last executing test programs: 11m39.717387451s ago: executing program 32 (id=669): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) 11m37.05440912s ago: executing program 33 (id=679): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x340440f1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000007c0), 0x4) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r1, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e64000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 11m35.625769837s ago: executing program 34 (id=682): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, 0x0, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x4928, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 11m33.633927232s ago: executing program 35 (id=687): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000680)=@ethtool_regs={0x12}}) 9m58.869717825s ago: executing program 6 (id=871): open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r1], 0x4) 9m57.875862739s ago: executing program 6 (id=874): pipe(&(0x7f0000000080)) pipe(&(0x7f0000000500)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) pipe2(0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x412101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x802, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x8, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xd], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m57.043037174s ago: executing program 6 (id=876): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r4 = syz_io_uring_setup(0x66e, &(0x7f0000000940)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x1, 0x0}) io_uring_enter(r4, 0x567, 0xfffffffd, 0x28, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 9m56.968707361s ago: executing program 7 (id=877): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a700000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) 9m56.730961295s ago: executing program 8 (id=878): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}}, 0x18}}, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0) 9m56.363648574s ago: executing program 8 (id=879): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{0x0}, {&(0x7f0000002800)}, {&(0x7f0000000f40)="1035f16d6f4a3539d7a8df0dbedf32428be38d71a880bf9a78c3f920b844d74f16de07c06a175e526babdc3dc74cc94de2b6a9e56695dbaf034a60d452d69216693027de54aad625184870bcb555cbe57b1a008161d82e00b0ca6d83ef9df1358192868436ea897d1a30c4f7b6a70011cc58c48ee1c4ccd6e1ca8139fed76cf19c6611224e621185f6587d2968856728220198b20026f2b59ab5807284f95f5d2f8e14188b937f11350170f076203183882aad7001612fde959a9e899f90bcc67a8f895642263c9d2c463405e463401c119b733df7fcd146b32b753933bba7ad494eb0209033e6cbadac56e24035b7d7e053cde6eb77df7188f6f73653ec355941c3f969", 0x104}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f0000000540)="f2e6", 0x2}], 0x2}}, {{&(0x7f00000005c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}}], 0x3, 0x4000000) 9m56.34682007s ago: executing program 7 (id=880): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000002000000014001a80100004800c000180"], 0x34}}, 0x0) 9m56.03739953s ago: executing program 8 (id=881): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a54000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000028000480240001800b0001007470726f7879000014000280080002400000080c080001400000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000050}, 0x24044010) 9m55.970760479s ago: executing program 7 (id=882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2080}, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r3, &(0x7f0000001600)=""/4103, 0x1007, 0x97) 9m55.142219594s ago: executing program 6 (id=883): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1043, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) 9m55.141363435s ago: executing program 5 (id=702): io_uring_setup(0x6540, &(0x7f0000000980)={0x0, 0xc539, 0x1, 0x1, 0x17c}) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r2 = syz_io_uring_setup(0x10d2, 0x0, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x148, 0x80543, 0x12345}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 9m55.14091337s ago: executing program 7 (id=884): open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r1], 0x4) 9m55.015157677s ago: executing program 8 (id=886): pipe(&(0x7f0000000080)) pipe(&(0x7f0000000500)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) pipe2(0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x412101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x802, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x8, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xd], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m54.816803104s ago: executing program 5 (id=887): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = epoll_create1(0x80000) epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0, &(0x7f00000003c0)={[0x8]}, 0x8) 9m54.743668274s ago: executing program 7 (id=888): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}}, 0x18}}, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0) 9m54.587037944s ago: executing program 5 (id=889): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6(0xa, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xc8, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 9m54.464687926s ago: executing program 6 (id=890): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{0x0}, {&(0x7f0000002800)}, {&(0x7f0000000f40)="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", 0x104}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f0000000540)="f2e6", 0x2}], 0x2}}, {{&(0x7f00000005c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}}], 0x3, 0x4000000) 9m54.401690646s ago: executing program 8 (id=891): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a700000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) 9m53.722549521s ago: executing program 6 (id=893): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r4 = syz_io_uring_setup(0x66e, &(0x7f0000000940)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x1, 0x0}) io_uring_enter(r4, 0x567, 0xfffffffd, 0x28, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 9m53.490880438s ago: executing program 36 (id=893): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r4 = syz_io_uring_setup(0x66e, &(0x7f0000000940)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x1, 0x0}) io_uring_enter(r4, 0x567, 0xfffffffd, 0x28, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 9m53.375244713s ago: executing program 7 (id=895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2080}, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f0000001600)=""/4103, 0x1007, 0x97) 9m52.851059032s ago: executing program 37 (id=895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2080}, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f0000001600)=""/4103, 0x1007, 0x97) 9m52.809332135s ago: executing program 8 (id=899): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = epoll_create1(0x80000) epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0, &(0x7f00000003c0)={[0x8]}, 0x8) 9m52.228464566s ago: executing program 38 (id=899): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = epoll_create1(0x80000) epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0, &(0x7f00000003c0)={[0x8]}, 0x8) 9m52.179897729s ago: executing program 5 (id=900): open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(0x0, r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 9m51.607900238s ago: executing program 39 (id=900): open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(0x0, r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 2m18.263554948s ago: executing program 0 (id=2013): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6\x01 @\xf4M\xba\xf2<\xd6C\xdb\xd7\xbeY@g\xcc\a\x00\x00\x00\xa3\xfe%\x11\xc9\xc5\x06\x00\x00\x00\x00\x00\x00\x00\xa3`fd\xdc\x8b\x00\x00\x00\x00{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB], 0x34}}, 0x0) 2m17.580570862s ago: executing program 0 (id=2015): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40081}, 0x40) 2m17.343833991s ago: executing program 0 (id=2016): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) 2m14.51576802s ago: executing program 0 (id=2020): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x10) 2m14.132787167s ago: executing program 0 (id=2024): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) 2m12.744960121s ago: executing program 0 (id=2030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2a, 0x25df9bfd, {0x0, 0x0, 0x0, r4, {0x9, 0xfff1}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x2404c084) 1m57.393179875s ago: executing program 40 (id=2030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2a, 0x25df9bfd, {0x0, 0x0, 0x0, r4, {0x9, 0xfff1}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x2404c084) 13.933436345s ago: executing program 1 (id=2383): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x20, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="27c051140c", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000014c0)="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", 0x267}, {&(0x7f00000002c0)="20d48dd2aafcb2f01d690239901ab45751bd2c45e9f471021bce453aa2ebaf918f60d9bf8fc9bfb8f336701b9c015875ae398c27a387c4745fc69958faf563c3b2237aa59d6bd39df7704cec39ea924fef9f3dc7d5c257d3f5f19c53ff443ba3cef934f3f21933b1eb8df9b05145c0d472dabfb50b7b373bbf1913217f8115583be725", 0x83}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000400)="1f8f8423672eb8f4781fd9f3ff1619d161999d51bc6467dd4ef591ebc13f169d9aa87aac64c97ece16271ecf3a65453eaccab4b5ad1b346307438d9d2b8920", 0x3f}, {&(0x7f0000000640)="1d0111629016c00db11f4a3454dc9a94f86d3fb8302ba95a5def851fe2946cc857164ce75280ba042ee9f78d6b46ebcdedcc6ecbfe6479199bc262c5c0864489ba30633e6238a6609ee1057ae7a52c6c7e838f16d7782ddd1a4d20c7b1c178e5fbd2d7bf4ffc0aa9e3dbdabd81abdec9b366fbc0c9", 0x75}, {&(0x7f0000000480)="b067ecb02097965f828c2f0e38cee7dcb5bd713f627ada2bab3fbcf73401e6f370", 0x21}, {&(0x7f0000000700)="2b58add1f1266c014fc340b274d3080746168e933265dc9d07ec1818918dec99c7d879700be3a33427a57bd2459085d5075b4c5d83a446c4054ea8770aa4e9e68aa91d332badbf6a23dd546a1d709dd8f3285a3f414c518123ed6f1091c27fe724e74d73fe5b68b6bfd45a61afb4a1968d55eb4592cefcd48324b02986c734f45842cf942b4ee5af955aece372c8a3930e19c1a9a62afcd7336698cc6eebe252a02783e5a4e972b406c99358ec1b061dc7442108cdbd986eb9258dae57b5bd4318a7579540173370ca543a7dcd5a0876dacc4eff5a9f28ed613adf81f8072f", 0xdf}, {&(0x7f0000000800)="de1a4a7d63ef38ab2448d2e8d8c28d5b40f6d413200ef57282cd5dcb7c38e4e767fcbe0abe69865f19eed003ca1ecc149d15d59602c0189a457c41b4e2908b8df87cfe367b4b5bce431b67c170b4024b9c067c2c4b1cf63562fde4ef41d7cc90e8a17918344b689bf44e08aee37ee44e02354204e91ca8cc5c6e03dc5c196a145c6c12646209621ac1d07bdd3b745029bc491322c87a6ed06424890173d9052425dace5ac575312b0f002dc4dc2b9b82ccd0dd42936e91", 0xb7}, {&(0x7f0000000500)="5a9c242489427d207131027af8", 0xd}], 0x6}}], 0x3, 0x0) 12.98897801s ago: executing program 1 (id=2390): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) 12.13565844s ago: executing program 1 (id=2392): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) 10.919405016s ago: executing program 4 (id=2397): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') 7.878389906s ago: executing program 4 (id=2401): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0xfffffff9}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000800)=""/198, 0xc6}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f00000006c0)=""/229, 0xe5}, {&(0x7f0000000240)=""/89, 0x59}], 0x5}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)=""/141, 0x8d}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000000)=""/124, 0x7c}], 0x5}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40000000, 0x0) 7.561771082s ago: executing program 4 (id=2404): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xfffffffffffffffd, 0x0) write$binfmt_misc(r0, &(0x7f0000000e00)="32ef1b0f2bcab97d8dbc26dfc5ba03c9518a45b5c10e5de1bcc9a3920f20ce9a413c48bfcd2c5d5e910aab845ac967f7a74284eb216cc5ffe9db7306518aead6d1c07f0e7af682b73efce8b2432d493a0daaaab44a67ebe9792ed65dbd05df9eecfe80d811000000", 0x68) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x801) socket$can_bcm(0x1d, 0x2, 0x2) 7.269996005s ago: executing program 4 (id=2407): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) splice(r0, 0x0, r0, 0x0, 0x13, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, &(0x7f0000000040)={0x3, 0x6, 0x40, 0x10000, 'syz1\x00', 0x4000041}) 7.25490506s ago: executing program 1 (id=2408): socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_int(r3, 0x1, 0x2c, 0x0, &(0x7f00000001c0)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) 5.456237435s ago: executing program 3 (id=2414): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 5.223502595s ago: executing program 3 (id=2416): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, 0x0, 0x0) listen(r0, 0x3) 4.953352985s ago: executing program 3 (id=2419): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) userfaultfd(0x80001) 4.715247032s ago: executing program 3 (id=2421): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r0 = socket$tipc(0x1e, 0x2, 0x0) msgget$private(0x0, 0xffffffffffffffdc) msgsnd(0x0, &(0x7f0000000040)=ANY=[], 0x8, 0x0) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x8, 0x0) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/139}, 0xb5, 0x2, 0x2800) 4.582524208s ago: executing program 9 (id=2422): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x1, 0x100) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) read$FUSE(0xffffffffffffffff, &(0x7f0000000b80)={0x2020}, 0x2020) utimensat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 4.436708158s ago: executing program 3 (id=2423): socket$inet6_udp(0xa, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffff7, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000800000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.088620472s ago: executing program 9 (id=2424): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x1, 0x0, 0x0) 2.746258951s ago: executing program 3 (id=2425): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000740)={0x1c, 0x0, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xa3}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x36}}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc01c64b9, &(0x7f0000000380)={0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xa}, 0x0, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x8000, 0xc, 0xfffffff5, 0x7fff, 0xe, 0x1, 0x7fff, 0xfffffff2, 0x9, 0x0, 0x0, 0x4}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0x729}, &(0x7f0000000440)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x9}, &(0x7f00000004c0)={0x20, 0x89, 0x2}}) 2.532831278s ago: executing program 9 (id=2426): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') 2.391922593s ago: executing program 9 (id=2427): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) mkdir(0x0, 0x8) lseek(r0, 0x101, 0x1) 1.872874351s ago: executing program 2 (id=2429): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 1.854144728s ago: executing program 2 (id=2430): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x3) 1.79418784s ago: executing program 2 (id=2431): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x20, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="27c051140c", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000014c0)="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", 0x267}, {&(0x7f00000002c0)="20d48dd2aafcb2f01d690239901ab45751bd2c45e9f471021bce453aa2ebaf918f60d9bf8fc9bfb8f336701b9c015875ae398c27a387c4745fc69958faf563c3b2237aa59d6bd39df7704cec39ea924fef9f3dc7d5c257d3f5f19c53ff443ba3cef934f3f21933b1eb8df9b05145c0d472dabfb50b7b373bbf1913217f8115583be725", 