last executing test programs: 9m22.745430732s ago: executing program 0 (id=255): setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0a2185a06d65b5989ffbae1ed213516f50c6226385498d085bcbb1f73f63779a2fb3a6627144e6aca58bab0cc8aacfa6fdd9c8fe138d241dd798b5", @ANYRESHEX=r1], 0x38}, 0x1, 0xf00}, 0x4008005) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x50) socketpair(0x2e, 0x5, 0x1, &(0x7f0000000000)) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000000104010400000000000000000000000a060006400001000008000540000000020500010004000000080004400000cdc805000100047b0000050001000100"], 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x4c000) 9m22.537693563s ago: executing program 0 (id=256): prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x1, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) syz_io_uring_setup(0x24f9, 0x0, 0x0, &(0x7f0000000140)) r1 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) 9m21.489050657s ago: executing program 0 (id=257): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000100)={@loopback, @multicast1, 0x0, "d30f38d1800000000000000000000002000000000000000d00"}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000380)=0x2, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) getpeername(r0, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800009, 0x28011, 0xffffffffffffffff, 0x0) 9m20.959384615s ago: executing program 0 (id=258): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000001840)='net/unix\x00') read$FUSE(r3, &(0x7f0000001880)={0x2020}, 0x2020) 9m19.918014466s ago: executing program 0 (id=259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000200)={r4}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r3, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000280)) 9m18.614216708s ago: executing program 0 (id=260): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) 2m7.940451511s ago: executing program 2 (id=378): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/37, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m7.040214199s ago: executing program 2 (id=380): timer_create(0xfffffffd, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000003f0000000c009900000000000000000044005e8008000500000000000800"], 0x64}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x41, 0x3, 0x270, 0xf8, 0x19, 0x0, 0x0, 0x0, 0x1d8, 0x1f0, 0x1f0, 0x1d8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'dummy0\x00', 'wg1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@ecn={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) 2m5.176115012s ago: executing program 2 (id=381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x806}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x0, 0x300, @void, @value}, 0x10) socket$inet6(0xa, 0x80002, 0x0) 2m3.809194175s ago: executing program 2 (id=384): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004fc0)={0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="100000000010"], 0x10}], 0x1}, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0xcc, r5, 0x10, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40810}, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x4030582a, &(0x7f0000000240)) 2m3.211715445s ago: executing program 2 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f0000006980)=[{0x0}, {&(0x7f0000004e80)=""/160, 0xa0}], 0x2}}, {{0x0, 0x0, &(0x7f0000006640)=[{0x0}, {&(0x7f00000053c0)=""/172, 0xac}, {0x0}, {0x0}, {0x0}, {&(0x7f0000006580)=""/158, 0x9e}], 0x6}}], 0x2, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r3, &(0x7f0000000300), 0x6) recvmmsg(r3, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 1m50.270112453s ago: executing program 1 (id=403): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '.,\\-\\{\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0x7, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}}, 0x801) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) listen(r0, 0x0) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') r5 = syz_open_dev$vim2m(0x0, 0x33c, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000000)={0x2020}, 0x96) close(r0) 1m48.712509s ago: executing program 1 (id=404): r0 = io_uring_setup(0x1d7b, &(0x7f00000002c0)) r1 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) 1m47.96465661s ago: executing program 1 (id=406): socket$nl_sock_diag(0x10, 0x3, 0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x0, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 1m45.855196487s ago: executing program 1 (id=408): syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x90c20}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) write$binfmt_elf32(r2, 0x0, 0x1001) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000100)={r4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000180)={r5, 0x3, r3, 0x6}) 1m44.570022932s ago: executing program 1 (id=409): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x30, 0x4, 0x0, 0x0, 0xc0, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x9, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x1}, {@multicast2}, {@private=0xa0100fe}, {@rand_addr=0x640100fe}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000940)={0x0, 0x4e6f}) 1m42.568089987s ago: executing program 1 (id=413): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000740)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xdd, &(0x7f0000000780)=""/221}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) 27.302050156s ago: executing program 2 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f0000006980)=[{0x0}, {&(0x7f0000004e80)=""/160, 0xa0}], 0x2}}, {{0x0, 0x0, &(0x7f0000006640)=[{0x0}, {&(0x7f00000053c0)=""/172, 0xac}, {0x0}, {0x0}, {0x0}, {&(0x7f0000006580)=""/158, 0x9e}], 0x6}}], 0x2, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r3, &(0x7f0000000300), 0x6) recvmmsg(r3, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 8.809501388s ago: executing program 3 (id=488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) unshare(0x20050880) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 8.809204891s ago: executing program 4 (id=489): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0xfffffffc, @private0}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x66, &(0x7f00000000c0)={r5}, &(0x7f0000000140)=0xc) 7.835713475s ago: executing program 4 (id=490): unshare(0x4020400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r3, 0x1}, 0x14}}, 0x0) ioctl$VT_RELDISP(r0, 0x5605) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000237000/0x4000)=nil, &(0x7f0000c7d000/0x3000)=nil, &(0x7f0000bc9000/0x4000)=nil, &(0x7f0000c5f000/0x2000)=nil, &(0x7f00000f9000/0x3000)=nil, &(0x7f0000fef000/0xf000)=nil, &(0x7f0000361000/0x3000)=nil, &(0x7f00008d7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000cb6000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) syz_io_uring_setup(0x202ddd, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) 6.463754263s ago: executing program 3 (id=491): ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)={0xf71, 0xfc5d, 0x2, 0x7}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x40, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='reiserfs\x00', 0x0, &(0x7f0000000100)='&@,,') ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000000040)={0x2, 0x3, {}, {0xffffffffffffffff}, 0x636c, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) write$uinput_user_dev(r2, &(0x7f0000000300)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) 5.505925431s ago: executing program 4 (id=492): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) socket$unix(0x1, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$unix(0x1, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x24}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x60000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket(0x840000000002, 0x3, 0xfa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x3fc, 0x4, 0x25, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r2, 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 5.47300858s ago: executing program 3 (id=493): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x20000) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) 4.033127362s ago: executing program 3 (id=494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) recvfrom$inet(0xffffffffffffffff, &(0x7f00000001c0)=""/32, 0x20, 0x40000040, &(0x7f0000000240)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@abs, 0x6e) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000002c0)=0xffffffffffffffff) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600004, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 3.838047889s ago: executing program 4 (id=495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') sendfile(r6, r7, 0x0, 0x7ffff000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 2.369568579s ago: executing program 3 (id=496): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) syz_io_uring_setup(0x19d3, 0x0, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x3, 0x300) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 2.139123441s ago: executing program 4 (id=497): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read(r1, 0x0, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], [0x59a7314d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}, 0x45c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000700, 0xee01, &(0x7f00000000c0)) 703.922473ms ago: executing program 3 (id=498): socket$igmp6(0xa, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x204080, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_dccp(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x90}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000017000000080001007063690011000200303030303a30303a31302e300000000008"], 0x50}}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 4 (id=499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000003c0)=""/168) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) truncate(0x0, 0xc00) kernel console output (not intermixed with test programs): he newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.906059][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.907176][ T8150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.910610][ T8150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.910666][ T8150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.910719][ T8150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.910768][ T8150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.008413][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.008449][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.906548][ T5396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.906580][ T5396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.028319][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.028352][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.467796][ T8266] Cannot find set identified by id 0 to match [ 704.282333][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.282365][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.424871][ T29] audit: type=1400 audit(1728212753.646:392): avc: denied { create } for pid=8269 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 704.424920][ T29] audit: type=1400 audit(1728212753.646:393): avc: denied { getopt } for pid=8269 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 704.424956][ T29] audit: type=1400 audit(1728212753.656:394): avc: denied { connect } for pid=8269 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 705.398563][ T29] audit: type=1400 audit(1728212753.776:395): avc: denied { write } for pid=8277 comm="syz.4.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 705.398615][ T29] audit: type=1400 audit(1728212754.606:396): avc: denied { listen } for pid=8269 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 705.410063][ T29] audit: type=1400 audit(1728212754.646:397): avc: denied { write } for pid=8268 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 707.851110][ T8300] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd4": -EINTR [ 709.082722][ T5252] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 709.101675][ T5241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 709.168490][ T8317] netlink: 'syz.4.315': attribute type 1 has an invalid length. [ 709.168624][ T8317] netlink: 224 bytes leftover after parsing attributes in process `syz.4.315'. [ 710.148255][ T5241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 710.177238][ T5241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 710.179373][ T5241] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 710.180284][ T5241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 712.348993][ T4612] Bluetooth: hci3: command tx timeout [ 713.067360][ T5287] IPVS: starting estimator thread 0... [ 713.190881][ T8343] IPVS: using max 13 ests per chain, 31200 per kthread [ 715.119039][ T29] audit: type=1400 audit(1728212763.556:398): avc: denied { mount } for pid=8345 comm="syz.4.322" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 715.142477][ T4612] Bluetooth: hci3: command tx timeout [ 715.236640][ T29] audit: type=1400 audit(1728212764.316:399): avc: denied { unmount } for pid=8110 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 717.176834][ T8376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 717.211487][ T29] audit: type=1400 audit(1728212766.386:400): avc: denied { create } for pid=8367 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 717.239832][ T5241] Bluetooth: hci3: command tx timeout [ 717.339004][ T29] audit: type=1400 audit(1728212766.396:401): avc: denied { ioctl } for pid=8367 comm="syz.3.325" path="socket:[37752]" dev="sockfs" ino=37752 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 717.427554][ T8306] chnl_net:caif_netlink_parms(): no params data found [ 719.322509][ T5241] Bluetooth: hci3: command tx timeout [ 719.354183][ T8387] netlink: 36 bytes leftover after parsing attributes in process `syz.4.329'. [ 719.364175][ T8387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.329'. [ 719.373468][ T8387] netlink: 36 bytes leftover after parsing attributes in process `syz.4.329'. [ 719.382729][ T8387] netlink: 36 bytes leftover after parsing attributes in process `syz.4.329'. [ 719.554123][ T29] audit: type=1400 audit(1728212768.786:402): avc: denied { setopt } for pid=8381 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 719.741395][ T82] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.944247][ T82] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.024494][ T8306] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.054343][ T8306] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.071704][ T8306] bridge_slave_0: entered allmulticast mode [ 720.101922][ T8306] bridge_slave_0: entered promiscuous mode [ 720.181347][ T82] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.245283][ T8306] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.269009][ T8306] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.276453][ T8306] bridge_slave_1: entered allmulticast mode [ 720.283124][ T938] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 720.299952][ T8306] bridge_slave_1: entered promiscuous mode [ 720.403741][ T82] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.471225][ T938] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 720.482881][ T938] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 720.500594][ T938] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 720.525546][ T938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.533409][ T8306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.547881][ T8402] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 720.592267][ T8306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.604215][ T938] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 720.682912][ T8306] team0: Port device team_slave_0 added [ 720.786860][ T8306] team0: Port device team_slave_1 added [ 720.850755][ T938] usb 2-1: USB disconnect, device number 6 [ 721.163961][ T8306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.172587][ T8306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.713435][ T8306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.019236][ T82] bridge_slave_1: left allmulticast mode [ 722.049047][ T82] bridge_slave_1: left promiscuous mode [ 722.067104][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.095194][ T82] bridge_slave_0: left allmulticast mode [ 722.101325][ T82] bridge_slave_0: left promiscuous mode [ 722.107025][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.209098][ T5399] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 722.401657][ T5399] usb 5-1: Using ep0 maxpacket: 32 [ 722.451417][ T5399] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 722.568269][ T5399] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 722.787045][ T5399] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 722.964927][ T5399] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 722.979166][ T5399] usb 5-1: config 0 interface 0 has no altsetting 0 [ 722.992081][ T5399] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 723.007617][ T5399] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 723.032082][ T5399] usb 5-1: Product: syz [ 723.305533][ T5399] usb 5-1: Manufacturer: syz [ 723.310594][ T5399] usb 5-1: SerialNumber: syz [ 723.339602][ T5399] usb 5-1: config 0 descriptor?? [ 723.347715][ T5399] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 723.359896][ T5399] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 723.480110][ T8428] random: crng reseeded on system resumption [ 724.374771][ T29] audit: type=1400 audit(1728212772.706:403): avc: denied { append } for pid=8425 comm="syz.3.337" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 724.559076][ T29] audit: type=1400 audit(1728212772.706:404): avc: denied { open } for pid=8425 comm="syz.3.337" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 724.690409][ T29] audit: type=1400 audit(1728212773.916:405): avc: denied { bind } for pid=8431 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 724.746597][ T5241] Bluetooth: Unexpected continuation frame (len 24) [ 724.764378][ T29] audit: type=1400 audit(1728212773.926:406): avc: denied { setopt } for pid=8431 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 724.874519][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.887834][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.906398][ T82] bond0 (unregistering): Released all slaves [ 724.922492][ T8306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.929879][ T8306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.957615][ T8306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.998481][ T5287] usb 5-1: USB disconnect, device number 3 [ 725.010960][ T5287] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 725.027810][ T8435] netlink: 'syz.1.338': attribute type 10 has an invalid length. [ 725.085962][ T8435] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 725.412234][ T8306] hsr_slave_0: entered promiscuous mode [ 725.429190][ T8306] hsr_slave_1: entered promiscuous mode [ 725.448381][ T8306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 725.458490][ T8306] Cannot create hsr debugfs directory [ 725.550901][ T82] hsr_slave_0: left promiscuous mode [ 725.583628][ T82] hsr_slave_1: left promiscuous mode [ 725.615324][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.628488][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.683185][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.715661][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.834691][ T82] veth1_macvtap: left promiscuous mode [ 725.961577][ T82] veth0_macvtap: left promiscuous mode [ 725.973050][ T82] veth1_vlan: left promiscuous mode [ 725.983372][ T82] veth0_vlan: left promiscuous mode [ 726.806506][ T8463] nbd: must specify at least one socket [ 728.144660][ T29] audit: type=1400 audit(1728212777.106:407): avc: denied { read } for pid=8464 comm="syz.3.342" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 728.229059][ T29] audit: type=1400 audit(1728212777.106:408): avc: denied { open } for pid=8464 comm="syz.3.342" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 729.117913][ T29] audit: type=1400 audit(1728212777.646:409): avc: denied { ioctl } for pid=8464 comm="syz.3.342" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 731.740305][ T29] audit: type=1400 audit(1728212780.966:410): avc: denied { bind } for pid=8475 comm="syz.4.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 733.471332][ T82] team0 (unregistering): Port device team_slave_1 removed [ 735.109691][ T82] team0 (unregistering): Port device team_slave_0 removed [ 738.653003][ T4612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 739.375006][ T29] audit: type=1400 audit(1728212787.966:411): avc: denied { create } for pid=8512 comm="syz.1.354" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 739.402027][ T4612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 739.777445][ T8522] syz.1.354: attempt to access beyond end of device [ 739.777445][ T8522] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 739.791025][ T8522] FAT-fs (loop3): unable to read boot sector [ 740.076705][ T29] audit: type=1400 audit(1728212789.006:412): avc: denied { mounton } for pid=8512 comm="syz.1.354" path="/16/file0" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 740.099769][ T4612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 740.133671][ T4612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 740.141749][ T4612] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 740.161795][ T4612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 740.419325][ T29] audit: type=1400 audit(1728212789.646:413): avc: denied { unlink } for pid=7953 comm="syz-executor" name="file0" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 740.759067][ T938] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 741.579121][ T29] audit: type=1400 audit(1728212790.136:414): avc: denied { setopt } for pid=8529 comm="syz.1.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 741.800743][ T938] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 741.811620][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.884847][ T938] usb 5-1: config 0 descriptor?? [ 741.976367][ T8516] chnl_net:caif_netlink_parms(): no params data found [ 742.270625][ T4612] Bluetooth: hci1: command tx timeout [ 742.309193][ T8516] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.316869][ T8516] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.326363][ T8516] bridge_slave_0: entered allmulticast mode [ 742.334470][ T8516] bridge_slave_0: entered promiscuous mode [ 742.346451][ T8516] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.356400][ T8516] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.363880][ T8516] bridge_slave_1: entered allmulticast mode [ 742.372611][ T8516] bridge_slave_1: entered promiscuous mode [ 742.428072][ T82] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.501255][ T8516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.543582][ T82] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.574606][ T8516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.645043][ T82] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.672551][ T8516] team0: Port device team_slave_0 added [ 742.681655][ T8516] team0: Port device team_slave_1 added [ 742.724943][ T8306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 742.761734][ T938] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 742.766849][ T82] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.772620][ T938] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 742.797085][ T938] asix 5-1:0.0: probe with driver asix failed with error -71 [ 742.820799][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.831142][ T938] usb 5-1: USB disconnect, device number 4 [ 742.847220][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.882365][ T8516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.895952][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.903300][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.981310][ T8516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.993317][ T8306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 743.029825][ T8306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 743.142126][ T8306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 743.163788][ T8516] hsr_slave_0: entered promiscuous mode [ 743.176536][ T8516] hsr_slave_1: entered promiscuous mode [ 743.186604][ T8516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 743.197990][ T8516] Cannot create hsr debugfs directory [ 743.632591][ T82] bridge_slave_1: left allmulticast mode [ 743.638304][ T82] bridge_slave_1: left promiscuous mode [ 743.661991][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.639288][ T4612] Bluetooth: hci1: command tx timeout [ 745.347995][ T8570] hub 9-0:1.0: USB hub found [ 745.363740][ T8570] hub 9-0:1.0: 8 ports detected [ 745.689771][ T82] bridge_slave_0: left allmulticast mode [ 745.709379][ T82] bridge_slave_0: left promiscuous mode [ 745.715187][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.725510][ T4612] Bluetooth: hci1: command tx timeout [ 748.749628][ T4612] Bluetooth: hci1: command tx timeout [ 752.518019][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.722554][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 754.744249][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 754.783878][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 754.812073][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 754.832891][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 754.859864][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 755.885128][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 756.050598][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 757.000859][ T4612] Bluetooth: hci0: command tx timeout [ 757.018261][ T82] bond0 (unregistering): Released all slaves [ 759.105756][ T4612] Bluetooth: hci0: command tx timeout [ 760.211069][ T5241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 760.269167][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 760.313736][ T5241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 760.331616][ T5241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 760.356766][ T5241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 760.364565][ T5241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 761.354058][ T4612] Bluetooth: hci0: command tx timeout [ 762.510252][ T4612] Bluetooth: hci2: command tx timeout [ 763.400336][ T4612] Bluetooth: hci0: command tx timeout [ 764.590115][ T4612] Bluetooth: hci2: command tx timeout [ 765.416428][ T82] hsr_slave_0: left promiscuous mode [ 765.515322][ T82] hsr_slave_1: left promiscuous mode [ 765.558143][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.596060][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.670544][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.679563][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.881883][ T82] veth1_macvtap: left promiscuous mode [ 765.887741][ T82] veth0_macvtap: left promiscuous mode [ 765.926874][ T82] veth1_vlan: left promiscuous mode [ 765.951610][ T82] veth0_vlan: left promiscuous mode [ 766.668891][ T4612] Bluetooth: hci2: command tx timeout [ 768.980096][ T4612] Bluetooth: hci2: command tx timeout [ 775.326962][ T5241] Bluetooth: hci4: command 0x0406 tx timeout [ 791.368975][ T4612] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 805.799671][ T4612] Bluetooth: hci5: command 0x0406 tx timeout [ 814.019758][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.020856][ T4612] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 814.123274][ T8641] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 825.439660][ T4612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 825.478972][ T4612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 825.487583][ T4612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 825.495836][ T4612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 825.504550][ T4612] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 825.514603][ T4612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 825.799738][ T5241] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 825.838416][ T5241] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 825.850047][ T5241] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 825.870206][ T5241] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 825.879560][ T5241] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 825.899113][ T5241] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 826.280045][ T5241] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 826.293875][ T5241] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 826.309226][ T5241] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 826.333393][ T5241] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 826.341349][ T5241] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 826.349085][ T5241] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 826.395446][ T5241] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 826.416755][ T5241] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 826.439163][ T5241] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 826.452274][ T5241] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 826.461021][ T5241] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 826.473845][ T5241] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 826.587073][ T5241] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 826.610186][ T5241] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 826.629596][ T5241] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 826.651366][ T5241] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 826.671892][ T5241] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 826.687334][ T5241] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 826.768157][ T82] team0 (unregistering): Port device team_slave_1 removed [ 826.818473][ T82] team0 (unregistering): Port device team_slave_0 removed [ 827.559056][ T5241] Bluetooth: hci4: command tx timeout [ 827.948923][ T5241] Bluetooth: hci5: command tx timeout [ 828.429131][ T5241] Bluetooth: hci6: command tx timeout [ 828.433467][ T8655] chnl_net:caif_netlink_parms(): no params data found [ 828.457520][ T8648] chnl_net:caif_netlink_parms(): no params data found [ 828.593930][ T5241] Bluetooth: hci7: command tx timeout [ 828.751433][ T5241] Bluetooth: hci8: command tx timeout [ 829.085141][ T8648] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.092777][ T8648] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.101151][ T8648] bridge_slave_0: entered allmulticast mode [ 829.108063][ T8648] bridge_slave_0: entered promiscuous mode [ 829.116388][ T8648] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.123726][ T8648] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.131077][ T8648] bridge_slave_1: entered allmulticast mode [ 829.138407][ T8648] bridge_slave_1: entered promiscuous mode [ 829.146238][ T8660] chnl_net:caif_netlink_parms(): no params data found [ 829.165603][ T8657] chnl_net:caif_netlink_parms(): no params data found [ 829.176081][ T8655] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.183575][ T8655] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.193438][ T8655] bridge_slave_0: entered allmulticast mode [ 829.201394][ T8655] bridge_slave_0: entered promiscuous mode [ 829.235595][ T8653] chnl_net:caif_netlink_parms(): no params data found [ 829.256691][ T8655] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.264321][ T8655] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.271715][ T8655] bridge_slave_1: entered allmulticast mode [ 829.278568][ T8655] bridge_slave_1: entered promiscuous mode [ 829.298134][ T8648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.315672][ T8648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.483671][ T8655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.504025][ T8655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.518424][ T8648] team0: Port device team_slave_0 added [ 829.530563][ T8648] team0: Port device team_slave_1 added [ 829.628907][ T5241] Bluetooth: hci4: command tx timeout [ 829.701223][ T8660] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.708493][ T8660] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.717383][ T8660] bridge_slave_0: entered allmulticast mode [ 829.724403][ T8660] bridge_slave_0: entered promiscuous mode [ 829.770512][ T82] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.821327][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.828334][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.861828][ T8648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.891598][ T8660] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.899003][ T8660] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.906275][ T8660] bridge_slave_1: entered allmulticast mode [ 829.913495][ T8660] bridge_slave_1: entered promiscuous mode [ 829.937792][ T8655] team0: Port device team_slave_0 added [ 829.962520][ T82] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.976481][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.988987][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.015739][ T8648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.029054][ T5241] Bluetooth: hci5: command tx timeout [ 830.063730][ T8657] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.071213][ T8657] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.078475][ T8657] bridge_slave_0: entered allmulticast mode [ 830.085701][ T8657] bridge_slave_0: entered promiscuous mode [ 830.094519][ T8657] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.102016][ T8657] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.109442][ T8657] bridge_slave_1: entered allmulticast mode [ 830.116237][ T8657] bridge_slave_1: entered promiscuous mode [ 830.140562][ T8655] team0: Port device team_slave_1 added [ 830.157724][ T8660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.212693][ T82] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.227020][ T8653] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.234952][ T8653] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.242860][ T8653] bridge_slave_0: entered allmulticast mode [ 830.250761][ T8653] bridge_slave_0: entered promiscuous mode [ 830.261872][ T8653] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.269164][ T8653] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.276441][ T8653] bridge_slave_1: entered allmulticast mode [ 830.284123][ T8653] bridge_slave_1: entered promiscuous mode [ 830.321150][ T8660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.362422][ T8648] hsr_slave_0: entered promiscuous mode [ 830.368813][ T8648] hsr_slave_1: entered promiscuous mode [ 830.375480][ T8648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 830.383667][ T8648] Cannot create hsr debugfs directory [ 830.409422][ T82] bond0: (slave netdevsim0): Releasing backup interface [ 830.422022][ T82] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.454077][ T8657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.480309][ T8655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.487391][ T8655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.513560][ T5241] Bluetooth: hci6: command tx timeout [ 830.519628][ T8655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.553179][ T8660] team0: Port device team_slave_0 added [ 830.588146][ T8657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.621296][ T8655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.628477][ T8655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.656278][ T8655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.669232][ T5241] Bluetooth: hci7: command tx timeout [ 830.680558][ T8660] team0: Port device team_slave_1 added [ 830.766449][ T8653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.793687][ T8653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.828952][ T5241] Bluetooth: hci8: command tx timeout [ 830.858097][ T8657] team0: Port device team_slave_0 added [ 830.887603][ T8657] team0: Port device team_slave_1 added [ 831.034137][ T8660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.041302][ T8660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.068616][ T8660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.113509][ T8653] team0: Port device team_slave_0 added [ 831.125475][ T8653] team0: Port device team_slave_1 added [ 831.132689][ T8657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.141809][ T8657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.170189][ T8657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.227647][ T8660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.235689][ T8660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.263848][ T8660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.297394][ T8657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.306629][ T8657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.333263][ T8657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.365774][ T8655] hsr_slave_0: entered promiscuous mode [ 831.377187][ T8655] hsr_slave_1: entered promiscuous mode [ 831.383962][ T8655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 831.391970][ T8655] Cannot create hsr debugfs directory [ 831.529237][ T8657] hsr_slave_0: entered promiscuous mode [ 831.537263][ T8657] hsr_slave_1: entered promiscuous mode [ 831.544298][ T8657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 831.552744][ T8657] Cannot create hsr debugfs directory [ 831.562513][ T8653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.569609][ T8653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.596960][ T8653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.610642][ T8653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.617660][ T8653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.644418][ T8653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.673556][ T8660] hsr_slave_0: entered promiscuous mode [ 831.680280][ T8660] hsr_slave_1: entered promiscuous mode [ 831.686513][ T8660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 831.694386][ T8660] Cannot create hsr debugfs directory [ 831.709000][ T5241] Bluetooth: hci4: command tx timeout [ 831.759785][ T82] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.881357][ T82] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.915045][ T8653] hsr_slave_0: entered promiscuous mode [ 831.922070][ T8653] hsr_slave_1: entered promiscuous mode [ 831.928376][ T8653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 831.936644][ T8653] Cannot create hsr debugfs directory [ 832.031170][ T82] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.094135][ T8648] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.109141][ T5241] Bluetooth: hci5: command tx timeout [ 832.176187][ T82] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.256517][ T8648] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.379298][ T8648] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.519636][ T8648] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.589172][ T5241] Bluetooth: hci6: command tx timeout [ 832.629825][ T82] bridge_slave_1: left allmulticast mode [ 832.635566][ T82] bridge_slave_1: left promiscuous mode [ 832.661632][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.679931][ T82] bridge_slave_0: left allmulticast mode [ 832.686442][ T82] bridge_slave_0: left promiscuous mode [ 832.709490][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.719157][ T82] bridge_slave_1: left allmulticast mode [ 832.724883][ T82] bridge_slave_1: left promiscuous mode [ 832.732037][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.745589][ T82] bridge_slave_0: left allmulticast mode [ 832.751533][ T5241] Bluetooth: hci7: command tx timeout [ 832.758011][ T82] bridge_slave_0: left promiscuous mode [ 832.764399][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.775214][ T82] bridge_slave_1: left allmulticast mode [ 832.781052][ T82] bridge_slave_1: left promiscuous mode [ 832.787272][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.796983][ T82] bridge_slave_0: left allmulticast mode [ 832.803051][ T82] bridge_slave_0: left promiscuous mode [ 832.808842][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.820989][ T82] bridge_slave_1: left allmulticast mode [ 832.826691][ T82] bridge_slave_1: left promiscuous mode [ 832.832559][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.842340][ T82] bridge_slave_0: left allmulticast mode [ 832.848037][ T82] bridge_slave_0: left promiscuous mode [ 832.854192][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.908969][ T5241] Bluetooth: hci8: command tx timeout [ 833.763692][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.776486][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 833.788462][ T82] bond0 (unregistering): Released all slaves [ 833.794736][ T5241] Bluetooth: hci4: command tx timeout [ 833.811160][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.824002][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 833.835671][ T82] bond0 (unregistering): Released all slaves [ 833.978484][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.999590][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.011493][ T82] bond0 (unregistering): Released all slaves [ 834.145552][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.164872][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.175935][ T82] bond0 (unregistering): Released all slaves [ 834.189073][ T5241] Bluetooth: hci5: command tx timeout [ 834.352612][ T8648] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 834.383153][ T8648] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 834.420408][ T8648] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 834.610347][ T8648] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 834.671082][ T5241] Bluetooth: hci6: command tx timeout [ 834.836144][ T5241] Bluetooth: hci7: command tx timeout [ 835.000551][ T5241] Bluetooth: hci8: command tx timeout [ 835.156370][ T82] hsr_slave_0: left promiscuous mode [ 835.162728][ T82] hsr_slave_1: left promiscuous mode [ 835.169685][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.189608][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.212290][ T82] hsr_slave_0: left promiscuous mode [ 835.228210][ T82] hsr_slave_1: left promiscuous mode [ 835.235785][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.260866][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.273694][ T82] hsr_slave_0: left promiscuous mode [ 835.286477][ T82] hsr_slave_1: left promiscuous mode [ 835.293103][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.309294][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.330058][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.337546][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.368354][ T82] hsr_slave_0: left promiscuous mode [ 835.379362][ T82] hsr_slave_1: left promiscuous mode [ 835.385508][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.398887][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.419996][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.427487][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.531521][ T82] veth1_macvtap: left promiscuous mode [ 835.537144][ T82] veth0_macvtap: left promiscuous mode [ 835.557913][ T82] veth1_vlan: left promiscuous mode [ 835.570797][ T82] veth0_vlan: left promiscuous mode [ 835.577512][ T82] veth1_macvtap: left promiscuous mode [ 835.584850][ T82] veth0_macvtap: left promiscuous mode [ 835.591751][ T82] veth1_vlan: left promiscuous mode [ 835.597075][ T82] veth0_vlan: left promiscuous mode [ 835.993281][ T82] team0 (unregistering): Port device team_slave_1 removed [ 836.027858][ T82] team0 (unregistering): Port device team_slave_0 removed [ 836.397291][ T82] team0 (unregistering): Port device team_slave_1 removed [ 836.433676][ T82] team0 (unregistering): Port device team_slave_0 removed [ 837.056627][ T82] team0 (unregistering): Port device team_slave_1 removed [ 837.110588][ T82] team0 (unregistering): Port device team_slave_0 removed [ 838.021304][ T82] team0 (unregistering): Port device team_slave_1 removed [ 838.078644][ T82] team0 (unregistering): Port device team_slave_0 removed [ 838.643301][ T8648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.664957][ T8655] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 838.745903][ T8655] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 838.760995][ T8655] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 838.783128][ T8655] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 838.897999][ T8648] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.995366][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.002576][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.017016][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.024220][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.226876][ T8648] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 839.241231][ T8648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 839.342863][ T8655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.372890][ T8655] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.455707][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.462902][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.544339][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.551555][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.774334][ T8660] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 839.840114][ T8660] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 839.977238][ T8660] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 840.123888][ T8660] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 840.347183][ T4612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 840.358466][ T4612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 840.369961][ T4612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 840.389551][ T4612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 