last executing test programs: 15m37.983542372s ago: executing program 4 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 15m37.208854751s ago: executing program 4 (id=10): 15m36.510197253s ago: executing program 4 (id=13): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x4}) write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0x430f, 0x8) 15m35.329533367s ago: executing program 4 (id=16): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x200}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x20000010) 15m25.800590064s ago: executing program 3 (id=26): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x4}) write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0x430f, 0x8) 15m24.555446705s ago: executing program 3 (id=27): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x558, 0x3b0, 0x0, 0x94, 0x94, 0x94, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, 0x0, {[{{@ip={@remote, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xfffff38f, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {0xff}, {}, 0x0, 0x0, 0x3}, 0x0, 0x98, 0x1c0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x1, 0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) 15m23.826665109s ago: executing program 3 (id=30): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002140)={'gretap0\x00', &(0x7f0000002100)={'gretap0\x00', 0x0, 0x7, 0x0, 0x800, 0x74f, {{0x8, 0x4, 0x0, 0x3e, 0x20, 0x67, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1, {[@generic={0x7, 0x6, "d6f59071"}, @generic={0x94, 0x5, 'Vr)'}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000021c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80, '\x00', r1, r2, 0x4, 0xe}, 0x50) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2043, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r4, &(0x7f00000000c0)={0x2020}, 0x2020) openat(r4, &(0x7f0000000200)='./file0\x00', 0x8400, 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x560, 0x3b0, 0x0, 0x94, 0x94, 0x94, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, 0x0, {[{{@ip={@remote, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x94, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x24}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xcc, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xfffff38f, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x24}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {0xff}, {}, 0x0, 0x0, 0x3}, 0x0, 0x94, 0x1bc, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0xe0, 0x11c, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x1, 0x1}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x5bc) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x70bd2c, 0x25dfdbfb, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x4}, @TCA_CT_PARMS={0x18, 0x1, {0xfffffffc, 0xc60a, 0x3, 0x101, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x840) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790018000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) close(r6) 15m21.366766332s ago: executing program 3 (id=35): r0 = syz_io_uring_setup(0x174c, &(0x7f0000000000)={0x0, 0x2de1, 0x1, 0x0, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000a40)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 15m18.723905928s ago: executing program 32 (id=16): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x200}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x20000010) 15m18.195598488s ago: executing program 3 (id=39): r0 = openat$uinput(0xffffff9c, &(0x7f0000000240), 0x803, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x200003) 15m17.261064848s ago: executing program 3 (id=42): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0xb, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x6000) execveat(r6, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)={[&(0x7f00000001c0)='\x00', &(0x7f0000000300)='\x00']}, &(0x7f0000000500)={[&(0x7f0000000380)='ct\x00', &(0x7f00000003c0)='!/%-!\x00', &(0x7f0000000400)='%*{#\x00', &(0x7f0000000440)=':\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='ceph\x00']}, 0x100) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, 0xffffffffffffffff, 0x1e, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x40, 0x1}) io_uring_enter(r7, 0x1, 0xeed, 0x1, 0x0, 0x0) sysfs$2(0x2, 0x817fff, 0x0) socket$netlink(0x10, 0x3, 0x0) 14m59.611381435s ago: executing program 33 (id=42): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0xb, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x6000) execveat(r6, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)={[&(0x7f00000001c0)='\x00', &(0x7f0000000300)='\x00']}, &(0x7f0000000500)={[&(0x7f0000000380)='ct\x00', &(0x7f00000003c0)='!/%-!\x00', &(0x7f0000000400)='%*{#\x00', &(0x7f0000000440)=':\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='ceph\x00']}, 0x100) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, 0xffffffffffffffff, 0x1e, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x40, 0x1}) io_uring_enter(r7, 0x1, 0xeed, 0x1, 0x0, 0x0) sysfs$2(0x2, 0x817fff, 0x0) socket$netlink(0x10, 0x3, 0x0) 14m58.562674359s ago: executing program 2 (id=65): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x550, 0x3b0, 0x0, 0x94, 0x94, 0x94, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, 0x0, {[{{@ip={@remote, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xfffff38f, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {0xff}, {}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x1, 0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b0) 14m57.814607929s ago: executing program 2 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40420d5}, 0x80) 14m56.623903909s ago: executing program 2 (id=71): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0x80049370, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0d9}, 0x20000000) 14m48.377198198s ago: executing program 2 (id=77): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf250f00000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 14m48.049363239s ago: executing program 2 (id=78): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x20}}, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af83, &(0x7f0000000400)={0x1d}) 14m47.445579945s ago: executing program 2 (id=80): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_open_dev$radio(&(0x7f0000000180), 0x0, 0x2) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0xc02, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 14m30.764478281s ago: executing program 34 (id=80): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_open_dev$radio(&(0x7f0000000180), 0x0, 0x2) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0xc02, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 8m9.592728589s ago: executing program 1 (id=448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 8m9.056231691s ago: executing program 1 (id=449): syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) socket$kcm(0x2b, 0x1, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) 8m7.510950238s ago: executing program 1 (id=451): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x71096000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x10, 0x1403, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r6 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x2, 0x200003, 0x4001bf}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 8m5.599557299s ago: executing program 1 (id=454): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 8m2.166056506s ago: executing program 1 (id=458): syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) socket$kcm(0x2b, 0x1, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) 8m0.731571627s ago: executing program 1 (id=459): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x71096000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x10, 0x1403, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) 7m45.236247348s ago: executing program 35 (id=459): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x71096000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x10, 0x1403, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) 7m22.594564369s ago: executing program 0 (id=483): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) r4 = socket(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x42, 0x4, 0x254, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0x1c0, 0x1c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0xff000000, 0x0, 'veth0_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x6, 0x0, 0x58}, 0x0, 0x70, 0x94, 0x0, {0x100000000000000}}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0x94}, @REJECT={0x24}}, {{@ip={@broadcast, @remote, 0x0, 0xffff00, 'batadv0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x1231e48dc931f0a2}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x3}, {0x0, 0xfc}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2b0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ppoll(&(0x7f0000000080)=[{r3, 0x800}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x140, 0x0, 0x1}]}) 7m22.12516762s ago: executing program 0 (id=484): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x71096000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r5 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x2, 0x200003, 0x4001bf}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 7m20.360839177s ago: executing program 0 (id=485): socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0xa) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) openat$cgroup_int(r1, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1409, 0x1, 0x70bd23, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x40004}, 0x40) io_uring_setup(0x3cee, &(0x7f0000000080)={0x0, 0xe323, 0x10000, 0x1, 0x33b}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_FONT(r4, 0x4b60, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7m18.71239996s ago: executing program 0 (id=486): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2, 0x3}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000180)="3f3379e6458f7eb05de1d4cf15aeae057180d4e23c6b44", 0x17}], 0x2}}], 0x1, 0x64004884) 7m17.836532068s ago: executing program 0 (id=487): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 7m15.685787025s ago: executing program 0 (id=488): syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) socket$kcm(0x2b, 0x1, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) 6m59.811116152s ago: executing program 36 (id=488): syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) socket$kcm(0x2b, 0x1, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) 6m10.233610877s ago: executing program 5 (id=37): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x200040c4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 6m9.196059988s ago: executing program 5 (id=515): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000240)=[{r0, 0x1000}], 0x1, &(0x7f0000000280), &(0x7f00000002c0)={[0x5]}, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4}) close(r2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0xc0045520, &(0x7f00000000c0)=""/92) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r4, 0x4020940d, &(0x7f00000013c0)={@local, @rand_addr=' \x01\x00'}) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x0, [0x5, 0x0, 0x9476, 0x3, 0x9, 0x2]}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002540)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x47fff, 0x6) 5m53.734575932s ago: executing program 37 (id=515): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000240)=[{r0, 0x1000}], 0x1, &(0x7f0000000280), &(0x7f00000002c0)={[0x5]}, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4}) close(r2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0xc0045520, &(0x7f00000000c0)=""/92) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r4, 0x4020940d, &(0x7f00000013c0)={@local, @rand_addr=' \x01\x00'}) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x0, [0x5, 0x0, 0x9476, 0x3, 0x9, 0x2]}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002540)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x47fff, 0x6) 6.231387532s ago: executing program 8 (id=648): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/105, 0x69}], 0x1) 4.643505211s ago: executing program 8 (id=649): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54f}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x1ffffffffffffffc, 0xb3, 0x8d], 0x80a0000, 0x2012d3}) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="4004022b"], 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.586065192s ago: executing program 8 (id=650): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f400090006", 0x5}], 0x1}, 0x0) 2.112237429s ago: executing program 8 (id=651): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240400c4}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2001, 0x0) read(r5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000040)={0x0}, &(0x7f00000001c0)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x4, 0x7fffffff, 0x8125, 0x8, 0x50000, r3, 0xa17, '\x00', r7, r5, 0x0, 0x4, 0x1, 0x0, @void, @value, @value=r3}, 0x50) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0x8}, {0xfff1, 0xa}, {0x1, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) 653.142101ms ago: executing program 8 (id=652): socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="198f846a31"], 0x118) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 8 (id=653): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="40000000132001002bbd70"], 0x40}], 0x1, 0x0, 0x0, 0x8800}, 0x8880) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc9, 0x9, 0x68, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): port 2(bridge_slave_1) entered disabled state [ 832.772170][ T8663] bridge_slave_1: entered allmulticast mode [ 832.843152][ T8663] bridge_slave_1: entered promiscuous mode [ 833.908312][ T8663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.325379][ T8663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.641349][ T8697] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.649108][ T8697] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.711896][ T8697] bridge_slave_0: entered allmulticast mode [ 834.738625][ T8697] bridge_slave_0: entered promiscuous mode [ 835.193366][ T8697] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.238095][ T8697] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.271166][ T8697] bridge_slave_1: entered allmulticast mode [ 835.296921][ T8697] bridge_slave_1: entered promiscuous mode [ 835.382505][ T8663] team0: Port device team_slave_0 added [ 835.775654][ T8663] team0: Port device team_slave_1 added [ 835.950943][ T8708] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.958518][ T8708] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.050967][ T8708] bridge_slave_0: entered allmulticast mode [ 836.111020][ T8708] bridge_slave_0: entered promiscuous mode [ 836.256670][ T991] bridge_slave_1: left allmulticast mode [ 836.284351][ T991] bridge_slave_1: left promiscuous mode [ 836.306638][ T991] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.366726][ T991] bridge_slave_0: left allmulticast mode [ 836.391134][ T991] bridge_slave_0: left promiscuous mode [ 836.397771][ T991] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.485804][ T991] bridge_slave_1: left allmulticast mode [ 836.517100][ T991] bridge_slave_1: left promiscuous mode [ 836.544434][ T991] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.594619][ T991] bridge_slave_0: left allmulticast mode [ 836.610301][ T991] bridge_slave_0: left promiscuous mode [ 836.616868][ T991] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.002696][ T5094] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 837.169186][ T5094] usb 9-1: Using ep0 maxpacket: 8 [ 837.188498][ T5094] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 837.220478][ T5094] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 837.234517][ T5094] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 837.252533][ T5094] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 837.275066][ T5094] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 837.285842][ T5094] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.529589][ T991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.553996][ T5094] usb 9-1: GET_CAPABILITIES returned 73 [ 837.559920][ T5094] usbtmc 9-1:16.0: can't read capabilities [ 837.560802][ T991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.587987][ T991] bond0 (unregistering): Released all slaves [ 837.804148][ T5094] usb 9-1: USB disconnect, device number 7 [ 837.937447][ T991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.957016][ T991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.972788][ T991] bond0 (unregistering): Released all slaves [ 838.019308][ T8708] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.043330][ T8708] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.051383][ T8708] bridge_slave_1: entered allmulticast mode [ 838.067011][ T8708] bridge_slave_1: entered promiscuous mode [ 838.103954][ T8697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.148337][ T8663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.157448][ T8663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.211985][ T8663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.346734][ T8697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.502795][ T8663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.529850][ T8663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.567569][ T8663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.437916][ T8708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.493038][ T8708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.607730][ T8697] team0: Port device team_slave_0 added [ 839.754871][ T8697] team0: Port device team_slave_1 added [ 839.855256][ T8697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.863096][ T8697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.891915][ T8697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.911357][ T8697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.919089][ T8697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.949574][ T8697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.096450][ T8697] hsr_slave_0: entered promiscuous mode [ 840.184967][ T8697] hsr_slave_1: entered promiscuous mode [ 840.218210][ T8697] debugfs: 'hsr0' already exists in 'hsr' [ 840.251800][ T8697] Cannot create hsr debugfs directory [ 840.290910][ T8834] 9pnet_virtio: no channels available for device syz [ 840.604251][ T8838] netlink: 16 bytes leftover after parsing attributes in process `syz.8.537'. [ 840.979874][ T8708] team0: Port device team_slave_0 added [ 841.011846][ T8708] team0: Port device team_slave_1 added [ 841.390502][ T8708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.397686][ T8708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.458566][ T8708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.502036][ T8663] hsr_slave_0: entered promiscuous mode [ 841.515430][ T8663] hsr_slave_1: entered promiscuous mode [ 841.545097][ T8663] debugfs: 'hsr0' already exists in 'hsr' [ 841.552011][ T8663] Cannot create hsr debugfs directory [ 841.714331][ T8587] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 841.754725][ T8587] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 841.795007][ T8708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.815973][ T8708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.846965][ T8708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.174990][ T8587] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 842.445316][ T8587] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 843.063173][ T8708] hsr_slave_0: entered promiscuous mode [ 843.085437][ T8708] hsr_slave_1: entered promiscuous mode [ 843.105442][ T8708] debugfs: 'hsr0' already exists in 'hsr' [ 843.130473][ T8708] Cannot create hsr debugfs directory [ 843.186061][ T991] hsr_slave_0: left promiscuous mode [ 843.209253][ T991] hsr_slave_1: left promiscuous mode [ 843.223309][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 843.241179][ T991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.276977][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 843.290286][ T991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.337569][ T991] hsr_slave_0: left promiscuous mode [ 843.350273][ T991] hsr_slave_1: left promiscuous mode [ 843.358550][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 843.393172][ T991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.413562][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 843.433337][ T991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.531130][ T991] veth1_macvtap: left promiscuous mode [ 843.547584][ T991] veth0_macvtap: left promiscuous mode [ 843.568488][ T991] veth1_vlan: left promiscuous mode [ 843.574499][ T991] veth0_vlan: left promiscuous mode [ 843.586185][ T991] veth1_macvtap: left promiscuous mode [ 843.600368][ T991] veth0_macvtap: left promiscuous mode [ 843.606830][ T991] veth1_vlan: left promiscuous mode [ 843.612659][ T991] veth0_vlan: left promiscuous mode [ 845.556850][ T991] team0 (unregistering): Port device team_slave_1 removed [ 845.626932][ T991] team0 (unregistering): Port device team_slave_0 removed [ 846.489132][ T991] team0 (unregistering): Port device team_slave_1 removed [ 846.545318][ T991] team0 (unregistering): Port device team_slave_0 removed [ 848.245626][ T8709] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 848.261366][ T8709] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 848.300730][ T8709] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 848.331893][ T8709] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 848.346543][ T8709] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 850.380373][ T8709] Bluetooth: hci0: command tx timeout [ 850.554958][ T8893] netlink: 16 bytes leftover after parsing attributes in process `syz.8.544'. [ 852.471066][ T8709] Bluetooth: hci0: command tx timeout [ 852.743160][ T991] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.936045][ T991] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.159464][ T991] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.233770][ T8872] chnl_net:caif_netlink_parms(): no params data found [ 853.417856][ T8697] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 853.544542][ T991] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.658711][ T8697] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 853.727903][ T8697] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 853.887635][ T8697] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 854.513094][ T991] bridge_slave_1: left allmulticast mode [ 854.540782][ T8709] Bluetooth: hci0: command tx timeout [ 854.555068][ T991] bridge_slave_1: left promiscuous mode [ 854.586387][ T991] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.600987][ T991] bridge_slave_0: left allmulticast mode [ 854.606891][ T991] bridge_slave_0: left promiscuous mode [ 854.622320][ T991] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.669139][ T991] bridge_slave_1: left allmulticast mode [ 854.676685][ T991] bridge_slave_1: left promiscuous mode [ 854.687886][ T991] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.711615][ T991] bridge_slave_0: left allmulticast mode [ 854.717503][ T991] bridge_slave_0: left promiscuous mode [ 854.741889][ T991] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.996105][ T991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 856.054033][ T991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 856.073765][ T991] bond0 (unregistering): Released all slaves [ 856.620866][ T8709] Bluetooth: hci0: command tx timeout [ 856.662120][ T991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 856.736652][ T991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 856.772714][ T991] bond0 (unregistering): Released all slaves [ 858.598353][ T8872] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.606487][ T8872] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.614594][ T8872] bridge_slave_0: entered allmulticast mode [ 858.624554][ T8872] bridge_slave_0: entered promiscuous mode [ 859.637087][ T8872] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.660774][ T8872] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.675833][ T8872] bridge_slave_1: entered allmulticast mode [ 859.686427][ T8872] bridge_slave_1: entered promiscuous mode [ 859.749969][ T991] hsr_slave_0: left promiscuous mode [ 859.778994][ T991] hsr_slave_1: left promiscuous mode [ 859.803794][ T991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 859.829816][ T991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.906627][ T991] hsr_slave_0: left promiscuous mode [ 859.930488][ T991] hsr_slave_1: left promiscuous mode [ 859.948850][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 859.981183][ T991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 859.993885][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.011979][ T991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.075881][ T991] veth1_macvtap: left promiscuous mode [ 860.091413][ T991] veth0_macvtap: left promiscuous mode [ 860.097380][ T991] veth1_vlan: left promiscuous mode [ 860.120894][ T991] veth0_vlan: left promiscuous mode [ 861.242322][ T991] team0 (unregistering): Port device team_slave_1 removed [ 861.284884][ T991] team0 (unregistering): Port device team_slave_0 removed [ 862.194865][ T991] team0 (unregistering): Port device team_slave_1 removed [ 862.227069][ T991] team0 (unregistering): Port device team_slave_0 removed [ 863.784383][ T8872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.886942][ T8872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.405345][ T8872] team0: Port device team_slave_0 added [ 864.537004][ T8872] team0: Port device team_slave_1 added [ 864.632964][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 864.644277][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 864.660487][ T5771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 864.675100][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 864.706415][ T5771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 865.145514][ T8872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.190447][ T8872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.285563][ T8872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.321102][ T8872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.328286][ T8872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.410194][ T8872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.476528][ T8979] netlink: 16 bytes leftover after parsing attributes in process `syz.8.551'. [ 865.629818][ T8697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.084790][ T8872] hsr_slave_0: entered promiscuous mode [ 866.096548][ T8872] hsr_slave_1: entered promiscuous mode [ 866.235866][ T8708] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 866.294138][ T8708] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 866.458474][ T8708] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 866.513287][ T8708] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 866.559020][ T8697] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.780526][ T5771] Bluetooth: hci3: command tx timeout [ 866.907652][ T6061] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.915339][ T6061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.243686][ T8989] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 867.376096][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.383838][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.310347][ T8975] chnl_net:caif_netlink_parms(): no params data found [ 868.860264][ T5771] Bluetooth: hci3: command tx timeout [ 869.848777][ T8709] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 869.860453][ T8709] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 869.872843][ T8709] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 869.906986][ T8709] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 869.936116][ T8709] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 870.393584][ T9011] netlink: 16 bytes leftover after parsing attributes in process `syz.8.558'. [ 870.894993][ T6061] bridge_slave_1: left allmulticast mode [ 870.920293][ T6061] bridge_slave_1: left promiscuous mode [ 870.979348][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.031132][ T6061] bridge_slave_0: left allmulticast mode [ 871.047707][ T6061] bridge_slave_0: left promiscuous mode [ 871.085748][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.632507][ T8709] Bluetooth: hci3: command tx timeout [ 871.662733][ T6061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 871.848637][ T6061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 871.987523][ T6061] bond0 (unregistering): Released all slaves [ 872.061242][ T8709] Bluetooth: hci4: command tx timeout [ 872.276983][ T8708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.372013][ T8708] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.578960][ T8708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 872.596952][ T8708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 872.667887][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.675691][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.757875][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.765562][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.367835][ T8975] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.379937][ T8975] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.394941][ T8975] bridge_slave_0: entered allmulticast mode [ 873.419004][ T8975] bridge_slave_0: entered promiscuous mode [ 873.496754][ T6061] hsr_slave_0: left promiscuous mode [ 873.509541][ T6061] hsr_slave_1: left promiscuous mode [ 873.533583][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 873.549037][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.663287][ T8709] Bluetooth: hci3: command tx timeout [ 874.150450][ T8709] Bluetooth: hci4: command tx timeout [ 874.485327][ T6061] team0 (unregistering): Port device team_slave_1 removed [ 874.534807][ T6061] team0 (unregistering): Port device team_slave_0 removed [ 875.390603][ T8975] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.398362][ T8975] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.465729][ T8975] bridge_slave_1: entered allmulticast mode [ 875.526013][ T8975] bridge_slave_1: entered promiscuous mode [ 875.996829][ T8872] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 876.075392][ T8872] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 876.220311][ T8709] Bluetooth: hci4: command tx timeout [ 876.248673][ T8872] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 876.340687][ T8975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.478428][ T8872] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 876.565167][ T8975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.088524][ T8975] team0: Port device team_slave_0 added [ 877.239766][ T8975] team0: Port device team_slave_1 added [ 877.799088][ T8975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.817302][ T8975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.852377][ T8975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.888132][ T8708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.045253][ T8975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.070880][ T8975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.175349][ T8975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.310532][ T8709] Bluetooth: hci4: command tx timeout [ 879.767648][ T8975] hsr_slave_0: entered promiscuous mode [ 879.808541][ T8975] hsr_slave_1: entered promiscuous mode [ 879.845409][ T8975] debugfs: 'hsr0' already exists in 'hsr' [ 879.860291][ T8975] Cannot create hsr debugfs directory [ 879.891731][ T9008] chnl_net:caif_netlink_parms(): no params data found [ 879.999701][ T6061] bridge_slave_1: left allmulticast mode [ 880.020215][ T6061] bridge_slave_1: left promiscuous mode [ 880.026945][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.079403][ T6061] bridge_slave_0: left allmulticast mode [ 880.109512][ T6061] bridge_slave_0: left