0x83}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000400)="1f8f8423672eb8f4781fd9f3ff1619d161999d51bc6467dd4ef591ebc13f169d9aa87aac64c97ece16271ecf3a65453eaccab4b5ad1b346307438d9d2b8920", 0x3f}, {&(0x7f0000000640)="1d0111629016c00db11f4a3454dc9a94f86d3fb8302ba95a5def851fe2946cc857164ce75280ba042ee9f78d6b46ebcdedcc6ecbfe6479199bc262c5c0864489ba30633e6238a6609ee1057ae7a52c6c7e838f16d7782ddd1a4d20c7b1c178e5fbd2d7bf4ffc0aa9e3dbdabd81abdec9b366fbc0c941dbcd99608afe39f30919c664eee24b6d40ba87", 0x89}, {&(0x7f0000000480)="b067ecb02097965f828c2f0e38cee7dcb5bd713f627ada2bab3fbcf73401e6f370", 0x21}, {&(0x7f0000000700)="2b58add1f1266c014fc340b274d3080746168e933265dc9d07ec1818918dec99c7d879700be3a33427a57bd2459085d5075b4c5d83a446c4054ea8770aa4e9e68aa91d332badbf6a23dd546a1d709dd8f3285a3f414c518123ed6f1091c27fe724e74d73fe5b68b6bfd45a61afb4a1968d55eb4592cefcd48324b02986c734f45842cf942b4ee5af955aece372c8a3930e19c1a9a62afcd7336698cc6eebe252a02783e5a4e972b406c99358ec1b061dc7442108cdbd986eb9258dae57b5bd4318a7579540173370ca543a7dcd5a0876dacc4eff5a9f28ed613adf81f8072f", 0xdf}, {&(0x7f0000000800)="de1a4a7d63ef38ab2448d2e8d8c28d5b40f6d413200ef57282cd5dcb7c38e4e767fcbe0abe69865f19eed003ca1ecc149d15d59602c0189a457c41b4e2908b8df87cfe367b4b5bce431b67c170b4024b9c067c2c4b1cf63562fde4ef41d7cc90e8a17918344b689bf44e08aee37ee44e02354204e91ca8cc5c6e03dc5c196a145c6c12646209621ac1d07bdd3b745029bc491322c87a6ed06424890173d9052425dace5ac575312b0f002dc4dc2b9b82ccd0dd42936e91", 0xb7}, {&(0x7f0000000500)="5a9c242489427d207131027af8", 0xd}], 0x6}}], 0x3, 0x0) 1.70540251s ago: executing program 2 (id=2432): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="2caa040000000000140003006e657464657673696d3000000000000014001680100001800c000900090000000100000008000a"], 0x50}, 0x1, 0x0, 0x0, 0x40081}, 0x40) 1.540782114s ago: executing program 9 (id=2433): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r0 = socket$tipc(0x1e, 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) msgsnd(0x0, &(0x7f0000000040)=ANY=[], 0x8, 0x0) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x8, 0x0) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/139}, 0xb5, 0x2, 0x2800) 1.364929499s ago: executing program 4 (id=2434): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r1, 0x541b, &(0x7f0000000100)) 1.354382653s ago: executing program 2 (id=2435): socket$inet6_udp(0xa, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffff7, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000800000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.1647489s ago: executing program 9 (id=2436): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 974.16903ms ago: executing program 1 (id=2437): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') 96.487074ms ago: executing program 2 (id=2438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 12.854664ms ago: executing program 4 (id=2439): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) 0s ago: executing program 1 (id=2440): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) kernel console output (not intermixed with test programs): v_slave_0 (retrying later): interface not active [ 341.027075][ T8537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.027095][ T8537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.027126][ T8537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.101925][ T8542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.298813][ T8542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.554446][ T8544] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.554607][ T8544] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.555201][ T8544] bridge_slave_0: entered allmulticast mode [ 341.558367][ T8544] bridge_slave_0: entered promiscuous mode [ 341.673651][ T8545] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.673801][ T8545] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.674074][ T8545] bridge_slave_0: entered allmulticast mode [ 341.676327][ T8545] bridge_slave_0: entered promiscuous mode [ 341.827822][ T8544] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.827982][ T8544] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.828202][ T8544] bridge_slave_1: entered allmulticast mode [ 341.832251][ T8544] bridge_slave_1: entered promiscuous mode [ 341.949853][ T8545] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.949989][ T8545] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.950230][ T8545] bridge_slave_1: entered allmulticast mode [ 341.956768][ T8545] bridge_slave_1: entered promiscuous mode [ 341.965736][ T8542] team0: Port device team_slave_0 added [ 342.081553][ T8537] hsr_slave_0: entered promiscuous mode [ 342.086606][ T8537] hsr_slave_1: entered promiscuous mode [ 342.184182][ T8542] team0: Port device team_slave_1 added [ 342.450732][ T8544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.471971][ T8545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.576035][ T8544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.658460][ T8545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.955079][ T8542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.955105][ T8542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.955132][ T8542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.566659][ T8542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.566678][ T8542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.566707][ T8542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.980181][ T8544] team0: Port device team_slave_0 added [ 344.001368][ T8545] team0: Port device team_slave_0 added [ 344.026535][ T8544] team0: Port device team_slave_1 added [ 344.035675][ T8545] team0: Port device team_slave_1 added [ 344.278598][ T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.846915][ T8544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.846933][ T8544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.846967][ T8544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.079891][ T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.135451][ T8545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.135465][ T8545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.135485][ T8545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.136809][ T8544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.136824][ T8544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.136852][ T8544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.180069][ T8542] hsr_slave_0: entered promiscuous mode [ 345.198289][ T8542] hsr_slave_1: entered promiscuous mode [ 345.199886][ T8542] debugfs: 'hsr0' already exists in 'hsr' [ 345.199916][ T8542] Cannot create hsr debugfs directory [ 345.202119][ T8545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.202136][ T8545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.202168][ T8545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.531705][ T57] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.117720][ T57] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.330435][ T8544] hsr_slave_0: entered promiscuous mode [ 346.331898][ T8544] hsr_slave_1: entered promiscuous mode [ 346.334094][ T8544] debugfs: 'hsr0' already exists in 'hsr' [ 346.334129][ T8544] Cannot create hsr debugfs directory [ 346.401050][ T8545] hsr_slave_0: entered promiscuous mode [ 346.408801][ T8545] hsr_slave_1: entered promiscuous mode [ 346.410233][ T8545] debugfs: 'hsr0' already exists in 'hsr' [ 346.410263][ T8545] Cannot create hsr debugfs directory [ 347.493763][ T8537] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 347.654032][ T8537] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 347.892523][ T8537] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 347.968623][ T8537] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 348.164038][ T57] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.499376][ T57] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.802217][ T57] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.107411][ T57] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.407182][ T8537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.619806][ T8537] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.910339][ T57] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.049948][ T3612] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.050128][ T3612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.230735][ T57] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.302667][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.302924][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.500302][ T57] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.807897][ T57] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.376365][ T8537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.389747][ T57] bridge_slave_1: left allmulticast mode [ 351.389843][ T57] bridge_slave_1: left promiscuous mode [ 351.390133][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.492072][ T57] bridge_slave_0: left allmulticast mode [ 351.492109][ T57] bridge_slave_0: left promiscuous mode [ 351.492530][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.587770][ T57] bridge_slave_1: left allmulticast mode [ 351.587810][ T57] bridge_slave_1: left promiscuous mode [ 351.588122][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.654496][ T57] bridge_slave_0: left allmulticast mode [ 351.654533][ T57] bridge_slave_0: left promiscuous mode [ 351.654819][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.746063][ T57] bridge_slave_1: left allmulticast mode [ 351.746091][ T57] bridge_slave_1: left promiscuous mode [ 351.746282][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.814609][ T57] bridge_slave_0: left allmulticast mode [ 351.814646][ T57] bridge_slave_0: left promiscuous mode [ 351.814930][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.183455][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.261949][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.297354][ T57] bond0 (unregistering): Released all slaves [ 355.944440][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.003974][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.036858][ T57] bond0 (unregistering): Released all slaves [ 357.713646][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.803766][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.828298][ T57] bond0 (unregistering): Released all slaves [ 358.241098][ T8542] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 358.278539][ T8542] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 358.325314][ T8542] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 358.450929][ T8542] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 359.377792][ T8544] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 359.744438][ T8544] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 359.811036][ T8544] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 359.881865][ T8544] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 360.826824][ T8537] veth0_vlan: entered promiscuous mode [ 360.850462][ T8545] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 361.205187][ T8545] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 361.321684][ T8545] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 361.364423][ T8545] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 361.401662][ T8537] veth1_vlan: entered promiscuous mode [ 361.633016][ T57] hsr_slave_0: left promiscuous mode [ 361.672917][ T57] hsr_slave_1: left promiscuous mode [ 361.673997][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.674028][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.724077][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.724114][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.903658][ T57] hsr_slave_0: left promiscuous mode [ 361.942761][ T57] hsr_slave_1: left promiscuous mode [ 361.943848][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.943879][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.995045][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.995080][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.147911][ T57] hsr_slave_0: left promiscuous mode [ 362.163895][ T57] hsr_slave_1: left promiscuous mode [ 362.165357][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.165389][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.209026][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.209060][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.336292][ T57] veth1_macvtap: left promiscuous mode [ 362.336424][ T57] veth0_macvtap: left promiscuous mode [ 362.336801][ T57] veth1_vlan: left promiscuous mode [ 362.338087][ T57] veth0_vlan: left promiscuous mode [ 362.463213][ T57] veth1_macvtap: left promiscuous mode [ 362.463339][ T57] veth0_macvtap: left promiscuous mode [ 362.463646][ T57] veth1_vlan: left promiscuous mode [ 362.463874][ T57] veth0_vlan: left promiscuous mode [ 362.603135][ T57] veth1_macvtap: left promiscuous mode [ 362.603268][ T57] veth0_macvtap: left promiscuous mode [ 362.603585][ T57] veth1_vlan: left promiscuous mode [ 362.603804][ T57] veth0_vlan: left promiscuous mode [ 365.655274][ T57] team0 (unregistering): Port device team_slave_1 removed [ 365.933765][ T57] team0 (unregistering): Port device team_slave_0 removed [ 370.413470][ T57] team0 (unregistering): Port device team_slave_1 removed [ 370.656641][ T57] team0 (unregistering): Port device team_slave_0 removed [ 375.383437][ T57] team0 (unregistering): Port device team_slave_1 removed [ 375.634916][ T57] team0 (unregistering): Port device team_slave_0 removed [ 378.277880][ T8537] veth0_macvtap: entered promiscuous mode [ 378.294734][ T8542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.324034][ T8537] veth1_macvtap: entered promiscuous mode [ 378.428487][ T8542] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.477156][ T8537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.485492][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.485760][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.520707][ T8544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.528899][ T8537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.561084][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.561245][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.607205][ T3612] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.629583][ T3612] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.664031][ T3612] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.706482][ T3612] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.720294][ T8544] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.871089][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.871333][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.890316][ T8545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.018327][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.018608][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.330108][ T8545] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.389477][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.389500][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.417216][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.418235][ T1221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.515232][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.515394][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.570084][ T3612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.570107][ T3612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.115020][ T8542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.518698][ T8542] veth0_vlan: entered promiscuous mode [ 381.607981][ T8544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.641804][ T8542] veth1_vlan: entered promiscuous mode [ 381.910415][ T8545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.990328][ T8542] veth0_macvtap: entered promiscuous mode [ 381.997642][ T8544] veth0_vlan: entered promiscuous mode [ 382.061269][ T8542] veth1_macvtap: entered promiscuous mode [ 382.086883][ T8544] veth1_vlan: entered promiscuous mode [ 382.900254][ T8542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.926872][ T8542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.102507][ T1482] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.108650][ T8545] veth0_vlan: entered promiscuous mode [ 383.135527][ T1482] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.158663][ T1482] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.171971][ T8544] veth0_macvtap: entered promiscuous mode [ 383.210946][ T1482] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.509642][ T8544] veth1_macvtap: entered promiscuous mode [ 383.538838][ T8545] veth1_vlan: entered promiscuous mode [ 383.949115][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.340696][ T8544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.382610][ T1482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.382633][ T1482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.433928][ T8544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.672768][ T1482] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.697695][ T1482] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.725510][ T8545] veth0_macvtap: entered promiscuous mode [ 384.758661][ T1482] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.773148][ T1482] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.865387][ T1221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.865410][ T1221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.921991][ T8545] veth1_macvtap: entered promiscuous mode [ 385.338132][ T8545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.490831][ T8545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.504856][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.504880][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.594229][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.603156][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.603806][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.606146][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.860928][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.860951][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.073230][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 387.106970][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 387.110946][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 387.175435][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 387.193359][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 387.268319][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 387.272922][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 387.305182][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 387.336508][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 387.340411][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 388.200184][ T5156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 388.225067][ T5156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 388.227637][ T5156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 388.270038][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 388.290641][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 389.112105][ T1482] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.372623][ T5843] Bluetooth: hci5: command tx timeout [ 389.462870][ T5843] Bluetooth: hci1: command tx timeout [ 389.527820][ T1482] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.909471][ T1482] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.345887][ T5843] Bluetooth: hci2: command tx timeout [ 390.408402][ T1482] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.462711][ T5843] Bluetooth: hci5: command tx timeout [ 391.545130][ T5843] Bluetooth: hci1: command tx timeout [ 391.674627][ T1482] bridge_slave_1: left allmulticast mode [ 391.674663][ T1482] bridge_slave_1: left promiscuous mode [ 391.676152][ T1482] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.737393][ T1482] bridge_slave_0: left allmulticast mode [ 391.737421][ T1482] bridge_slave_0: left promiscuous mode [ 391.737689][ T1482] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.412646][ T5843] Bluetooth: hci2: command tx timeout [ 393.553201][ T5843] Bluetooth: hci5: command tx timeout [ 393.612601][ T5843] Bluetooth: hci1: command tx timeout [ 394.448291][ T1482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.495725][ T5843] Bluetooth: hci2: command tx timeout [ 394.567260][ T1482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.617750][ T1482] bond0 (unregistering): Released all slaves [ 394.686096][ T8743] chnl_net:caif_netlink_parms(): no params data found [ 394.858611][ T8741] chnl_net:caif_netlink_parms(): no params data found [ 395.612829][ T5843] Bluetooth: hci5: command tx timeout [ 395.644339][ T8755] chnl_net:caif_netlink_parms(): no params data found [ 395.692774][ T5843] Bluetooth: hci1: command tx timeout [ 396.582536][ T5843] Bluetooth: hci2: command tx timeout [ 397.095576][ T8743] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.095735][ T8743] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.096024][ T8743] bridge_slave_0: entered allmulticast mode [ 397.099096][ T8743] bridge_slave_0: entered promiscuous mode [ 397.312732][ T8743] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.312890][ T8743] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.313163][ T8743] bridge_slave_1: entered allmulticast mode [ 397.362569][ T8743] bridge_slave_1: entered promiscuous mode [ 397.541365][ T1482] hsr_slave_0: left promiscuous mode [ 397.574686][ T1482] hsr_slave_1: left promiscuous mode [ 397.578004][ T1482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.578038][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.633530][ T1482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.633576][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.750459][ T1482] veth1_macvtap: left promiscuous mode [ 397.750599][ T1482] veth0_macvtap: left promiscuous mode [ 397.750924][ T1482] veth1_vlan: left promiscuous mode [ 397.751158][ T1482] veth0_vlan: left promiscuous mode [ 400.956231][ T1482] team0 (unregistering): Port device team_slave_1 removed [ 401.233336][ T1482] team0 (unregistering): Port device team_slave_0 removed [ 404.233515][ T8741] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.233708][ T8741] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.233980][ T8741] bridge_slave_0: entered allmulticast mode [ 404.243798][ T8741] bridge_slave_0: entered promiscuous mode [ 404.477710][ T8741] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.477875][ T8741] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.478145][ T8741] bridge_slave_1: entered allmulticast mode [ 404.481119][ T8741] bridge_slave_1: entered promiscuous mode [ 405.524905][ T8743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.686847][ T8755] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.687089][ T8755] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.687311][ T8755] bridge_slave_0: entered allmulticast mode [ 405.722050][ T8755] bridge_slave_0: entered promiscuous mode [ 405.742587][ T8743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.750168][ T8741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.751941][ T8755] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.752240][ T8755] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.762890][ T8755] bridge_slave_1: entered allmulticast mode [ 405.765281][ T8755] bridge_slave_1: entered promiscuous mode [ 406.137489][ T8741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.400436][ T8743] team0: Port device team_slave_0 added [ 407.686326][ T8755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.688539][ T8743] team0: Port device team_slave_1 added [ 407.714668][ T8741] team0: Port device team_slave_0 added [ 407.719803][ T8755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.851301][ T8741] team0: Port device team_slave_1 added [ 408.277191][ T8743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.277205][ T8743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.277225][ T8743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.443627][ T8755] team0: Port device team_slave_0 added [ 408.450250][ T8743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.450263][ T8743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.450284][ T8743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.609108][ T8755] team0: Port device team_slave_1 added [ 408.613632][ T8741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.613652][ T8741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.613686][ T8741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.858117][ T8741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.858136][ T8741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.858167][ T8741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.072246][ T8755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.072264][ T8755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.072294][ T8755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.635995][ T8755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.636013][ T8755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.636043][ T8755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.434933][ T8743] hsr_slave_0: entered promiscuous mode [ 410.442311][ T8743] hsr_slave_1: entered promiscuous mode [ 410.456503][ T8743] debugfs: 'hsr0' already exists in 'hsr' [ 410.456532][ T8743] Cannot create hsr debugfs directory [ 410.641264][ T8741] hsr_slave_0: entered promiscuous mode [ 410.649104][ T8741] hsr_slave_1: entered promiscuous mode [ 410.650093][ T8741] debugfs: 'hsr0' already exists in 'hsr' [ 410.650119][ T8741] Cannot create hsr debugfs directory [ 410.890066][ T1025] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.630473][ T1025] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.903476][ T8755] hsr_slave_0: entered promiscuous mode [ 411.926727][ T8755] hsr_slave_1: entered promiscuous mode [ 411.931901][ T8755] debugfs: 'hsr0' already exists in 'hsr' [ 411.931932][ T8755] Cannot create hsr debugfs directory [ 412.924974][ T1025] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.585958][ T1025] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.951462][ T8743] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.369954][ T8743] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.617420][ T8743] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.975544][ T8743] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.520456][ T1025] bridge_slave_1: left allmulticast mode [ 417.520486][ T1025] bridge_slave_1: left promiscuous mode [ 417.520705][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.609467][ T1025] bridge_slave_0: left allmulticast mode [ 417.609506][ T1025] bridge_slave_0: left promiscuous mode [ 417.609806][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.700798][ T1025] bridge_slave_1: left allmulticast mode [ 417.700828][ T1025] bridge_slave_1: left promiscuous mode [ 417.701101][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.764970][ T1025] bridge_slave_0: left allmulticast mode [ 417.765008][ T1025] bridge_slave_0: left promiscuous mode [ 417.765337][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.443633][ T1025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.503750][ T1025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.547942][ T1025] bond0 (unregistering): Released all slaves [ 423.944803][ T1025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.023438][ T1025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.056723][ T1025] bond0 (unregistering): Released all slaves [ 427.182908][ T1025] hsr_slave_0: left promiscuous mode [ 427.204060][ T1025] hsr_slave_1: left promiscuous mode [ 427.206374][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.206407][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.253504][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.253545][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.401893][ T1025] hsr_slave_0: left promiscuous mode [ 427.432622][ T1025] hsr_slave_1: left promiscuous mode [ 427.434984][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.435009][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.473957][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.473992][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.823831][ T1025] veth1_macvtap: left promiscuous mode [ 427.824756][ T1025] veth0_macvtap: left promiscuous mode [ 427.825261][ T1025] veth1_vlan: left promiscuous mode [ 427.825485][ T1025] veth0_vlan: left promiscuous mode [ 427.943627][ T1025] veth1_macvtap: left promiscuous mode [ 427.943714][ T1025] veth0_macvtap: left promiscuous mode [ 427.943911][ T1025] veth1_vlan: left promiscuous mode [ 427.944054][ T1025] veth0_vlan: left promiscuous mode [ 431.523332][ T1025] team0 (unregistering): Port device team_slave_1 removed [ 431.831584][ T1025] team0 (unregistering): Port device team_slave_0 removed [ 438.063305][ T1025] team0 (unregistering): Port device team_slave_1 removed [ 438.308568][ T1025] team0 (unregistering): Port device team_slave_0 removed [ 442.391064][ T8743] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 442.498781][ T8743] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 442.540213][ T8743] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 442.659961][ T8743] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 443.774752][ T8741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 443.998403][ T8741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 444.053245][ T8741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 444.059965][ T9248] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1147'. [ 444.151096][ T8741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 444.482140][ T8755] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 444.561028][ T8755] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 444.631156][ T8755] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 444.672107][ T8755] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 445.388069][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.756693][ T8743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.910316][ T8743] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.999634][ T3612] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.000058][ T3612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.129917][ T9285] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1157'. [ 446.180763][ T8755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.317899][ T8755] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.421860][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.422025][ T1221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.953134][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 446.982654][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 446.986613][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 446.988315][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 446.989559][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 447.329943][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 447.350057][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 447.351966][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 447.361436][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 