][ T59] Bluetooth: hci7: command tx timeout [ 447.020184][ T7730] chnl_net:caif_netlink_parms(): no params data found [ 447.618425][ T7770] chnl_net:caif_netlink_parms(): no params data found [ 451.288191][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 451.288279][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.689099][ T7757] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.689333][ T7757] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.689615][ T7757] bridge_slave_0: entered allmulticast mode [ 451.723232][ T7757] bridge_slave_0: entered promiscuous mode [ 451.802564][ T7586] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 452.052360][ T7757] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.052536][ T7757] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.052822][ T7757] bridge_slave_1: entered allmulticast mode [ 452.083958][ T7757] bridge_slave_1: entered promiscuous mode [ 452.320520][ T7586] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 452.620235][ T7586] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 453.073622][ T7757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.091355][ T7730] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.091528][ T7730] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.092453][ T7730] bridge_slave_0: entered allmulticast mode [ 453.096427][ T7730] bridge_slave_0: entered promiscuous mode [ 453.257872][ T7757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.264249][ T7730] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.264395][ T7730] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.264638][ T7730] bridge_slave_1: entered allmulticast mode [ 453.283250][ T7730] bridge_slave_1: entered promiscuous mode [ 453.292082][ T7770] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.292227][ T7770] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.292489][ T7770] bridge_slave_0: entered allmulticast mode [ 453.302996][ T7770] bridge_slave_0: entered promiscuous mode [ 453.579758][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 453.591186][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 453.593748][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 453.607153][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 453.608647][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 453.694986][ T7770] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.695174][ T7770] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.695463][ T7770] bridge_slave_1: entered allmulticast mode [ 453.701542][ T7770] bridge_slave_1: entered promiscuous mode [ 454.325331][ T7757] team0: Port device team_slave_0 added [ 454.341322][ T7730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.508859][ T7757] team0: Port device team_slave_1 added [ 454.533524][ T7730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.668136][ T7770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.904589][ T7770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.029243][ T7757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.029261][ T7757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.029288][ T7757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.193372][ T7730] team0: Port device team_slave_0 added [ 455.194865][ T7757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.194879][ T7757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.194905][ T7757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.415267][ T7730] team0: Port device team_slave_1 added [ 455.708091][ T59] Bluetooth: hci1: command tx timeout [ 456.866483][ T7770] team0: Port device team_slave_0 added [ 458.395347][ T59] Bluetooth: hci1: command tx timeout [ 458.574868][ T7770] team0: Port device team_slave_1 added [ 458.903428][ T7730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.903447][ T7730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.903474][ T7730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.580666][ T7730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.580684][ T7730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.580712][ T7730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.585914][ T7770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.585929][ T7770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.585951][ T7770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.682053][ T7757] hsr_slave_0: entered promiscuous mode [ 459.683853][ T7757] hsr_slave_1: entered promiscuous mode [ 459.685010][ T7757] debugfs: 'hsr0' already exists in 'hsr' [ 459.685036][ T7757] Cannot create hsr debugfs directory [ 459.743961][ T7770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.743978][ T7770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.744006][ T7770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.422018][ T5836] Bluetooth: hci1: command tx timeout [ 460.806010][ T7730] hsr_slave_0: entered promiscuous mode [ 460.807580][ T7730] hsr_slave_1: entered promiscuous mode [ 460.808762][ T7730] debugfs: 'hsr0' already exists in 'hsr' [ 460.808791][ T7730] Cannot create hsr debugfs directory [ 462.384901][ T7938] overlayfs: failed to clone upperpath [ 462.502004][ T5836] Bluetooth: hci1: command tx timeout [ 464.386754][ T7770] hsr_slave_0: entered promiscuous mode [ 464.388403][ T7770] hsr_slave_1: entered promiscuous mode [ 464.389435][ T7770] debugfs: 'hsr0' already exists in 'hsr' [ 464.389461][ T7770] Cannot create hsr debugfs directory [ 465.440125][ T7958] macsec0: entered promiscuous mode [ 470.703841][ T7894] chnl_net:caif_netlink_parms(): no params data found [ 476.169230][ T7894] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.169403][ T7894] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.169688][ T7894] bridge_slave_0: entered allmulticast mode [ 476.197132][ T7894] bridge_slave_0: entered promiscuous mode [ 476.233350][ T7894] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.233520][ T7894] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.234222][ T7894] bridge_slave_1: entered allmulticast mode [ 476.237580][ T7894] bridge_slave_1: entered promiscuous mode [ 477.207807][ T7894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.411498][ T7894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.214171][ T7894] team0: Port device team_slave_0 added [ 478.537119][ T7894] team0: Port device team_slave_1 added [ 479.080925][ T7894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.080944][ T7894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.080973][ T7894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.091798][ T7894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.091813][ T7894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.091836][ T7894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.432297][ T7894] hsr_slave_0: entered promiscuous mode [ 479.438139][ T7894] hsr_slave_1: entered promiscuous mode [ 479.439260][ T7894] debugfs: 'hsr0' already exists in 'hsr' [ 479.439287][ T7894] Cannot create hsr debugfs directory [ 480.387031][ T43] bridge_slave_1: left allmulticast mode [ 480.387068][ T43] bridge_slave_1: left promiscuous mode [ 480.387354][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.505813][ T43] bridge_slave_0: left allmulticast mode [ 480.505850][ T43] bridge_slave_0: left promiscuous mode [ 480.506170][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.605028][ T43] bridge_slave_1: left allmulticast mode [ 480.605066][ T43] bridge_slave_1: left promiscuous mode [ 480.605367][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.684231][ T43] bridge_slave_0: left allmulticast mode [ 480.684267][ T43] bridge_slave_0: left promiscuous mode [ 480.684570][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.787783][ T43] bridge_slave_1: left allmulticast mode [ 480.787822][ T43] bridge_slave_1: left promiscuous mode [ 480.788116][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.873661][ T43] bridge_slave_0: left allmulticast mode [ 480.873698][ T43] bridge_slave_0: left promiscuous mode [ 480.874025][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.974997][ T43] bridge_slave_1: left allmulticast mode [ 480.975035][ T43] bridge_slave_1: left promiscuous mode [ 480.975329][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.048336][ T43] bridge_slave_0: left allmulticast mode [ 481.048373][ T43] bridge_slave_0: left promiscuous mode [ 481.048691][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.184586][ T43] bridge_slave_1: left allmulticast mode [ 481.185280][ T43] bridge_slave_1: left promiscuous mode [ 481.194466][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.246444][ T43] bridge_slave_0: left allmulticast mode [ 481.246482][ T43] bridge_slave_0: left promiscuous mode [ 481.246775][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.934298][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.023072][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.086503][ T43] bond0 (unregistering): Released all slaves [ 482.711803][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.793214][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.182602][ T43] bond0 (unregistering): Released all slaves [ 484.412793][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.492296][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.557512][ T43] bond0 (unregistering): Released all slaves [ 484.912953][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.973304][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.018176][ T43] bond0 (unregistering): Released all slaves [ 485.283464][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.352821][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.396770][ T43] bond0 (unregistering): Released all slaves [ 486.273357][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 486.277522][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 486.278806][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 486.309317][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 486.310211][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 486.481690][ T37] audit: type=1326 audit(1756979081.036:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8075 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 486.481747][ T37] audit: type=1326 audit(1756979081.036:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8075 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 486.481793][ T37] audit: type=1326 audit(1756979081.036:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8075 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 486.481840][ T37] audit: type=1326 audit(1756979081.036:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8075 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 486.481886][ T37] audit: type=1326 audit(1756979081.036:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8075 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 486.481933][ T37] audit: type=1326 audit(1756979081.036:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8075 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 486.481979][ T37] audit: type=1326 audit(1756979081.046:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8075 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 486.482026][ T37] audit: type=1326 audit(1756979081.046:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8075 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 486.482079][ T37] audit: type=1326 audit(1756979081.046:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8075 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 486.482125][ T37] audit: type=1326 audit(1756979081.046:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8075 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 487.283717][ T43] hsr_slave_0: left promiscuous mode [ 487.348166][ T43] hsr_slave_1: left promiscuous mode [ 487.349244][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.372883][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.554119][ T43] hsr_slave_0: left promiscuous mode [ 487.591794][ T43] hsr_slave_1: left promiscuous mode [ 487.594747][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.633793][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.775306][ T43] hsr_slave_0: left promiscuous mode [ 487.792074][ T43] hsr_slave_1: left promiscuous mode [ 487.793120][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.843706][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.992456][ T43] hsr_slave_0: left promiscuous mode [ 488.011986][ T43] hsr_slave_1: left promiscuous mode [ 488.013094][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.053519][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.192247][ T43] hsr_slave_0: left promiscuous mode [ 488.212095][ T43] hsr_slave_1: left promiscuous mode [ 488.214875][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.266259][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.423808][ T59] Bluetooth: hci2: command tx timeout [ 489.568135][ T43] team0 (unregistering): Port