840.399109][ T4612] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 840.406688][ T4612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 840.485466][ T8660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 840.506403][ T8660] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.531441][ T2943] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.538561][ T2943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.594105][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.601396][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.806850][ T8655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.083627][ T8653] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 841.108178][ T8653] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 841.137554][ T8653] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 841.184102][ T8655] veth0_vlan: entered promiscuous mode [ 841.203052][ T8655] veth1_vlan: entered promiscuous mode [ 841.216482][ T8653] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 841.491016][ T8759] chnl_net:caif_netlink_parms(): no params data found [ 841.521533][ T8657] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 841.599111][ T8657] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 841.616793][ T8655] veth0_macvtap: entered promiscuous mode [ 841.649737][ T8660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.656910][ T8657] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 841.673952][ T8655] veth1_macvtap: entered promiscuous mode [ 841.699841][ T8657] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 841.755128][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 841.771709][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.783646][ T8655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.804618][ T8759] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.812404][ T8759] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.821473][ T8759] bridge_slave_0: entered allmulticast mode [ 841.828383][ T8759] bridge_slave_0: entered promiscuous mode [ 841.902799][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.915071][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.931125][ T8655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.980121][ T8759] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.987319][ T8759] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.994815][ T8759] bridge_slave_1: entered allmulticast mode [ 842.002732][ T8759] bridge_slave_1: entered promiscuous mode [ 842.047418][ T8660] veth0_vlan: entered promiscuous mode [ 842.091842][ T8759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.113311][ T8655] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.123122][ T8655] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.138510][ T8655] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.148272][ T8655] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.183622][ T8759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.268800][ T8660] veth1_vlan: entered promiscuous mode [ 842.283124][ T8653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.324291][ T8759] team0: Port device team_slave_0 added [ 842.337608][ T8759] team0: Port device team_slave_1 added [ 842.421131][ T8653] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.450279][ T8759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.457329][ T8759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 842.490665][ T8759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.520010][ T4612] Bluetooth: hci0: command tx timeout [ 842.582522][ T8759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.594155][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.608495][ T8759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 842.626812][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.636432][ T8759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.710786][ T2943] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.717962][ T2943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.803745][ T8657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.835665][ T8660] veth0_macvtap: entered promiscuous mode [ 842.847015][ T82] bridge_slave_1: left allmulticast mode [ 842.860307][ T82] bridge_slave_1: left promiscuous mode [ 842.866143][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.885406][ T82] bridge_slave_0: left allmulticast mode [ 842.896367][ T82] bridge_slave_0: left promiscuous mode [ 842.908084][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.480271][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.492780][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.512071][ T82] bond0 (unregistering): Released all slaves [ 843.551702][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.583215][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.628114][ T8759] hsr_slave_0: entered promiscuous mode [ 843.650627][ T8759] hsr_slave_1: entered promiscuous mode [ 843.675881][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.683073][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.729521][ T82] hsr_slave_0: left promiscuous mode [ 843.750253][ T82] hsr_slave_1: left promiscuous mode [ 843.793140][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.836889][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.599753][ T4612] Bluetooth: hci0: command tx timeout [ 844.869216][ T4612] Bluetooth: hci6: unexpected event 0x01 length: 3 > 1 [ 845.595800][ T82] team0 (unregistering): Port device team_slave_1 removed [ 845.926938][ T82] team0 (unregistering): Port device team_slave_0 removed [ 846.669167][ T4612] Bluetooth: hci0: command tx timeout [ 846.926002][ T8660] veth1_macvtap: entered promiscuous mode [ 846.968672][ T8657] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.982995][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.990191][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.090520][ T8660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 847.129539][ T8660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.141869][ T8660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 847.152496][ T8660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.175797][ T8660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 847.211576][ T5377] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.218707][ T5377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.557241][ T8660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.644243][ T8660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.679058][ T8660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.699143][ T8660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.726758][ T8660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 847.870493][ T8660] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.905065][ T8660] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.915076][ T8660] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.924128][ T8660] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.749121][ T4612] Bluetooth: hci0: command tx timeout [ 850.398350][ T8871] syz.2.375: attempt to access beyond end of device [ 850.398350][ T8871] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 850.416415][ T8871] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 851.249735][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.257617][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.280270][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.288148][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.562785][ T8657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.601034][ T8657] veth0_vlan: entered promiscuous mode [ 851.613325][ T8657] veth1_vlan: entered promiscuous mode [ 851.638468][ T8657] veth0_macvtap: entered promiscuous mode [ 851.650249][ T8657] veth1_macvtap: entered promiscuous mode [ 851.667927][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 851.678521][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.688414][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 851.699113][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.709062][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 851.719583][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.731609][ T8657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 851.741830][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 851.752379][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.762333][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 851.772852][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.782755][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 851.793530][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.805046][ T8657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 851.815929][ T8657] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.825799][ T8657] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.840978][ T8657] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.850268][ T8657] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.892308][ T8653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.991267][ T29] audit: type=1326 audit(1728212901.226:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="syz.2.376" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff40f77dff9 code=0x0 [ 852.882997][ T8759] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 852.895434][ T8759] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 853.813651][ T8759] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 854.017281][ T8759] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 854.120211][ T8653] veth0_vlan: entered promiscuous mode [ 854.180391][ T5377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.225894][ T5377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.288685][ T8653] veth1_vlan: entered promiscuous mode [ 854.510594][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.539132][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.678618][ T8653] veth0_macvtap: entered promiscuous mode [ 854.732687][ T8653] veth1_macvtap: entered promiscuous mode [ 855.660667][ T8926] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 856.439801][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.474352][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.548997][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.563955][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.574460][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.596731][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.639338][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.668710][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.710475][ T8653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.752656][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.788918][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.842167][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.883433][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.922064][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.973783][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.035378][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.048045][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.060955][ T8653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 857.075885][ T8653] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.084770][ T8653] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.093761][ T8653] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.102903][ T8653] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.952149][ T8759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.015476][ T8759] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.210501][ T5396] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.217674][ T5396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.228365][ T5396] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.235766][ T5396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.237186][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.273489][ T8759] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 858.285003][ T8759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 858.452293][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.611980][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.639135][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.703781][ T5396] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.848648][ T8759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.987187][ T5396] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.200554][ T8961] syz.1.386 uses obsolete (PF_INET,SOCK_PACKET) [ 859.364350][ T5396] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.607431][ T5396] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.930816][ T5241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 859.941719][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 859.950080][ T5241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 859.959234][ T5241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 859.988469][ T5241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 859.998968][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 860.990851][ T8759] veth0_vlan: entered promiscuous mode [ 861.011084][ T8759] veth1_vlan: entered promiscuous mode [ 861.021649][ T8984] sctp: [Deprecated]: syz.3.389 (pid 8984) Use of int in max_burst socket option deprecated. [ 861.021649][ T8984] Use struct sctp_assoc_value instead [ 861.132470][ T8759] veth0_macvtap: entered promiscuous mode [ 861.177485][ T5396] bridge_slave_1: left allmulticast mode [ 861.208850][ T5396] bridge_slave_1: left promiscuous mode [ 861.214650][ T5396] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.298984][ T5396] bridge_slave_0: left allmulticast mode [ 861.308113][ T5396] bridge_slave_0: left promiscuous mode [ 861.337662][ T5396] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.751392][ T29] audit: type=1400 audit(1728212910.906:416): avc: denied { write } for pid=8991 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 862.228034][ T5241] Bluetooth: hci1: command tx timeout [ 863.528796][ T29] audit: type=1400 audit(1728212912.746:417): avc: denied { module_request } for pid=9003 comm="syz.1.392" kmod="net-pf-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 864.155578][ T9017] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 864.269443][ T5241] Bluetooth: hci1: command tx timeout [ 864.561169][ T5396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 864.585022][ T5396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.604492][ T5396] bond0 (unregistering): Released all slaves [ 864.822983][ T8759] veth1_macvtap: entered promiscuous mode [ 865.737380][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.748861][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.759387][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.770606][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.780555][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.793485][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.803941][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.814476][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.824405][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 865.835164][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.847362][ T8759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 