447.362947][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 447.461511][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 447.822663][ T9310] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1165'. [ 447.905556][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 447.928957][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 447.931083][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 447.964618][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 447.985856][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 449.114681][ T59] Bluetooth: hci4: command tx timeout [ 449.486143][ T59] Bluetooth: hci5: command tx timeout [ 449.957261][ T9339] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1176'. [ 449.957338][ T9339] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1176'. [ 450.092732][ T59] Bluetooth: hci1: command tx timeout [ 450.134785][ T9339] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1176'. [ 450.134872][ T9339] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1176'. [ 451.213573][ T59] Bluetooth: hci4: command tx timeout [ 451.534923][ T59] Bluetooth: hci5: command tx timeout [ 452.182532][ T59] Bluetooth: hci1: command tx timeout [ 452.595605][ T9372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1187'. [ 452.595674][ T9372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1187'. [ 452.627591][ T9295] chnl_net:caif_netlink_parms(): no params data found [ 452.743452][ T9372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1187'. [ 452.743504][ T9372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1187'. [ 453.311995][ T59] Bluetooth: hci4: command tx timeout [ 453.514986][ T3532] bridge_slave_1: left allmulticast mode [ 453.515024][ T3532] bridge_slave_1: left promiscuous mode [ 453.515296][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.612721][ T59] Bluetooth: hci5: command tx timeout [ 453.619147][ T3532] bridge_slave_0: left allmulticast mode [ 453.619183][ T3532] bridge_slave_0: left promiscuous mode [ 453.619514][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.252585][ T59] Bluetooth: hci1: command tx timeout [ 454.922577][ T3532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.094655][ T3532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.373467][ T59] Bluetooth: hci4: command tx timeout [ 455.707289][ T59] Bluetooth: hci5: command tx timeout [ 455.799313][ T3532] bond0 (unregistering): Released all slaves [ 456.149510][ T9408] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1199'. [ 456.149579][ T9408] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1199'. [ 456.332508][ T59] Bluetooth: hci1: command tx timeout [ 456.464280][ T9408] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1199'. [ 456.464355][ T9408] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1199'. [ 456.702984][ T9408] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1199'. [ 456.703065][ T9408] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1199'. [ 456.708320][ T3532] hsr_slave_0: left promiscuous mode [ 456.737303][ T3532] hsr_slave_1: left promiscuous mode [ 456.739451][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.779068][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.834424][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1209'. [ 459.802161][ T3532] team0 (unregistering): Port device team_slave_1 removed [ 459.975866][ T3532] team0 (unregistering): Port device team_slave_0 removed [ 460.971337][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1217'. [ 461.598365][ T9302] chnl_net:caif_netlink_parms(): no params data found [ 461.766124][ T9311] chnl_net:caif_netlink_parms(): no params data found [ 462.305331][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1225'. [ 464.251538][ T9295] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.251689][ T9295] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.251937][ T9295] bridge_slave_0: entered allmulticast mode [ 464.260805][ T9295] bridge_slave_0: entered promiscuous mode [ 464.361357][ T9295] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.361529][ T9295] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.361772][ T9295] bridge_slave_1: entered allmulticast mode [ 464.395243][ T9295] bridge_slave_1: entered promiscuous mode [ 466.541442][ T9295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.547889][ T9302] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.548059][ T9302] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.548368][ T9302] bridge_slave_0: entered allmulticast mode [ 466.553735][ T9302] bridge_slave_0: entered promiscuous mode [ 466.637308][ T9295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.774340][ T9302] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.774483][ T9302] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.774647][ T9302] bridge_slave_1: entered allmulticast mode [ 466.776698][ T9302] bridge_slave_1: entered promiscuous mode [ 467.063486][ T9311] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.065282][ T9311] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.065480][ T9311] bridge_slave_0: entered allmulticast mode [ 467.095920][ T9311] bridge_slave_0: entered promiscuous mode [ 467.419971][ T9311] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.420118][ T9311] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.445403][ T9311] bridge_slave_1: entered allmulticast mode [ 467.471013][ T9311] bridge_slave_1: entered promiscuous mode [ 467.728327][ T9295] team0: Port device team_slave_0 added [ 467.970064][ T9302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.975800][ T9295] team0: Port device team_slave_1 added [ 468.166011][ T9302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.383496][ T9311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.355903][ T9311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.955153][ T9295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.955172][ T9295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.955203][ T9295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.067987][ T9302] team0: Port device team_slave_0 added [ 470.105849][ T9295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.105864][ T9295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.105885][ T9295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.469876][ T9302] team0: Port device team_slave_1 added [ 471.485431][ T9311] team0: Port device team_slave_0 added [ 471.718190][ T9311] team0: Port device team_slave_1 added [ 472.708001][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.708015][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.708035][ T9302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.905520][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.905534][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.905555][ T9302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.470082][ T9295] hsr_slave_0: entered promiscuous mode [ 473.478444][ T9295] hsr_slave_1: entered promiscuous mode [ 473.481217][ T9295] debugfs: 'hsr0' already exists in 'hsr' [ 473.481262][ T9295] Cannot create hsr debugfs directory [ 473.526529][ T9311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.526543][ T9311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.526565][ T9311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.985080][ T9311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.985100][ T9311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.985129][ T9311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.792813][ T9587] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1265'. [ 475.655870][ T9302] hsr_slave_0: entered promiscuous mode [ 475.673318][ T9302] hsr_slave_1: entered promiscuous mode [ 475.677603][ T9302] debugfs: 'hsr0' already exists in 'hsr' [ 475.677626][ T9302] Cannot create hsr debugfs directory [ 476.038190][ T9311] hsr_slave_0: entered promiscuous mode [ 476.044068][ T9311] hsr_slave_1: entered promiscuous mode [ 476.045012][ T9311] debugfs: 'hsr0' already exists in 'hsr' [ 476.045038][ T9311] Cannot create hsr debugfs directory [ 478.073465][ T9613] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1275'. [ 480.927901][ T9641] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1285'. [ 483.390375][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1293'. [ 484.098394][ T3532] bridge_slave_1: left allmulticast mode [ 484.098432][ T3532] bridge_slave_1: left promiscuous mode [ 484.098733][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.254053][ T3532] bridge_slave_0: left allmulticast mode [ 484.254091][ T3532] bridge_slave_0: left promiscuous mode [ 484.254365][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.341770][ T3532] bridge_slave_1: left allmulticast mode [ 484.341814][ T3532] bridge_slave_1: left promiscuous mode [ 484.342074][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.456518][ T3532] bridge_slave_0: left allmulticast mode [ 484.456555][ T3532] bridge_slave_0: left promiscuous mode [ 484.456856][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.038633][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'. [ 487.839390][ T3532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.976344][ T3532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.056731][ T3532] bond0 (unregistering): Released all slaves [ 490.133274][ T3532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.223276][ T3532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.298366][ T3532] bond0 (unregistering): Released all slaves [ 491.592724][ T3532] hsr_slave_0: left promiscuous mode [ 491.635969][ T3532] hsr_slave_1: left promiscuous mode [ 491.637014][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.674475][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1312'. [ 491.692818][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.022702][ T3532] hsr_slave_0: left promiscuous mode [ 492.079060][ T3532] hsr_slave_1: left promiscuous mode [ 492.094083][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.142405][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.055679][ T3532] team0 (unregistering): Port device team_slave_1 removed [ 494.243423][ T3532] team0 (unregistering): Port device team_slave_0 removed [ 494.427163][ T9733] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1320'. [ 494.971723][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1321'. [ 498.548167][ T3532] team0 (unregistering): Port device team_slave_1 removed [ 498.918433][ T3532] team0 (unregistering): Port device team_slave_0 removed [ 499.374008][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1330'. [ 502.162901][ T9780] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1337'. [ 502.820325][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1338'. [ 505.016309][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'. [ 506.883214][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.778072][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 507.795037][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 507.798823][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 507.835161][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 507.836007][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 508.316259][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1353'. [ 509.276500][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 509.301498][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 509.305360][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 509.311241][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 509.321497][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 509.584792][ T5156] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 509.589606][ T5156] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 509.590913][ T5156] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 509.597874][ T5156] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 509.599209][ T5156] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 509.996487][ T5843] Bluetooth: hci2: command tx timeout [ 511.337917][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1362'. [ 511.702588][ T5843] Bluetooth: hci6: command tx timeout [ 511.703953][ T5156] Bluetooth: hci7: command tx timeout [ 512.012664][ T5843] Bluetooth: hci2: command tx timeout [ 512.598209][ T3532] bridge_slave_1: left allmulticast mode [ 512.598246][ T3532] bridge_slave_1: left promiscuous mode [ 512.598529][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.151142][ T3532] bridge_slave_0: left allmulticast mode [ 513.151177][ T3532] bridge_slave_0: left promiscuous mode [ 513.151481][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.772492][ T5843] Bluetooth: hci6: command tx timeout [ 513.772540][ T5843] Bluetooth: hci7: command tx timeout [ 513.843192][ T3532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.093464][ T5156] Bluetooth: hci2: command tx timeout [ 514.156746][ T3532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.281140][ T3532] bond0 (unregistering): Released all slaves [ 515.856220][ T5156] Bluetooth: hci7: command tx timeout [ 515.856384][ T5156] Bluetooth: hci6: command tx timeout [ 516.173450][ T5156] Bluetooth: hci2: command tx timeout [ 516.188367][ T3532] hsr_slave_0: left promiscuous mode [ 516.233087][ T3532] hsr_slave_1: left promiscuous mode [ 516.233800][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.323505][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.933118][ T5156] Bluetooth: hci6: command tx timeout [ 517.933154][ T5156] Bluetooth: hci7: command tx timeout [ 518.133698][ T3532] team0 (unregistering): Port device team_slave_1 removed [ 518.346006][ T3532] team0 (unregistering): Port device team_slave_0 removed [ 518.930909][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1380'. [ 521.607343][ T9818] chnl_net:caif_netlink_parms(): no params data found [ 521.827261][ T9830] chnl_net:caif_netlink_parms(): no params data found [ 522.337669][ T9832] chnl_net:caif_netlink_parms(): no params data found [ 522.941480][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1390'. [ 524.336477][ T9818] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.336634][ T9818] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.336889][ T9818] bridge_slave_0: entered allmulticast mode [ 524.340047][ T9818] bridge_slave_0: entered promiscuous mode [ 524.529768][ T9818] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.529928][ T9818] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.530168][ T9818] bridge_slave_1: entered allmulticast mode [ 524.559039][ T9818] bridge_slave_1: entered promiscuous mode [ 525.028806][ T9830] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.029049][ T9830] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.029413][ T9830] bridge_slave_0: entered allmulticast mode [ 525.038489][ T9830] bridge_slave_0: entered promiscuous mode [ 525.234321][ T9830] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.234605][ T9830] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.234825][ T9830] bridge_slave_1: entered allmulticast mode [ 525.237943][ T9830] bridge_slave_1: entered promiscuous mode [ 525.813048][ T9818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.713355][ T9818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.875151][ T9832] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.875310][ T9832] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.875561][ T9832] bridge_slave_0: entered allmulticast mode [ 526.878517][ T9832] bridge_slave_0: entered promiscuous mode [ 527.067149][ T9830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.067652][ T9832] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.067797][ T9832] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.068014][ T9832] bridge_slave_1: entered allmulticast mode [ 527.070364][ T9832] bridge_slave_1: entered promiscuous mode [ 527.306205][ T9830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.421163][ T9818] team0: Port device team_slave_0 added [ 527.780012][ T9818] team0: Port device team_slave_1 added [ 528.066271][ T9832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.358912][ T9830] team0: Port device team_slave_0 added [ 528.396713][ T9832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.638737][ T9830] team0: Port device team_slave_1 added [ 529.832536][ T9818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.832557][ T9818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.832587][ T9818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.665727][ T9818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.665746][ T9818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.665778][ T9818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.809976][ T9832] team0: Port device team_slave_0 added [ 530.843373][ T9830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.843393][ T9830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.843423][ T9830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.846534][ T9832] team0: Port device team_slave_1 added [ 531.106230][ T9830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.106249][ T9830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.106279][ T9830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.455537][ T9832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.455551][ T9832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.455572][ T9832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.755736][ T9832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.755757][ T9832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.755789][ T9832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.825566][ T9818] hsr_slave_0: entered promiscuous mode [ 531.829316][ T9818] hsr_slave_1: entered promiscuous mode [ 531.830313][ T9818] debugfs: 'hsr0' already exists in 'hsr' [ 531.830339][ T9818] Cannot create hsr debugfs directory [ 533.910868][ T9830] hsr_slave_0: entered promiscuous mode [ 533.929118][ T9830] hsr_slave_1: entered promiscuous mode [ 533.938912][ T9830] debugfs: 'hsr0' already exists in 'hsr' [ 533.938941][ T9830] Cannot create hsr debugfs directory [ 535.679549][ T9832] hsr_slave_0: entered promiscuous mode [ 535.681011][ T9832] hsr_slave_1: entered promiscuous mode [ 535.687343][ T9832] debugfs: 'hsr0' already exists in 'hsr' [ 535.687379][ T9832] Cannot create hsr debugfs directory [ 540.553269][ T3532] bridge_slave_1: left allmulticast mode [ 540.554297][ T3532] bridge_slave_1: left promiscuous mode [ 540.557559][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.207439][ T3532] bridge_slave_0: left allmulticast mode [ 541.207477][ T3532] bridge_slave_0: left promiscuous mode [ 541.207779][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.361210][ T3532] bridge_slave_1: left allmulticast mode [ 541.361247][ T3532] bridge_slave_1: left promiscuous mode [ 541.361509][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.114170][ T3532] bridge_slave_0: left allmulticast mode [ 542.114206][ T3532] bridge_slave_0: left promiscuous mode [ 542.114480][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.455660][ T5908] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 542.608207][ T5908] usb 10-1: config 8 has an invalid interface number: 80 but max is 0 [ 542.608241][ T5908] usb 10-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 542.608269][ T5908] usb 10-1: config 8 has no interface number 0 [ 542.608323][ T5908] usb 10-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 542.608353][ T5908] usb 10-1: config 8 interface 80 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 542.608378][ T5908] usb 10-1: config 8 interface 80 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 542.608441][ T5908] usb 10-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 542.608468][ T5908] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.622197][ T5908] usb 10-1: NFC: intf ffff88803a1e0000 id ffffffff8e2e62a0 [ 542.713209][ T3532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.813336][ T3532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.830912][ T5908] usb 10-1: USB disconnect, device number 2 [ 542.897102][ T3532] bond0 (unregistering): Released all slaves [ 543.213145][ T3532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.303624][ T3532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.377121][ T3532] bond0 (unregistering): Released all slaves [ 546.103627][ T3532] hsr_slave_0: left promiscuous mode [ 546.617099][ T3532] hsr_slave_1: left promiscuous mode [ 546.618082][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.664139][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.007809][ T3532] hsr_slave_0: left promiscuous mode [ 547.121885][ T3532] hsr_slave_1: left promiscuous mode [ 547.181365][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.358792][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.702013][T10113] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1444'. [ 548.761394][ T5908] IPVS: starting estimator thread 0... [ 548.912824][T10114] IPVS: using max 7 ests per chain, 16800 per kthread [ 549.375024][ T3532] team0 (unregistering): Port device team_slave_1 removed [ 549.613514][ T3532] team0 (unregistering): Port device team_slave_0 removed [ 551.703398][ T3532] team0 (unregistering): Port device team_slave_1 removed [ 551.893060][ T3532] team0 (unregistering): Port device team_slave_0 removed [ 558.327725][ T9830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 558.420738][ T9830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 558.507124][ T9830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 558.616874][ T9830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 559.032438][ T9818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 559.072711][ T9818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 559.152740][ T9818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 559.466573][ T9818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 559.737091][ T9832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 559.814394][ T9832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 559.911790][ T9832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 559.979634][ T9832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 560.300709][ T9830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.431611][ T9830] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.467885][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.468127][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.539253][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.539408][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.987223][ T9818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.555102][ T9818] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.560224][ T9832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.604429][ T3612] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.604675][ T3612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.697860][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.702553][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.799134][ T9832] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.915765][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.916081][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.048222][ T9347] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.048577][ T9347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.611691][ T9830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.861003][ T9830] veth0_vlan: entered promiscuous mode [ 562.904191][ T9818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.928902][ T9830] veth1_vlan: entered promiscuous mode [ 563.024606][ T9832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.090403][ T9830] veth0_macvtap: entered promiscuous mode [ 563.107463][ T9818] veth0_vlan: entered promiscuous mode [ 563.118737][ T9830] veth1_macvtap: entered promiscuous mode [ 563.160835][ T9818] veth1_vlan: entered promiscuous mode [ 563.209492][ T9830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.236366][ T9830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.279293][ T9832] veth0_vlan: entered promiscuous mode [ 563.281903][ T8163] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.300005][ T8163] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.312557][ T3612] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.327310][ T3612] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.402396][ T9818] veth0_macvtap: entered promiscuous mode [ 563.409872][ T9832] veth1_vlan: entered promiscuous mode [ 563.491091][ T9818] veth1_macvtap: entered promiscuous mode [ 563.699883][ T9818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.717267][ T3612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.717289][ T3612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.746791][ T9818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.797779][ T9832] veth0_macvtap: entered promiscuous mode [ 563.819535][ T980] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.828670][ T3612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.828693][ T3612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.829450][ T980] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.842985][ T980] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.849320][ T980] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.850681][ T9832] veth1_macvtap: entered promiscuous mode [ 564.129977][ T9832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.688065][ T9832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.830292][T10200] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 565.235680][T10194] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 565.235693][T10194] IPv6: NLM_F_CREATE should be set when creating new route [ 565.235853][T10194] IPv6: NLM_F_CREATE should be set when creating new route [ 565.235875][T10194] IPv6: NLM_F_CREATE should be set when creating new route [ 565.439377][ T980] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.462060][ T980] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.489977][ T980] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.515763][ T980] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.520463][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.520484][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.632479][ T3612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.632502][ T3612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.285914][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.398270][ T5156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 569.416086][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 569.438260][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 569.459352][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 569.464053][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 570.852580][ T979] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 571.027237][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 571.049824][ T979] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.057581][T10241] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 571.070973][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 571.084751][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 571.090789][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 571.103373][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 571.177035][ T979] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 571.177068][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.177089][ T979] usb 2-1: Product: syz [ 571.177104][ T979] usb 2-1: Manufacturer: syz [ 571.177118][ T979] usb 2-1: SerialNumber: syz [ 571.532446][ T5156] Bluetooth: hci1: command tx timeout [ 571.556522][ T979] cdc_ncm 2-1:1.0: bind() failure [ 571.577053][ T979] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 571.577135][ T979] cdc_ncm 2-1:1.1: bind() failure [ 571.603622][ T979] usb 2-1: USB disconnect, device number 7 [ 571.898126][ T8163] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.161791][ T8163] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.441138][ T8163] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.752845][ T8163] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.999043][T10221] chnl_net:caif_netlink_parms(): no params data found [ 573.213554][ T5156] Bluetooth: hci2: command tx timeout [ 573.280313][T10238] chnl_net:caif_netlink_parms(): no params data found [ 573.607439][T10221] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.607652][T10221] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.607898][T10221] bridge_slave_0: entered allmulticast mode [ 573.610966][T10221] bridge_slave_0: entered promiscuous mode [ 573.612580][ T5156] Bluetooth: hci1: command tx timeout [ 573.667045][T10221] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.667205][T10221] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.667425][T10221] bridge_slave_1: entered allmulticast mode [ 573.670373][T10221] bridge_slave_1: entered promiscuous mode [ 573.815985][ T8163] bridge_slave_1: left allmulticast mode [ 573.816013][ T8163] bridge_slave_1: left promiscuous mode [ 573.816218][ T8163] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.896038][ T8163] bridge_slave_0: left allmulticast mode [ 573.896084][ T8163] bridge_slave_0: left promiscuous mode [ 573.896378][ T8163] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.303390][ T5156] Bluetooth: hci2: command tx timeout [ 575.702455][ T5156] Bluetooth: hci1: command tx timeout [ 575.863417][ T8163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.926163][ T8163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.957760][ T8163] bond0 (unregistering): Released all slaves [ 576.225081][T10221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.323871][T10221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.443117][T10238] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.443277][T10238] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.443539][T10238] bridge_slave_0: entered allmulticast mode [ 576.446603][T10238] bridge_slave_0: entered promiscuous mode [ 576.572719][T10238] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.572862][T10238] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.573106][T10238] bridge_slave_1: entered allmulticast mode [ 576.578931][T10238] bridge_slave_1: entered promiscuous mode [ 577.028568][T10221] team0: Port device team_slave_0 added [ 577.108422][T10221] team0: Port device team_slave_1 added [ 577.173619][T10238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.259649][T10238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.372383][ T5156] Bluetooth: hci2: command tx timeout [ 577.511158][T10221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.511177][T10221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.511208][T10221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.679476][ T8163] hsr_slave_0: left promiscuous mode [ 577.715597][ T8163] hsr_slave_1: left promiscuous mode [ 577.719927][ T8163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.719963][ T8163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.736623][ T8163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.736665][ T8163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.772527][ T5156] Bluetooth: hci1: command tx timeout [ 577.822005][ T8163] veth1_macvtap: left promiscuous mode [ 577.822136][ T8163] veth0_macvtap: left promiscuous mode [ 577.832611][ T8163] veth1_vlan: left promiscuous mode [ 577.832846][ T8163] veth0_vlan: left promiscuous mode [ 579.452821][ T5156] Bluetooth: hci2: command tx timeout [ 580.403404][ T8163] team0 (unregistering): Port device team_slave_1 removed [ 580.623637][ T8163] team0 (unregistering): Port device team_slave_0 removed [ 583.280026][T10221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.280045][T10221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.280075][T10221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.288972][T10238] team0: Port device team_slave_0 added [ 583.364361][T10238] team0: Port device team_slave_1 added [ 583.755741][T10238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.755760][T10238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.756719][T10238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.784610][T10221] hsr_slave_0: entered promiscuous mode [ 583.788460][T10221] hsr_slave_1: entered promiscuous mode [ 583.794527][T10221] debugfs: 'hsr0' already exists in 'hsr' [ 583.794565][T10221] Cannot create hsr debugfs directory [ 583.802681][T10238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.802702][T10238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.802737][T10238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.274895][T10238] hsr_slave_0: entered promiscuous mode [ 584.276394][T10238] hsr_slave_1: entered promiscuous mode [ 584.277457][T10238] debugfs: 'hsr0' already exists in 'hsr' [ 584.277485][T10238] Cannot create hsr debugfs directory [ 585.731742][ T8163] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.042549][ T8163] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.287506][ T8163] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.539943][ T8163] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.896240][ T8163] bridge_slave_1: left allmulticast mode [ 586.896276][ T8163] bridge_slave_1: left promiscuous mode [ 586.896549][ T8163] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.954673][ T8163] bridge_slave_0: left allmulticast mode [ 586.954709][ T8163] bridge_slave_0: left promiscuous mode [ 586.955004][ T8163] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.834871][ T8163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.893623][ T8163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.917525][ T8163] bond0 (unregistering): Released all slaves [ 589.902762][ T8163] hsr_slave_0: left promiscuous mode [ 589.942996][ T8163] hsr_slave_1: left promiscuous mode [ 589.944087][ T8163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.944117][ T8163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.973967][ T8163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.974001][ T8163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.075755][ T8163] veth1_macvtap: left promiscuous mode [ 590.075891][ T8163] veth0_macvtap: left promiscuous mode [ 590.076200][ T8163] veth1_vlan: left promiscuous mode [ 590.076420][ T8163] veth0_vlan: left promiscuous mode [ 592.453403][ T8163] team0 (unregistering): Port device team_slave_1 removed [ 592.674798][ T8163] team0 (unregistering): Port device team_slave_0 removed [ 595.239488][T10221] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 595.283502][T10221] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 595.325565][T10221] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 595.420501][T10221] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 595.580338][T10238] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 595.637765][T10238] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 595.684461][T10238] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 595.727965][T10238] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 595.975963][T10221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.067620][T10221] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.101060][ T3612] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.101687][ T3612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.136868][T10238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.152206][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.152495][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.219791][T10238] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.254826][ T980] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.254983][ T980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.281029][ T980] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.281288][ T980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.696170][T10221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.789612][T10221] veth0_vlan: entered promiscuous mode [ 596.801288][T10221] veth1_vlan: entered promiscuous mode [ 596.888811][T10238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.890428][T10221] veth0_macvtap: entered promiscuous mode [ 596.914514][T10221] veth1_macvtap: entered promiscuous mode [ 596.963075][T10221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.990226][T10221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.016421][ T8163] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.016476][ T8163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.016516][ T8163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.016556][ T8163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.105146][T10238] veth0_vlan: entered promiscuous mode [ 597.251703][T10238] veth1_vlan: entered promiscuous mode [ 597.370135][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.370157][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.465431][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.465454][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.466511][T10238] veth0_macvtap: entered promiscuous mode [ 597.502368][T10238] veth1_macvtap: entered promiscuous mode [ 597.562152][T10238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.590882][T10238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.620758][ T3596] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.632024][ T3596] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.646581][ T3596] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.647034][ T3596] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.901875][T10301] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 602.509718][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.509742][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.902559][ T980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.902577][ T980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.187445][T10329] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 605.923726][T10342] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 606.259242][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 609.179095][T10375] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 611.850495][T10389] Bluetooth: MGMT ver 1.23 [ 614.473802][T10414] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 614.658334][T10418] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 616.374998][ T38] audit: type=1326 audit(1757873293.568:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10426 comm="syz.9.1525" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86ccedeba9 code=0x0 [ 620.469885][T10472] overlayfs: failed to resolve './file0': -2 [ 624.256330][T10512] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 629.799237][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.697009][ T5959] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 631.204951][ T5959] usb 1-1: unable to get BOS descriptor or descriptor too short [ 631.206605][ T5959] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 631.231954][ T5959] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 631.231988][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.232011][ T5959] usb 1-1: SerialNumber: ᴋ [ 631.309311][T10552] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 631.745009][ T38] audit: type=1326 audit(1757873308.628:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10553 comm="syz.1.1568" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e4ff8eba9 code=0x0 [ 631.780686][ T5843] Bluetooth: hci6: command 0x0406 tx timeout [ 633.283661][ T5959] usb 1-1: USB disconnect, device number 5 [ 635.612182][T10595] binder: 10591:10595 ioctl c018620b 0 returned -14 [ 639.427179][T10631] binder: 10627:10631 ioctl c018620b 0 returned -14 [ 640.672407][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 640.796272][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1594'. [ 640.796451][T10636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.860084][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 641.037046][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 641.037080][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.037102][ T10] usb 1-1: Product: syz [ 641.037118][ T10] usb 1-1: Manufacturer: syz [ 641.037133][ T10] usb 1-1: SerialNumber: syz [ 641.084984][ T10] usb 1-1: config 0 descriptor?? [ 641.133407][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 641.516808][T10636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.792425][ T5924] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 641.942623][ T5924] usb 10-1: Using ep0 maxpacket: 8 [ 641.949393][ T5924] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 641.949457][ T5924] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 641.949487][ T5924] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 641.949514][ T5924] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 641.949542][ T5924] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 641.949568][ T5924] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 641.949614][ T5924] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 641.949637][ T5924] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.139725][ T5959] usb 1-1: USB disconnect, device number 7 [ 642.286309][ T5924] usb 10-1: GET_CAPABILITIES returned 0 [ 642.286357][ T5924] usbtmc 10-1:16.0: can't read capabilities [ 642.541110][ T5826] usb 10-1: USB disconnect, device number 3 [ 646.318244][T10669] binder: 10664:10669 ioctl c018620b 0 returned -14 [ 648.772730][ T38] audit: type=1800 audit(1757873325.938:4): pid=10684 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1607" name="bus" dev="ramfs" ino=45092 res=0 errno=0 [ 649.101002][T10697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1615'. [ 649.703556][ T5909] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 649.870108][ T5909] usb 10-1: Using ep0 maxpacket: 16 [ 649.887199][ T5909] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.887242][ T5909] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.887284][ T5909] usb 10-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 649.887309][ T5909] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.920502][ T5909] usb 10-1: config 0 descriptor?? [ 650.350853][ T5909] input: HID 0458:5012 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5012.0017/input/input6 [ 650.637386][ T5909] input: HID 0458:5012 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5012.0017/input/input7 [ 650.723190][ T5909] kye 0003:0458:5012.0017: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.9-1/input0 [ 650.739793][ T5909] usb 10-1: USB disconnect, device number 4 [ 651.638943][T10715] binder: 10708:10715 ioctl c018620b 0 returned -14 [ 671.114976][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1657'. [ 671.682716][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1659'. [ 684.336748][T10943] overlayfs: failed to resolve './file1': -2 [ 686.029951][T10960] CIFS: VFS: Malformed UNC in devname [ 691.624675][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.783820][T11008] CIFS: VFS: Malformed UNC in devname [ 693.501307][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 694.492770][ T38] audit: type=1326 audit(1757873371.688:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42df45eba9 code=0x7ffc0000 [ 694.493778][ T38] audit: type=1326 audit(1757873371.688:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42df45eba9 code=0x7ffc0000 [ 694.499025][ T38] audit: type=1326 audit(1757873371.688:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f42df45eba9 code=0x7ffc0000 [ 694.499631][ T38] audit: type=1326 audit(1757873371.688:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42df45eba9 code=0x7ffc0000 [ 694.500190][ T38] audit: type=1326 audit(1757873371.688:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f42df45eba9 code=0x7ffc0000 [ 694.500570][ T38] audit: type=1326 audit(1757873371.688:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42df45eba9 code=0x7ffc0000 [ 694.503870][ T38] audit: type=1326 audit(1757873371.688:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.0.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42df45eba9 code=0x7ffc0000 [ 695.012672][T11042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 695.600591][T11045] CIFS: VFS: Malformed UNC in devname [ 696.129300][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1746'. [ 696.158406][T11055] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 696.515146][ C1] vkms_vblank_simulate: vblank timer overrun [ 696.722256][ C1] vkms_vblank_simulate: vblank timer overrun [ 696.830584][ C1] vkms_vblank_simulate: vblank timer overrun [ 697.556038][ C1] vkms_vblank_simulate: vblank timer overrun [ 697.613341][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 697.846838][ C1] vkms_vblank_simulate: vblank timer overrun [ 698.688158][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.242362][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 699.259377][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.304828][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.546053][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.896359][ C1] vkms_vblank_simulate: vblank timer overrun [ 705.379737][T11141] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1779'. [ 713.902383][T11218] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 717.112498][ T45] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 717.262359][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 717.270033][ T45] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 717.270067][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.270089][ T45] usb 4-1: Product: syz [ 717.270104][ T45] usb 4-1: Manufacturer: syz [ 717.270120][ T45] usb 4-1: SerialNumber: syz [ 717.339994][ T45] usb 4-1: config 0 descriptor?? [ 717.351596][ T45] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 719.011131][T11264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1821'. [ 719.689939][ T45] gp8psk: usb in 128 operation failed. [ 719.702395][ T45] gp8psk: usb in 137 operation failed. [ 719.702425][ T45] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 719.703620][ T45] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 719.703685][ T45] usb 4-1: media controller created [ 719.799993][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 719.981635][ T45] gp8psk_fe: Frontend revision 1 attached [ 720.023783][ T45] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 720.030461][ T45] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 720.308705][ T45] gp8psk: usb in 138 operation failed. [ 720.308727][ T45] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 720.308742][ T45] gp8psk: found Genpix USB device pID = 201 (hex) [ 720.339003][ T45] usb 4-1: USB disconnect, device number 7 [ 725.274733][ T45] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 726.734908][T11301] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 