device team_slave_1 removed [ 489.812491][ T43] team0 (unregistering): Port device team_slave_0 removed [ 490.755816][ T59] Bluetooth: hci2: command tx timeout [ 491.884185][ T43] team0 (unregistering): Port device team_slave_1 removed [ 492.042793][ T43] team0 (unregistering): Port device team_slave_0 removed [ 492.821789][ T59] Bluetooth: hci2: command tx timeout [ 493.627712][ T43] team0 (unregistering): Port device team_slave_1 removed [ 493.632884][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 493.638025][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 493.643254][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 493.645296][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 493.646532][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 493.812695][ T43] team0 (unregistering): Port device team_slave_0 removed [ 494.901920][ T5836] Bluetooth: hci2: command tx timeout [ 495.172822][ T43] team0 (unregistering): Port device team_slave_1 removed [ 495.342800][ T43] team0 (unregistering): Port device team_slave_0 removed [ 495.701822][ T5836] Bluetooth: hci3: command tx timeout [ 496.730043][ T43] team0 (unregistering): Port device team_slave_1 removed [ 496.932936][ T43] team0 (unregistering): Port device team_slave_0 removed [ 497.303592][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 497.310872][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 497.312633][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 497.314386][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 497.315198][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 497.781744][ T59] Bluetooth: hci3: command tx timeout [ 497.918785][ T8098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 499.823347][ T59] Bluetooth: hci4: command tx timeout [ 499.877148][ T5836] Bluetooth: hci3: command tx timeout [ 501.514697][ T8072] chnl_net:caif_netlink_parms(): no params data found [ 501.861786][ T59] Bluetooth: hci4: command tx timeout [ 501.941978][ T59] Bluetooth: hci3: command tx timeout [ 503.499653][ T8072] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.499825][ T8072] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.500104][ T8072] bridge_slave_0: entered allmulticast mode [ 503.505151][ T8072] bridge_slave_0: entered promiscuous mode [ 503.801983][ T8072] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.802153][ T8072] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.802424][ T8072] bridge_slave_1: entered allmulticast mode [ 503.815264][ T8072] bridge_slave_1: entered promiscuous mode [ 504.112939][ T59] Bluetooth: hci4: command tx timeout [ 505.300915][ T8072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.545520][ T59] Bluetooth: hci4: command tx timeout [ 506.557684][ T8101] chnl_net:caif_netlink_parms(): no params data found [ 506.593184][ T8072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.932055][ T8175] wireguard0: entered promiscuous mode [ 506.932091][ T8175] wireguard0: entered allmulticast mode [ 507.172541][ T8072] team0: Port device team_slave_0 added [ 507.219434][ T8180] bridge0: entered allmulticast mode [ 507.365582][ T8107] chnl_net:caif_netlink_parms(): no params data found [ 507.395196][ T8072] team0: Port device team_slave_1 added [ 507.396110][ T8181] bridge_slave_1: left allmulticast mode [ 507.396650][ T8181] bridge_slave_1: left promiscuous mode [ 507.404723][ T8181] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.515473][ T8181] bridge_slave_0: left allmulticast mode [ 507.515509][ T8181] bridge_slave_0: left promiscuous mode [ 507.515818][ T8181] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.647380][ T8072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.647400][ T8072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.647428][ T8072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.159120][ T8072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.159139][ T8072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.159167][ T8072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.320351][ T8101] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.320601][ T8101] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.320842][ T8101] bridge_slave_0: entered allmulticast mode [ 509.349124][ T8101] bridge_slave_0: entered promiscuous mode [ 509.440259][ T8101] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.440445][ T8101] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.440860][ T8101] bridge_slave_1: entered allmulticast mode [ 509.444939][ T8101] bridge_slave_1: entered promiscuous mode [ 510.508561][ T8107] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.509451][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.509722][ T8107] bridge_slave_0: entered allmulticast mode [ 510.535621][ T8107] bridge_slave_0: entered promiscuous mode [ 510.764752][ T8101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.782316][ T8107] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.782501][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.782771][ T8107] bridge_slave_1: entered allmulticast mode [ 510.792299][ T8107] bridge_slave_1: entered promiscuous mode [ 510.813814][ T8072] hsr_slave_0: entered promiscuous mode [ 510.815255][ T8072] hsr_slave_1: entered promiscuous mode [ 510.816219][ T8072] debugfs: 'hsr0' already exists in 'hsr' [ 510.816242][ T8072] Cannot create hsr debugfs directory [ 510.890678][ T8101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.322220][ T7894] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 511.498653][ T8107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.673670][ T7894] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 511.711757][ T8101] team0: Port device team_slave_0 added [ 511.726722][ T8107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.864062][ T7894] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 511.914084][ T8101] team0: Port device team_slave_1 added [ 512.027935][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.028053][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.142409][ T7894] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 512.516977][ T8107] team0: Port device team_slave_0 added [ 512.562662][ T8101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.562678][ T8101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.562701][ T8101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.568933][ T8107] team0: Port device team_slave_1 added [ 512.609347][ T8101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.609363][ T8101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.609386][ T8101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.801862][ T8210] wireguard1: entered promiscuous mode [ 512.801978][ T8210] wireguard1: entered allmulticast mode [ 513.034400][ T8107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.034419][ T8107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.034447][ T8107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.134093][ T8107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.134113][ T8107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.134142][ T8107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.516126][ T8101] hsr_slave_0: entered promiscuous mode [ 513.518045][ T8101] hsr_slave_1: entered promiscuous mode [ 513.519514][ T8101] debugfs: 'hsr0' already exists in 'hsr' [ 513.519540][ T8101] Cannot create hsr debugfs directory [ 513.931866][ T8107] hsr_slave_0: entered promiscuous mode [ 513.933535][ T8107] hsr_slave_1: entered promiscuous mode [ 513.934717][ T8107] debugfs: 'hsr0' already exists in 'hsr' [ 513.934744][ T8107] Cannot create hsr debugfs directory [ 514.947693][ T8224] netlink: 36 bytes leftover after parsing attributes in process `syz.1.530'. [ 514.947782][ T8224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.530'. [ 515.832785][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 515.837363][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 515.838951][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 515.840597][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 515.858587][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 517.946500][ T59] Bluetooth: hci5: command tx timeout [ 520.023691][ T59] Bluetooth: hci5: command tx timeout [ 520.048488][ T8072] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 520.088858][ T8072] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 520.130569][ T8072] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 520.193326][ T8072] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 520.970656][ T43] bridge_slave_1: left allmulticast mode [ 520.970693][ T43] bridge_slave_1: left promiscuous mode [ 520.970980][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.033643][ T43] bridge_slave_0: left allmulticast mode [ 521.033699][ T43] bridge_slave_0: left promiscuous mode [ 521.034049][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.109350][ T43] bridge_slave_1: left allmulticast mode [ 521.109388][ T43] bridge_slave_1: left promiscuous mode [ 521.109673][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.153578][ T43] bridge_slave_0: left allmulticast mode [ 521.153615][ T43] bridge_slave_0: left promiscuous mode [ 521.153956][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.224978][ T43] bridge_slave_1: left allmulticast mode [ 521.225014][ T43] bridge_slave_1: left promiscuous mode [ 521.225352][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.283772][ T43] bridge_slave_0: left allmulticast mode [ 521.283810][ T43] bridge_slave_0: left promiscuous mode [ 521.284101][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.833860][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.971705][ T59] Bluetooth: hci5: command tx timeout [ 523.026127][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.417613][ T43] bond0 (unregistering): Released all slaves [ 524.842760][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.942959][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.982061][ T59] Bluetooth: hci5: command tx timeout [ 525.016834][ T43] bond0 (unregistering): Released all slaves [ 525.322866][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.402720][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.467180][ T43] bond0 (unregistering): Released all slaves [ 525.823283][ T8225] chnl_net:caif_netlink_parms(): no params data found [ 527.871975][ T43] hsr_slave_0: left promiscuous mode [ 527.921985][ T43] hsr_slave_1: left promiscuous mode [ 527.924796][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.962091][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.132000][ T43] hsr_slave_0: left promiscuous mode [ 528.174576][ T43] hsr_slave_1: left promiscuous mode [ 528.175611][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.202638][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.371710][ T43] hsr_slave_0: left promiscuous mode [ 528.421904][ T43] hsr_slave_1: left promiscuous mode [ 528.422964][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.497142][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.030820][ T43] team0 (unregistering): Port device team_slave_1 removed [ 531.109919][ T8289] overlayfs: failed to clone upperpath [ 531.202738][ T43] team0 (unregistering): Port device team_slave_0 removed [ 533.992753][ T43] team0 (unregistering): Port device team_slave_1 removed [ 534.464192][ T43] team0 (unregistering): Port device team_slave_0 removed [ 537.470022][ T43] team0 (unregistering): Port device team_slave_1 removed [ 537.602596][ T43] team0 (unregistering): Port device team_slave_0 removed [ 538.091675][ T8313] overlayfs: failed to clone upperpath [ 541.787071][ T8225] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.787242][ T8225] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.787511][ T8225] bridge_slave_0: entered allmulticast mode [ 541.825423][ T8225] bridge_slave_0: entered promiscuous mode [ 541.852479][ T8225] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.852673][ T8225] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.852929][ T8225] bridge_slave_1: entered allmulticast mode [ 541.883648][ T8225] bridge_slave_1: entered promiscuous mode [ 543.146231][ T8225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.209132][ T8225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.955670][ T8101] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 545.647108][ T8225] team0: Port device team_slave_0 added [ 545.682558][ T8101] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 546.044312][ T8225] team0: Port device team_slave_1 added [ 546.049966][ T8101] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 546.303280][ T8101] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 546.612234][ T8225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.612253][ T8225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.612280][ T8225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.635734][ T8225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.635750][ T8225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.635774][ T8225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.192819][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 547.198475][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 547.199654][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 547.231352][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 547.368830][ T8351] overlayfs: failed to clone upperpath [ 547.762635][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 550.422021][ T59] Bluetooth: hci1: command tx timeout [ 550.933676][ T8225] hsr_slave_0: entered promiscuous mode [ 550.935192][ T8225] hsr_slave_1: entered promiscuous mode [ 550.936225][ T8225] debugfs: 'hsr0' already exists in 'hsr' [ 550.936252][ T8225] Cannot create hsr debugfs directory [ 550.986793][ T8107] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 551.114334][ T8107] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 551.305507][ T8107] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 551.397547][ T8107] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 552.501721][ T59] Bluetooth: hci1: command tx timeout [ 554.581891][ T59] Bluetooth: hci1: command tx timeout [ 554.664868][ T8378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.564'. [ 554.705830][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 554.713062][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 554.719759][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 554.721010][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 554.728350][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 555.588472][ T8389] overlayfs: failed to clone upperpath [ 556.661950][ T59] Bluetooth: hci1: command tx timeout [ 556.826372][ T59] Bluetooth: hci2: command tx timeout [ 558.923922][ T59] Bluetooth: hci2: command tx timeout [ 559.507391][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 559.507414][ T37] audit: type=1326 audit(1756979153.806:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8397 comm="syz.1.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 559.507474][ T37] audit: type=1326 audit(1756979153.806:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8397 comm="syz.1.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 559.507518][ T37] audit: type=1326 audit(1756979153.826:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8397 comm="syz.1.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 559.507560][ T37] audit: type=1326 audit(1756979153.836:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8397 comm="syz.1.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 559.507601][ T37] audit: type=1326 audit(1756979153.836:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8397 comm="syz.1.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 559.507642][ T37] audit: type=1326 audit(1756979153.846:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8397 comm="syz.1.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 559.507685][ T37] audit: type=1326 audit(1756979153.846:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8397 comm="syz.1.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 559.507728][ T37] audit: type=1326 audit(1756979153.846:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8397 comm="syz.1.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 559.507769][ T37] audit: type=1326 audit(1756979153.856:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8397 comm="syz.1.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 559.507811][ T37] audit: type=1326 audit(1756979153.856:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8397 comm="syz.1.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3391ebe9 code=0x7ffc0000 [ 560.298516][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 560.318815][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 560.320165][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 560.337506][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 560.338541][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 560.995648][ T59] Bluetooth: hci2: command tx timeout [ 562.479331][ T59] Bluetooth: hci3: command tx timeout [ 563.072444][ T59] Bluetooth: hci2: command tx timeout [ 563.405738][ T8348] chnl_net:caif_netlink_parms(): no params data found [ 564.512256][ T59] Bluetooth: hci3: command tx timeout [ 564.951343][ T8348] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.951516][ T8348] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.952065][ T8348] bridge_slave_0: entered allmulticast mode [ 564.954963][ T8348] bridge_slave_0: entered promiscuous mode [ 565.018070][ T8348] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.018263][ T8348] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.018476][ T8348] bridge_slave_1: entered allmulticast mode [ 565.035208][ T8348] bridge_slave_1: entered promiscuous mode [ 565.478645][ T8348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.480843][ T8225] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 565.554595][ T8348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.588061][ T8225] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 565.786386][ T8225] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 565.965585][ T43] bridge_slave_1: left allmulticast mode [ 565.965622][ T43] bridge_slave_1: left promiscuous mode [ 565.965973][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.216073][ T43] bridge_slave_0: left allmulticast mode [ 566.216111][ T43] bridge_slave_0: left promiscuous mode [ 566.216430][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.583821][ T59] Bluetooth: hci3: command tx timeout [ 568.662046][ T59] Bluetooth: hci3: command tx timeout [ 568.958919][ T43] bridge_slave_1: left allmulticast mode [ 568.958959][ T43] bridge_slave_1: left promiscuous mode [ 568.959257][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.003613][ T43] bridge_slave_0: left allmulticast mode [ 569.003651][ T43] bridge_slave_0: left promiscuous mode [ 569.003953][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.845630][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.903753][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.944823][ T43] bond0 (unregistering): Released all slaves [ 570.322616][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.415654][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.474414][ T43] bond0 (unregistering): Released all slaves [ 570.513277][ T8225] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 