865.867916][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 865.878541][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.889459][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 865.900033][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.910024][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 865.920659][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.930586][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 865.941228][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.951341][ T8759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 865.962501][ T8759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 865.974400][ T8759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 866.496118][ T5241] Bluetooth: hci1: command tx timeout [ 868.613209][ T5241] Bluetooth: hci1: command tx timeout [ 868.705642][ T8759] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.739653][ T8759] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.748491][ T8759] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.809012][ T8759] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.001996][ T5396] hsr_slave_0: left promiscuous mode [ 869.043872][ T5396] hsr_slave_1: left promiscuous mode [ 869.071081][ T5396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.078675][ T5396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.111443][ T5396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.125419][ T5396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.170194][ T5396] veth1_macvtap: left promiscuous mode [ 869.175856][ T5396] veth0_macvtap: left promiscuous mode [ 869.206789][ T5396] veth1_vlan: left promiscuous mode [ 869.548480][ T5396] veth0_vlan: left promiscuous mode [ 872.078152][ T5396] team0 (unregistering): Port device team_slave_1 removed [ 872.175047][ T5396] team0 (unregistering): Port device team_slave_0 removed [ 873.052692][ T8973] chnl_net:caif_netlink_parms(): no params data found [ 873.194875][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.203326][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.238053][ T29] audit: type=1400 audit(1728212922.466:418): avc: denied { connect } for pid=9074 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 874.115859][ T8973] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.123583][ T8973] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.140719][ T8973] bridge_slave_0: entered allmulticast mode [ 875.207572][ T8973] bridge_slave_0: entered promiscuous mode [ 875.227688][ T8973] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.426653][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.486921][ T8973] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.565913][ T8973] bridge_slave_1: entered allmulticast mode [ 875.721477][ T8973] bridge_slave_1: entered promiscuous mode [ 875.890688][ T5377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.932582][ T5377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.984381][ T8973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.047701][ T8973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.160416][ T8973] team0: Port device team_slave_0 added [ 876.172511][ T8973] team0: Port device team_slave_1 added [ 876.299500][ T8973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.336829][ T8973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.446543][ T8973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.506272][ T8973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.548718][ T8973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.587303][ T8973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.363874][ T8973] hsr_slave_0: entered promiscuous mode [ 877.370806][ T8973] hsr_slave_1: entered promiscuous mode [ 877.399373][ T8973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 877.407515][ T8973] Cannot create hsr debugfs directory [ 880.574702][ T29] audit: type=1400 audit(1728212929.806:419): avc: denied { getopt } for pid=9148 comm="syz.4.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 883.393920][ T29] audit: type=1400 audit(1728212932.536:420): avc: denied { create } for pid=9164 comm="syz.4.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 884.723359][ T29] audit: type=1400 audit(1728212932.556:421): avc: denied { setopt } for pid=9164 comm="syz.4.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 884.864929][ T29] audit: type=1400 audit(1728212932.556:422): avc: denied { read } for pid=9164 comm="syz.4.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 885.253990][ T9180] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 887.098820][ T29] audit: type=1400 audit(1728212935.766:423): avc: denied { ioctl } for pid=9181 comm="syz.3.420" path="/dev/usbmon7" dev="devtmpfs" ino=726 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 887.300969][ T8973] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 887.998067][ T8973] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 888.360147][ T8973] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 889.465950][ T8973] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 890.949116][ T8973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.956745][ T9214] netem: unknown loss type 0 [ 890.973646][ T9214] netem: change failed [ 891.057144][ T29] audit: type=1400 audit(1728212940.276:424): avc: denied { read } for pid=9212 comm="syz.3.426" name="ppp" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 891.109431][ T5252] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 891.120694][ T5252] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 891.167112][ T5247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 891.179681][ T5247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 891.187549][ T5247] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 891.195882][ T5247] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 891.205535][ T9223] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 891.215686][ T5247] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 891.229883][ T9223] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 891.240463][ T5247] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 891.247888][ T9223] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 891.248963][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.257729][ T5247] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 891.558627][ T8973] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.701492][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.004092][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.011283][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.191268][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.314649][ T5247] Bluetooth: hci2: command tx timeout [ 893.321012][ T4612] Bluetooth: hci3: command tx timeout [ 893.452724][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.528495][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.535706][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.066503][ T8973] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 894.116493][ T8973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 895.391347][ T4612] Bluetooth: hci3: command tx timeout [ 895.398625][ T5247] Bluetooth: hci2: command tx timeout [ 896.767714][ T11] bridge_slave_1: left allmulticast mode [ 896.774980][ T11] bridge_slave_1: left promiscuous mode [ 896.903967][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.294698][ T11] bridge_slave_0: left allmulticast mode [ 897.457765][ T11] bridge_slave_0: left promiscuous mode [ 897.468872][ T5247] Bluetooth: hci2: command tx timeout [ 897.474350][ T5247] Bluetooth: hci3: command tx timeout [ 897.521464][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.787264][ T29] audit: type=1400 audit(1728212947.016:425): avc: denied { read write } for pid=9291 comm="syz.3.436" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 897.866639][ T29] audit: type=1800 audit(1728212947.066:426): pid=9292 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.436" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 898.839388][ T29] audit: type=1400 audit(1728212948.066:427): avc: denied { connect } for pid=9296 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 898.859132][ T29] audit: type=1400 audit(1728212948.066:428): avc: denied { ioctl } for pid=9296 comm="syz.3.438" path="socket:[45030]" dev="sockfs" ino=45030 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 899.460532][ T9304] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 900.098334][ T4612] Bluetooth: hci3: command tx timeout [ 900.105900][ T4612] Bluetooth: hci2: command tx timeout [ 900.293037][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.312853][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.437339][ T11] bond0 (unregistering): Released all slaves [ 900.577510][ T29] audit: type=1400 audit(1728212949.806:429): avc: denied { execute } for pid=9307 comm="syz.4.441" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=45043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 900.813750][ T9219] chnl_net:caif_netlink_parms(): no params data found [ 900.857108][ T8973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 900.944246][ T9218] chnl_net:caif_netlink_parms(): no params data found [ 902.246441][ T8973] veth0_vlan: entered promiscuous mode [ 902.258441][ T8973] veth1_vlan: entered promiscuous mode [ 903.330563][ T11] hsr_slave_0: left promiscuous mode [ 903.458912][ T11] hsr_slave_1: left promiscuous mode [ 903.471518][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.492499][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.543450][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.568918][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.744243][ T11] veth1_macvtap: left promiscuous mode [ 903.929052][ T11] veth0_macvtap: left promiscuous mode [ 903.934752][ T11] veth1_vlan: left promiscuous mode [ 903.949059][ T11] veth0_vlan: left promiscuous mode [ 908.668698][ T11] team0 (unregistering): Port device team_slave_1 removed [ 909.209349][ T11] team0 (unregistering): Port device team_slave_0 removed [ 910.499824][ T29] audit: type=1400 audit(1728212959.736:430): avc: denied { ioctl } for pid=9362 comm="syz.4.450" path="socket:[46168]" dev="sockfs" ino=46168 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 911.689533][ T9218] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.696693][ T9218] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.759862][ T9218] bridge_slave_0: entered allmulticast mode [ 911.790247][ T9218] bridge_slave_0: entered promiscuous mode [ 911.832069][ T9218] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.849534][ T9376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 911.856245][ T9218] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.867384][ T9218] bridge_slave_1: entered allmulticast mode [ 911.890543][ T9218] bridge_slave_1: entered promiscuous mode [ 911.971730][ T8973] veth0_macvtap: entered promiscuous mode [ 911.989014][ T8973] veth1_macvtap: entered promiscuous mode [ 912.177122][ T9219] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.188551][ T9219] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.206093][ T9219] bridge_slave_0: entered allmulticast mode [ 912.310896][ T9219] bridge_slave_0: entered promiscuous mode [ 912.814183][ T9219] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.856493][ T9219] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.885076][ T9219] bridge_slave_1: entered allmulticast mode [ 912.928161][ T9219] bridge_slave_1: entered promiscuous mode [ 912.994379][ T9218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.053907][ T9218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.291188][ T9219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.349401][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.388962][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.420163][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.431346][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.441316][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.451968][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.462487][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.473282][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.496192][ T8973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 914.356009][ T9219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.460646][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.504057][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.514158][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.524813][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.558909][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.599238][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.631539][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.661494][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.691932][ T8973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 914.707969][ T29] audit: type=1400 audit(1728212963.936:431): avc: denied { write } for pid=9397 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 914.744038][ T9218] team0: Port device team_slave_0 added [ 915.037089][ T9218] team0: Port device team_slave_1 added [ 915.250024][ T9219] team0: Port device team_slave_0 added [ 915.693742][ T8973] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.718038][ T8973] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.726899][ T8973] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.736017][ T8973] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.754098][ T9219] team0: Port device team_slave_1 added [ 915.771549][ T9218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.778575][ T9218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.805059][ T9218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.823192][ T9218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 915.830487][ T9218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.856808][ T9218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 915.955563][ T9218] hsr_slave_0: entered promiscuous mode [ 915.967617][ T9218] hsr_slave_1: entered promiscuous mode [ 915.980432][ T9218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 915.988095][ T9218] Cannot create hsr debugfs directory [ 916.051082][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.098027][ T9219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.116036][ T9219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 916.185691][ T9219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.398156][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.533344][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.564287][ T9219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.573657][ T9219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 916.618927][ T9219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.768575][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.184381][ T9219] hsr_slave_0: entered promiscuous mode [ 918.238890][ T9219] hsr_slave_1: entered promiscuous mode [ 918.298546][ T9219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 918.306374][ T9219] Cannot create hsr debugfs directory [ 918.741073][ T9424] hub 9-0:1.0: USB hub found [ 918.748957][ T9424] hub 9-0:1.0: 8 ports detected [ 919.478891][ T5379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.486874][ T5379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.449048][ T4612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 922.460402][ T4612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 922.476308][ T4612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 922.624677][ T4612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 922.697561][ T4612] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 922.708008][ T4612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 922.771063][ T11] bridge_slave_1: left allmulticast mode [ 922.776783][ T11] bridge_slave_1: left promiscuous mode [ 922.809423][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.835582][ T11] bridge_slave_0: left allmulticast mode [ 922.848849][ T11] bridge_slave_0: left promiscuous mode [ 922.854603][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.039284][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.083905][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.120575][ T11] bond0 (unregistering): Released all slaves [ 924.773647][ T11] hsr_slave_0: left promiscuous mode [ 924.809732][ T11] hsr_slave_1: left promiscuous mode [ 924.819625][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 924.827058][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.838914][ T5247] Bluetooth: hci4: command tx timeout [ 924.863156][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 924.889245][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.957865][ T11] veth1_macvtap: left promiscuous mode [ 924.963572][ T11] veth0_macvtap: left promiscuous mode [ 924.969295][ T11] veth1_vlan: left promiscuous mode [ 924.979026][ T11] veth0_vlan: left promiscuous mode [ 926.503098][ T29] audit: type=1400 audit(1728212975.726:432): avc: denied { write } for pid=9464 comm="syz.4.