726.773411][T11301] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 731.620809][T11363] overlayfs: failed to resolve './file0': -2 [ 734.300269][T11401] overlayfs: failed to resolve './file1': -2 [ 734.563842][T11385] syz.9.1867 (11385) used greatest stack depth: 16760 bytes left [ 738.893910][T11454] process 'syz.2.1889' launched './file0' with NULL argv: empty string added [ 739.595952][T11457] overlayfs: failed to resolve './file1': -2 [ 740.094707][T11473] overlayfs: failed to resolve './file1': -2 [ 740.843808][T11480] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 740.876420][T11480] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 749.808026][T11565] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1929'. [ 749.844818][T11565] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 751.454556][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 751.496387][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 751.540535][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 751.562907][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 751.565382][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 752.856885][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.855707][ T5156] Bluetooth: hci3: command tx timeout [ 755.218461][ T3532] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.897905][ T5156] Bluetooth: hci3: command tx timeout [ 757.459731][ T3532] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.052296][ T5156] Bluetooth: hci3: command tx timeout [ 760.927632][ T3532] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.132493][ T5156] Bluetooth: hci3: command tx timeout [ 761.880915][ T3532] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.906291][T11576] chnl_net:caif_netlink_parms(): no params data found [ 764.416754][T11675] autofs: Unknown parameter 'fd0x0000000000000000' [ 766.815467][T11576] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.815572][T11576] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.815778][T11576] bridge_slave_0: entered allmulticast mode [ 766.844685][T11576] bridge_slave_0: entered promiscuous mode [ 767.016480][T11576] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.016656][T11576] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.016841][T11576] bridge_slave_1: entered allmulticast mode [ 767.023609][T11576] bridge_slave_1: entered promiscuous mode [ 768.901731][T11576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.427107][T11576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.597135][ T3532] bridge_slave_1: left allmulticast mode [ 769.597173][ T3532] bridge_slave_1: left promiscuous mode [ 769.600155][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.704062][ T3532] bridge_slave_0: left allmulticast mode [ 769.704101][ T3532] bridge_slave_0: left promiscuous mode [ 769.704404][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.750676][ T5156] block nbd1: Receive control failed (result -32) [ 769.755263][T11740] block nbd1: shutting down sockets [ 773.593801][T11779] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 773.594034][T11779] overlayfs: failed to set xattr on upper [ 773.594072][T11779] overlayfs: ...falling back to redirect_dir=nofollow. [ 773.594110][T11779] overlayfs: ...falling back to index=off. [ 773.594147][T11779] overlayfs: ...falling back to uuid=null. [ 775.373345][ T3532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.433449][ T3532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.498872][ T3532] bond0 (unregistering): Released all slaves [ 777.238106][T11576] team0: Port device team_slave_0 added [ 777.454778][T11576] team0: Port device team_slave_1 added [ 779.196098][ T979] IPVS: starting estimator thread 0... [ 779.292529][T11814] IPVS: using max 7 ests per chain, 16800 per kthread [ 779.293414][T11265] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 779.461422][T11265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.461460][T11265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.461485][T11265] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 779.461532][T11265] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 779.461557][T11265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.539533][T11265] usb 2-1: config 0 descriptor?? [ 780.163344][T11576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.163363][T11576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.163394][T11576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.185937][T11576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.186055][T11576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.186087][T11576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.393052][ T3532] hsr_slave_0: left promiscuous mode [ 780.413433][ T3532] hsr_slave_1: left promiscuous mode [ 780.414579][ T3532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.414603][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.473899][ T3532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.473925][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.670423][T11265] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 780.772881][ T3532] veth1_macvtap: left promiscuous mode [ 780.773016][ T3532] veth0_macvtap: left promiscuous mode [ 780.778538][ T3532] veth1_vlan: left promiscuous mode [ 780.778783][ T3532] veth0_vlan: left promiscuous mode [ 783.212631][T11287] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 784.032485][ T979] usb 2-1: USB disconnect, device number 8 [ 793.704129][T11982] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2071'. [ 793.715711][ T3532] team0 (unregistering): Port device team_slave_1 removed [ 794.723564][ T3532] team0 (unregistering): Port device team_slave_0 removed [ 801.196694][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 801.213190][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 801.215869][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 801.217273][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 801.218590][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 802.489792][T11576] hsr_slave_0: entered promiscuous mode [ 802.491230][T11576] hsr_slave_1: entered promiscuous mode [ 802.493990][T11576] debugfs: 'hsr0' already exists in 'hsr' [ 802.494022][T11576] Cannot create hsr debugfs directory [ 803.174966][T12039] overlayfs: missing 'lowerdir' [ 803.672381][ T59] Bluetooth: hci4: command tx timeout [ 805.012975][T12044] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 805.013024][T12044] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 805.013056][T12044] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 805.102613][ T38] audit: type=1800 audit(1757873482.198:12): pid=12044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2090" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 805.722417][ T5156] Bluetooth: hci4: command tx timeout [ 806.145749][T12064] overlayfs: missing 'lowerdir' [ 806.484912][T12072] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2101'. [ 807.735610][ T3532] IPVS: stop unused estimator thread 0... [ 807.772298][ T5156] Bluetooth: hci4: command tx timeout [ 808.361914][T12097] overlayfs: missing 'lowerdir' [ 809.815740][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 809.865075][ T59] Bluetooth: hci4: command tx timeout [ 810.166366][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 810.182920][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 810.187698][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 810.188622][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 811.789502][ T3532] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.837191][T12131] overlayfs: missing 'lowerdir' [ 812.271186][ T59] Bluetooth: hci1: command tx timeout [ 812.381765][T12022] chnl_net:caif_netlink_parms(): no params data found [ 814.026652][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.277479][ T3532] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.334686][ T59] Bluetooth: hci1: command tx timeout [ 814.570338][T12157] overlayfs: missing 'lowerdir' [ 814.911636][T11287] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 814.941557][T11287] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 815.730736][ T3532] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.118799][ T3532] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.412502][ T59] Bluetooth: hci1: command tx timeout [ 816.732836][T12022] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.733003][T12022] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.733321][T12022] bridge_slave_0: entered allmulticast mode [ 816.736370][T12022] bridge_slave_0: entered promiscuous mode [ 816.778383][T12022] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.778540][T12022] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.778815][T12022] bridge_slave_1: entered allmulticast mode [ 816.781879][T12022] bridge_slave_1: entered promiscuous mode [ 817.027507][T12022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.048656][T12022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.244743][T12022] team0: Port device team_slave_0 added [ 817.263357][T12022] team0: Port device team_slave_1 added [ 817.383810][ T3532] bridge_slave_1: left allmulticast mode [ 817.383899][ T3532] bridge_slave_1: left promiscuous mode [ 817.384176][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.445125][ T3532] bridge_slave_0: left allmulticast mode [ 817.445162][ T3532] bridge_slave_0: left promiscuous mode [ 817.445436][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.500661][ T5156] Bluetooth: hci1: command tx timeout [ 819.484109][ T3532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 819.563330][ T3532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.588425][ T3532] bond0 (unregistering): Released all slaves [ 819.911247][T12022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.911267][T12022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.911296][T12022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.219557][T12022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.219575][T12022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 820.219606][T12022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.284501][T12109] chnl_net:caif_netlink_parms(): no params data found [ 820.978308][T12022] hsr_slave_0: entered promiscuous mode [ 820.980407][T12022] hsr_slave_1: entered promiscuous mode [ 820.981423][T12022] debugfs: 'hsr0' already exists in 'hsr' [ 820.981448][T12022] Cannot create hsr debugfs directory [ 821.127579][ T3532] hsr_slave_0: left promiscuous mode [ 821.142542][ T3532] hsr_slave_1: left promiscuous mode [ 821.143654][ T3532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 821.143684][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.194133][ T3532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 821.194168][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.281836][ T3532] veth1_macvtap: left promiscuous mode [ 821.281973][ T3532] veth0_macvtap: left promiscuous mode [ 821.282861][ T3532] veth1_vlan: left promiscuous mode [ 821.283111][ T3532] veth0_vlan: left promiscuous mode [ 823.886749][ T3532] team0 (unregistering): Port device team_slave_1 removed [ 824.165406][ T3532] team0 (unregistering): Port device team_slave_0 removed [ 827.394245][T12109] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.394460][T12109] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.394669][T12109] bridge_slave_0: entered allmulticast mode [ 827.397123][T12109] bridge_slave_0: entered promiscuous mode [ 827.429032][T12109] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.429268][T12109] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.429510][T12109] bridge_slave_1: entered allmulticast mode [ 827.432126][T12109] bridge_slave_1: entered promiscuous mode [ 827.721261][T12109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.745884][T12109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.145059][T12109] team0: Port device team_slave_0 added [ 828.218274][T12109] team0: Port device team_slave_1 added [ 828.427004][ T3532] IPVS: stop unused estimator thread 0... [ 828.524498][T12109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.524518][T12109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.524548][T12109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.527315][T12109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.527331][T12109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.527363][T12109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.949705][T12109] hsr_slave_0: entered promiscuous mode [ 828.950726][T12109] hsr_slave_1: entered promiscuous mode [ 828.951451][T12109] debugfs: 'hsr0' already exists in 'hsr' [ 828.951470][T12109] Cannot create hsr debugfs directory [ 829.037248][ T3532] bridge_slave_1: left allmulticast mode [ 829.037286][ T3532] bridge_slave_1: left promiscuous mode [ 829.037551][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.110021][ T3532] bridge_slave_0: left allmulticast mode [ 829.110059][ T3532] bridge_slave_0: left promiscuous mode [ 829.110360][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.483552][ T3532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.565303][ T3532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.626912][ T3532] bond0 (unregistering): Released all slaves [ 830.093836][ T3532] hsr_slave_0: left promiscuous mode [ 830.112589][ T3532] hsr_slave_1: left promiscuous mode [ 830.113406][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.153542][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.913251][ T3532] team0 (unregistering): Port device team_slave_1 removed [ 831.056648][ T3532] team0 (unregistering): Port device team_slave_0 removed [ 832.248839][T12022] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 832.318386][T12022] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 832.380899][T12022] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 832.476727][T12022] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 832.616421][T12109] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 832.667547][T12109] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 832.700036][T12109] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 832.742011][T12109] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 832.949550][T12022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.001809][T12022] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.027493][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.027759][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.047673][T12109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.068295][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.068527][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.120431][T12109] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.156478][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.156637][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.190362][ T980] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.190549][ T980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.691689][T12022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.758664][T12109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.849015][T12109] veth0_vlan: entered promiscuous mode [ 833.872658][T12109] veth1_vlan: entered promiscuous mode [ 833.973100][T12109] veth0_macvtap: entered promiscuous mode [ 833.982087][T12109] veth1_macvtap: entered promiscuous mode [ 834.036359][T12109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.064584][T12109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.104810][ T1025] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.120863][ T1025] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.120947][ T1025] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.120993][ T1025] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.478904][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.478927][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.569782][ T980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.569805][ T980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.674546][T12022] veth0_vlan: entered promiscuous mode [ 834.711762][T12022] veth1_vlan: entered promiscuous mode [ 834.839303][T12207] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2143'. [ 835.774610][T12022] veth0_macvtap: entered promiscuous mode [ 835.798847][T12022] veth1_macvtap: entered promiscuous mode [ 835.959570][T12022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.006045][T12022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.051860][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.061316][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.061583][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.061832][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.824461][T12234] overlayfs: missing 'lowerdir' [ 838.110982][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.111006][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.203659][ T8163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.203683][ T8163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.312599][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2147'. [ 839.424276][T12254] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 841.198937][T12272] input: syz0 as /devices/virtual/input/input9 [ 841.278652][ T38] audit: type=1326 audit(1757873518.368:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12265 comm="syz.4.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455836eba9 code=0x7ffc0000 [ 841.278710][ T38] audit: type=1326 audit(1757873518.368:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12265 comm="syz.4.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f455836eba9 code=0x7ffc0000 [ 841.278757][ T38] audit: type=1326 audit(1757873518.368:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12265 comm="syz.4.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455836eba9 code=0x7ffc0000 [ 841.278803][ T38] audit: type=1326 audit(1757873518.368:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12265 comm="syz.4.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f455836eba9 code=0x7ffc0000 [ 841.278850][ T38] audit: type=1326 audit(1757873518.368:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12265 comm="syz.4.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455836eba9 code=0x7ffc0000 [ 841.278896][ T38] audit: type=1326 audit(1757873518.368:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12265 comm="syz.4.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f455836eba9 code=0x7ffc0000 [ 841.278942][ T38] audit: type=1326 audit(1757873518.368:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12265 comm="syz.4.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455836eba9 code=0x7ffc0000 [ 841.278996][ T38] audit: type=1326 audit(1757873518.368:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12265 comm="syz.4.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f455836eba9 code=0x7ffc0000 [ 841.279055][ T38] audit: type=1326 audit(1757873518.368:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12265 comm="syz.4.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455836eba9 code=0x7ffc0000 [ 841.279099][ T38] audit: type=1326 audit(1757873518.368:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12265 comm="syz.4.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f455836eba9 code=0x7ffc0000 [ 841.284784][T12271] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 841.284855][T12271] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 842.935915][T12281] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2154'. [ 845.997823][T12305] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 845.997888][T12305] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 846.992607][T12313] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2168'. [ 849.046060][T11265] kernel write not supported for file /radio5 (pid: 11265 comm: kworker/1:2) [ 849.832444][T12341] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 849.832510][T12341] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 855.888105][T12395] overlayfs: missing 'lowerdir' [ 859.417490][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2204'. [ 859.994660][T12416] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 863.452036][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2218'. [ 864.158722][T12470] netlink: 264 bytes leftover after parsing attributes in process `syz.1.2221'. [ 864.158802][T12470] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2221'. [ 866.431051][T12491] input: syz0 as /devices/virtual/input/input10 [ 866.462045][ T38] kauditd_printk_skb: 10 callbacks suppressed [ 866.462066][ T38] audit: type=1326 audit(1757873543.608:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12487 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4ff8eba9 code=0x7ffc0000 [ 866.491159][ T38] audit: type=1326 audit(1757873543.608:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12487 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4e4ff8eba9 code=0x7ffc0000 [ 866.491293][ T38] audit: type=1326 audit(1757873543.618:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12487 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4ff8eba9 code=0x7ffc0000 [ 866.491344][ T38] audit: type=1326 audit(1757873543.618:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12487 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f4e4ff8eba9 code=0x7ffc0000 [ 866.491381][ T38] audit: type=1326 audit(1757873543.618:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12487 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4ff8eba9 code=0x7ffc0000 [ 866.491415][ T38] audit: type=1326 audit(1757873543.618:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12487 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e4ff8eba9 code=0x7ffc0000 [ 866.491450][ T38] audit: type=1326 audit(1757873543.618:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12487 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4ff8eba9 code=0x7ffc0000 [ 866.491483][ T38] audit: type=1326 audit(1757873543.618:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12487 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e4ff8eba9 code=0x7ffc0000 [ 866.491515][ T38] audit: type=1326 audit(1757873543.618:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12487 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4ff8eba9 code=0x7ffc0000 [ 866.491556][ T38] audit: type=1326 audit(1757873543.618:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12487 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f4e4ff8eba9 code=0x7ffc0000 [ 869.148340][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2232'. [ 872.039000][T12534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2244'. [ 872.113800][T12534] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 873.195969][T12549] input: syz0 as /devices/virtual/input/input11 [ 873.204102][ T38] kauditd_printk_skb: 10 callbacks suppressed [ 873.204122][ T38] audit: type=1326 audit(1757873550.378:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12544 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c45eceba9 code=0x7ffc0000 [ 873.204175][ T38] audit: type=1326 audit(1757873550.378:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12544 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2c45eceba9 code=0x7ffc0000 [ 873.204223][ T38] audit: type=1326 audit(1757873550.378:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12544 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c45eceba9 code=0x7ffc0000 [ 873.204272][ T38] audit: type=1326 audit(1757873550.378:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12544 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f2c45eceba9 code=0x7ffc0000 [ 873.204321][ T38] audit: type=1326 audit(1757873550.378:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12544 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c45eceba9 code=0x7ffc0000 [ 873.204369][ T38] audit: type=1326 audit(1757873550.378:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12544 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c45eceba9 code=0x7ffc0000 [ 873.204417][ T38] audit: type=1326 audit(1757873550.378:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12544 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c45eceba9 code=0x7ffc0000 [ 873.204466][ T38] audit: type=1326 audit(1757873550.378:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12544 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c45eceba9 code=0x7ffc0000 [ 873.204514][ T38] audit: type=1326 audit(1757873550.378:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12544 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c45eceba9 code=0x7ffc0000 [ 873.204562][ T38] audit: type=1326 audit(1757873550.378:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12544 comm="syz.2.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f2c45eceba9 code=0x7ffc0000 [ 875.464423][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.864232][T12568] netlink: 264 bytes leftover after parsing attributes in process `syz.4.2255'. [ 875.864327][T12568] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2255'. [ 877.758265][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2259'. [ 877.935666][T12580] overlayfs: missing 'workdir' [ 878.653545][T12602] netlink: 264 bytes leftover after parsing attributes in process `syz.3.2269'. [ 878.654339][T12602] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2269'. [ 882.390151][T12628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2276'. [ 882.514533][T12630] overlayfs: missing 'workdir' [ 887.051686][T12666] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 890.287440][T12705] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 892.476094][T12740] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 894.343582][T12765] overlayfs: failed to clone upperpath [ 895.330427][T12779] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2334'. [ 897.055258][T12797] overlayfs: failed to clone upperpath [ 897.642510][T12810] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2346'. [ 899.606283][T12833] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 900.033211][T12844] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2362'. [ 901.674824][T12862] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 902.938789][T12879] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2377'. [ 904.188226][T12891] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 909.816509][T12940] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 912.344685][T12978] overlayfs: failed to clone upperpath [ 914.359568][T13000] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 915.202304][ T5922] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 915.362292][ T5922] usb 4-1: Using ep0 maxpacket: 16 [ 915.364878][ T5922] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 915.364904][ T5922] usb 4-1: config 0 has no interface number 0 [ 915.370639][ T5922] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 915.370671][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.370693][ T5922] usb 4-1: Product: syz [ 915.370708][ T5922] usb 4-1: Manufacturer: syz [ 915.370724][ T5922] usb 4-1: SerialNumber: syz [ 915.376007][ T5922] usb 4-1: config 0 descriptor?? [ 915.391090][ T5922] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 915.679135][T13011] overlayfs: failed to clone upperpath [ 917.287853][ T5922] gspca_spca1528: reg_w err -110 [ 917.287938][ T5922] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 917.968015][T13005] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 917.968042][T13005] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 13005, name: syz.3.2425 [ 917.968062][T13005] preempt_count: 0, expected: 0 [ 917.968073][T13005] RCU nest depth: 0, expected: 0 [ 917.968100][T13005] 1 lock held by syz.3.2425/13005: [ 917.968115][T13005] #0: ffff888145be8058 (&dum_hcd->dum->lock){+.+.}-{3:3}, at: dummy_dequeue+0x164/0x480 [ 917.968191][T13005] irq event stamp: 5352 [ 917.968201][T13005] hardirqs last enabled at (5351): [] _raw_spin_unlock_irq+0x23/0x50 [ 917.968241][T13005] hardirqs last disabled at (5352): [] dummy_dequeue+0x151/0x480 [ 917.968281][T13005] softirqs last enabled at (0): [] copy_process+0x979/0x3ae0 [ 917.968315][T13005] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 917.968364][T13005] CPU: 1 UID: 0 PID: 13005 Comm: syz.3.2425 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 917.968389][T13005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 917.968412][T13005] Call Trace: [ 917.968422][T13005] [ 917.968432][T13005] dump_stack_lvl+0x189/0x250 [ 917.968473][T13005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 917.968516][T13005] ? print_lock_name+0xde/0x100 [ 917.968546][T13005] __might_resched+0x44b/0x5d0 [ 917.968580][T13005] ? __pfx___might_resched+0x10/0x10 [ 917.968605][T13005] ? dummy_dequeue+0x164/0x480 [ 917.968650][T13005] rt_spin_lock+0xc7/0x2c0 [ 917.968677][T13005] ? _raw_spin_unlock_irq+0x23/0x50 [ 917.968711][T13005] ? __pfx_rt_spin_lock+0x10/0x10 [ 917.968745][T13005] ? rcu_is_watching+0x15/0xb0 [ 917.968785][T13005] dummy_dequeue+0x164/0x480 [ 917.968821][T13005] ? __pfx_dummy_dequeue+0x10/0x10 [ 917.968847][T13005] ? __pfx_schedule_timeout+0x10/0x10 [ 917.968870][T13005] ? __pfx___wait_for_common+0x10/0x10 [ 917.968904][T13005] usb_ep_dequeue+0x66/0x250 [ 917.968926][T13005] raw_process_ep0_io+0x435/0x980 [ 917.968956][T13005] raw_ioctl+0x2609/0x3ba0 [ 917.968979][T13005] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 917.969000][T13005] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 917.969024][T13005] ? do_vfs_ioctl+0xbeb/0x1440 [ 917.969044][T13005] ? __pfx_raw_ioctl+0x10/0x10 [ 917.969064][T13005] ? __pfx_smack_log+0x10/0x10 [ 917.969088][T13005] ? smk_access+0x14c/0x4e0 [ 917.969117][T13005] ? smk_tskacc+0x2fc/0x370 [ 917.969144][T13005] ? smack_file_ioctl+0x2ac/0x340 [ 917.969169][T13005] ? __pfx_smack_file_ioctl+0x10/0x10 [ 917.969206][T13005] ? __fget_files+0x2a/0x420 [ 917.969237][T13005] ? __fget_files+0x3a6/0x420 [ 917.969266][T13005] ? __fget_files+0x2a/0x420 [ 917.969312][T13005] ? bpf_lsm_file_ioctl+0x9/0x20 [ 917.969331][T13005] ? __pfx_raw_ioctl+0x10/0x10 [ 917.969351][T13005] __se_sys_ioctl+0xff/0x170 [ 917.969372][T13005] do_syscall_64+0xfa/0x3b0 [ 917.969388][T13005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.969403][T13005] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 917.969419][T13005] ? clear_bhb_loop+0x60/0xb0 [ 917.969438][T13005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.969460][T13005] RIP: 0033:0x7f3e49e4e7ab [ 917.969483][T13005] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 917.969502][T13005] RSP: 002b:00007f3e480b3f60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 917.969526][T13005] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f3e49e4e7ab [ 917.969542][T13005] RDX: 00007f3e480b3fe0 RSI: 00000000c0085504 RDI: 0000000000000003 [ 917.969557][T13005] RBP: 00007f3e49ed1e19 R08: 0000000000000000 R09: 0000000000000000 [ 917.969572][T13005] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f3e480b3fe8 [ 917.969582][T13005] R13: 0000000000000000 R14: 00007f3e4a095fa0 R15: 00007ffca512f588 [ 917.969607][T13005] [ 918.556617][ T45] usb 4-1: USB disconnect, device number 8 [ 923.612246][ T59] Bluetooth: hci4: command 0x0406 tx timeout