570.776968][ T8348] team0: Port device team_slave_0 added [ 570.935882][ T8348] team0: Port device team_slave_1 added [ 570.968508][ T8431] netlink: 'syz.1.573': attribute type 3 has an invalid length. [ 570.969773][ T8431] netlink: 'syz.1.573': attribute type 3 has an invalid length. [ 571.549791][ T8348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.549811][ T8348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.549839][ T8348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.644185][ T8348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.644204][ T8348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.644232][ T8348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.645596][ T8382] chnl_net:caif_netlink_parms(): no params data found [ 571.931962][ T43] hsr_slave_0: left promiscuous mode [ 571.971862][ T43] hsr_slave_1: left promiscuous mode [ 571.976025][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.999110][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.201938][ T43] hsr_slave_0: left promiscuous mode [ 572.525278][ T43] hsr_slave_1: left promiscuous mode [ 572.527156][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.563046][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.471912][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.472002][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.753461][ T43] team0 (unregistering): Port device team_slave_1 removed [ 574.174988][ T43] team0 (unregistering): Port device team_slave_0 removed [ 576.484671][ T43] team0 (unregistering): Port device team_slave_1 removed [ 576.505955][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 576.518333][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 576.519565][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 576.521381][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 576.523261][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 578.134303][ T43] team0 (unregistering): Port device team_slave_0 removed [ 578.585070][ T5836] Bluetooth: hci4: command tx timeout [ 580.279135][ T8404] chnl_net:caif_netlink_parms(): no params data found [ 580.378799][ T8348] hsr_slave_0: entered promiscuous mode [ 580.380485][ T8348] hsr_slave_1: entered promiscuous mode [ 580.382105][ T8348] debugfs: 'hsr0' already exists in 'hsr' [ 580.382131][ T8348] Cannot create hsr debugfs directory [ 580.661770][ T5836] Bluetooth: hci4: command tx timeout [ 581.785207][ T8382] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.786520][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.786788][ T8382] bridge_slave_0: entered allmulticast mode [ 581.819679][ T8382] bridge_slave_0: entered promiscuous mode [ 581.962882][ T8382] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.963440][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.963721][ T8382] bridge_slave_1: entered allmulticast mode [ 581.970673][ T8382] bridge_slave_1: entered promiscuous mode [ 582.748446][ T5836] Bluetooth: hci4: command tx timeout [ 582.857014][ T8382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.935366][ T8404] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.935538][ T8404] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.935776][ T8404] bridge_slave_0: entered allmulticast mode [ 582.939387][ T8404] bridge_slave_0: entered promiscuous mode [ 582.956980][ T8382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.007161][ T8404] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.007341][ T8404] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.007617][ T8404] bridge_slave_1: entered allmulticast mode [ 583.011408][ T8404] bridge_slave_1: entered promiscuous mode [ 584.822075][ T5836] Bluetooth: hci4: command tx timeout [ 586.082802][ T8382] team0: Port device team_slave_0 added [ 586.458694][ T8404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.482533][ T8382] team0: Port device team_slave_1 added [ 586.538084][ T8404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.892855][ T8382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.892874][ T8382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.892903][ T8382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.985337][ T8404] team0: Port device team_slave_0 added [ 587.024542][ T8382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.024560][ T8382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.024590][ T8382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.173379][ T8404] team0: Port device team_slave_1 added [ 587.884508][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.884659][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.884691][ T8404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.016521][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.016539][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.016567][ T8404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.175259][ T8382] hsr_slave_0: entered promiscuous mode [ 591.176872][ T8382] hsr_slave_1: entered promiscuous mode [ 591.178010][ T8382] debugfs: 'hsr0' already exists in 'hsr' [ 591.178036][ T8382] Cannot create hsr debugfs directory [ 592.087663][ T8404] hsr_slave_0: entered promiscuous mode [ 592.098253][ T8404] hsr_slave_1: entered promiscuous mode [ 592.124127][ T8404] debugfs: 'hsr0' already exists in 'hsr' [ 592.124160][ T8404] Cannot create hsr debugfs directory [ 592.484923][ T8459] chnl_net:caif_netlink_parms(): no params data found [ 594.983943][ T8459] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.993355][ T8459] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.993634][ T8459] bridge_slave_0: entered allmulticast mode [ 594.996492][ T8459] bridge_slave_0: entered promiscuous mode [ 595.065950][ T8348] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 595.103787][ T8459] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.103957][ T8459] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.104173][ T8459] bridge_slave_1: entered allmulticast mode [ 595.108656][ T8459] bridge_slave_1: entered promiscuous mode [ 595.240178][ T8348] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 595.673607][ T8348] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 596.086449][ T8348] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 596.131360][ T8459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.379279][ T8459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.076146][ T8541] ================================================================== [ 597.076164][ T8541] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2c72/0x53e0 [ 597.076201][ T8541] Read of size 1 at addr ffff88803267cc70 by task syz.1.596/8541 [ 597.076219][ T8541] [ 597.076231][ T8541] CPU: 1 UID: 0 PID: 8541 Comm: syz.1.596 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 597.076256][ T8541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 597.076269][ T8541] Call Trace: [ 597.076277][ T8541] [ 597.076286][ T8541] dump_stack_lvl+0x189/0x250 [ 597.076318][ T8541] ? __kasan_check_byte+0x12/0x40 [ 597.076347][ T8541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.076377][ T8541] ? lock_release+0x4b/0x3e0 [ 597.076409][ T8541] ? __virt_addr_valid+0x4a5/0x5c0 [ 597.076430][ T8541] print_report+0xca/0x240 [ 597.076457][ T8541] ? xfrm_state_find+0x2c72/0x53e0 [ 597.076484][ T8541] kasan_report+0x118/0x150 [ 597.076512][ T8541] ? xfrm_state_find+0x2c72/0x53e0 [ 597.076554][ T8541] xfrm_state_find+0x2c72/0x53e0 [ 597.076592][ T8541] ? do_raw_spin_lock+0x121/0x290 [ 597.076615][ T8541] ? xfrm_state_find+0x2bf/0x53e0 [ 597.076647][ T8541] ? __pfx_xfrm_state_find+0x10/0x10 [ 597.076685][ T8541] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 597.076723][ T8541] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 597.076747][ T8541] ? xfrm_policy_lookup_bytype+0x123/0x1280 [ 597.076773][ T8541] ? xfrm_policy_lookup_bytype+0x1221/0x1280 [ 597.076813][ T8541] ? xfrm_expand_policies+0x41f/0x6a0 [ 597.076837][ T8541] xfrm_lookup_with_ifid+0x590/0x1a90 [ 597.076863][ T8541] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 597.076891][ T8541] xfrm_lookup_route+0x3c/0x1c0 [ 597.076913][ T8541] udp_sendmsg+0x142e/0x2170 [ 597.076942][ T8541] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 597.076964][ T8541] ? __pfx_udp_sendmsg+0x10/0x10 [ 597.076989][ T8541] ? smack_socket_sendmsg+0x438/0x520 [ 597.077029][ T8541] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 597.077061][ T8541] ? sock_rps_record_flow+0x19/0x410 [ 597.077084][ T8541] ? inet_sendmsg+0x29c/0x370 [ 597.077104][ T8541] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 597.077128][ T8541] __sock_sendmsg+0x19c/0x270 [ 597.077153][ T8541] ____sys_sendmsg+0x534/0x820 [ 597.077186][ T8541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 597.077220][ T8541] ? import_iovec+0x74/0xa0 [ 597.077244][ T8541] ___sys_sendmsg+0x21f/0x2a0 [ 597.077275][ T8541] ? __pfx____sys_sendmsg+0x10/0x10 [ 597.077324][ T8541] ? __fget_files+0x2a/0x420 [ 597.077353][ T8541] ? __fget_files+0x3a6/0x420 [ 597.077387][ T8541] __sys_sendmmsg+0x22d/0x430 [ 597.077421][ T8541] ? __pfx___sys_sendmmsg+0x10/0x10 [ 597.077450][ T8541] ? do_futex+0x395/0x420 [ 597.077478][ T8541] ? __sys_bind+0x341/0x3e0 [ 597.077511][ T8541] ? rcu_is_watching+0x15/0xb0 [ 597.077549][ T8541] __x64_sys_sendmmsg+0xa0/0xc0 [ 597.077577][ T8541] do_syscall_64+0xfa/0x3b0 [ 597.077602][ T8541] ? lockdep_hardirqs_on+0x9c/0x150 [ 597.077626][ T8541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.077646][ T8541] ? clear_bhb_loop+0x60/0xb0 [ 597.077662][ T8541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.077673][ T8541] RIP: 0033:0x7f7c3391ebe9 [ 597.077684][ T8541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.077694][ T8541] RSP: 002b:00007f7c31b65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 597.077708][ T8541] RAX: ffffffffffffffda RBX: 00007f7c33b56090 RCX: 00007f7c3391ebe9 [ 597.077717][ T8541] RDX: 0000000000000001 RSI: 0000200000001480 RDI: 0000000000000008 [ 597.077725][ T8541] RBP: 00007f7c339a1e19 R08: 0000000000000000 R09: 0000000000000000 [ 597.077732][ T8541] R10: 000000002000c044 R11: 0000000000000246 R12: 0000000000000000 [ 597.077739][ T8541] R13: 00007f7c33b56128 R14: 00007f7c33b56090 R15: 00007fff3c4bf3f8 [ 597.077752][ T8541] [ 597.077756][ T8541] [ 597.077759][ T8541] Allocated by task 8321: [ 597.077764][ T8541] kasan_save_track+0x3e/0x80 [ 597.077778][ T8541] __kasan_slab_alloc+0x6c/0x80 [ 597.077792][ T8541] kmem_cache_alloc_noprof+0x143/0x310 [ 597.077806][ T8541] xfrm_state_alloc+0x24/0x2f0 [ 597.077819][ T8541] __find_acq_core+0x8a7/0x1c00 [ 597.077833][ T8541] xfrm_find_acq+0x8f/0xd0 [ 597.077847][ T8541] pfkey_getspi+0x65d/0xee0 [ 597.077861][ T8541] pfkey_sendmsg+0xbfe/0x1090 [ 597.077873][ T8541] __sock_sendmsg+0x21c/0x270 [ 597.077883][ T8541] ____sys_sendmsg+0x508/0x820 [ 597.077897][ T8541] ___sys_sendmsg+0x21f/0x2a0 [ 597.077910][ T8541] __x64_sys_sendmsg+0x1a1/0x260 [ 597.077924][ T8541] do_syscall_64+0xfa/0x3b0 [ 597.077938][ T8541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.077948][ T8541] [ 597.077950][ T8541] Freed by task 6037: [ 597.077955][ T8541] kasan_save_track+0x3e/0x80 [ 597.077966][ T8541] kasan_save_free_info+0x46/0x50 [ 597.077975][ T8541] __kasan_slab_free+0x5b/0x80 [ 597.077986][ T8541] kmem_cache_free+0x195/0x510 [ 597.078000][ T8541] xfrm_state_gc_task+0x54e/0x6d0 [ 597.078010][ T8541] process_scheduled_works+0xade/0x17b0 [ 597.078023][ T8541] worker_thread+0x8a0/0xda0 [ 597.078035][ T8541] kthread+0x70e/0x8a0 [ 597.078048][ T8541] ret_from_fork+0x3f9/0x770 [ 597.078061][ T8541] ret_from_fork_asm+0x1a/0x30 [ 597.078071][ T8541] [ 597.078074][ T8541] The buggy address belongs to the object at ffff88803267c900 [ 597.078074][ T8541] which belongs to the cache xfrm_state of size 992 [ 597.078084][ T8541] The buggy address is located 880 bytes inside of [ 597.078084][ T8541] freed 992-byte region [ffff88803267c900, ffff88803267cce0) [ 597.078095][ T8541] [ 597.078098][ T8541] The buggy address belongs to the physical page: [ 597.078106][ T8541] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803267c480 pfn:0x3267c [ 597.078118][ T8541] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 597.078127][ T8541] flags: 0x80000000000040(head|node=0|zone=1) [ 597.078137][ T8541] page_type: f5(slab) [ 597.078148][ T8541] raw: 0080000000000040 ffff88801a7cf140 dead000000000122 0000000000000000 [ 597.078157][ T8541] raw: ffff88803267c480 00000000800e000c 00000000f5000000 0000000000000000 [ 597.078167][ T8541] head: 0080000000000040 ffff88801a7cf140 dead000000000122 0000000000000000 [ 597.078176][ T8541] head: ffff88803267c480 00000000800e000c 00000000f5000000 0000000000000000 [ 597.078186][ T8541] head: 0080000000000002 ffffea0000c99f01 00000000ffffffff 00000000ffffffff [ 597.078195][ T8541] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004 [ 597.078200][ T8541] page dumped because: kasan: bad access detected [ 597.078206][ T8541] page_owner tracks the page as allocated [ 597.078210][ T8541] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6004, tgid 6001 (syz.3.4), ts 120829963754, free_ts 120495947201 [ 597.078230][ T8541] post_alloc_hook+0x240/0x2a0 [ 597.078245][ T8541] get_page_from_freelist+0x2119/0x21b0 [ 597.078255][ T8541] __alloc_frozen_pages_noprof+0x181/0x370 [ 597.078265][ T8541] alloc_pages_mpol+0xd1/0x380 [ 597.078278][ T8541] allocate_slab+0x8a/0x370 [ 597.078287][ T8541] ___slab_alloc+0x8d1/0xdd0 [ 597.078301][ T8541] kmem_cache_alloc_noprof+0xe6/0x310 [ 597.078314][ T8541] xfrm_state_alloc+0x24/0x2f0 [ 597.078326][ T8541] xfrm_add_acquire+0xf7/0xb20 [ 597.078336][ T8541] xfrm_user_rcv_msg+0x7a0/0xab0 [ 597.078345][ T8541] netlink_rcv_skb+0x208/0x470 [ 597.078357][ T8541] xfrm_netlink_rcv+0x79/0x90 [ 597.078366][ T8541] netlink_unicast+0x846/0xa10 [ 597.078376][ T8541] netlink_sendmsg+0x805/0xb30 [ 597.078387][ T8541] __sock_sendmsg+0x21c/0x270 [ 597.078397][ T8541] ____sys_sendmsg+0x508/0x820 [ 597.078411][ T8541] page last free pid 6001 tgid 6001 stack trace: [ 597.078417][ T8541] __free_frozen_pages+0xb59/0xce0 [ 597.078432][ T8541] __put_partials+0x159/0x1a0 [ 597.078440][ T8541] __slab_free+0x2b3/0x390 [ 597.078450][ T8541] qlist_free_all+0x97/0x140 [ 597.078460][ T8541] kasan_quarantine_reduce+0x148/0x160 [ 597.078471][ T8541] __kasan_slab_alloc+0x22/0x80 [ 597.078483][ T8541] kmem_cache_alloc_noprof+0x143/0x310 [ 597.078495][ T8541] getname_flags+0xb8/0x540 [ 597.078510][ T8541] user_path_at+0x24/0x60 [ 597.078519][ T8541] __se_sys_chdir+0x91/0x280 [ 597.078540][ T8541] do_syscall_64+0xfa/0x3b0 [ 597.078553][ T8541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.078563][ T8541] [ 597.078566][ T8541] Memory state around the buggy address: [ 597.078572][ T8541] ffff88803267cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 597.078580][ T8541] ffff88803267cb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 597.078587][ T8541] >ffff88803267cc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 597.078593][ T8541] ^ [ 597.078600][ T8541] ffff88803267cc80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 597.078607][ T8541] ffff88803267cd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 597.078613][ T8541] ================================================================== [ 597.078699][ T8541] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 597.078712][ T8541] CPU: 0 UID: 0 PID: 8541 Comm: syz.1.596 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 597.078728][ T8541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 597.078735][ T8541] Call Trace: [ 597.078740][ T8541] [ 597.078745][ T8541] dump_stack_lvl+0x99/0x250 [ 597.078762][ T8541] ? __asan_memcpy+0x40/0x70 [ 597.078773][ T8541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.078837][ T8541] ? __pfx__printk+0x10/0x10 [ 597.078853][ T8541] vpanic+0x281/0x750 [ 597.078867][ T8541] ? preempt_schedule+0xae/0xc0 [ 597.078882][ T8541] ? __pfx_vpanic+0x10/0x10 [ 597.078895][ T8541] ? preempt_schedule_common+0x83/0xd0 [ 597.078909][ T8541] ? preempt_schedule+0xae/0xc0 [ 597.078922][ T8541] ? __pfx_preempt_schedule+0x10/0x10 [ 597.078936][ T8541] panic+0xb9/0xc0 [ 597.078951][ T8541] ? __pfx_panic+0x10/0x10 [ 597.078967][ T8541] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 597.078983][ T8541] ? xfrm_state_find+0x2c72/0x53e0 [ 597.078998][ T8541] check_panic_on_warn+0x89/0xb0 [ 597.079009][ T8541] ? xfrm_state_find+0x2c72/0x53e0 [ 597.079023][ T8541] end_report+0x78/0x160 [ 597.079036][ T8541] kasan_report+0x129/0x150 [ 597.079049][ T8541] ? xfrm_state_find+0x2c72/0x53e0 [ 597.079065][ T8541] xfrm_state_find+0x2c72/0x53e0 [ 597.079084][ T8541] ? do_raw_spin_lock+0x121/0x290 [ 597.079096][ T8541] ? xfrm_state_find+0x2bf/0x53e0 [ 597.079111][ T8541] ? __pfx_xfrm_state_find+0x10/0x10 [ 597.079130][ T8541] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 597.079148][ T8541] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 597.079160][ T8541] ? xfrm_policy_lookup_bytype+0x123/0x1280 [ 597.079173][ T8541] ? xfrm_policy_lookup_bytype+0x1221/0x1280 [ 597.079193][ T8541] ? xfrm_expand_policies+0x41f/0x6a0 [ 597.079205][ T8541] xfrm_lookup_with_ifid+0x590/0x1a90 [ 597.079218][ T8541] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 597.079231][ T8541] xfrm_lookup_route+0x3c/0x1c0 [ 597.079243][ T8541] udp_sendmsg+0x142e/0x2170 [ 597.079258][ T8541] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 597.079269][ T8541] ? __pfx_udp_sendmsg+0x10/0x10 [ 597.079281][ T8541] ? smack_socket_sendmsg+0x438/0x520 [ 597.079301][ T8541] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 597.079317][ T8541] ? sock_rps_record_flow+0x19/0x410 [ 597.079329][ T8541] ? inet_sendmsg+0x29c/0x370 [ 597.079339][ T8541] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 597.079351][ T8541] __sock_sendmsg+0x19c/0x270 [ 597.079364][ T8541] ____sys_sendmsg+0x534/0x820 [ 597.079379][ T8541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 597.079396][ T8541] ? import_iovec+0x74/0xa0 [ 597.079409][ T8541] ___sys_sendmsg+0x21f/0x2a0 [ 597.079424][ T8541] ? __pfx____sys_sendmsg+0x10/0x10 [ 597.079448][ T8541] ? __fget_files+0x2a/0x420 [ 597.079462][ T8541] ? __fget_files+0x3a6/0x420 [ 597.079478][ T8541] __sys_sendmmsg+0x22d/0x430 [ 597.079495][ T8541] ? __pfx___sys_sendmmsg+0x10/0x10 [ 597.079508][ T8541] ? do_futex+0x395/0x420 [ 597.079523][ T8541] ? __sys_bind+0x341/0x3e0 [ 597.079539][ T8541] ? rcu_is_watching+0x15/0xb0 [ 597.079556][ T8541] __x64_sys_sendmmsg+0xa0/0xc0 [ 597.079571][ T8541] do_syscall_64+0xfa/0x3b0 [ 597.079585][ T8541] ? lockdep_hardirqs_on+0x9c/0x150 [ 597.079598][ T8541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.079609][ T8541] ? clear_bhb_loop+0x60/0xb0 [ 597.079621][ T8541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.079632][ T8541] RIP: 0033:0x7f7c3391ebe9 [ 597.079641][ T8541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.079651][ T8541] RSP: 002b:00007f7c31b65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 597.079663][ T8541] RAX: ffffffffffffffda RBX: 00007f7c33b56090 RCX: 00007f7c3391ebe9 [ 597.079672][ T8541] RDX: 0000000000000001 RSI: 0000200000001480 RDI: 0000000000000008 [ 597.079679][ T8541] RBP: 00007f7c339a1e19 R08: 0000000000000000 R09: 0000000000000000 [ 597.079686][ T8541] R10: 000000002000c044 R11: 0000000000000246 R12: 0000000000000000 [ 597.079694][ T8541] R13: 00007f7c33b56128 R14: 00007f7c33b56090 R15: 00007fff3c4bf3f8 [ 597.079705][ T8541] [ 597.080078][ T8541] Kernel Offset: disabled