promiscuous mode [ 880.126204][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.284471][ T5771] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 881.294585][ T5771] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 881.314021][ T5771] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 881.328951][ T5771] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 881.348541][ T5771] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 881.393753][ T6061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.411266][ T6061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.427266][ T6061] bond0 (unregistering): Released all slaves [ 883.425630][ T5771] Bluetooth: hci5: command tx timeout [ 883.483644][ T6061] hsr_slave_0: left promiscuous mode [ 883.498019][ T6061] hsr_slave_1: left promiscuous mode [ 883.517955][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.531226][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 884.350704][ T6061] team0 (unregistering): Port device team_slave_1 removed [ 884.413818][ T6061] team0 (unregistering): Port device team_slave_0 removed [ 885.195004][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 885.207026][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 885.508552][ T5771] Bluetooth: hci5: command tx timeout [ 886.297045][ T8975] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 886.349027][ T8975] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 886.387927][ T8975] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 886.427864][ T8975] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 887.353554][ T8872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 887.580447][ T5771] Bluetooth: hci5: command tx timeout [ 887.886305][ T9008] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.896032][ T9008] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.908180][ T9008] bridge_slave_0: entered allmulticast mode [ 887.921662][ T9008] bridge_slave_0: entered promiscuous mode [ 888.153293][ T9008] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.162149][ T9008] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.169947][ T9008] bridge_slave_1: entered allmulticast mode [ 888.191150][ T9008] bridge_slave_1: entered promiscuous mode [ 888.275169][ T8872] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.478522][ T9008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.649062][ T9008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.880309][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.888080][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.077031][ T9008] team0: Port device team_slave_0 added [ 889.135442][ T9008] team0: Port device team_slave_1 added [ 889.333932][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.341769][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.377362][ T9036] chnl_net:caif_netlink_parms(): no params data found [ 889.489527][ T9008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.497198][ T9008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.529859][ T9008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.553854][ T9008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.561447][ T9008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.600390][ T9008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.801015][ T5771] Bluetooth: hci5: command tx timeout [ 890.334334][ T9008] hsr_slave_0: entered promiscuous mode [ 890.345679][ T9008] hsr_slave_1: entered promiscuous mode [ 890.357138][ T9008] debugfs: 'hsr0' already exists in 'hsr' [ 890.363524][ T9008] Cannot create hsr debugfs directory [ 890.750288][ T6061] bridge_slave_1: left allmulticast mode [ 890.756238][ T6061] bridge_slave_1: left promiscuous mode [ 890.807410][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.840726][ T6061] bridge_slave_0: left allmulticast mode [ 890.846899][ T6061] bridge_slave_0: left promiscuous mode [ 890.869829][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.908223][ T9066] netlink: 16 bytes leftover after parsing attributes in process `syz.8.565'. [ 891.537355][ T6061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.568091][ T6061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.597715][ T6061] bond0 (unregistering): Released all slaves [ 892.084040][ T6061] hsr_slave_0: left promiscuous mode [ 892.098120][ T6061] hsr_slave_1: left promiscuous mode [ 892.105846][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.117299][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.545876][ T6061] team0 (unregistering): Port device team_slave_1 removed [ 892.577803][ T6061] team0 (unregistering): Port device team_slave_0 removed [ 892.896861][ T9036] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.082788][ T9036] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.091071][ T9036] bridge_slave_0: entered allmulticast mode [ 893.122100][ T9036] bridge_slave_0: entered promiscuous mode [ 893.177877][ T8975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.345730][ T9036] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.357884][ T9036] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.367994][ T9036] bridge_slave_1: entered allmulticast mode [ 893.381880][ T9036] bridge_slave_1: entered promiscuous mode [ 893.478346][ T8975] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.047751][ T9036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.085729][ T9036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.428748][ T9076] overlayfs: failed to resolve './file1': -2 [ 894.964811][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.972550][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.093667][ T9036] team0: Port device team_slave_0 added [ 895.225975][ T9036] team0: Port device team_slave_1 added [ 895.246136][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.253908][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.574227][ T9036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.583900][ T9036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.614229][ T9036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.718702][ T9036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.731518][ T9036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.765998][ T9036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.203741][ T8872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.527798][ T9036] hsr_slave_0: entered promiscuous mode [ 896.569099][ T9036] hsr_slave_1: entered promiscuous mode [ 896.596111][ T9036] debugfs: 'hsr0' already exists in 'hsr' [ 896.630364][ T9036] Cannot create hsr debugfs directory [ 897.865169][ T9008] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 898.202104][ T9008] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 898.521113][ T9008] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 898.849677][ T9008] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 900.687065][ T8872] veth0_vlan: entered promiscuous mode [ 900.960734][ T8975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.088980][ T8872] veth1_vlan: entered promiscuous mode [ 901.306931][ T9036] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 901.387107][ T9036] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 901.513393][ T9036] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 901.639065][ T9036] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 902.228101][ T8872] veth0_macvtap: entered promiscuous mode [ 902.401283][ T8872] veth1_macvtap: entered promiscuous mode [ 902.495894][ T9008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 902.831988][ T9008] 8021q: adding VLAN 0 to HW filter on device team0 [ 902.937970][ T6061] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.945688][ T6061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.997235][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.004983][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.056726][ T8872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.184298][ T8872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.663611][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.696323][ T82] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.822626][ T82] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.878404][ T82] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.706713][ T9036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 905.052790][ T9036] 8021q: adding VLAN 0 to HW filter on device team0 [ 905.106775][ T8975] veth0_vlan: entered promiscuous mode [ 905.208573][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.216196][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 905.387019][ T8975] veth1_vlan: entered promiscuous mode [ 905.429240][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.436942][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 905.795212][ T9122] netlink: 16 bytes leftover after parsing attributes in process `syz.8.572'. [ 906.435466][ T8975] veth0_macvtap: entered promiscuous mode [ 906.572797][ T8975] veth1_macvtap: entered promiscuous mode [ 906.904568][ T8975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 907.207957][ T8975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 907.390871][ T9008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.829832][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.911845][ T991] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.952888][ T991] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.052929][ T9139] overlayfs: failed to resolve './file1': -2 [ 908.286708][ T6493] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.090787][ T8709] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 912.123821][ T8709] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 912.140721][ T8709] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 912.163679][ T8709] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 912.210223][ T8709] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 912.892589][ T9036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.382604][ T8709] Bluetooth: hci1: command tx timeout [ 916.477772][ T8709] Bluetooth: hci1: command tx timeout [ 917.284265][ T9008] veth0_vlan: entered promiscuous mode [ 917.490341][ T5094] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 917.595184][ T9156] chnl_net:caif_netlink_parms(): no params data found [ 917.657290][ T9008] veth1_vlan: entered promiscuous mode [ 917.719612][ T5094] usb 9-1: Using ep0 maxpacket: 32 [ 917.735908][ T5094] usb 9-1: config 0 has an invalid interface number: 61 but max is 1 [ 917.759566][ T5094] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 917.772150][ T5094] usb 9-1: config 0 has no interface number 0 [ 917.788161][ T5094] usb 9-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 917.816851][ T6493] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.832787][ T5094] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.851418][ T5094] usb 9-1: Product: syz [ 917.855942][ T5094] usb 9-1: Manufacturer: syz [ 917.880513][ T5094] usb 9-1: SerialNumber: syz [ 917.906258][ T5094] usb 9-1: config 0 descriptor?? [ 918.062511][ T5094] viperboard 9-1:0.61: version 0.00 found at bus 009 address 008 [ 918.127460][ T6493] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.177268][ T5094] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 918.188493][ T5094] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 918.410884][ T9196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.459859][ T9196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.536424][ T5828] usb 9-1: USB disconnect, device number 8 [ 918.543105][ T8709] Bluetooth: hci1: command tx timeout [ 918.671536][ T6493] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.007413][ T9036] veth0_vlan: entered promiscuous mode [ 919.074200][ T6493] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.226467][ T9008] veth0_macvtap: entered promiscuous mode [ 919.339460][ T9008] veth1_macvtap: entered promiscuous mode [ 919.418309][ T9036] veth1_vlan: entered promiscuous mode [ 920.531212][ T9008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 920.617318][ T9156] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.626304][ T8709] Bluetooth: hci1: command tx timeout [ 920.653643][ T9156] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.675062][ T9156] bridge_slave_0: entered allmulticast mode [ 920.698106][ T9156] bridge_slave_0: entered promiscuous mode [ 920.716555][ T9156] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.836701][ T9156] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.902038][ T9156] bridge_slave_1: entered allmulticast mode [ 920.950761][ T9156] bridge_slave_1: entered promiscuous mode [ 921.158502][ T6493] bridge_slave_1: left allmulticast mode [ 921.221988][ T6493] bridge_slave_1: left promiscuous mode [ 921.228658][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.256164][ T6493] bridge_slave_0: left allmulticast mode [ 921.267829][ T6493] bridge_slave_0: left promiscuous mode [ 921.278689][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.011236][ T6493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.062092][ T6493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.089082][ T6493] bond0 (unregistering): Released all slaves [ 922.409120][ T9008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 922.448528][ T9239] netlink: 16 bytes leftover after parsing attributes in process `syz.8.579'. [ 922.573781][ T9156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.625287][ T9156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.756937][ T6493] hsr_slave_0: left promiscuous mode [ 922.814042][ T6493] hsr_slave_1: left promiscuous mode [ 922.832960][ T6493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 922.850851][ T6493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.874015][ T6493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 922.895551][ T6493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.966174][ T6493] veth1_macvtap: left promiscuous mode [ 922.982009][ T6493] veth0_macvtap: left promiscuous mode [ 922.988040][ T6493] veth1_vlan: left promiscuous mode [ 923.005857][ T6493] veth0_vlan: left promiscuous mode [ 924.138613][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 924.155618][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 924.168028][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 924.284877][ T9252] overlayfs: failed to resolve './file1': -2 [ 924.311912][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 924.356322][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 925.256646][ T6493] team0 (unregistering): Port device team_slave_1 removed [ 925.299309][ T6493] team0 (unregistering): Port device team_slave_0 removed [ 926.111697][ T82] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.121719][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.129818][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.196693][ T6492] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.318301][ T9036] veth0_macvtap: entered promiscuous mode [ 926.540483][ T5771] Bluetooth: hci0: command tx timeout [ 926.578562][ T6492] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.649567][ T6492] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.842418][ T9156] team0: Port device team_slave_0 added [ 926.973789][ T9036] veth1_macvtap: entered promiscuous mode [ 927.189898][ T9156] team0: Port device team_slave_1 added [ 927.952821][ T9156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.995913][ T9156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.115249][ T9156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.245643][ T9036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.507127][ T9156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.546578][ T9156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.644644][ T5771] Bluetooth: hci0: command tx timeout [ 928.730769][ T9156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.008775][ T9036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.967760][ T9156] hsr_slave_0: entered promiscuous mode [ 930.085056][ T9156] hsr_slave_1: entered promiscuous mode [ 930.403548][ T4443] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.522629][ T4443] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.723502][ T5771] Bluetooth: hci0: command tx timeout [ 931.255285][ T4443] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.372121][ T6492] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.891776][ T5771] Bluetooth: hci0: command tx timeout [ 933.826586][ T82] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.297012][ T82] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.714065][ T82] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.049102][ T8709] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 935.062715][ T8709] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 935.073598][ T8709] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 935.108816][ T8709] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 935.139145][ T8709] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 935.546060][ T82] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.260476][ T8709] Bluetooth: hci3: command tx timeout [ 937.725991][ T9249] chnl_net:caif_netlink_parms(): no params data found [ 939.160614][ T82] bridge_slave_1: left allmulticast mode [ 939.166504][ T82] bridge_slave_1: left promiscuous mode [ 939.229620][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.314453][ T82] bridge_slave_0: left allmulticast mode [ 939.340408][ T8709] Bluetooth: hci3: command tx timeout [ 939.379720][ T82] bridge_slave_0: left promiscuous mode [ 939.416088][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.713639][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.749668][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.777908][ T82] bond0 (unregistering): Released all slaves [ 941.438164][ T8709] Bluetooth: hci3: command tx timeout [ 941.513006][ T7647] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 941.655281][ T82] hsr_slave_0: left promiscuous mode [ 941.685546][ T82] hsr_slave_1: left promiscuous mode [ 941.703015][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.732588][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.740478][ T7647] usb 9-1: Using ep0 maxpacket: 32 [ 941.757224][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.790351][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 941.804337][ T7647] usb 9-1: config 0 has an invalid interface number: 61 but max is 1 [ 941.835156][ T7647] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 941.860320][ T7647] usb 9-1: config 0 has no interface number 0 [ 941.887310][ T7647] usb 9-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 941.909091][ T7647] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.912846][ T82] veth1_macvtap: left promiscuous mode [ 941.954836][ T82] veth0_macvtap: left promiscuous mode [ 941.960858][ T7647] usb 9-1: Product: syz [ 941.965261][ T7647] usb 9-1: Manufacturer: syz [ 941.980628][ T82] veth1_vlan: left promiscuous mode [ 941.986272][ T82] veth0_vlan: left promiscuous mode [ 941.989114][ T7647] usb 9-1: SerialNumber: syz [ 942.013378][ T7647] usb 9-1: config 0 descriptor?? [ 942.151747][ T7647] viperboard 9-1:0.61: version 0.00 found at bus 009 address 009 [ 942.269263][ T7647] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 942.290262][ T7647] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 942.511324][ T9313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.525281][ T5771] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 942.538293][ T5771] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 942.558940][ T5771] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 942.592104][ T5771] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 942.602871][ T9313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.622397][ T5771] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 942.724841][ T7647] usb 9-1: USB disconnect, device number 9 [ 943.506193][ T8709] Bluetooth: hci3: command tx timeout [ 943.891540][ T7473] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 944.063493][ T82] team0 (unregistering): Port device team_slave_1 removed [ 944.074601][ T7473] usb 9-1: Using ep0 maxpacket: 8 [ 944.097713][ T7473] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.135023][ T7473] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.172846][ T7473] usb 9-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 944.184436][ T82] team0 (unregistering): Port device team_slave_0 removed [ 944.198943][ T7473] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.219079][ T7473] usb 9-1: config 0 descriptor?? [ 944.737686][ T7473] cherry 0003:046A:0027.0001: unknown main item tag 0x2 [ 944.759907][ T7473] cherry 0003:046A:0027.0001: unknown main item tag 0x0 [ 944.787030][ T8709] Bluetooth: hci4: command tx timeout [ 944.803201][ T7473] cherry 0003:046A:0027.0001: unknown main item tag 0x0 [ 944.811026][ T7473] cherry 0003:046A:0027.0001: unknown main item tag 0x0 [ 944.818289][ T7473] cherry 0003:046A:0027.0001: item fetching failed at offset 18/69 [ 944.833188][ T7473] cherry 0003:046A:0027.0001: probe with driver cherry failed with error -22 [ 944.956521][ T7473] usb 9-1: USB disconnect, device number 10 [ 945.170866][ T9249] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.188448][ T9249] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.197903][ T9249] bridge_slave_0: entered allmulticast mode [ 945.208195][ T9249] bridge_slave_0: entered promiscuous mode [ 945.280786][ T9249] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.294307][ T9249] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.304177][ T9249] bridge_slave_1: entered allmulticast mode [ 945.315484][ T9249] bridge_slave_1: entered promiscuous mode [ 945.501474][ T9249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.773709][ T9249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.933249][ T9343] netlink: 'syz.8.585': attribute type 12 has an invalid length. [ 945.960495][ T9343] netlink: 'syz.8.585': attribute type 29 has an invalid length. [ 945.968452][ T9343] netlink: 'syz.8.585': attribute type 1 has an invalid length. [ 946.004625][ T9343] netlink: 'syz.8.585': attribute type 37 has an invalid length. [ 946.051206][ T9343] netlink: 80 bytes leftover after parsing attributes in process `syz.8.585'. [ 946.132771][ T9156] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 946.294813][ T82] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.436950][ T9249] team0: Port device team_slave_0 added [ 946.477236][ T9249] team0: Port device team_slave_1 added [ 946.490434][ T9156] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 946.576814][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 946.583737][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 946.765051][ T82] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.811156][ T9283] chnl_net:caif_netlink_parms(): no params data found [ 946.866373][ T8709] Bluetooth: hci4: command tx timeout [ 947.091439][ T9156] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 948.259407][ T82] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.352208][ T9249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.369256][ T9249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.423592][ T9249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.468369][ T9249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.487904][ T9249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.540552][ T9249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.582131][ T9156] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 948.950371][ T8709] Bluetooth: hci4: command tx timeout [ 949.112066][ T82] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.707227][ T9249] hsr_slave_0: entered promiscuous mode [ 949.771578][ T9249] hsr_slave_1: entered promiscuous mode [ 949.814240][ T9249] debugfs: 'hsr0' already exists in 'hsr' [ 949.830284][ T9249] Cannot create hsr debugfs directory [ 951.022771][ T8709] Bluetooth: hci4: command tx timeout [ 951.513338][ T82] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.645667][ T9283] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.664715][ T9283] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.677705][ T9283] bridge_slave_0: entered allmulticast mode [ 951.695426][ T9283] bridge_slave_0: entered promiscuous mode [ 951.742318][ T82] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.854034][ T9283] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.862619][ T9283] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.877060][ T9283] bridge_slave_1: entered allmulticast mode [ 951.887622][ T9283] bridge_slave_1: entered promiscuous mode [ 951.954787][ T82] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.158471][ T82] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.498229][ T9283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.650547][ T9283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.795632][ T9320] chnl_net:caif_netlink_parms(): no params data found [ 953.588019][ T9283] team0: Port device team_slave_0 added [ 953.652564][ T9283] team0: Port device team_slave_1 added [ 954.569445][ T9283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.615749][ T9283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.720329][ T9283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.760508][ T82] bridge_slave_1: left allmulticast mode [ 954.766414][ T82] bridge_slave_1: left promiscuous mode [ 954.806966][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.836441][ T82] bridge_slave_0: left allmulticast mode [ 954.850337][ T82] bridge_slave_0: left promiscuous mode [ 954.857074][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.923705][ T82] bridge_slave_1: left allmulticast mode [ 954.929612][ T82] bridge_slave_1: left promiscuous mode [ 954.975023][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.012771][ T82] bridge_slave_0: left allmulticast mode [ 955.018685][ T82] bridge_slave_0: left promiscuous mode [ 955.056493][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.453615][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 956.521525][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 956.571466][ T82] bond0 (unregistering): Released all slaves [ 957.192351][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 957.255488][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 957.306626][ T82] bond0 (unregistering): Released all slaves [ 957.543207][ T9283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.616724][ T9283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.754487][ T9283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.329192][ T82] hsr_slave_0: left promiscuous mode [ 958.385541][ T82] hsr_slave_1: left promiscuous mode [ 958.407157][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 958.439413][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 958.467601][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 958.500327][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 958.563867][ T82] hsr_slave_0: left promiscuous mode [ 958.574648][ T82] hsr_slave_1: left promiscuous mode [ 958.583897][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 958.613409][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 958.625353][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 958.639885][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 958.692306][ T82] veth1_macvtap: left promiscuous mode [ 958.698483][ T82] veth0_macvtap: left promiscuous mode [ 958.709060][ T82] veth1_vlan: left promiscuous mode [ 958.732748][ T82] veth0_vlan: left promiscuous mode [ 958.746709][ T82] veth1_macvtap: left promiscuous mode [ 958.753274][ T82] veth0_macvtap: left promiscuous mode [ 958.759776][ T82] veth1_vlan: left promiscuous mode [ 958.767573][ T82] veth0_vlan: left promiscuous mode [ 960.589491][ T82] team0 (unregistering): Port device team_slave_1 removed [ 960.679013][ T82] team0 (unregistering): Port device team_slave_0 removed [ 961.808943][ T82] team0 (unregistering): Port device team_slave_1 removed [ 961.849233][ T82] team0 (unregistering): Port device team_slave_0 removed [ 963.097833][ T9283] hsr_slave_0: entered promiscuous mode [ 963.147336][ T9283] hsr_slave_1: entered promiscuous mode [ 963.204315][ T9283] debugfs: 'hsr0' already exists in 'hsr' [ 963.253227][ T9283] Cannot create hsr debugfs directory [ 963.291671][ T9320] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.299515][ T9320] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.348146][ T9320] bridge_slave_0: entered allmulticast mode [ 963.369732][ T9320] bridge_slave_0: entered promiscuous mode [ 963.445915][ T9320] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.470786][ T9320] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.478818][ T9320] bridge_slave_1: entered allmulticast mode [ 963.518922][ T9320] bridge_slave_1: entered promiscuous mode [ 964.298966][ T9320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.437192][ T9156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.500553][ T9249] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 964.537406][ T9249] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 964.617677][ T9320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.717220][ T9249] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 964.880611][ T9249] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 964.995117][ T9320] team0: Port device team_slave_0 added [ 965.194948][ T9320] team0: Port device team_slave_1 added [ 965.609036][ T9156] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.627761][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.649707][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.689667][ T9320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.827511][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.848009][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.881925][ T9320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.049351][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.057020][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.158942][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.166678][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.414537][ T9320] hsr_slave_0: entered promiscuous mode [ 966.427803][ T9320] hsr_slave_1: entered promiscuous mode [ 966.448329][ T9320] debugfs: 'hsr0' already exists in 'hsr' [ 966.457515][ T9320] Cannot create hsr debugfs directory [ 967.721813][ T9283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 967.783808][ T9283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 968.092785][ T9283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 968.288672][ T9283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 969.551681][ T9249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.008875][ T9249] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.513405][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.521174][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.789536][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.797355][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.290756][ T9320] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 971.465397][ T9320] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 971.866486][ T9320] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 972.156496][ T9320] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 973.637644][ T5771] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 973.652788][ T5771] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 973.663060][ T5771] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 973.682296][ T5771] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 973.733351][ T5771] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 974.980822][ T9283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 975.871880][ T9283] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.908293][ T5771] Bluetooth: hci5: command tx timeout [ 976.243632][ T6492] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.251890][ T6492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.466209][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.473920][ T6492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.984486][ T5771] Bluetooth: hci5: command tx timeout [ 978.041732][ T9249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.301831][ T9320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.601401][ T9465] chnl_net:caif_netlink_parms(): no params data found [ 979.888146][ T9320] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.081557][ T5771] Bluetooth: hci5: command tx timeout [ 981.260062][ T6492] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.267677][ T6492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.497529][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.505192][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.073171][ T6493] bridge_slave_1: left allmulticast mode [ 982.079181][ T6493] bridge_slave_1: left promiscuous mode [ 982.171486][ T5771] Bluetooth: hci5: command tx timeout [ 982.182157][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.401299][ T6493] bridge_slave_0: left allmulticast mode [ 982.407207][ T6493] bridge_slave_0: left promiscuous mode [ 982.501309][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.511322][ T6493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 983.657299][ T6493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 983.746871][ T6493] bond0 (unregistering): Released all slaves [ 984.750317][ T6493] hsr_slave_0: left promiscuous mode [ 984.852258][ T6493] hsr_slave_1: left promiscuous mode [ 984.905885][ T6493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.977230][ T6493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 986.455357][ T8709] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 986.487407][ T8709] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 986.489512][ T8709] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 986.517639][ T8709] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 986.522289][ T8709] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 986.978572][ T6493] team0 (unregistering): Port device team_slave_1 removed [ 987.027214][ T6493] team0 (unregistering): Port device team_slave_0 removed [ 988.318342][ T9465] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.318919][ T9465] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.319819][ T9465] bridge_slave_0: entered allmulticast mode [ 988.342036][ T9465] bridge_slave_0: entered promiscuous mode [ 988.414625][ T9283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.433416][ T9465] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.434288][ T9465] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.438137][ T9465] bridge_slave_1: entered allmulticast mode [ 988.448448][ T9465] bridge_slave_1: entered promiscuous mode [ 988.620358][ T5771] Bluetooth: hci1: command tx timeout [ 988.817306][ T9465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 989.012411][ T9465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.395275][ T9465] team0: Port device team_slave_0 added [ 989.684713][ T9465] team0: Port device team_slave_1 added [ 990.377667][ T9465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 990.397122][ T9465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.481871][ T9465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 990.599712][ T9465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 990.609333][ T9465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.619647][ T9547] ufs: You didn't specify the type of your ufs filesystem [ 990.619647][ T9547] [ 990.619647][ T9547] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 990.619647][ T9547] [ 990.619647][ T9547] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 990.658199][ T9465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 990.667463][ T9547] ufs: ufstype=old is supported read-only [ 990.718232][ T5771] Bluetooth: hci1: command tx timeout [ 992.081832][ T8709] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 992.092131][ T8709] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 992.102160][ T8709] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 992.122471][ T8709] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 992.139370][ T8709] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 992.207036][ T9465] hsr_slave_0: entered promiscuous mode [ 992.272455][ T9465] hsr_slave_1: entered promiscuous mode [ 992.434515][ T9320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.800399][ T8709] Bluetooth: hci1: command tx timeout [ 994.196818][ T9568] syz.8.599 (9568): drop_caches: 2 [ 994.251445][ T8709] Bluetooth: hci0: command tx timeout [ 994.863131][ T8709] Bluetooth: hci1: command tx timeout [ 995.836477][ T991] bridge_slave_1: left allmulticast mode [ 995.874258][ T991] bridge_slave_1: left promiscuous mode [ 995.894739][ T991] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.945506][ T991] bridge_slave_0: left allmulticast mode [ 995.970295][ T991] bridge_slave_0: left promiscuous mode [ 995.977028][ T991] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.320329][ T8709] Bluetooth: hci0: command tx timeout [ 996.906924][ T991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.943496][ T991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.966412][ T991] bond0 (unregistering): Released all slaves [ 996.983530][ T9524] chnl_net:caif_netlink_parms(): no params data found [ 997.836497][ T991] hsr_slave_0: left promiscuous mode [ 997.874748][ T991] hsr_slave_1: left promiscuous mode [ 997.905487][ T991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 997.943018][ T991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 998.388873][ T8709] Bluetooth: hci0: command tx timeout [ 998.868604][ T991] team0 (unregistering): Port device team_slave_1 removed [ 998.919870][ T991] team0 (unregistering): Port device team_slave_0 removed [ 1000.461844][ T8709] Bluetooth: hci0: command tx timeout [ 1001.780131][ T9524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.798510][ T9524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.808999][ T9524] bridge_slave_0: entered allmulticast mode [ 1001.825199][ T9524] bridge_slave_0: entered promiscuous mode [ 1002.030759][ T9524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.066179][ T9524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.090708][ T9524] bridge_slave_1: entered allmulticast mode [ 1002.107987][ T9524] bridge_slave_1: entered promiscuous mode [ 1002.706056][ T9524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.089682][ T9524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1003.284372][ T5771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1003.301678][ T5771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1003.313016][ T5771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1003.338826][ T5771] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1003.357198][ T5771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1004.166979][ T9524] team0: Port device team_slave_0 added [ 1004.318286][ T991] bridge_slave_1: left allmulticast mode [ 1005.255935][ T991] bridge_slave_1: left promiscuous mode [ 1005.266330][ T991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.326986][ T991] bridge_slave_0: left allmulticast mode [ 1005.351775][ T991] bridge_slave_0: left promiscuous mode [ 1005.360214][ T991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.420413][ T8709] Bluetooth: hci3: command tx timeout [ 1006.017361][ T991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1006.048477][ T991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1006.068653][ T991] bond0 (unregistering): Released all slaves [ 1006.128043][ T9524] team0: Port device team_slave_1 added [ 1006.248691][ T9559] chnl_net:caif_netlink_parms(): no params data found [ 1006.309592][ T9465] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1006.772546][ T9465] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1006.906932][ T991] hsr_slave_0: left promiscuous mode [ 1006.930886][ T991] hsr_slave_1: left promiscuous mode [ 1006.939245][ T991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1007.010648][ T991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1007.517612][ T8709] Bluetooth: hci3: command tx timeout [ 1008.020911][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1008.027611][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1008.650591][ T991] team0 (unregistering): Port device team_slave_1 removed [ 1008.749280][ T991] team0 (unregistering): Port device team_slave_0 removed [ 1009.552004][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.559192][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.612416][ T8709] Bluetooth: hci3: command tx timeout [ 1009.696717][ T9524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.803858][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.851429][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.957608][ T9524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.128942][ T9465] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1010.214478][ T9465] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1011.458148][ T9524] hsr_slave_0: entered promiscuous mode [ 1011.503252][ T9524] hsr_slave_1: entered promiscuous mode [ 1011.538200][ T9524] debugfs: 'hsr0' already exists in 'hsr' [ 1011.560160][ T9524] Cannot create hsr debugfs directory [ 1011.662285][ T8709] Bluetooth: hci3: command tx timeout [ 1012.736988][ T9559] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.765771][ T9559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.784582][ T9559] bridge_slave_0: entered allmulticast mode [ 1012.821867][ T9559] bridge_slave_0: entered promiscuous mode [ 1012.838529][ T9559] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.847642][ T9559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.856254][ T9559] bridge_slave_1: entered allmulticast mode [ 1012.913616][ T9559] bridge_slave_1: entered promiscuous mode [ 1015.006295][ T57] bridge_slave_1: left allmulticast mode [ 1015.045561][ T57] bridge_slave_1: left promiscuous mode [ 1015.052592][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.014978][ T57] bridge_slave_0: left allmulticast mode [ 1016.023187][ T57] bridge_slave_0: left promiscuous mode [ 1016.030148][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.639054][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1016.664086][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.687344][ T57] bond0 (unregistering): Released all slaves [ 1017.243635][ T9559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1017.308994][ T9559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.475949][ T57] hsr_slave_0: left promiscuous mode [ 1017.515519][ T57] hsr_slave_1: left promiscuous mode [ 1017.534279][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.571653][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.089747][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1019.200303][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1020.522391][ T9559] team0: Port device team_slave_0 added [ 1020.625279][ T9603] chnl_net:caif_netlink_parms(): no params data found [ 1020.707482][ T29] audit: type=1326 audit(1775488308.862:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9675 comm="syz.8.605" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a0359c819 code=0x0 [ 1020.761903][ T9559] team0: Port device team_slave_1 added [ 1021.342463][ T9559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1021.349683][ T9559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.415292][ T9559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1021.482093][ T9559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1021.489312][ T9559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.580479][ T9559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.073526][ T9465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1022.123522][ T9465] 8021q: adding VLAN 0 to HW filter on device team0 [ 1022.268807][ T9465] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1022.280611][ T9465] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1022.373989][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.381778][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1022.447535][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.455436][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.259259][ T9559] hsr_slave_0: entered promiscuous mode [ 1023.284067][ T9559] hsr_slave_1: entered promiscuous mode [ 1023.294072][ T9559] debugfs: 'hsr0' already exists in 'hsr' [ 1023.302856][ T9559] Cannot create hsr debugfs directory [ 1024.114754][ T9603] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.141327][ T9603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.165241][ T9603] bridge_slave_0: entered allmulticast mode [ 1024.210189][ T9603] bridge_slave_0: entered promiscuous mode [ 1024.273681][ T9603] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.306929][ T9603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.336321][ T9603] bridge_slave_1: entered allmulticast mode [ 1024.366974][ T9603] bridge_slave_1: entered promiscuous mode [ 1024.685877][ T9524] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1024.938849][ T9603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.956061][ T9524] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1025.119805][ T9603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.177903][ T9524] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1025.418580][ T9524] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1025.858076][ T9603] team0: Port device team_slave_0 added [ 1025.922374][ T9603] team0: Port device team_slave_1 added [ 1026.402569][ T9465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.528810][ T9603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.560655][ T9603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.661048][ T9603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.774021][ T9603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.818727][ T9603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.908147][ T9603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.436754][ T9559] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1027.716256][ T9559] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1028.008080][ T9603] hsr_slave_0: entered promiscuous mode [ 1028.025209][ T9603] hsr_slave_1: entered promiscuous mode [ 1028.046853][ T9603] debugfs: 'hsr0' already exists in 'hsr' [ 1028.053549][ T9603] Cannot create hsr debugfs directory [ 1028.063853][ T9559] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1028.163763][ T9559] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1030.404654][ T9524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.665942][ T9524] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.891066][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.898726][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.083614][ T9465] veth0_vlan: entered promiscuous mode [ 1031.243336][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.251263][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.679540][ T9559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.008326][ T9559] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.148034][ T9603] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1032.195596][ T4443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.203252][ T4443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.267268][ T9603] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1032.316737][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.324407][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.376252][ T9603] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1032.421880][ T9603] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1035.624673][ T5771] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1035.643422][ T5771] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1035.663876][ T5771] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1035.763836][ T5771] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1035.777584][ T5771] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1036.976240][ T9524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.358375][ T9603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.900677][ T5771] Bluetooth: hci4: command tx timeout [ 1037.968702][ T9603] 8021q: adding VLAN 0 to HW filter on device team0 [ 1038.377988][ T4443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.385646][ T4443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.618769][ T4443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.626429][ T4443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1039.219900][ T9559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.909092][ T6492] bridge_slave_1: left allmulticast mode [ 1039.950381][ T6492] bridge_slave_1: left promiscuous mode [ 1039.957197][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.990655][ T5771] Bluetooth: hci4: command tx timeout [ 1040.161275][ T6492] bridge_slave_0: left allmulticast mode [ 1040.167271][ T6492] bridge_slave_0: left promiscuous mode [ 1040.243380][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.282338][ T6492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1041.314180][ T6492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1041.329590][ T6492] bond0 (unregistering): Released all slaves [ 1041.523324][ T9723] chnl_net:caif_netlink_parms(): no params data found [ 1041.708818][ T6492] hsr_slave_0: left promiscuous mode [ 1042.072169][ T5771] Bluetooth: hci4: command tx timeout [ 1042.159722][ T6492] hsr_slave_1: left promiscuous mode [ 1042.173916][ T6492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1042.197778][ T6492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1042.231276][ T6492] veth0_vlan: left promiscuous mode [ 1043.222979][ T6492] team0 (unregistering): Port device team_slave_1 removed [ 1043.283788][ T6492] team0 (unregistering): Port device team_slave_0 removed [ 1044.220506][ T5771] Bluetooth: hci4: command tx timeout [ 1047.573121][ T9559] veth0_vlan: entered promiscuous mode [ 1048.350240][ T9723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.409680][ T9723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.454235][ T9723] bridge_slave_0: entered allmulticast mode [ 1048.523555][ T9723] bridge_slave_0: entered promiscuous mode [ 1048.587140][ T9559] veth1_vlan: entered promiscuous mode [ 1048.698947][ T9723] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.746930][ T8709] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1048.765678][ T9723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.784073][ T8709] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1048.802402][ T8709] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1048.828125][ T8709] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1048.845561][ T8709] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1048.909730][ T9723] bridge_slave_1: entered allmulticast mode [ 1048.980702][ T9723] bridge_slave_1: entered promiscuous mode [ 1049.572645][ T9723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.713592][ T9723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.119566][ T9723] team0: Port device team_slave_0 added [ 1050.219434][ T9723] team0: Port device team_slave_1 added [ 1050.253754][ T9603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.440377][ T29] audit: type=1326 audit(1775488338.602:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9765 comm="syz.8.612" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a0359c819 code=0x0 [ 1050.635592][ T9723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.666078][ T9723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.692881][ T9723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.804224][ T9723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.812582][ T9723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.851043][ T9723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.940478][ T5771] Bluetooth: hci5: command tx timeout [ 1051.331775][ T9559] veth0_macvtap: entered promiscuous mode [ 1051.555584][ T9723] hsr_slave_0: entered promiscuous mode [ 1051.569781][ T9723] hsr_slave_1: entered promiscuous mode [ 1053.020255][ T5771] Bluetooth: hci5: command tx timeout [ 1054.640942][ T8709] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1054.657917][ T8709] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1054.668051][ T8709] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1054.692641][ T8709] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1054.711849][ T8709] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1054.797703][ T9759] chnl_net:caif_netlink_parms(): no params data found [ 1054.896744][ T9719] bridge_slave_1: left allmulticast mode [ 1054.936421][ T9719] bridge_slave_1: left promiscuous mode [ 1054.962074][ T9719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.104582][ T8709] Bluetooth: hci5: command tx timeout [ 1055.360610][ T9719] bridge_slave_0: left allmulticast mode [ 1055.366542][ T9719] bridge_slave_0: left promiscuous mode [ 1055.386197][ T9719] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.141874][ T9719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1056.178638][ T9719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1056.197275][ T9719] bond0 (unregistering): Released all slaves [ 1056.943363][ T8709] Bluetooth: hci1: command tx timeout [ 1056.991538][ T9719] hsr_slave_0: left promiscuous mode [ 1057.021360][ T9719] hsr_slave_1: left promiscuous mode [ 1057.051687][ T9719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.092395][ T9719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.180450][ T8709] Bluetooth: hci5: command tx timeout [ 1058.297705][ T9719] team0 (unregistering): Port device team_slave_1 removed [ 1058.382260][ T9719] team0 (unregistering): Port device team_slave_0 removed [ 1059.030989][ T8709] Bluetooth: hci1: command tx timeout [ 1060.089845][ T9603] veth0_vlan: entered promiscuous mode [ 1060.556794][ T9759] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.565134][ T9759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.574763][ T9759] bridge_slave_0: entered allmulticast mode [ 1060.586580][ T9759] bridge_slave_0: entered promiscuous mode [ 1060.735075][ T9759] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.752659][ T9759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.769771][ T9759] bridge_slave_1: entered allmulticast mode [ 1060.789290][ T9759] bridge_slave_1: entered promiscuous mode [ 1060.924112][ T9603] veth1_vlan: entered promiscuous mode [ 1061.091709][ T9759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.114355][ T8709] Bluetooth: hci1: command tx timeout [ 1061.281176][ T9759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1061.438636][ T9723] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1061.611792][ T9759] team0: Port device team_slave_0 added [ 1061.644098][ T9723] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1061.687220][ T9723] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1061.923255][ T9759] team0: Port device team_slave_1 added [ 1061.960463][ T9723] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1062.433413][ T9759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1062.440966][ T9759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.702668][ T9759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1063.180406][ T8709] Bluetooth: hci1: command tx timeout [ 1063.566257][ T9759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1063.577742][ T9759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.628569][ T9759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.001143][ T9781] chnl_net:caif_netlink_parms(): no params data found [ 1065.065502][ T9759] hsr_slave_0: entered promiscuous mode [ 1065.127664][ T9759] hsr_slave_1: entered promiscuous mode [ 1065.170511][ T9759] debugfs: 'hsr0' already exists in 'hsr' [ 1065.176519][ T9759] Cannot create hsr debugfs directory [ 1065.258067][ T9719] bridge_slave_1: left allmulticast mode [ 1065.274920][ T9719] bridge_slave_1: left promiscuous mode [ 1065.301178][ T9719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.386672][ T9719] bridge_slave_0: left allmulticast mode [ 1065.410141][ T9719] bridge_slave_0: left promiscuous mode [ 1065.416964][ T9719] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.582187][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1066.593059][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1066.603164][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1066.618682][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1066.641336][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1067.122638][ T9719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.199102][ T9719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.244434][ T9719] bond0 (unregistering): Released all slaves [ 1067.787126][ T9719] hsr_slave_0: left promiscuous mode [ 1067.825338][ T9719] hsr_slave_1: left promiscuous mode [ 1067.867607][ T9719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.882869][ T9719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.931057][ T9719] veth0_macvtap: left promiscuous mode [ 1067.937051][ T9719] veth1_vlan: left promiscuous mode [ 1067.955362][ T9719] veth0_vlan: left promiscuous mode [ 1068.783077][ T5771] Bluetooth: hci0: command tx timeout [ 1069.158594][ T9719] team0 (unregistering): Port device team_slave_1 removed [ 1069.249055][ T9719] team0 (unregistering): Port device team_slave_0 removed [ 1069.459740][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1069.466774][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1070.862176][ T5771] Bluetooth: hci0: command tx timeout [ 1071.537687][ T9781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.570951][ T9781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.601245][ T9781] bridge_slave_0: entered allmulticast mode [ 1071.635521][ T9781] bridge_slave_0: entered promiscuous mode [ 1071.671909][ T9781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.711006][ T9781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.719357][ T9781] bridge_slave_1: entered allmulticast mode [ 1071.761032][ T9781] bridge_slave_1: entered promiscuous mode [ 1072.504762][ T29] audit: type=1326 audit(1775488360.672:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.8.619" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a0359c819 code=0x0 [ 1072.608684][ T9781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1072.709772][ T9781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.940246][ T5771] Bluetooth: hci0: command tx timeout [ 1073.204641][ T9781] team0: Port device team_slave_0 added [ 1073.402052][ T9781] team0: Port device team_slave_1 added [ 1074.402106][ T9719] bridge_slave_1: left allmulticast mode [ 1074.440610][ T9719] bridge_slave_1: left promiscuous mode [ 1074.447360][ T9719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.020432][ T5771] Bluetooth: hci0: command tx timeout [ 1075.436874][ T9719] bridge_slave_0: left allmulticast mode [ 1075.490283][ T9719] bridge_slave_0: left promiscuous mode [ 1075.521093][ T9719] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.616616][ T9719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1076.702286][ T9719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1076.744188][ T9719] bond0 (unregistering): Released all slaves [ 1076.812960][ T9781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.850552][ T9781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.968519][ T9781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1077.015756][ T9781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1077.049532][ T9781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1077.097710][ T9781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.184799][ T9723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.561328][ T9719] hsr_slave_0: left promiscuous mode [ 1078.601650][ T9719] hsr_slave_1: left promiscuous mode [ 1078.609847][ T9719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.652274][ T9719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.720773][ T9719] veth1_vlan: left promiscuous mode [ 1078.726388][ T9719] veth0_vlan: left promiscuous mode [ 1079.834560][ T9719] team0 (unregistering): Port device team_slave_1 removed [ 1079.933079][ T9719] team0 (unregistering): Port device team_slave_0 removed [ 1080.596393][ T9805] chnl_net:caif_netlink_parms(): no params data found [ 1081.072697][ T9781] hsr_slave_0: entered promiscuous mode [ 1081.104418][ T9781] hsr_slave_1: entered promiscuous mode [ 1081.140737][ T9781] debugfs: 'hsr0' already exists in 'hsr' [ 1081.146789][ T9781] Cannot create hsr debugfs directory [ 1081.355457][ T9723] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.881876][ T6493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.889524][ T6493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1082.000512][ T9759] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1082.331852][ T9759] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1082.504662][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.512335][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1082.560435][ T9759] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1082.625742][ T9759] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1083.245309][ T9805] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.266726][ T9805] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.311154][ T9805] bridge_slave_0: entered allmulticast mode [ 1083.334455][ T9805] bridge_slave_0: entered promiscuous mode [ 1083.548566][ T9805] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.564683][ T9805] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.598034][ T9805] bridge_slave_1: entered allmulticast mode [ 1083.616763][ T9805] bridge_slave_1: entered promiscuous mode [ 1086.194006][ T9805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.326116][ T9805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.915859][ T9805] team0: Port device team_slave_0 added [ 1087.026877][ T9805] team0: Port device team_slave_1 added [ 1087.824626][ T9805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1087.864968][ T9805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.990946][ T9805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1088.048776][ T9805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1088.115742][ T9805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1088.230433][ T9805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1088.764520][ T9781] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1088.887770][ T9781] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1089.182732][ T9781] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1089.550269][ T9781] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1089.788637][ T9805] hsr_slave_0: entered promiscuous mode [ 1089.844912][ T9805] hsr_slave_1: entered promiscuous mode [ 1089.892566][ T9805] debugfs: 'hsr0' already exists in 'hsr' [ 1089.898528][ T9805] Cannot create hsr debugfs directory [ 1091.048631][ T9759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1091.789732][ T9723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1091.975931][ T9759] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.256486][ T9719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.264296][ T9719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.859635][ T9719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.867973][ T9719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1096.607805][ T8709] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1096.623147][ T8709] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1096.635732][ T8709] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1096.681842][ T8709] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1096.694862][ T8709] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1097.699701][ T9781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.264415][ T9781] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.783985][ T5771] Bluetooth: hci3: command tx timeout [ 1098.914737][ T9805] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1099.085570][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.093320][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1099.301492][ T9805] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1099.690930][ T9805] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1099.808353][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.816094][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.946396][ T9805] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1100.862937][ T5771] Bluetooth: hci3: command tx timeout [ 1101.390287][ T9882] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1101.575194][ T9882] usb 9-1: Using ep0 maxpacket: 8 [ 1101.621274][ T9882] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.650281][ T9882] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1101.690150][ T9882] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1101.720923][ T9882] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1101.756775][ T9882] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1101.780476][ T9882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.853453][ T9882] usbtmc 9-1:16.0: bulk endpoints not found [ 1101.961451][ T9940] chnl_net:caif_netlink_parms(): no params data found [ 1102.155982][ T9759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1102.891069][ T4443] bridge_slave_1: left allmulticast mode [ 1102.896991][ T4443] bridge_slave_1: left promiscuous mode [ 1102.939217][ T4443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.951000][ T5771] Bluetooth: hci3: command tx timeout [ 1103.005086][ T4443] bridge_slave_0: left allmulticast mode [ 1103.060295][ T4443] bridge_slave_0: left promiscuous mode [ 1103.067832][ T4443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.574954][ T4443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1103.597383][ T4443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1103.617420][ T4443] bond0 (unregistering): Released all slaves [ 1104.199666][ T4443] hsr_slave_0: left promiscuous mode [ 1104.241501][ T4443] hsr_slave_1: left promiscuous mode [ 1104.285811][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.317442][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1104.358242][ T24] usb 9-1: USB disconnect, device number 11 [ 1104.612086][ T29] audit: type=1326 audit(1775488392.782:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.8.626" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a0359c819 code=0x0 [ 1105.009488][ T4443] team0 (unregistering): Port device team_slave_1 removed [ 1105.020296][ T5771] Bluetooth: hci3: command tx timeout [ 1105.047871][ T4443] team0 (unregistering): Port device team_slave_0 removed [ 1105.780546][ T9781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1106.158362][ T9940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.182080][ T9940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.217401][ T9940] bridge_slave_0: entered allmulticast mode [ 1106.232579][ T9940] bridge_slave_0: entered promiscuous mode [ 1106.297091][ T9805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1106.330947][ T9940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.338622][ T9940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.370952][ T9940] bridge_slave_1: entered allmulticast mode [ 1106.395559][ T9940] bridge_slave_1: entered promiscuous mode [ 1106.602661][ T9759] veth0_vlan: entered promiscuous mode [ 1106.868885][ T9940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.041889][T10000] syz.8.627 (10000): drop_caches: 2 [ 1107.273525][ T9805] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.733860][ T9805] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1107.789491][ T9805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1108.017681][ T9940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1108.385023][ T4443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.392680][ T4443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.534778][ T4443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.542569][ T4443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.857063][ T9940] team0: Port device team_slave_0 added [ 1108.973741][ T9940] team0: Port device team_slave_1 added [ 1109.476297][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.518401][ T8709] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1109.536348][ T8709] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1109.549371][ T8709] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1109.560511][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.631417][ T8709] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1109.662484][ T8709] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1109.671478][ T9940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1109.826042][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1109.862866][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.002756][ T9940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1111.404520][ T9940] hsr_slave_0: entered promiscuous mode [ 1111.449815][ T9940] hsr_slave_1: entered promiscuous mode [ 1111.831912][ T8709] Bluetooth: hci4: command tx timeout [ 1113.242222][ T9805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.910472][ T8709] Bluetooth: hci4: command tx timeout [ 1115.987292][ T8709] Bluetooth: hci4: command tx timeout [ 1116.310252][ T5771] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1116.332630][ T5771] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1116.343022][ T5771] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1116.359171][ T5771] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1116.387953][ T5771] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1118.065297][ T5771] Bluetooth: hci4: command tx timeout [ 1118.475284][ T5771] Bluetooth: hci6: command tx timeout [ 1118.862811][T10017] chnl_net:caif_netlink_parms(): no params data found [ 1119.596243][ T29] audit: type=1326 audit(1775488407.752:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.8.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0359c819 code=0x7ffc0000 [ 1119.670467][ T29] audit: type=1326 audit(1775488407.802:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.8.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0359c819 code=0x7ffc0000 [ 1119.754588][ T29] audit: type=1326 audit(1775488407.802:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.8.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0359c819 code=0x7ffc0000 [ 1119.794488][ T9940] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1119.815872][ T29] audit: type=1326 audit(1775488407.802:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.8.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0359c819 code=0x7ffc0000 [ 1119.875826][ T9940] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1119.886414][ T29] audit: type=1326 audit(1775488407.802:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.8.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0359c819 code=0x7ffc0000 [ 1119.929740][ T29] audit: type=1326 audit(1775488407.802:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.8.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8a0359c819 code=0x7ffc0000 [ 1119.954812][ T29] audit: type=1326 audit(1775488407.802:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.8.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0359c819 code=0x7ffc0000 [ 1120.001491][ T29] audit: type=1326 audit(1775488407.812:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.8.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0359c819 code=0x7ffc0000 [ 1120.035281][ T29] audit: type=1326 audit(1775488407.812:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.8.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0359c819 code=0x7ffc0000 [ 1120.058908][ T29] audit: type=1326 audit(1775488407.812:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.8.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a0359c819 code=0x7ffc0000 [ 1120.108564][ T9940] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1120.172078][ T9940] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1120.541453][ T5771] Bluetooth: hci6: command tx timeout [ 1120.812936][T10017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.838736][T10017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.854374][T10017] bridge_slave_0: entered allmulticast mode [ 1120.867147][T10017] bridge_slave_0: entered promiscuous mode [ 1120.961516][T10017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.969577][T10017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.977849][T10017] bridge_slave_1: entered allmulticast mode [ 1120.987699][T10017] bridge_slave_1: entered promiscuous mode [ 1121.332576][T10017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.357259][T10017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.395810][ T9805] veth0_vlan: entered promiscuous mode [ 1121.562514][ T6493] bridge_slave_1: left allmulticast mode [ 1121.568426][ T6493] bridge_slave_1: left promiscuous mode [ 1121.587706][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.604481][ T6493] bridge_slave_0: left allmulticast mode [ 1121.611272][ T6493] bridge_slave_0: left promiscuous mode [ 1121.617973][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.486896][ T6493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1122.507819][ T6493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.557319][ T6493] bond0 (unregistering): Released all slaves [ 1122.612857][T10017] team0: Port device team_slave_0 added [ 1122.620750][ T5771] Bluetooth: hci6: command tx timeout [ 1122.877436][T10079] syz.8.634 (10079): drop_caches: 2 [ 1123.164099][ T6493] hsr_slave_0: left promiscuous mode [ 1123.196270][ T6493] hsr_slave_1: left promiscuous mode [ 1123.206599][ T6493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1123.219097][ T6493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1123.284886][ T6493] veth0_vlan: left promiscuous mode [ 1124.555762][ T6493] team0 (unregistering): Port device team_slave_1 removed [ 1124.604597][ T6493] team0 (unregistering): Port device team_slave_0 removed [ 1124.700497][ T5771] Bluetooth: hci6: command tx timeout [ 1125.756302][T10017] team0: Port device team_slave_1 added [ 1126.276211][ T9805] veth1_vlan: entered promiscuous mode [ 1126.539243][T10047] chnl_net:caif_netlink_parms(): no params data found [ 1126.996559][T10017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1127.043393][T10017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.207147][T10017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.358615][T10017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.410086][T10017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.583757][T10017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1130.887909][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1131.022054][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1132.125316][T10096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1132.151158][T10096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1132.181508][T10096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1132.195948][T10096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1132.207195][T10096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1132.337296][T10017] hsr_slave_0: entered promiscuous mode [ 1132.396999][T10017] hsr_slave_1: entered promiscuous mode [ 1132.433705][T10017] debugfs: 'hsr0' already exists in 'hsr' [ 1132.439670][T10017] Cannot create hsr debugfs directory [ 1134.819127][T10096] Bluetooth: hci1: command tx timeout [ 1134.844075][T10107] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1134.851659][T10107] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1134.862320][T10107] vhci_hcd vhci_hcd.0: Device attached [ 1134.872384][T10110] vhci_hcd: connection closed [ 1134.895863][ T138] vhci_hcd vhci_hcd.8: stop threads [ 1134.909819][ T138] vhci_hcd vhci_hcd.8: release socket [ 1134.915627][ T138] vhci_hcd vhci_hcd.8: disconnect device [ 1136.531607][T10047] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.539307][T10047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.549107][T10047] bridge_slave_0: entered allmulticast mode [ 1136.562080][T10047] bridge_slave_0: entered promiscuous mode [ 1136.796271][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 1136.796361][ T29] audit: type=1326 audit(1775488424.962:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.8.640" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a0359c819 code=0x0 [ 1136.861230][T10096] Bluetooth: hci1: command tx timeout [ 1136.875475][T10047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.883813][T10047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.892007][T10047] bridge_slave_1: entered allmulticast mode [ 1136.903792][T10047] bridge_slave_1: entered promiscuous mode [ 1137.112470][ T9940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.167592][T10047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1137.208309][T10047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1137.456487][T10047] team0: Port device team_slave_0 added [ 1137.537067][T10047] team0: Port device team_slave_1 added [ 1137.622589][T10047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1137.630288][T10047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1137.659097][T10047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1137.830530][ T9940] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.876975][T10047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1137.885781][T10047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1137.913868][T10047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1138.737700][ T9719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.745374][ T9719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.879479][ T9719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.887153][ T9719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.940441][T10096] Bluetooth: hci1: command tx timeout [ 1139.165459][T10047] hsr_slave_0: entered promiscuous mode [ 1139.176929][T10047] hsr_slave_1: entered promiscuous mode [ 1139.186276][T10047] debugfs: 'hsr0' already exists in 'hsr' [ 1139.192617][T10047] Cannot create hsr debugfs directory [ 1139.292823][ T6493] bridge_slave_1: left allmulticast mode [ 1139.299178][ T6493] bridge_slave_1: left promiscuous mode [ 1139.307312][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.332969][ T6493] bridge_slave_0: left allmulticast mode [ 1139.344645][ T6493] bridge_slave_0: left promiscuous mode [ 1139.355229][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.724365][ T6493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1139.749236][ T6493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1139.764294][ T6493] bond0 (unregistering): Released all slaves [ 1140.059405][T10095] chnl_net:caif_netlink_parms(): no params data found [ 1140.188823][ T6493] hsr_slave_0: left promiscuous mode [ 1140.197254][ T6493] hsr_slave_1: left promiscuous mode [ 1140.205756][ T6493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1140.215273][ T6493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1140.662581][ T6493] team0 (unregistering): Port device team_slave_1 removed [ 1140.698170][ T6493] team0 (unregistering): Port device team_slave_0 removed [ 1141.025377][T10096] Bluetooth: hci1: command tx timeout [ 1141.693838][T10017] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1141.726776][T10017] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1141.864931][T10017] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1141.923064][T10017] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1142.591858][T10095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.599640][T10095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.609544][T10095] bridge_slave_0: entered allmulticast mode [ 1142.633689][T10095] bridge_slave_0: entered promiscuous mode [ 1142.712869][T10095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.722236][T10095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.743568][T10095] bridge_slave_1: entered allmulticast mode [ 1142.756921][T10095] bridge_slave_1: entered promiscuous mode [ 1142.980585][T10095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1143.009533][T10095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.187301][T10095] team0: Port device team_slave_0 added [ 1143.324895][T10095] team0: Port device team_slave_1 added [ 1143.585726][T10095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1143.593933][T10095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1143.661007][T10095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1143.724005][ T9940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1143.824359][T10095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1143.884143][T10095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1143.951197][T10095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1144.852536][T10146] syz.8.644 uses obsolete (PF_INET,SOCK_PACKET) [ 1145.719120][ T6493] bridge_slave_1: left allmulticast mode [ 1145.760140][ T6493] bridge_slave_1: left promiscuous mode [ 1145.791444][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.924092][ T6493] bridge_slave_0: left allmulticast mode [ 1145.978467][ T6493] bridge_slave_0: left promiscuous mode [ 1145.996526][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.888679][ T6493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1146.923820][ T6493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1146.967881][ T6493] bond0 (unregistering): Released all slaves [ 1147.352901][ T6493] hsr_slave_0: left promiscuous mode [ 1147.372048][ T6493] hsr_slave_1: left promiscuous mode [ 1147.386758][ T6493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1147.405873][ T6493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1147.457975][ T6493] veth1_vlan: left promiscuous mode [ 1147.465381][ T6493] veth0_vlan: left promiscuous mode [ 1148.629742][ T6493] team0 (unregistering): Port device team_slave_1 removed [ 1148.727510][ T6493] team0 (unregistering): Port device team_slave_0 removed [ 1149.473610][T10095] hsr_slave_0: entered promiscuous mode [ 1149.515352][T10095] hsr_slave_1: entered promiscuous mode [ 1149.568768][T10095] debugfs: 'hsr0' already exists in 'hsr' [ 1149.588879][T10095] Cannot create hsr debugfs directory [ 1149.979087][T10047] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1150.059294][T10047] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1150.245977][T10047] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1150.430589][T10047] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1151.176771][T10017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1151.938213][T10017] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.985755][ T9940] veth0_vlan: entered promiscuous mode [ 1152.371568][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.379162][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1152.669203][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.676802][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1152.756894][ T9940] veth1_vlan: entered promiscuous mode [ 1153.421714][T10095] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1153.496387][T10095] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1153.584252][ T9940] veth0_macvtap: entered promiscuous mode [ 1153.597871][T10095] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1153.678521][T10095] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1153.791340][ T9940] veth1_macvtap: entered promiscuous mode [ 1153.915467][T10047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1154.210501][ T29] audit: type=1326 audit(1775488442.372:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.8.647" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a0359c819 code=0x0 [ 1154.267930][T10047] 8021q: adding VLAN 0 to HW filter on device team0 [ 1154.353037][ T9940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1154.447937][ T9940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1154.490045][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.497600][ T6059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1154.640477][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.648278][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.736691][ T56] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.759232][ T56] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.811853][ T56] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.825545][ T56] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.650328][T10017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1155.833912][T10095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1156.006550][T10095] 8021q: adding VLAN 0 to HW filter on device team0 [ 1156.126112][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.133843][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.225925][ T6493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.233569][ T6493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.043155][T10047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1158.426464][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1158.438564][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1158.487422][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1158.513621][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1158.550799][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1159.179638][ T991] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.385995][ T991] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.427709][T10017] veth0_vlan: entered promiscuous mode [ 1159.564772][ T991] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.694234][T10204] netlink: 4 bytes leftover after parsing attributes in process `syz.8.651'. [ 1160.438391][T10095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1160.619661][ T991] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.620282][ T5771] Bluetooth: hci0: command tx timeout [ 1161.092196][T10017] veth1_vlan: entered promiscuous mode [ 1161.781223][T10217] kvm: pic: single mode not supported [ 1161.781316][T10217] kvm: pic: level sensitive irq not supported [ 1161.787317][T10217] kvm: pic: single mode not supported [ 1161.794782][T10217] kvm: pic: level sensitive irq not supported [ 1161.830140][T10217] kvm: pic: level sensitive irq not supported [ 1161.855649][T10217] kvm: pic: single mode not supported [ 1161.862282][T10217] kvm: pic: level sensitive irq not supported [ 1161.868807][T10217] kvm: pic: single mode not supported [ 1161.875457][T10217] kvm: pic: level sensitive irq not supported [ 1162.160672][ C0] ===================================================== [ 1162.174430][ C0] BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x362/0x18e0 [ 1162.183260][ C0] __flush_smp_call_function_queue+0x362/0x18e0 [ 1162.189706][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1162.196855][ C0] __sysvec_call_function_single+0x4b/0x3e0 [ 1162.203078][ C0] sysvec_call_function_single+0x7c/0x90 [ 1162.209046][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 1162.215236][ C0] virt_to_page_or_null+0x145/0x170 [ 1162.220663][ C0] kmsan_get_metadata+0xf1/0x160 [ 1162.225775][ C0] kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1162.231588][ C0] __msan_metadata_ptr_for_load_4+0x24/0x40 [ 1162.237707][ C0] on_stack+0x7e/0x1f0 [ 1162.242086][ C0] update_stack_state+0xa7/0x1c0 [ 1162.247283][ C0] unwind_next_frame+0x116/0x350 [ 1162.252463][ C0] arch_stack_walk+0x1b0/0x280 [ 1162.257526][ C0] stack_trace_save+0xc2/0x100 [ 1162.262549][ C0] kmsan_internal_poison_memory+0x4a/0x90 [ 1162.268468][ C0] kmsan_slab_free+0xce/0x140 [ 1162.273434][ C0] kmem_cache_free+0x247/0xeb0 [ 1162.278506][ C0] __kfree_skb+0x20b/0x260 [ 1162.283197][ C0] consume_skb+0x86/0x2a0 [ 1162.287690][ C0] skb_free_datagram+0x1e/0x30 [ 1162.292677][ C0] netlink_recvmsg+0xad1/0xfe0 [ 1162.297698][ C0] sock_recvmsg+0x27b/0x310 [ 1162.302419][ C0] ____sys_recvmsg+0x193/0x620 [ 1162.307374][ C0] ___sys_recvmsg+0x20b/0x850 [ 1162.312503][ C0] __x64_sys_recvmsg+0x20e/0x3d0 [ 1162.317647][ C0] x64_sys_call+0x35cc/0x3ea0 [ 1162.322568][ C0] do_syscall_64+0x134/0xf80 [ 1162.327378][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.333581][ C0] [ 1162.336000][ C0] Local variable tmp created at: [ 1162.341023][ C0] number+0x83/0x2190 [ 1162.345214][ C0] vsnprintf+0xd0d/0x1b00 [ 1162.349694][ C0] [ 1162.352145][ C0] CPU: 0 UID: 0 PID: 10153 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 1162.361248][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1162.371442][ C0] ===================================================== [ 1162.378847][ C0] Disabling lock debugging due to kernel taint [ 1162.385282][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 1162.391939][ C0] CPU: 0 UID: 0 PID: 10153 Comm: udevd Tainted: G B syzkaller #0 PREEMPT(full) [ 1162.402720][ C0] Tainted: [B]=BAD_PAGE [ 1162.407076][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1162.417270][ C0] Call Trace: [ 1162.420671][ C0] [ 1162.423636][ C0] __dump_stack+0x26/0x30 [ 1162.428157][ C0] dump_stack_lvl+0x50/0x1c0 [ 1162.432934][ C0] ? dump_stack+0x12/0x25 [ 1162.437457][ C0] dump_stack+0x1e/0x25 [ 1162.441824][ C0] vpanic+0x7b4/0x1430 [ 1162.446146][ C0] panic+0x15d/0x160 [ 1162.450305][ C0] kmsan_report+0x31a/0x320 [ 1162.455064][ C0] ? __msan_warning+0x1b/0x30 [ 1162.459938][ C0] ? __flush_smp_call_function_queue+0x362/0x18e0 [ 1162.466554][ C0] ? generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1162.473870][ C0] ? __sysvec_call_function_single+0x4b/0x3e0 [ 1162.480149][ C0] ? sysvec_call_function_single+0x7c/0x90 [ 1162.486165][ C0] ? asm_sysvec_call_function_single+0x1f/0x30 [ 1162.492502][ C0] ? virt_to_page_or_null+0x145/0x170 [ 1162.498057][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1162.503327][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1162.509300][ C0] ? __msan_metadata_ptr_for_load_4+0x24/0x40 [ 1162.515622][ C0] ? on_stack+0x7e/0x1f0 [ 1162.520109][ C0] ? update_stack_state+0xa7/0x1c0 [ 1162.525448][ C0] ? unwind_next_frame+0x116/0x350 [ 1162.530794][ C0] ? arch_stack_walk+0x1b0/0x280 [ 1162.535934][ C0] ? stack_trace_save+0xc2/0x100 [ 1162.541161][ C0] ? kmsan_internal_poison_memory+0x4a/0x90 [ 1162.547270][ C0] ? kmsan_slab_free+0xce/0x140 [ 1162.552418][ C0] ? kmem_cache_free+0x247/0xeb0 [ 1162.557560][ C0] ? __kfree_skb+0x20b/0x260 [ 1162.562333][ C0] ? consume_skb+0x86/0x2a0 [ 1162.567012][ C0] ? skb_free_datagram+0x1e/0x30 [ 1162.572139][ C0] ? netlink_recvmsg+0xad1/0xfe0 [ 1162.577364][ C0] ? sock_recvmsg+0x27b/0x310 [ 1162.582195][ C0] ? ____sys_recvmsg+0x193/0x620 [ 1162.587326][ C0] ? ___sys_recvmsg+0x20b/0x850 [ 1162.592582][ C0] ? __x64_sys_recvmsg+0x20e/0x3d0 [ 1162.598154][ C0] ? x64_sys_call+0x35cc/0x3ea0 [ 1162.603225][ C0] ? do_syscall_64+0x134/0xf80 [ 1162.608195][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.614560][ C0] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1162.620848][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1162.626144][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1162.632135][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1162.637412][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1162.643981][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1162.649346][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1162.655526][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1162.660819][ C0] __msan_warning+0x1b/0x30 [ 1162.665528][ C0] __flush_smp_call_function_queue+0x362/0x18e0 [ 1162.671959][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1162.677980][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1162.685290][ C0] __sysvec_call_function_single+0x4b/0x3e0 [ 1162.691391][ C0] sysvec_call_function_single+0x7c/0x90 [ 1162.697262][ C0] [ 1162.700296][ C0] [ 1162.703345][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 1162.709550][ C0] RIP: 0010:virt_to_page_or_null+0x145/0x170 [ 1162.715709][ C0] Code: cc be 01 00 00 00 41 f6 c0 08 75 1e 48 8b 49 08 48 85 c9 74 13 c1 ea 15 83 e2 3f 31 f6 48 0f a3 51 10 40 0f 92 c6 eb 02 31 f6 <65> ff 0d cc 28 d9 12 75 82 e8 ad df 89 fe 48 89 e1 eb 0a e8 a3 df [ 1162.735764][ C0] RSP: 0018:ffff888027b833a8 EFLAGS: 00000202 [ 1162.742027][ C0] RAX: ffff8880a7b83538 RBX: ffff888027b83538 RCX: ffff88813fffab00 [ 1162.750326][ C0] RDX: 0000000027b83538 RSI: 0000000000000001 RDI: ffff888027b83538 [ 1162.758534][ C0] RBP: ffff888027b833a8 R08: ffffea000000000f R09: ffff888027b84000 [ 1162.766656][ C0] R10: ffff888027b80000 R11: ffffffff81dd02d0 R12: ffff888027b83538 [ 1162.774782][ C0] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 1162.782899][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1162.789309][ C0] kmsan_get_metadata+0xf1/0x160 [ 1162.794700][ C0] kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1162.800544][ C0] __msan_metadata_ptr_for_load_4+0x24/0x40 [ 1162.806789][ C0] on_stack+0x7e/0x1f0 [ 1162.811183][ C0] update_stack_state+0xa7/0x1c0 [ 1162.816364][ C0] unwind_next_frame+0x116/0x350 [ 1162.821537][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1162.827939][ C0] arch_stack_walk+0x1b0/0x280 [ 1162.833015][ C0] ? kmsan_internal_poison_memory+0x4a/0x90 [ 1162.839184][ C0] stack_trace_save+0xc2/0x100 [ 1162.844185][ C0] kmsan_internal_poison_memory+0x4a/0x90 [ 1162.850133][ C0] ? kmsan_internal_poison_memory+0x4a/0x90 [ 1162.856306][ C0] ? kmem_cache_free+0x161/0xeb0 [ 1162.861516][ C0] ? filter_irq_stacks+0x49/0x190 [ 1162.866753][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1162.872131][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1162.877538][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1162.883558][ C0] ? kmem_cache_free+0x161/0xeb0 [ 1162.888734][ C0] ? filter_irq_stacks+0x49/0x190 [ 1162.893994][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1162.899297][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1162.905348][ C0] ? __memcg_slab_free_hook+0x2aa/0x5f0 [ 1162.911886][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1162.917266][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1162.923269][ C0] kmsan_slab_free+0xce/0x140 [ 1162.928203][ C0] kmem_cache_free+0x247/0xeb0 [ 1162.933185][ C0] ? __kfree_skb+0x20b/0x260 [ 1162.937989][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1162.943294][ C0] __kfree_skb+0x20b/0x260 [ 1162.947904][ C0] ? skb_free_datagram+0x1e/0x30 [ 1162.953230][ C0] consume_skb+0x86/0x2a0 [ 1162.957931][ C0] skb_free_datagram+0x1e/0x30 [ 1162.963144][ C0] netlink_recvmsg+0xad1/0xfe0 [ 1162.968164][ C0] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1162.973671][ C0] sock_recvmsg+0x27b/0x310 [ 1162.978358][ C0] ____sys_recvmsg+0x193/0x620 [ 1162.983468][ C0] ___sys_recvmsg+0x20b/0x850 [ 1162.988482][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1162.994569][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1162.999941][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1163.005938][ C0] __x64_sys_recvmsg+0x20e/0x3d0 [ 1163.011360][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1163.016810][ C0] x64_sys_call+0x35cc/0x3ea0 [ 1163.021731][ C0] do_syscall_64+0x134/0xf80 [ 1163.026561][ C0] ? clear_bhb_loop+0x50/0xa0 [ 1163.031520][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.037703][ C0] RIP: 0033:0x7f46846a7407 [ 1163.042362][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1163.062407][ C0] RSP: 002b:00007fff97b2dbb0 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 1163.071004][ C0] RAX: ffffffffffffffda RBX: 00007f4684e99880 RCX: 00007f46846a7407 [ 1163.079217][ C0] RDX: 0000000000000000 RSI: 00007fff97b2dc40 RDI: 000000000000000c [ 1163.087415][ C0] RBP: 00005558188f4910 R08: 0000000000000000 R09: 0000000000000000 [ 1163.095517][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555818906b60 [ 1163.103727][ C0] R13: 00007fff97b2dd00 R14: 00007fff97b2dc4c R15: 0000000000000000 [ 1163.111874][ C0] [ 1163.115643][ C0] Kernel Offset: disabled [ 1163.120064][ C0] Rebooting in 86400 seconds..