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 927.291416][ T5247] Bluetooth: hci4: command tx timeout [ 927.710222][ T4612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 927.734148][ T4612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 927.770345][ T4612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 927.795035][ T4612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 927.812119][ T4612] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 927.839181][ T4612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 927.882501][ T11] team0 (unregistering): Port device team_slave_1 removed [ 928.018084][ T11] team0 (unregistering): Port device team_slave_0 removed [ 928.139178][ T5287] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 928.320379][ T5287] usb 5-1: Using ep0 maxpacket: 16 [ 928.464243][ T5287] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 928.477325][ T5287] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 1.00 [ 928.486742][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.510695][ T5287] usb 5-1: config 0 descriptor?? [ 928.553372][ T5287] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 928.792742][ T4660] bcm5974 5-1:0.0: could not read from device [ 928.906515][ T4660] bcm5974 5-1:0.0: could not read from device [ 928.923232][ T5287] usb 5-1: USB disconnect, device number 5 [ 928.943607][ T9372] bcm5974 5-1:0.0: could not read from device [ 929.334491][ T4612] Bluetooth: hci4: command tx timeout [ 929.950527][ T4612] Bluetooth: hci1: command tx timeout [ 931.388876][ T4612] Bluetooth: hci4: command tx timeout [ 931.775672][ T9218] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 931.823771][ T9218] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 931.842192][ T9218] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 931.912256][ T9443] chnl_net:caif_netlink_parms(): no params data found [ 932.029221][ T4612] Bluetooth: hci1: command tx timeout [ 932.034789][ T9218] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 932.950789][ T29] audit: type=1400 audit(1728212982.186:433): avc: denied { create } for pid=9484 comm="syz.4.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 932.981643][ T29] audit: type=1400 audit(1728212982.206:434): avc: denied { bind } for pid=9484 comm="syz.4.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 933.066975][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.172814][ T9443] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.219115][ T9443] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.226428][ T9443] bridge_slave_0: entered allmulticast mode [ 933.270262][ T9443] bridge_slave_0: entered promiscuous mode [ 933.299302][ T9443] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.306440][ T9443] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.323075][ T9443] bridge_slave_1: entered allmulticast mode [ 933.350010][ T9443] bridge_slave_1: entered promiscuous mode [ 933.511907][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.688074][ T9443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 933.821558][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.883134][ T9218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.901126][ T9218] 8021q: adding VLAN 0 to HW filter on device team0 [ 933.914287][ T5400] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.921487][ T5400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 933.964122][ T9443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.045159][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.082473][ T9470] chnl_net:caif_netlink_parms(): no params data found [ 934.119091][ T4612] Bluetooth: hci1: command tx timeout [ 934.163707][ T5400] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.170884][ T5400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 934.201068][ T9443] team0: Port device team_slave_0 added [ 934.228637][ T9443] team0: Port device team_slave_1 added [ 934.357251][ T9219] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 934.520443][ T9219] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 934.731293][ T9443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.738311][ T9443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.815444][ T9443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.831287][ T9219] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 934.851806][ T9219] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 934.880044][ T11] bridge_slave_1: left allmulticast mode [ 934.885843][ T11] bridge_slave_1: left promiscuous mode [ 934.891670][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.985931][ T11] bridge_slave_0: left allmulticast mode [ 934.999138][ T11] bridge_slave_0: left promiscuous mode [ 935.004949][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.190205][ T4612] Bluetooth: hci1: command tx timeout [ 936.769341][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 936.810167][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 936.832327][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.871049][ T11] bond0 (unregistering): Released all slaves [ 936.934309][ T9443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 936.943475][ T9443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 937.029736][ T9443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.443306][ T9470] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.451454][ T9470] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.458942][ T9470] bridge_slave_0: entered allmulticast mode [ 937.470298][ T9470] bridge_slave_0: entered promiscuous mode [ 937.688466][ T9470] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.719006][ T9470] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.726355][ T9470] bridge_slave_1: entered allmulticast mode [ 937.741654][ T9470] bridge_slave_1: entered promiscuous mode [ 937.817318][ T9443] hsr_slave_0: entered promiscuous mode [ 937.880183][ T9443] hsr_slave_1: entered promiscuous mode [ 937.909270][ T9443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 937.916902][ T9443] Cannot create hsr debugfs directory [ 938.080042][ T11] hsr_slave_0: left promiscuous mode [ 938.088427][ T11] hsr_slave_1: left promiscuous mode [ 938.121727][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 938.154488][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.189893][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 938.197637][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.299346][ T11] veth1_macvtap: left promiscuous mode [ 938.304944][ T11] veth0_macvtap: left promiscuous mode [ 938.349100][ T11] veth1_vlan: left promiscuous mode [ 938.359282][ T11] veth0_vlan: left promiscuous mode [ 939.819716][ T11] team0 (unregistering): Port device team_slave_1 removed [ 939.999814][ T11] team0 (unregistering): Port device team_slave_0 removed [ 941.462679][ T9470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.492519][ T9470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.943724][ T9470] team0: Port device team_slave_0 added [ 941.954519][ T9470] team0: Port device team_slave_1 added [ 942.082186][ T9470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.097943][ T9470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.140190][ T9470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.205479][ T9218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.430100][ T9470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.437126][ T9470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.525719][ T9470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.883014][ T9470] hsr_slave_0: entered promiscuous mode [ 942.908586][ T9470] hsr_slave_1: entered promiscuous mode [ 942.923061][ T9470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 942.931634][ T9470] Cannot create hsr debugfs directory [ 943.368430][ T9219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.404398][ T9218] veth0_vlan: entered promiscuous mode [ 943.625653][ T9218] veth1_vlan: entered promiscuous mode [ 943.661151][ T9219] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.881700][ T9470] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.979062][ T9443] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 943.993982][ T9443] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 944.112680][ T9470] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.181661][ T2943] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.188862][ T2943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 944.208021][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.215243][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 944.253257][ T9443] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 944.292010][ T9443] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 944.372690][ T9470] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.401211][ T9218] veth0_macvtap: entered promiscuous mode [ 944.431636][ T9218] veth1_macvtap: entered promiscuous mode [ 944.561639][ T9470] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.648420][ T9443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.692295][ T9218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.719521][ T9218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.791951][ T9218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.818206][ T9218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.839805][ T9218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.869091][ T9218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.903744][ T9218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.950460][ T9218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.988958][ T9218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.039260][ T9218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.078785][ T9218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.118789][ T9218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.149991][ T9218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.190497][ T9218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.223583][ T9218] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.249452][ T9218] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.288879][ T9218] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.297663][ T9218] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.402728][ T9443] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.645917][ T9219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 945.706549][ T5377] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.713788][ T5377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.740910][ T5377] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.748196][ T5377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.060543][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.068520][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.123609][ T9470] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 946.204468][ T9470] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 946.324922][ T9470] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 946.330331][ T5377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.348406][ T9470] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 946.349731][ T5377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.480475][ T9219] veth0_vlan: entered promiscuous mode [ 946.522670][ T9470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.561855][ T9219] veth1_vlan: entered promiscuous mode [ 946.723589][ T9219] veth0_macvtap: entered promiscuous mode [ 946.774098][ T9470] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.863347][ T9219] veth1_macvtap: entered promiscuous mode [ 946.921405][ T9219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.948827][ T9219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.958984][ T9219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.970095][ T9219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.988997][ T9219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.999566][ T9219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.009528][ T9219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.020127][ T9219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.031627][ T9219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.052738][ T5400] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.059921][ T5400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.119894][ T5400] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.127090][ T5400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.231363][ T9219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.243388][ T9219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.256379][ T9219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.298817][ T9219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.329133][ T9219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.348797][ T9219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.371113][ T9219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.389481][ T9219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.420399][ T9219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.492465][ T9219] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.510377][ T9219] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.538853][ T9219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.547626][ T9219] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.631933][ T9443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 947.724734][ T9470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 948.025467][ T9443] veth0_vlan: entered promiscuous mode [ 948.310792][ T9443] veth1_vlan: entered promiscuous mode [ 948.458960][ T9443] veth0_macvtap: entered promiscuous mode [ 948.493421][ T5377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.514592][ T9443] veth1_macvtap: entered promiscuous mode [ 948.528979][ T5377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.605089][ T9443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.671788][ T9443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.724342][ T9443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.778918][ T9443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.826960][ T9443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.867482][ T9443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.908328][ T9443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.965013][ T9443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.999152][ T9443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.038925][ T9443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.133329][ T9443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.149015][ T5247] Bluetooth: hci5: command 0x0406 tx timeout [ 949.295359][ T9443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.316741][ T9443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.329355][ T9443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.339925][ T9443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.349880][ T9443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.360421][ T9443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.370466][ T9443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.381028][ T9443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.390971][ T9443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.401602][ T9443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.409765][ T5247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 949.413221][ T9443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.441413][ T5247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 949.451592][ T5247] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 949.457385][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.466709][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.633610][ T9443] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.650469][ T9443] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.661400][ T5247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 949.668501][ T9443] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.677511][ T9443] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.749690][ T5247] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 949.789935][ T5247] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 949.808500][ T9470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.895031][ T7496] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.168903][ T5247] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 950.219528][ T9223] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 950.259012][ T9223] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 950.337463][ T9223] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 950.373541][ T9223] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 950.386312][ T9223] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 950.419711][ T7496] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.706536][ T9470] veth0_vlan: entered promiscuous mode [ 950.872448][ T7496] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.907375][ T9470] veth1_vlan: entered promiscuous mode [ 951.170271][ T9470] veth0_macvtap: entered promiscuous mode [ 951.188931][ T9470] veth1_macvtap: entered promiscuous mode [ 951.212349][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.228902][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.248817][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.259681][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.269947][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.288921][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.308687][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.319396][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.338843][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.349382][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.368894][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 951.379428][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.400581][ T9470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 951.632976][ T7496] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.694021][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.703995][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.750802][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.768266][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.808955][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.854624][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.876171][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.887118][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.897380][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.918823][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.928679][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 951.977913][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 951.992000][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 952.002941][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.014837][ T9470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 952.083051][ T9470] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.093477][ T9470] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.109775][ T9470] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.118563][ T9470] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.171362][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.189784][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.276398][ T9621] chnl_net:caif_netlink_parms(): no params data found [ 952.287795][ T9223] Bluetooth: hci2: command tx timeout [ 952.439138][ T9223] Bluetooth: hci6: command tx timeout [ 952.919287][ T7496] bridge_slave_1: left allmulticast mode [ 952.944123][ T7496] bridge_slave_1: left promiscuous mode [ 952.950081][ T7496] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.973883][ T7496] bridge_slave_0: left allmulticast mode [ 952.994153][ T7496] bridge_slave_0: left promiscuous mode [ 953.009884][ T7496] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.959683][ T7496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.019306][ T7496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.073075][ T7496] bond0 (unregistering): Released all slaves [ 954.368742][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.376688][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.412456][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.413986][ T9223] Bluetooth: hci2: command tx timeout [ 954.421009][ T9621] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.433413][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.442422][ T9621] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.450513][ T9621] bridge_slave_0: entered allmulticast mode [ 954.457607][ T9621] bridge_slave_0: entered promiscuous mode [ 954.467590][ T9621] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.477490][ T9621] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.485189][ T9621] bridge_slave_1: entered allmulticast mode [ 954.492568][ T9621] bridge_slave_1: entered promiscuous mode [ 954.521638][ T9223] Bluetooth: hci6: command tx timeout [ 954.958915][ T9624] chnl_net:caif_netlink_parms(): no params data found [ 955.145475][ T4612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 955.173867][ T4612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 955.177620][ T9621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.315637][ T4612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 955.332935][ T4612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 955.346072][ T4612] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 955.357402][ T4612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 955.383707][ T9621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.342127][ T4612] Bluetooth: hci2: command tx timeout [ 957.347702][ T4612] Bluetooth: hci6: command tx timeout [ 958.466246][ T9621] team0: Port device team_slave_0 added [ 958.978918][ T9223] Bluetooth: hci3: command tx timeout [ 959.332584][ T7496] hsr_slave_0: left promiscuous mode [ 959.378880][ T938] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 959.449045][ T4612] Bluetooth: hci2: command tx timeout [ 959.455852][ T9223] Bluetooth: hci6: command tx timeout [ 959.569968][ T7496] hsr_slave_1: left promiscuous mode [ 959.599250][ T7496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 959.708828][ T938] usb 4-1: Using ep0 maxpacket: 32 [ 959.758956][ T29] audit: type=1400 audit(1728213008.896:435): avc: denied { append } for pid=9664 comm="syz.4.470" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 960.347571][ T938] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 960.356624][ T7496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.366916][ T29] audit: type=1400 audit(1728213008.896:436): avc: denied { ioctl } for pid=9664 comm="syz.4.470" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 960.398860][ T938] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 960.419526][ T7496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 960.427322][ T7496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.438826][ T938] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 960.467330][ T938] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 960.483665][ T29] audit: type=1400 audit(1728213009.646:437): avc: denied { write } for pid=9673 comm="syz.4.471" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 960.734677][ T7496] veth1_macvtap: left promiscuous mode [ 960.804521][ T938] usb 4-1: config 0 interface 0 has no altsetting 0 [ 960.836292][ T7496] veth0_macvtap: left promiscuous mode [ 961.450809][ T938] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 961.460121][ T7496] veth1_vlan: left promiscuous mode [ 961.470018][ T938] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 961.478569][ T938] usb 4-1: Product: syz [ 961.479017][ T7496] veth0_vlan: left promiscuous mode [ 961.495524][ T9223] Bluetooth: hci3: command tx timeout [ 961.550792][ T938] usb 4-1: Manufacturer: syz [ 961.557785][ T938] usb 4-1: SerialNumber: syz [ 961.641707][ T938] usb 4-1: config 0 descriptor?? [ 961.690742][ T938] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 961.889883][ T938] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 962.787486][ T5286] usb 4-1: USB disconnect, device number 6 [ 962.818330][ T5286] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 963.007256][ T9691] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 963.045003][ T9688] kvm: pic: level sensitive irq not supported [ 963.045409][ T9688] kvm: pic: non byte read [ 963.058362][ T9688] kvm: pic: level sensitive irq not supported [ 963.058423][ T9688] kvm: pic: non byte read [ 963.550063][ T4612] Bluetooth: hci3: command tx timeout [ 964.543354][ T4612] Bluetooth: hci0: command 0x0406 tx timeout [ 966.114915][ T9710] netlink: 'syz.4.480': attribute type 1 has an invalid length. [ 966.122712][ T9710] netlink: 'syz.4.480': attribute type 3 has an invalid length. [ 966.131020][ T9710] netlink: 216 bytes leftover after parsing attributes in process `syz.4.480'. [ 966.131382][ T9223] Bluetooth: hci3: command tx timeout [ 966.140088][ T9710] NCSI netlink: No device for ifindex 813332851 [ 966.259169][ T7496] team0 (unregistering): Port device team_slave_1 removed [ 966.354757][ T7496] team0 (unregistering): Port device team_slave_0 removed [ 969.327152][ T29] audit: type=1400 audit(1728213018.496:438): avc: denied { write } for pid=9727 comm="syz.3.483" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 969.361176][ T29] audit: type=1400 audit(1728213018.596:439): avc: denied { connect } for pid=9727 comm="syz.3.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 969.434237][ T29] audit: type=1400 audit(1728213018.656:440): avc: denied { bind } for pid=9727 comm="syz.3.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 969.475281][ T29] audit: type=1400 audit(1728213018.686:441): avc: denied { write } for pid=9727 comm="syz.3.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 970.134793][ T9621] team0: Port device team_slave_1 added [ 970.206676][ T9624] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.234028][ T9624] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.251970][ T9624] bridge_slave_0: entered allmulticast mode [ 970.279201][ T9624] bridge_slave_0: entered promiscuous mode [ 970.386633][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.404112][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.542738][ T5287] libceph: connect (1)[c::]:6789 error -101 [ 970.549733][ T5287] libceph: mon0 (1)[c::]:6789 connect error [ 970.605243][ T9621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.207178][ T9737] ceph: No mds server is up or the cluster is laggy [ 971.254302][ T9624] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.281273][ T5287] libceph: connect (1)[c::]:6789 error -101 [ 971.318966][ T5287] libceph: mon0 (1)[c::]:6789 connect error [ 971.352955][ T9624] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.362798][ T9624] bridge_slave_1: entered allmulticast mode [ 971.371150][ T9624] bridge_slave_1: entered promiscuous mode [ 971.497963][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.505199][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.588849][ T9621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.730986][ T9624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.830378][ T9624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 972.031117][ T9624] team0: Port device team_slave_0 added [ 972.078820][ T9621] hsr_slave_0: entered promiscuous mode [ 972.119295][ T9621] hsr_slave_1: entered promiscuous mode [ 972.131625][ T9621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 972.145552][ T9621] Cannot create hsr debugfs directory [ 972.156676][ T9624] team0: Port device team_slave_1 added [ 972.481679][ T9624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 972.498886][ T9624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 972.559017][ T9624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 972.770916][ T9624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.778040][ T9624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 972.819080][ T9624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.046856][ T7496] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.153609][ T29] audit: type=1400 audit(1728213023.386:442): avc: denied { checkpoint_restore } for pid=9765 comm="syz.4.490" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 975.334076][ T7496] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.380606][ T9624] hsr_slave_0: entered promiscuous mode [ 975.386948][ T9624] hsr_slave_1: entered promiscuous mode [ 975.402280][ T9624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 975.410046][ T9624] Cannot create hsr debugfs directory [ 975.554644][ T9774] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "&@" [ 976.273405][ T7496] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.438917][ T29] audit: type=1400 audit(1728213025.666:443): avc: denied { create } for pid=9778 comm="syz.4.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 976.743588][ T7496] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.730576][ T9624] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.815043][ T9642] chnl_net:caif_netlink_parms(): no params data found [ 978.061893][ T9624] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.133370][ T9624] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.091743][ T9624] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.185833][ T9812] input: syz0 as /devices/virtual/input/input12 [ 981.863815][ T9642] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.874018][ T9642] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.889884][ T9642] bridge_slave_0: entered allmulticast mode [ 981.897262][ T9642] bridge_slave_0: entered promiscuous mode [ 981.913146][ T9642] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.920519][ T9642] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.927830][ T9642] bridge_slave_1: entered allmulticast mode [ 981.935282][ T9642] bridge_slave_1: entered promiscuous mode [ 982.173953][ T7496] bridge_slave_1: left allmulticast mode [ 982.324164][ T9822] [ 982.326578][ T9822] ====================================================== [ 982.333633][ T9822] WARNING: possible circular locking dependency detected [ 982.340705][ T9822] 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 Not tainted [ 982.347963][ T9822] ------------------------------------------------------ [ 982.355019][ T9822] syz.4.499/9822 is trying to acquire lock: [ 982.360948][ T9822] ffffffff90173388 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_exists+0x5f/0x1a0 [ 982.370213][ T9822] [ 982.370213][ T9822] but task is already holding lock: [ 982.377620][ T9822] ffffffff90178348 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x905/0x1ca0 [ 982.387402][ T9822] [ 982.387402][ T9822] which lock already depends on the new lock. [ 982.387402][ T9822] [ 982.397856][ T9822] [ 982.397856][ T9822] the existing dependency chain (in reverse order) is: [ 982.406906][ T9822] [ 982.406906][ T9822] -> #3 (rfcomm_ioctl_mutex){+.+.}-{3:3}: [ 982.414901][ T9822] __mutex_lock+0x175/0x9c0 [ 982.420088][ T9822] rfcomm_dev_ioctl+0x905/0x1ca0 [ 982.425632][ T9822] rfcomm_sock_ioctl+0xb4/0xe0 [ 982.430974][ T9822] sock_do_ioctl+0x116/0x280 [ 982.436157][ T9822] sock_ioctl+0x228/0x6c0 [ 982.441069][ T9822] __x64_sys_ioctl+0x18f/0x220 [ 982.446429][ T9822] do_syscall_64+0xcd/0x250 [ 982.451516][ T9822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.457986][ T9822] [ 982.457986][ T9822] -> #2 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 982.467448][ T9822] lock_sock_nested+0x3a/0xf0 [ 982.472797][ T9822] rfcomm_sk_state_change+0x6d/0x3b0 [ 982.478645][ T9822] __rfcomm_dlc_close+0x28c/0x700 [ 982.484245][ T9822] rfcomm_dlc_close+0x1eb/0x240 [ 982.489683][ T9822] __rfcomm_sock_close+0xa7/0x230 [ 982.495372][ T9822] rfcomm_sock_shutdown+0xd5/0x230 [ 982.501049][ T9822] rfcomm_sock_release+0x5d/0x140 [ 982.506719][ T9822] __sock_release+0xb0/0x270 [ 982.511869][ T9822] sock_close+0x1c/0x30 [ 982.516580][ T9822] __fput+0x3f6/0xb60 [ 982.521125][ T9822] task_work_run+0x14e/0x250 [ 982.526270][ T9822] syscall_exit_to_user_mode+0x27b/0x2a0 [ 982.532472][ T9822] do_syscall_64+0xda/0x250 [ 982.537544][ T9822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.544004][ T9822] [ 982.544004][ T9822] -> #1 (&d->lock){+.+.}-{3:3}: [ 982.551122][ T9822] __mutex_lock+0x175/0x9c0 [ 982.556216][ T9822] __rfcomm_dlc_close+0x235/0x700 [ 982.561821][ T9822] rfcomm_dlc_close+0x1eb/0x240 [ 982.567268][ T9822] __rfcomm_sock_close+0xa7/0x230 [ 982.572872][ T9822] rfcomm_sock_shutdown+0xd5/0x230 [ 982.578551][ T9822] rfcomm_sock_release+0x5d/0x140 [ 982.584126][ T9822] __sock_release+0xb0/0x270 [ 982.589260][ T9822] sock_close+0x1c/0x30 [ 982.593956][ T9822] __fput+0x3f6/0xb60 [ 982.598591][ T9822] task_work_run+0x14e/0x250 [ 982.603745][ T9822] syscall_exit_to_user_mode+0x27b/0x2a0 [ 982.610117][ T9822] do_syscall_64+0xda/0x250 [ 982.615179][ T9822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.621621][ T9822] [ 982.621621][ T9822] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 982.629045][ T9822] __lock_acquire+0x250b/0x3ce0 [ 982.634437][ T9822] lock_acquire.part.0+0x11b/0x380 [ 982.640107][ T9822] __mutex_lock+0x175/0x9c0 [ 982.645205][ T9822] rfcomm_dlc_exists+0x5f/0x1a0 [ 982.650650][ T9822] rfcomm_dev_ioctl+0x9e6/0x1ca0 [ 982.656163][ T9822] rfcomm_sock_ioctl+0xb4/0xe0 [ 982.661495][ T9822] sock_do_ioctl+0x116/0x280 [ 982.666653][ T9822] sock_ioctl+0x228/0x6c0 [ 982.671538][ T9822] __x64_sys_ioctl+0x18f/0x220 [ 982.676863][ T9822] do_syscall_64+0xcd/0x250 [ 982.681923][ T9822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.688381][ T9822] [ 982.688381][ T9822] other info that might help us debug this: [ 982.688381][ T9822] [ 982.698632][ T9822] Chain exists of: [ 982.698632][ T9822] rfcomm_mutex --> sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_ioctl_mutex [ 982.698632][ T9822] [ 982.713609][ T9822] Possible unsafe locking scenario: [ 982.713609][ T9822] [ 982.721103][ T9822] CPU0 CPU1 [ 982.726487][ T9822] ---- ---- [ 982.731864][ T9822] lock(rfcomm_ioctl_mutex); [ 982.736585][ T9822] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 982.745298][ T9822] lock(rfcomm_ioctl_mutex); [ 982.752533][ T9822] lock(rfcomm_mutex); [ 982.756722][ T9822] [ 982.756722][ T9822] *** DEADLOCK *** [ 982.756722][ T9822] [ 982.764887][ T9822] 2 locks held by syz.4.499/9822: [ 982.769928][ T9822] #0: ffff888143ea2258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sock_ioctl+0xa7/0xe0 [ 982.781386][ T9822] #1: ffffffff90178348 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x905/0x1ca0 [ 982.791630][ T9822] [ 982.791630][ T9822] stack backtrace: [ 982.797627][ T9822] CPU: 0 UID: 0 PID: 9822 Comm: syz.4.499 Not tainted 6.12.0-rc1-syzkaller-00349-g8f602276d390 #0 [ 982.808331][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 982.818495][ T9822] Call Trace: [ 982.821802][ T9822] [ 982.824774][ T9822] dump_stack_lvl+0x116/0x1f0 [ 982.829499][ T9822] print_circular_bug+0x41c/0x610 [ 982.834594][ T9822] check_noncircular+0x31a/0x400 [ 982.839662][ T9822] ? __pfx_check_noncircular+0x10/0x10 [ 982.845173][ T9822] ? mark_held_locks+0x9f/0xe0 [ 982.849968][ T9822] ? lockdep_lock+0xc6/0x200 [ 982.854594][ T9822] ? __pfx_lockdep_lock+0x10/0x10 [ 982.859674][ T9822] __lock_acquire+0x250b/0x3ce0 [ 982.864580][ T9822] ? __pfx___lock_acquire+0x10/0x10 [ 982.869808][ T9822] ? __pfx___schedule+0x10/0x10 [ 982.874687][ T9822] ? add_lock_to_list+0x17d/0x390 [ 982.879763][ T9822] lock_acquire.part.0+0x11b/0x380 [ 982.884933][ T9822] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 982.890005][ T9822] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 982.895676][ T9822] ? rcu_is_watching+0x12/0xc0 [ 982.900473][ T9822] ? trace_lock_acquire+0x14a/0x1d0 [ 982.905704][ T9822] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 982.910776][ T9822] ? lock_acquire+0x2f/0xb0 [ 982.915305][ T9822] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 982.920461][ T9822] __mutex_lock+0x175/0x9c0 [ 982.925018][ T9822] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 982.930096][ T9822] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 982.935179][ T9822] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 982.941480][ T9822] ? __pfx___mutex_lock+0x10/0x10 [ 982.946544][ T9822] ? __pfx_lock_release+0x10/0x10 [ 982.951598][ T9822] ? trace_lock_acquire+0x14a/0x1d0 [ 982.956840][ T9822] ? lock_acquire+0x2f/0xb0 [ 982.961388][ T9822] ? __might_fault+0xe3/0x190 [ 982.966102][ T9822] ? cap_capable+0x1cf/0x240 [ 982.970736][ T9822] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 982.975907][ T9822] rfcomm_dlc_exists+0x5f/0x1a0 [ 982.980804][ T9822] rfcomm_dev_ioctl+0x9e6/0x1ca0 [ 982.985783][ T9822] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 982.991191][ T9822] ? preempt_schedule_common+0x44/0xc0 [ 982.996682][ T9822] ? preempt_schedule_thunk+0x1a/0x30 [ 983.002089][ T9822] rfcomm_sock_ioctl+0xb4/0xe0 [ 983.006885][ T9822] sock_do_ioctl+0x116/0x280 [ 983.011516][ T9822] ? __pfx_sock_do_ioctl+0x10/0x10 [ 983.016667][ T9822] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 983.023253][ T9822] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 983.029790][ T9822] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 983.036677][ T9822] sock_ioctl+0x228/0x6c0 [ 983.041049][ T9822] ? __pfx_sock_ioctl+0x10/0x10 [ 983.045932][ T9822] ? selinux_file_ioctl+0x180/0x270 [ 983.051158][ T9822] ? selinux_file_ioctl+0xb4/0x270 [ 983.056299][ T9822] ? __pfx_sock_ioctl+0x10/0x10 [ 983.061224][ T9822] __x64_sys_ioctl+0x18f/0x220 [ 983.066044][ T9822] do_syscall_64+0xcd/0x250 [ 983.070606][ T9822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.076531][ T9822] RIP: 0033:0x7fbec4b7dff9 [ 983.080981][ T9822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 983.100618][ T9822] RSP: 002b:00007fbec59c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 983.109065][ T9822] RAX: ffffffffffffffda RBX: 00007fbec4d36130 RCX: 00007fbec4b7dff9 [ 983.117067][ T9822] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000009 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 983.125072][ T9822] RBP: 00007fbec4bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 983.133064][ T9822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 983.141060][ T9822] R13: 0000000000000000 R14: 00007fbec4d36130 R15: 00007ffecc80acf8 [ 983.149067][ T9822] [ 983.167133][ T7496] bridge_slave_1: left promiscuous mode [ 983.187621][ T5221] syz-executor (5221) used greatest stack depth: 21216 bytes left [ 983.241331][ T7496] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.453683][ T7496] bridge_slave_0: left allmulticast mode [ 983.463158][ T7496] bridge_slave_0: left promiscuous mode [ 983.474273][ T7496] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.640111][ T7496] bridge_slave_1: left allmulticast mode [ 983.645792][ T7496] bridge_slave_1: left promiscuous mode [ 983.651635][ T7496] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.660491][ T7496] bridge_slave_0: left allmulticast mode [ 983.668854][ T7496] bridge_slave_0: left promiscuous mode [ 983.674552][ T7496] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.205110][ T7496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.236690][ T7496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.290969][ T7496] bond0 (unregistering): Released all slaves [ 984.381935][ T7496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.419691][ T7496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.441356][ T7496] bond0 (unregistering): Released all slaves [ 984.810592][ T9642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.758908][ T7496] hsr_slave_0: left promiscuous mode [ 985.778905][ T7496] hsr_slave_1: left promiscuous mode [ 985.784946][ T7496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 985.808826][ T7496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.819614][ T7496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 985.827030][ T7496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.874301][ T7496] hsr_slave_0: left promiscuous mode [ 985.880374][ T7496] hsr_slave_1: left promiscuous mode [ 985.889081][ T7496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 985.896531][ T7496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.919395][ T7496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 985.949327][ T7496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.989132][ T7496] veth1_macvtap: left promiscuous mode [ 985.994706][ T7496] veth0_macvtap: left promiscuous mode [ 986.012575][ T7496] veth1_vlan: left promiscuous mode [ 986.019593][ T7496] veth0_vlan: left promiscuous mode [ 986.039050][ T7496] veth1_macvtap: left promiscuous mode [ 986.044667][ T7496] veth0_macvtap: left promiscuous mode [ 986.058876][ T7496] veth1_vlan: left promiscuous mode [ 986.064161][ T7496] veth0_vlan: left promiscuous mode [ 986.896604][ T7496] team0 (unregistering): Port device team_slave_1 removed [ 987.021312][ T7496] team0 (unregistering): Port device team_slave_0 removed [ 987.729381][ T7496] team0 (unregistering): Port device team_slave_1 removed [ 987.764642][ T7496] team0 (unregistering): Port device team_slave_0 removed [ 989.599892][ T7496] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.675166][ T7496] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.743983][ T7496] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.886345][ T7496] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.213307][ T7496] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.284313][ T7496] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.343570][ T7496] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.406637][ T7496] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.540683][ T7496] bridge_slave_1: left allmulticast mode [ 990.546396][ T7496] bridge_slave_1: left promiscuous mode [ 990.582625][ T7496] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.610051][ T7496] bridge_slave_0: left allmulticast mode [ 990.615763][ T7496] bridge_slave_0: left promiscuous mode [ 990.629275][ T7496] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.679950][ T7496] bridge_slave_1: left allmulticast mode [ 990.686369][ T7496] bridge_slave_1: left promiscuous mode [ 990.698898][ T7496] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.730025][ T7496] bridge_slave_0: left allmulticast mode [ 990.739290][ T7496] bridge_slave_0: left promiscuous mode [ 990.745060][ T7496] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.761948][ T7496] bridge_slave_1: left allmulticast mode [ 990.767627][ T7496] bridge_slave_1: left promiscuous mode [ 990.773803][ T7496] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.788008][ T7496] bridge_slave_0: left allmulticast mode [ 990.800802][ T7496] bridge_slave_0: left promiscuous mode [ 990.806482][ T7496] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.815773][ T7496] bridge_slave_1: left allmulticast mode [ 990.829100][ T7496] bridge_slave_1: left promiscuous mode [ 990.834813][ T7496] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.890044][ T7496] bridge_slave_0: left allmulticast mode [ 990.895796][ T7496] bridge_slave_0: left promiscuous mode [ 990.920863][ T7496] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.961774][ T7496] bridge_slave_1: left allmulticast mode [ 990.967452][ T7496] bridge_slave_1: left promiscuous mode [ 990.981077][ T7496] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.992737][ T7496] bridge_slave_0: left allmulticast mode [ 990.998506][ T7496] bridge_slave_0: left promiscuous mode [ 991.021122][ T7496] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.121221][ T7496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 992.143290][ T7496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 992.202483][ T7496] bond0 (unregistering): Released all slaves [ 992.225021][ T7496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 992.251750][ T7496] bond0 (unregistering): Released all slaves [ 992.311183][ T7496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 992.324582][ T7496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface