last executing test programs: 7m2.361043218s ago: executing program 0 (id=8): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x6000000) unshare(0x22020600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 7m1.149484949s ago: executing program 0 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x50}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x20040052}, 0x0) 7m0.808046124s ago: executing program 0 (id=12): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r1, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, r1, 0x30, 0x1, @ib={0x1b, 0x8000, 0x3, {"3f8c0d6cf777eaa6ace6d3ec00ed4771"}, 0x500e, 0x0, 0xf}}}, 0xa0) 7m0.665116078s ago: executing program 0 (id=13): r0 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x80ff, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x3) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fanotify_init(0xf02, 0x2) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fanotify_mark(r4, 0x105, 0x4800003a, r5, 0x0) io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x200d, 0x80, 0x3, 0x0, 0x0, r5}) getpgid(0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x400c015, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000002980)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002680)}}, {{&(0x7f0000002700)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000002780)="f83f722e0664793b7a7e0e55cd001adaa531013db2567e294a6bdbe526c769b020e4c493aa5d73f2287f55c78197cd0080225ff6b6a69e17008a68d2e30a176d9fc1c433375998e900be07c23d7a426523ecca295465ce9a112e15463c5714348c8e7706620177db5634953be7669f3fe9b75e88b3077c13ddbe78431a8ac7c18f5fb4302a9e06433313fabab72008061b5a08305fe4f14668d98c1b50d799120fd79c39b35a3bc1f6cace3b8719c12afbb15b0f222c96eb2e4eaab25e4372c189dd6fdd449801eb", 0xc8}, {&(0x7f0000002880)="fb5e4cfca57b57da70f6a006f0a1a17844784ecf0c66ec0e01ba65b9ca97d97aa6628c0dea39ef4577feb78586dec1", 0x2f}], 0x2, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00, 0xee01}}}], 0x20, 0x80c0}}], 0x2, 0x41070) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) 6m52.196692671s ago: executing program 0 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 6m50.885239803s ago: executing program 0 (id=24): sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 6m33.620415947s ago: executing program 32 (id=24): sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 6m30.507117591s ago: executing program 4 (id=49): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x2000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 6m27.562075893s ago: executing program 4 (id=52): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000280)=@abs={0x1}, 0x6e) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x188) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r9 = dup(r8) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="260f090f20e0ff26c4e2f9320c1bf30f09ea00000000180066baf80cb83ca41b82ef66bafc0c66b84c2666efb8010000000f01c10f0ff01c0f6b0b", 0x3b}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 6m19.506474491s ago: executing program 4 (id=58): r0 = syz_usb_connect(0x4, 0xffffffffffffffe3, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x1d, 0x10, 0xf7, 0x10, 0xcf3, 0xe019, 0x1b2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe, 0x20, 0x0, [{{0x9, 0x4, 0x5c, 0x0, 0x0, 0x6e, 0xab, 0xff}}]}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000040) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x176) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) clock_getres(0x3, &(0x7f0000000580)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000500)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m16.18178263s ago: executing program 4 (id=59): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20002004) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\a\x00\x00\x00\t'], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x4}, 0x18) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r5, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r7, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m14.299650484s ago: executing program 4 (id=63): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000840)='map_files\x00') r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x60242, 0x0) pwritev2(r1, 0x0, 0x0, 0x0, 0xff, 0x15) getdents(r0, 0x0, 0x51) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @random}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={r2, 0x1, 0x6, @multicast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x68801, 0x124) sched_setscheduler(r3, 0x3, &(0x7f0000000180)=0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x23, 0xe, 0x0, &(0x7f0000000780)="e10ea784d395f5d2e39879420a85", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r7, 0x0, 0x0) 6m3.99010695s ago: executing program 4 (id=74): r0 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x80ff, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x3) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fanotify_init(0xf02, 0x2) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fanotify_mark(r4, 0x105, 0x4800003a, r5, 0x0) io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x200d, 0x80, 0x3, 0x0, 0x0, r5}) getpgid(0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x400c015, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000002980)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002680)=[{&(0x7f0000000100)="9c30ad3b29a0dde180ef572a3dbe34cb1fd3919dc890f21dc453", 0x1a}, {&(0x7f00000003c0)="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", 0xff}, {&(0x7f00000004c0)="95d8f0dd840c39ed1764d6560cddeaabfe7eaa59e95882a0744d9626b82bde0e10d1289c20034e0976ad202fe13d56b997e6b6202842008c61a7c1a0d61e681dfe57a3b7abd309d6a31214f6f6f6f242664655d6681a2826ef876680c4e73a050c61eb2c48854885d72e4c007bc6e785e9c1d26187c393cd2cf26afad59d424c5c0f6e1baa4d545b86025981c992115207a4a5a96b653f7821a397efaa1b38b83d86c1a663c96481f37d8596ee93fde9089c561e87", 0xb5}, {&(0x7f0000000580)}, {&(0x7f0000001580)="47a15683ff3d5d0e405df83e2e808606f244d370554b0581dd5c3af3d954d5dc0eb80bd01d63a0947d18a6283179a96f797ffae0f60ea44e13d6b4320020dbd4dc1a387d17de04acb58c2eb0c8bfc543fc8a6106961e3652cb13b2dc4604b5e147c571908de4733259f7182b2bfc88c692191a62d4b5830639c256ec01d8610888d733949bfa2114bd2a5e1e61ce0cec4e7c7116b6f8048e21489562f28ca938476da846c2c6ef32c9424749afa1b432385437786ff3fa", 0xb7}, {&(0x7f0000001680)}], 0x6}}, {{&(0x7f0000002700)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000002780)="f83f722e0664793b7a7e0e55cd001adaa531013db2567e294a6bdbe526c769b020e4c493aa5d73f2287f55c78197cd0080225ff6b6a69e17008a68d2e30a176d9fc1c433375998e900be07c23d7a426523ecca295465ce9a112e15463c5714348c8e7706620177db5634953be7669f3fe9b75e88b3077c13ddbe78431a8ac7c18f5fb4302a9e06433313fabab72008061b5a08305fe4f14668d98c1b50d799120fd79c39b35a3bc1f6cace3b8719c12afbb15b0f222c96eb2e4eaab25e4372c189dd6fdd449801eb", 0xc8}, {&(0x7f0000002880)="fb5e4cfca57b57da70f6a006f0a1a17844784ecf0c66ec0e01ba65b9ca97d97aa6628c0dea39ef4577feb78586dec1", 0x2f}], 0x2, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00, 0xee01}}}], 0x20, 0x80c0}}], 0x2, 0x41070) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) 5m48.171209328s ago: executing program 33 (id=74): r0 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x80ff, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x3) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fanotify_init(0xf02, 0x2) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fanotify_mark(r4, 0x105, 0x4800003a, r5, 0x0) io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x200d, 0x80, 0x3, 0x0, 0x0, r5}) getpgid(0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x400c015, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000002980)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002680)=[{&(0x7f0000000100)="9c30ad3b29a0dde180ef572a3dbe34cb1fd3919dc890f21dc453", 0x1a}, {&(0x7f00000003c0)="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", 0xff}, {&(0x7f00000004c0)="95d8f0dd840c39ed1764d6560cddeaabfe7eaa59e95882a0744d9626b82bde0e10d1289c20034e0976ad202fe13d56b997e6b6202842008c61a7c1a0d61e681dfe57a3b7abd309d6a31214f6f6f6f242664655d6681a2826ef876680c4e73a050c61eb2c48854885d72e4c007bc6e785e9c1d26187c393cd2cf26afad59d424c5c0f6e1baa4d545b86025981c992115207a4a5a96b653f7821a397efaa1b38b83d86c1a663c96481f37d8596ee93fde9089c561e87", 0xb5}, {&(0x7f0000000580)}, {&(0x7f0000001580)="47a15683ff3d5d0e405df83e2e808606f244d370554b0581dd5c3af3d954d5dc0eb80bd01d63a0947d18a6283179a96f797ffae0f60ea44e13d6b4320020dbd4dc1a387d17de04acb58c2eb0c8bfc543fc8a6106961e3652cb13b2dc4604b5e147c571908de4733259f7182b2bfc88c692191a62d4b5830639c256ec01d8610888d733949bfa2114bd2a5e1e61ce0cec4e7c7116b6f8048e21489562f28ca938476da846c2c6ef32c9424749afa1b432385437786ff3fa", 0xb7}, {&(0x7f0000001680)}], 0x6}}, {{&(0x7f0000002700)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000002780)="f83f722e0664793b7a7e0e55cd001adaa531013db2567e294a6bdbe526c769b020e4c493aa5d73f2287f55c78197cd0080225ff6b6a69e17008a68d2e30a176d9fc1c433375998e900be07c23d7a426523ecca295465ce9a112e15463c5714348c8e7706620177db5634953be7669f3fe9b75e88b3077c13ddbe78431a8ac7c18f5fb4302a9e06433313fabab72008061b5a08305fe4f14668d98c1b50d799120fd79c39b35a3bc1f6cace3b8719c12afbb15b0f222c96eb2e4eaab25e4372c189dd6fdd449801eb", 0xc8}, {&(0x7f0000002880)="fb5e4cfca57b57da70f6a006f0a1a17844784ecf0c66ec0e01ba65b9ca97d97aa6628c0dea39ef4577feb78586dec1", 0x2f}], 0x2, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00, 0xee01}}}], 0x20, 0x80c0}}], 0x2, 0x41070) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) 4m28.032797142s ago: executing program 3 (id=184): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 4m27.289753292s ago: executing program 3 (id=186): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x0) 4m24.17497206s ago: executing program 3 (id=187): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x26202) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x200) ioctl$NBD_DISCONNECT(r3, 0xab08) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x8, 0x0, 0x0) 4m23.883311363s ago: executing program 3 (id=191): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000340)=0x400, 0x12) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_to_hsr\x00'}, 0x18) 4m22.262855609s ago: executing program 3 (id=194): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 4m21.885102763s ago: executing program 3 (id=196): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) move_mount(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='\x00', 0x150) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x40000000) unshare(0x2c060000) unshare(0x2c020400) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x5, 0x12, 0x0, 0x3, 0xe}, 0x9c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 4m6.169991153s ago: executing program 34 (id=196): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) move_mount(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='\x00', 0x150) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x40000000) unshare(0x2c060000) unshare(0x2c020400) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x5, 0x12, 0x0, 0x3, 0xe}, 0x9c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.868417028s ago: executing program 1 (id=447): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 2.42303828s ago: executing program 1 (id=450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x100}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.966754827s ago: executing program 1 (id=451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000003000/0x1000)=nil, 0x1000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 1.745155244s ago: executing program 2 (id=452): sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db07", 0x2f, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x184) pwritev2(r3, &(0x7f0000000200)=[{&(0x7f0000000340)="01", 0x1}], 0x1, 0x8, 0x6, 0x0) write$FUSE_POLL(r3, &(0x7f0000000380)={0x18, 0xfffffffffffffff5, 0x0, {0x1}}, 0x18) 1.675739017s ago: executing program 1 (id=453): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 1.631224481s ago: executing program 2 (id=454): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) 1.11062639s ago: executing program 2 (id=455): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) setsockopt(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 660.738042ms ago: executing program 1 (id=456): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 580.655599ms ago: executing program 1 (id=457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, 0x0, 0x8000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) fcntl$dupfd(r3, 0x0, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x0, 0x3, 0xc, 0x6, 0x1, 0xfffffffffffffff0}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @ldst={0x2, 0x3, 0x2, 0x1, 0x6, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x8}], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1, r4, 0x8, &(0x7f00000001c0)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffd6}, 0x94) write$binfmt_misc(r4, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 311.820612ms ago: executing program 2 (id=458): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r0, &(0x7f0000000500)=""/31, 0x1f, 0xe09) 122.905889ms ago: executing program 2 (id=459): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r1, 0x1, 0x1) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 0s ago: executing program 2 (id=460): r0 = socket(0xa, 0x3, 0x3a) syz_emit_ethernet(0x2e, &(0x7f0000000300)={@broadcast, @random="e53b1ab91f48", @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4, 0x8}]}}, @echo={0x8, 0x0, 0x0, 0x2, 0x6}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x4f27, 0x5, 0x2, 0x4, 0x5, 0xcc5, 0x189d6aec, 0x1000, 0xa, 0xe8aa, 0x2, 0x1, 0xfffffffd, 0x1, 0x7ff7ffff, 0x103, 0x80000000, 0x2, 0x7, 0x42000003, 0x99, 0xcaa7, 0x2, 0x4d5d, 0xb, 0xe69, 0x3c, 0x8, 0x2, 0x0, 0xfffffff8]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts. [ 84.825447][ T5827] cgroup: Unknown subsys name 'net' [ 85.054011][ T5827] cgroup: Unknown subsys name 'cpuset' [ 85.090109][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.699010][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.354051][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.364627][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.372518][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.375760][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.377303][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.378206][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.380618][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.381845][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.409611][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.410369][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.450740][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.452160][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.453125][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.454244][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.455386][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.618717][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.621672][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.622473][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.623764][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.624489][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.643174][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.644963][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.645756][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.646817][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.650719][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.384599][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 90.413805][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 90.442579][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 90.805311][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 90.824002][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 91.411970][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.412967][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.413497][ T5838] bridge_slave_0: entered allmulticast mode [ 91.416676][ T5838] bridge_slave_0: entered promiscuous mode [ 91.471653][ T59] Bluetooth: hci2: command tx timeout [ 91.471780][ T59] Bluetooth: hci0: command tx timeout [ 91.471854][ T59] Bluetooth: hci1: command tx timeout [ 91.506976][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.507070][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.507348][ T5846] bridge_slave_0: entered allmulticast mode [ 91.523195][ T5846] bridge_slave_0: entered promiscuous mode [ 91.545674][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.545771][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.545907][ T5838] bridge_slave_1: entered allmulticast mode [ 91.547393][ T5838] bridge_slave_1: entered promiscuous mode [ 91.563079][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.563210][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.563469][ T5839] bridge_slave_0: entered allmulticast mode [ 91.566238][ T5839] bridge_slave_0: entered promiscuous mode [ 91.604441][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.604515][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.604616][ T5846] bridge_slave_1: entered allmulticast mode [ 91.606269][ T5846] bridge_slave_1: entered promiscuous mode [ 91.700986][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.701085][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.701203][ T5839] bridge_slave_1: entered allmulticast mode [ 91.702823][ T5839] bridge_slave_1: entered promiscuous mode [ 91.710403][ T5156] Bluetooth: hci3: command tx timeout [ 91.710529][ T5156] Bluetooth: hci4: command tx timeout [ 92.234581][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.373976][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.439138][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.443747][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.443970][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.445329][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.445502][ T5851] bridge_slave_0: entered allmulticast mode [ 92.448111][ T5851] bridge_slave_0: entered promiscuous mode [ 92.459016][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.460498][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.460690][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.460870][ T5850] bridge_slave_0: entered allmulticast mode [ 92.464084][ T5850] bridge_slave_0: entered promiscuous mode [ 92.532459][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.534698][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.534853][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.535055][ T5851] bridge_slave_1: entered allmulticast mode [ 92.537836][ T5851] bridge_slave_1: entered promiscuous mode [ 92.610235][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.610370][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.610489][ T5850] bridge_slave_1: entered allmulticast mode [ 92.611964][ T5850] bridge_slave_1: entered promiscuous mode [ 92.859647][ T10] cfg80211: failed to load regulatory.db [ 93.204229][ T5838] team0: Port device team_slave_0 added [ 93.331727][ T5846] team0: Port device team_slave_0 added [ 93.398590][ T5838] team0: Port device team_slave_1 added [ 93.406279][ T5839] team0: Port device team_slave_0 added [ 93.415810][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.418468][ T5846] team0: Port device team_slave_1 added [ 93.436066][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.503027][ T5839] team0: Port device team_slave_1 added [ 93.505966][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.549479][ T59] Bluetooth: hci1: command tx timeout [ 93.549519][ T59] Bluetooth: hci0: command tx timeout [ 93.549539][ T59] Bluetooth: hci2: command tx timeout [ 93.594107][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.799655][ T5156] Bluetooth: hci4: command tx timeout [ 93.799695][ T5156] Bluetooth: hci3: command tx timeout [ 94.138960][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.138971][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.138985][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.322107][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.322120][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.322137][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.404906][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.404921][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.404944][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.405993][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.406002][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.406015][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.407983][ T5851] team0: Port device team_slave_0 added [ 94.409074][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.409086][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.409109][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.413329][ T5850] team0: Port device team_slave_0 added [ 94.427434][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.427450][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.427473][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.432235][ T5851] team0: Port device team_slave_1 added [ 94.446984][ T5850] team0: Port device team_slave_1 added [ 94.845292][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.845307][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.845330][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.007568][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.007584][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.007608][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.082391][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.082404][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.082417][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.088532][ T5838] hsr_slave_0: entered promiscuous mode [ 95.090831][ T5838] hsr_slave_1: entered promiscuous mode [ 95.284234][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.284250][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.284273][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.392589][ T5846] hsr_slave_0: entered promiscuous mode [ 95.393889][ T5846] hsr_slave_1: entered promiscuous mode [ 95.394537][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 95.394616][ T5846] Cannot create hsr debugfs directory [ 95.424833][ T5839] hsr_slave_0: entered promiscuous mode [ 95.425625][ T5839] hsr_slave_1: entered promiscuous mode [ 95.426120][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 95.426137][ T5839] Cannot create hsr debugfs directory [ 95.629621][ T59] Bluetooth: hci2: command tx timeout [ 95.629653][ T59] Bluetooth: hci0: command tx timeout [ 95.629673][ T59] Bluetooth: hci1: command tx timeout [ 95.869740][ T5156] Bluetooth: hci3: command tx timeout [ 95.869769][ T5156] Bluetooth: hci4: command tx timeout [ 96.105338][ T5851] hsr_slave_0: entered promiscuous mode [ 96.106113][ T5851] hsr_slave_1: entered promiscuous mode [ 96.106598][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 96.106617][ T5851] Cannot create hsr debugfs directory [ 96.129049][ T5850] hsr_slave_0: entered promiscuous mode [ 96.138764][ T5850] hsr_slave_1: entered promiscuous mode [ 96.143474][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 96.143501][ T5850] Cannot create hsr debugfs directory [ 97.622775][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.656810][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.676757][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.709476][ T59] Bluetooth: hci1: command tx timeout [ 97.709508][ T59] Bluetooth: hci0: command tx timeout [ 97.709527][ T59] Bluetooth: hci2: command tx timeout [ 97.743227][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.863732][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.906058][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.936205][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.949763][ T5156] Bluetooth: hci4: command tx timeout [ 97.949796][ T5156] Bluetooth: hci3: command tx timeout [ 97.996949][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.147675][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.195133][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.234105][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.292608][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.473191][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.514264][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.559814][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.615180][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.684130][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.795996][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.827758][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.867100][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.868040][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.913552][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.976645][ T1523] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.977291][ T1523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.034307][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.035263][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.063741][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.180672][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.227760][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.233522][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.233742][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.294995][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.295204][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.384073][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.444075][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.467610][ T1523] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.469473][ T1523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.525632][ T1523] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.525740][ T1523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.653062][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.686951][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.697624][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.697835][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.773297][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.774786][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.924072][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.934793][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.995189][ T4581] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.995470][ T4581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.038682][ T4581] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.039019][ T4581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.282733][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.741402][ T5839] veth0_vlan: entered promiscuous mode [ 100.828349][ T5839] veth1_vlan: entered promiscuous mode [ 100.870603][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.953055][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.032102][ T5838] veth0_vlan: entered promiscuous mode [ 101.057139][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.075950][ T5839] veth0_macvtap: entered promiscuous mode [ 101.112072][ T5838] veth1_vlan: entered promiscuous mode [ 101.113818][ T5839] veth1_macvtap: entered promiscuous mode [ 101.190051][ T5846] veth0_vlan: entered promiscuous mode [ 101.236537][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.260293][ T5846] veth1_vlan: entered promiscuous mode [ 101.284980][ T5850] veth0_vlan: entered promiscuous mode [ 101.286934][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.348992][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.373811][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.376077][ T5850] veth1_vlan: entered promiscuous mode [ 101.377944][ T5838] veth0_macvtap: entered promiscuous mode [ 101.412737][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.417649][ T5851] veth0_vlan: entered promiscuous mode [ 101.439110][ T1142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.462998][ T5838] veth1_macvtap: entered promiscuous mode [ 101.526911][ T5851] veth1_vlan: entered promiscuous mode [ 101.673330][ T5846] veth0_macvtap: entered promiscuous mode [ 101.704960][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.716791][ T5846] veth1_macvtap: entered promiscuous mode [ 101.755064][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.827900][ T5850] veth0_macvtap: entered promiscuous mode [ 101.842527][ T789] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.846407][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.846430][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.874659][ T789] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.893848][ T789] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.897689][ T5850] veth1_macvtap: entered promiscuous mode [ 101.901710][ T789] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.937091][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.982993][ T5851] veth0_macvtap: entered promiscuous mode [ 102.045248][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.065279][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.065298][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.076987][ T5851] veth1_macvtap: entered promiscuous mode [ 102.160979][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.196642][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.198944][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.215395][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.224158][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.265917][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.386747][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.467367][ T789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.555488][ T789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.587041][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.587111][ T789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.627974][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.627993][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.663912][ T789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.732820][ T1523] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.824983][ T1523] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.858838][ T1523] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.069315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.079324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.089287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.099290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.109317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.119281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.129300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.139305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.149298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.159282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.324751][ T1523] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.435266][ T4581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.435281][ T4581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.641423][ T1523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.641450][ T1523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.291159][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.291175][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.583810][ T5977] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.509458][ T4581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.509478][ T4581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.538153][ T3544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.538174][ T3544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.779117][ T1523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.779137][ T1523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.062403][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.062423][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.842698][ T38] audit: type=1326 audit(1759190224.405:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6009 comm="syz.1.14" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe9431aeec9 code=0x0 [ 111.904913][ T6024] vlan2: entered promiscuous mode [ 111.905048][ T6024] vlan2: entered allmulticast mode [ 111.905056][ T6024] hsr_slave_1: entered allmulticast mode [ 112.155965][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16'. [ 129.914494][ T6093] Zero length message leads to an empty skb [ 130.694174][ T38] audit: type=1326 audit(1759190244.255:3): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6110 comm="syz.4.38" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6736efeec9 code=0x0 [ 138.123678][ T5930] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 139.465025][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.465092][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.697644][ T5930] usb 3-1: device not accepting address 2, error -71 [ 139.766980][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 139.769623][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 139.787638][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 139.805875][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 139.811479][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 142.137751][ T5156] Bluetooth: hci5: command tx timeout [ 144.486565][ T5156] Bluetooth: hci5: command tx timeout [ 146.658596][ T5156] Bluetooth: hci5: command tx timeout [ 148.761600][ T5156] Bluetooth: hci5: command tx timeout [ 149.354163][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.58'. [ 152.543893][ T6193] ip6erspan0: entered promiscuous mode [ 152.990614][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 153.250101][ T6205] smc: net device bond0 applied user defined pnetid SYZ0 [ 153.250591][ T6206] smc: net device bond0 erased user defined pnetid SYZ0 [ 155.200282][ T6216] hsr_slave_1 (unregistering): left promiscuous mode [ 155.403241][ T6228] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 156.539430][ T6224] Illegal XDP return value 1204051008 on prog (id 12) dev N/A, expect packet loss! [ 160.851798][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.903143][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.282339][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.768485][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.035154][ T6157] chnl_net:caif_netlink_parms(): no params data found [ 169.270194][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'. [ 180.422260][ T6157] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.422399][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.422694][ T6157] bridge_slave_0: entered allmulticast mode [ 180.469517][ T990] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 180.469679][ T6157] bridge_slave_0: entered promiscuous mode [ 180.537497][ T6157] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.537644][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.537901][ T6157] bridge_slave_1: entered allmulticast mode [ 180.568138][ T6157] bridge_slave_1: entered promiscuous mode [ 180.639328][ T990] usb 2-1: Using ep0 maxpacket: 8 [ 180.644459][ T990] usb 2-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 180.644484][ T990] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.644502][ T990] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 65 [ 180.644539][ T990] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 180.644561][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.738051][ T990] usb 2-1: config 0 descriptor?? [ 181.907449][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.914334][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.915593][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.917765][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.920002][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 182.369634][ T6006] usb 2-1: USB disconnect, device number 2 [ 183.976774][ T59] Bluetooth: hci1: command tx timeout [ 186.029414][ T59] Bluetooth: hci1: command tx timeout [ 187.199385][ T6157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.978166][ T6157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.073844][ T67] bridge_slave_1: left allmulticast mode [ 188.081544][ T67] bridge_slave_1: left promiscuous mode [ 188.088162][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.192822][ T59] Bluetooth: hci1: command tx timeout [ 189.636855][ T67] bridge_slave_0: left allmulticast mode [ 189.636877][ T67] bridge_slave_0: left promiscuous mode [ 189.637074][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.269830][ T59] Bluetooth: hci1: command tx timeout [ 194.123323][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.190176][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.217013][ T67] bond0 (unregistering): Released all slaves [ 197.349405][ T990] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 197.571449][ T990] usb 4-1: Using ep0 maxpacket: 8 [ 197.573394][ T990] usb 4-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 197.573417][ T990] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.573435][ T990] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 65 [ 197.573470][ T990] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 197.573491][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.653290][ T990] usb 4-1: config 0 descriptor?? [ 197.670542][ T6371] smc: net device bond0 applied user defined pnetid SYZ0 [ 197.670682][ T6375] smc: net device bond0 erased user defined pnetid SYZ0 [ 198.237926][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.246585][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.247537][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.248654][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.291891][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.934661][ T6006] usb 4-1: USB disconnect, device number 2 [ 201.152083][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.152174][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.479432][ T59] Bluetooth: hci0: command tx timeout [ 203.663267][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 204.514333][ T59] Bluetooth: hci0: command tx timeout [ 206.594861][ T59] Bluetooth: hci0: command tx timeout [ 207.396939][ T6426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.469137][ T6427] ip6erspan0: entered promiscuous mode [ 207.482540][ T6427] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 207.515336][ T6428] macvlan2: entered promiscuous mode [ 207.516388][ T6428] bond1: entered promiscuous mode [ 207.531851][ T6428] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 207.611497][ T6428] bond1: left promiscuous mode [ 207.806986][ T6437] bridge_slave_0: left allmulticast mode [ 207.807018][ T6437] bridge_slave_0: left promiscuous mode [ 207.807828][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.012275][ T6437] bridge_slave_1: left allmulticast mode [ 208.012308][ T6437] bridge_slave_1: left promiscuous mode [ 208.012550][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.151311][ T6437] bond0: (slave bond_slave_0): Releasing backup interface [ 208.203931][ T6440] netlink: 'syz.2.106': attribute type 2 has an invalid length. [ 208.217937][ T6437] bond0: (slave bond_slave_1): Releasing backup interface [ 208.296936][ T6437] team0: Port device team_slave_0 removed [ 208.333344][ T6437] team0: Port device team_slave_1 removed [ 208.333948][ T6437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.333966][ T6437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.384186][ T6437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.384217][ T6437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.669614][ T59] Bluetooth: hci0: command tx timeout [ 209.325748][ T67] hsr_slave_0: left promiscuous mode [ 209.360480][ T67] hsr_slave_1: left promiscuous mode [ 209.362317][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.362365][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.005540][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.005572][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.247738][ T6456] netlink: 'syz.3.109': attribute type 2 has an invalid length. [ 210.291179][ T67] veth1_macvtap: left promiscuous mode [ 210.291415][ T67] veth0_macvtap: left promiscuous mode [ 210.291793][ T67] veth1_vlan: left promiscuous mode [ 210.292121][ T67] veth0_vlan: left promiscuous mode [ 212.714740][ T6462] netlink: 'syz.1.113': attribute type 2 has an invalid length. [ 212.718674][ T6461] Bluetooth: hci2: command 0x0406 tx timeout [ 212.718708][ T6461] Bluetooth: hci4: command 0x0406 tx timeout [ 212.718732][ T6461] Bluetooth: hci3: command 0x0406 tx timeout [ 215.852152][ T67] team0 (unregistering): Port device team_slave_1 removed [ 216.040549][ T67] team0 (unregistering): Port device team_slave_0 removed [ 220.749116][ T6495] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 220.750852][ T6495] ip6erspan0: entered promiscuous mode [ 221.784455][ T6499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.121355][ T6505] netlink: 'syz.3.124': attribute type 2 has an invalid length. [ 222.299012][ T6500] ip6erspan0: entered promiscuous mode [ 222.301697][ T6500] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 222.329905][ T6502] macvlan2: entered promiscuous mode [ 222.330737][ T6502] bond1: entered promiscuous mode [ 222.331743][ T6502] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 222.540065][ T6502] bond1: left promiscuous mode [ 222.737583][ T6512] syz.3.127 (6512) used greatest stack depth: 18344 bytes left [ 222.824003][ T6508] bridge_slave_0: left allmulticast mode [ 222.824035][ T6508] bridge_slave_0: left promiscuous mode [ 222.824299][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.925358][ T6508] bridge_slave_1: left allmulticast mode [ 222.925391][ T6508] bridge_slave_1: left promiscuous mode [ 222.925626][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.036701][ T6508] bond0: (slave bond_slave_0): Releasing backup interface [ 223.111713][ T6508] bond0: (slave bond_slave_1): Releasing backup interface [ 223.115441][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 223.188477][ T6508] team0: Port device team_slave_0 removed [ 223.268251][ T6508] team0: Port device team_slave_1 removed [ 223.270115][ T6508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.270142][ T6508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.302200][ T6508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.302313][ T6508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.430403][ T6508] bond1: (slave ip6erspan0): Releasing backup interface [ 223.593316][ T6514] bridge_slave_0: left allmulticast mode [ 223.593347][ T6514] bridge_slave_0: left promiscuous mode [ 223.593597][ T6514] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.662452][ T6514] bridge_slave_1: left allmulticast mode [ 223.662485][ T6514] bridge_slave_1: left promiscuous mode [ 223.662732][ T6514] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.782309][ T6514] bond0: (slave bond_slave_0): Releasing backup interface [ 223.860138][ T6514] bond0: (slave bond_slave_1): Releasing backup interface [ 223.935139][ T6514] team0: Port device team_slave_0 removed [ 223.994622][ T6514] team0: Port device team_slave_1 removed [ 223.995266][ T6514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.995282][ T6514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.051760][ T6514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.051792][ T6514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.137498][ T6528] : renamed from bridge_slave_0 (while UP) [ 225.872787][ T6322] chnl_net:caif_netlink_parms(): no params data found [ 225.977992][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.132'. [ 228.292277][ T6540] hsr_slave_1 (unregistering): left promiscuous mode [ 229.981586][ T6322] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.985105][ T6322] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.985295][ T6322] bridge_slave_0: entered allmulticast mode [ 230.000515][ T6322] bridge_slave_0: entered promiscuous mode [ 230.149255][ T6576] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 230.778122][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.857665][ T6388] chnl_net:caif_netlink_parms(): no params data found [ 230.879681][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.879766][ T6322] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.879901][ T6322] bridge_slave_1: entered allmulticast mode [ 230.893643][ T6322] bridge_slave_1: entered promiscuous mode [ 233.649838][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 235.962530][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.042744][ T6322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.073087][ T6322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.435920][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.951776][ T6322] team0: Port device team_slave_0 added [ 241.151496][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.159854][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.170397][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.171502][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.173252][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.295252][ T6651] syz.3.156 uses obsolete (PF_INET,SOCK_PACKET) [ 241.626097][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.716817][ T6388] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.716956][ T6388] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.717185][ T6388] bridge_slave_0: entered allmulticast mode [ 241.728859][ T6388] bridge_slave_0: entered promiscuous mode [ 243.323565][ T5844] Bluetooth: hci5: command tx timeout [ 243.334001][ T6651] syzkaller1: entered promiscuous mode [ 243.334028][ T6651] syzkaller1: entered allmulticast mode [ 243.357905][ T6388] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.358053][ T6388] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.358270][ T6388] bridge_slave_1: entered allmulticast mode [ 243.399405][ T6388] bridge_slave_1: entered promiscuous mode [ 244.527189][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'. [ 245.389417][ T5844] Bluetooth: hci5: command tx timeout [ 246.936385][ T6388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.368721][ T6388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.469347][ T5844] Bluetooth: hci5: command tx timeout [ 249.484492][ T6388] team0: Port device team_slave_0 added [ 249.839308][ T5844] Bluetooth: hci5: command tx timeout [ 250.932109][ T6388] team0: Port device team_slave_1 added [ 251.349366][ T6706] netlink: 'syz.3.168': attribute type 1 has an invalid length. [ 252.514327][ T6706] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 252.573181][ T6711] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 252.573575][ T6711] ip6erspan0: entered promiscuous mode [ 252.920094][ T6724] netlink: 56 bytes leftover after parsing attributes in process `syz.1.174'. [ 252.968363][ T6388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.968379][ T6388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.968401][ T6388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.976173][ T67] bridge_slave_1: left allmulticast mode [ 252.976203][ T67] bridge_slave_1: left promiscuous mode [ 252.976440][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.092824][ T67] bridge_slave_0: left allmulticast mode [ 253.092855][ T67] bridge_slave_0: left promiscuous mode [ 253.094277][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.211239][ T67] bridge_slave_1: left allmulticast mode [ 253.211311][ T67] bridge_slave_1: left promiscuous mode [ 253.211557][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.305494][ T67] bridge_slave_0: left allmulticast mode [ 253.305782][ T67] bridge_slave_0: left promiscuous mode [ 253.309092][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.779864][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.860090][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.064822][ T67] bond0 (unregistering): Released all slaves [ 256.800868][ T5156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.817585][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.818540][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.866183][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.866984][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.759988][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.821831][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.843946][ T67] bond0 (unregistering): Released all slaves [ 257.914286][ T6388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.914301][ T6388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.914324][ T6388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.916380][ T5156] Bluetooth: hci1: command tx timeout [ 260.298579][ T6753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.352839][ T6755] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 260.425067][ T1142] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 260.631260][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 261.064229][ T5156] Bluetooth: hci1: command tx timeout [ 261.118336][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 261.801604][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.801726][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.069332][ T5156] Bluetooth: hci1: command tx timeout [ 264.677954][ T6784] block nbd3: NBD_DISCONNECT [ 264.679045][ T6784] block nbd3: Send disconnect failed -89 [ 264.691716][ T6783] block nbd3: Disconnected due to user request. [ 264.691735][ T6783] block nbd3: shutting down sockets [ 266.429310][ T5156] Bluetooth: hci1: command tx timeout [ 266.759440][ T67] hsr_slave_0: left promiscuous mode [ 266.760411][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.760438][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.822589][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.822628][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.625410][ T67] veth1_macvtap: left promiscuous mode [ 267.625539][ T67] veth0_macvtap: left promiscuous mode [ 267.625826][ T67] veth1_vlan: left promiscuous mode [ 267.626025][ T67] veth0_vlan: left promiscuous mode [ 274.554453][ T6842] ======================================================= [ 274.554453][ T6842] WARNING: The mand mount option has been deprecated and [ 274.554453][ T6842] and is ignored by this kernel. Remove the mand [ 274.554453][ T6842] option from the mount to silence this warning. [ 274.554453][ T6842] ======================================================= [ 274.677468][ T67] team0 (unregistering): Port device team_slave_1 removed [ 275.130507][ T67] team0 (unregistering): Port device team_slave_0 removed [ 276.985533][ T6847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.204'. [ 280.247862][ T6647] chnl_net:caif_netlink_parms(): no params data found [ 281.499858][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 281.979064][ T6870] hsr_slave_1 (unregistering): left promiscuous mode [ 282.128693][ T6868] bond1: (slave ip6erspan0): Releasing backup interface [ 282.994039][ T6647] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.994181][ T6647] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.994390][ T6647] bridge_slave_0: entered allmulticast mode [ 282.997424][ T6893] netlink: 'syz.2.210': attribute type 4 has an invalid length. [ 282.998115][ T6647] bridge_slave_0: entered promiscuous mode [ 283.003474][ T6735] chnl_net:caif_netlink_parms(): no params data found [ 283.073475][ T6647] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.073617][ T6647] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.073842][ T6647] bridge_slave_1: entered allmulticast mode [ 283.100012][ T6647] bridge_slave_1: entered promiscuous mode [ 283.114232][ T6893] netlink: 'syz.2.210': attribute type 4 has an invalid length. [ 283.813152][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.821588][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.824280][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.826424][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.830286][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.870721][ T5156] Bluetooth: hci0: command tx timeout [ 287.955073][ T6647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.968352][ T5156] Bluetooth: hci0: command tx timeout [ 288.103816][ T6647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.507442][ T6647] team0: Port device team_slave_0 added [ 288.857585][ T6647] team0: Port device team_slave_1 added [ 290.029403][ T5156] Bluetooth: hci0: command tx timeout [ 291.841164][ T6735] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.843167][ T6735] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.843360][ T6735] bridge_slave_0: entered allmulticast mode [ 291.846988][ T6735] bridge_slave_0: entered promiscuous mode [ 292.044944][ T6941] : renamed from bridge_slave_0 (while UP) [ 292.084820][ T6735] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.084947][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.085175][ T6735] bridge_slave_1: entered allmulticast mode [ 292.087961][ T6735] bridge_slave_1: entered promiscuous mode [ 292.109301][ T5156] Bluetooth: hci0: command tx timeout [ 292.130675][ T6647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.130689][ T6647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.130713][ T6647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.430316][ T6647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.430332][ T6647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.430356][ T6647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.760825][ T6735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.910080][ T6735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.842550][ T6735] team0: Port device team_slave_0 added [ 295.067803][ T6647] hsr_slave_0: entered promiscuous mode [ 295.068686][ T6647] hsr_slave_1: entered promiscuous mode [ 295.078519][ T6735] team0: Port device team_slave_1 added [ 295.659398][ T6735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.659414][ T6735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.659436][ T6735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.389433][ T6735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.389449][ T6735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.389473][ T6735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.889634][ T6993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.957315][ T6993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.496159][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.469002][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.521259][ T6735] hsr_slave_0: entered promiscuous mode [ 303.525973][ T6735] hsr_slave_1: entered promiscuous mode [ 303.545467][ T6735] debugfs: 'hsr0' already exists in 'hsr' [ 303.545494][ T6735] Cannot create hsr debugfs directory [ 305.464200][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 305.475952][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 305.491988][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 305.496019][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 305.496978][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 306.133043][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.199304][ T7026] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 306.359306][ T6903] chnl_net:caif_netlink_parms(): no params data found [ 306.370543][ T7028] netlink: 56 bytes leftover after parsing attributes in process `syz.2.236'. [ 306.727832][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.381060][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'. [ 307.582303][ T5844] Bluetooth: hci3: command tx timeout [ 309.632908][ T5844] Bluetooth: hci3: command tx timeout [ 311.722525][ T5844] Bluetooth: hci3: command tx timeout [ 312.604512][ T6903] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.604721][ T6903] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.604914][ T6903] bridge_slave_0: entered allmulticast mode [ 312.608073][ T6903] bridge_slave_0: entered promiscuous mode [ 312.921340][ T6903] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.921500][ T6903] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.921739][ T6903] bridge_slave_1: entered allmulticast mode [ 312.928195][ T6903] bridge_slave_1: entered promiscuous mode [ 314.548284][ T5156] Bluetooth: hci3: command tx timeout [ 315.451367][ T6903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.524118][ T6903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.864927][ T67] bridge_slave_1: left allmulticast mode [ 315.864948][ T67] bridge_slave_1: left promiscuous mode [ 315.865112][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.933966][ T67] bridge_slave_0: left allmulticast mode [ 315.934000][ T67] bridge_slave_0: left promiscuous mode [ 315.934302][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.071967][ T67] bridge_slave_1: left allmulticast mode [ 316.071989][ T67] bridge_slave_1: left promiscuous mode [ 316.072183][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.162211][ T67] bridge_slave_0: left allmulticast mode [ 316.162242][ T67] bridge_slave_0: left promiscuous mode [ 316.165475][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.985123][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.987293][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 317.014295][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 317.027156][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 317.028154][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 317.234419][ T67] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 317.237297][ T67] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 318.614094][ T7100] block nbd2: NBD_DISCONNECT [ 318.641576][ T7099] block nbd2: Disconnected due to user request. [ 318.641611][ T7099] block nbd2: shutting down sockets [ 318.641723][ T7100] block nbd2: Send disconnect failed -89 [ 319.152362][ T5156] Bluetooth: hci5: command tx timeout [ 320.874900][ T67] bond0 (unregistering): Released all slaves [ 321.229502][ T5156] Bluetooth: hci5: command tx timeout [ 321.433670][ T67] bond1 (unregistering): Released all slaves [ 321.700854][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.780394][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.843367][ T67] bond0 (unregistering): Released all slaves [ 322.061759][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.151297][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.211617][ T67] bond0 (unregistering): Released all slaves [ 322.230558][ T6735] kthread_run failed with err -4 [ 322.503446][ T6903] team0: Port device team_slave_0 added [ 322.518341][ T6903] team0: Port device team_slave_1 added [ 323.706430][ T5156] Bluetooth: hci5: command tx timeout [ 324.430936][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.431012][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.530350][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.252'. [ 325.735426][ T5156] Bluetooth: hci5: command tx timeout [ 325.861170][ T6903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.861185][ T6903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.861208][ T6903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.889841][ T7131] binder_alloc: 7130: binder_alloc_buf, no vma [ 326.356863][ T6903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.356879][ T6903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.356904][ T6903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.007654][ T6903] hsr_slave_0: entered promiscuous mode [ 331.008955][ T6903] hsr_slave_1: entered promiscuous mode [ 331.065925][ T6903] debugfs: 'hsr0' already exists in 'hsr' [ 331.065942][ T6903] Cannot create hsr debugfs directory [ 331.066762][ T7018] chnl_net:caif_netlink_parms(): no params data found [ 331.579328][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 331.729279][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 331.769712][ T9] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 331.769739][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.769756][ T9] usb 2-1: Product: syz [ 331.769768][ T9] usb 2-1: Manufacturer: syz [ 331.769781][ T9] usb 2-1: SerialNumber: syz [ 331.812130][ T9] usb 2-1: config 0 descriptor?? [ 331.999485][ T67] hsr_slave_0: left promiscuous mode [ 332.000411][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.061635][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.204009][ T67] veth1_macvtap: left promiscuous mode [ 332.204123][ T67] veth0_macvtap: left promiscuous mode [ 332.204445][ T67] veth1_vlan: left promiscuous mode [ 332.204651][ T67] veth0_vlan: left promiscuous mode [ 332.251608][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 332.287336][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 332.288766][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 332.288842][ T9] usb 2-1: media controller created [ 332.345812][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 332.457069][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 332.457128][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 332.457152][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 332.509301][ T9] usb 2-1: USB disconnect, device number 3 [ 332.687124][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 333.237188][ T7174] binder_alloc: 7173: binder_alloc_buf, no vma [ 338.980118][ T67] team0 (unregistering): Port device team_slave_1 removed [ 339.119363][ T67] team0 (unregistering): Port device team_slave_0 removed [ 339.649914][ T67] team0 (unregistering): Port device team_slave_0 removed [ 340.452274][ T7018] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.452541][ T7018] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.452771][ T7018] bridge_slave_0: entered allmulticast mode [ 340.462137][ T7018] bridge_slave_0: entered promiscuous mode [ 340.600298][ T7018] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.600440][ T7018] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.600670][ T7018] bridge_slave_1: entered allmulticast mode [ 340.603364][ T7018] bridge_slave_1: entered promiscuous mode [ 342.442295][ T7209] binder_alloc: 7208: binder_alloc_buf, no vma [ 342.868141][ T7018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.034081][ T7018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.936095][ T7018] team0: Port device team_slave_0 added [ 343.936933][ T7089] chnl_net:caif_netlink_parms(): no params data found [ 344.036649][ T7018] team0: Port device team_slave_1 added [ 344.650265][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.653066][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.654199][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.655353][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.656111][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.989831][ T7018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.989843][ T7018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.989855][ T7018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.367595][ T7018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.367610][ T7018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.367634][ T7018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.889297][ T5844] Bluetooth: hci1: command tx timeout [ 348.860173][ T7018] hsr_slave_0: entered promiscuous mode [ 348.862977][ T7018] hsr_slave_1: entered promiscuous mode [ 348.863516][ T7018] debugfs: 'hsr0' already exists in 'hsr' [ 348.863529][ T7018] Cannot create hsr debugfs directory [ 348.909558][ T5844] Bluetooth: hci1: command tx timeout [ 350.208543][ T7089] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.208721][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.208932][ T7089] bridge_slave_0: entered allmulticast mode [ 350.234959][ T7089] bridge_slave_0: entered promiscuous mode [ 350.327486][ T7089] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.327616][ T7089] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.327810][ T7089] bridge_slave_1: entered allmulticast mode [ 350.356551][ T7089] bridge_slave_1: entered promiscuous mode [ 351.039001][ T5844] Bluetooth: hci1: command tx timeout [ 351.847013][ T7089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.901333][ T7089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.308188][ T5844] Bluetooth: hci1: command tx timeout [ 353.667807][ T7089] team0: Port device team_slave_0 added [ 355.362093][ T7089] team0: Port device team_slave_1 added [ 356.381203][ T7089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.381214][ T7089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.381227][ T7089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.464408][ T7089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.464423][ T7089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.464540][ T7089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.136075][ T7089] hsr_slave_0: entered promiscuous mode [ 357.137425][ T7089] hsr_slave_1: entered promiscuous mode [ 357.138304][ T7089] debugfs: 'hsr0' already exists in 'hsr' [ 357.138326][ T7089] Cannot create hsr debugfs directory [ 357.294341][ T7305] netlink: 44 bytes leftover after parsing attributes in process `syz.2.284'. [ 358.983165][ T7228] chnl_net:caif_netlink_parms(): no params data found [ 361.210048][ T67] bridge_slave_1: left allmulticast mode [ 361.210079][ T67] bridge_slave_1: left promiscuous mode [ 361.210328][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.331144][ T67] bridge_slave_0: left allmulticast mode [ 361.331177][ T67] bridge_slave_0: left promiscuous mode [ 361.331448][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.415741][ T67] bridge_slave_1: left allmulticast mode [ 361.415772][ T67] bridge_slave_1: left promiscuous mode [ 361.416013][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.466126][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.473870][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.474982][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.477325][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.478173][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.486815][ T67] bridge_slave_0: left allmulticast mode [ 361.486842][ T67] bridge_slave_0: left promiscuous mode [ 361.487076][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.554076][ T67] bridge_slave_1: left allmulticast mode [ 361.554106][ T67] bridge_slave_1: left promiscuous mode [ 361.554348][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.611317][ T67] bridge_slave_0: left allmulticast mode [ 361.611348][ T67] bridge_slave_0: left promiscuous mode [ 361.611594][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.890463][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.980124][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.046198][ T67] bond0 (unregistering): Released all slaves [ 362.250383][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.331379][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.394638][ T67] bond0 (unregistering): Released all slaves [ 362.590065][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.650079][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.713456][ T67] bond0 (unregistering): Released all slaves [ 363.403814][ T7343] netlink: 44 bytes leftover after parsing attributes in process `syz.1.292'. [ 363.550755][ T5156] Bluetooth: hci0: command tx timeout [ 366.351669][ T5156] Bluetooth: hci0: command tx timeout [ 370.960139][ T7228] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.960280][ T7228] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.960514][ T7228] bridge_slave_0: entered allmulticast mode [ 370.964668][ T7228] bridge_slave_0: entered promiscuous mode [ 371.938975][ T7228] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.942391][ T7228] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.947967][ T7228] bridge_slave_1: entered allmulticast mode [ 371.951717][ T7228] bridge_slave_1: entered promiscuous mode [ 376.790298][ T5156] Bluetooth: hci0: command tx timeout [ 377.241930][ T67] hsr_slave_0: left promiscuous mode [ 377.289445][ T67] hsr_slave_1: left promiscuous mode [ 377.290381][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.370116][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.409931][ T7391] Error: Driver 'c6xdigio' is already registered, aborting... [ 377.610327][ T67] hsr_slave_0: left promiscuous mode [ 377.649277][ T67] hsr_slave_1: left promiscuous mode [ 377.650251][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.692213][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.732010][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.741710][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.743112][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.744334][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.745120][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.849431][ T67] hsr_slave_0: left promiscuous mode [ 377.909358][ T67] hsr_slave_1: left promiscuous mode [ 377.910231][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.960306][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.879714][ T5844] Bluetooth: hci0: command tx timeout [ 379.939641][ T5844] Bluetooth: hci3: command tx timeout [ 380.389915][ T67] team0 (unregistering): Port device team_slave_1 removed [ 380.511670][ T67] team0 (unregistering): Port device team_slave_0 removed [ 381.432010][ T67] team0 (unregistering): Port device team_slave_1 removed [ 381.550064][ T67] team0 (unregistering): Port device team_slave_0 removed [ 381.958539][ T5844] Bluetooth: hci3: command tx timeout [ 382.390075][ T67] team0 (unregistering): Port device team_slave_1 removed [ 382.519721][ T67] team0 (unregistering): Port device team_slave_0 removed [ 382.925175][ T7089] kthread_run failed with err -4 [ 382.961541][ T7228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.008839][ T7403] netlink: 44 bytes leftover after parsing attributes in process `syz.2.302'. [ 383.033961][ T7228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.561205][ T7228] team0: Port device team_slave_0 added [ 383.622229][ T7228] team0: Port device team_slave_1 added [ 384.271821][ T5844] Bluetooth: hci3: command tx timeout [ 385.346524][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.346598][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.353573][ T5844] Bluetooth: hci3: command tx timeout [ 387.904328][ T7228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.904339][ T7228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.904352][ T7228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.049711][ T7228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.049728][ T7228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.049752][ T7228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.240175][ T7454] netlink: 44 bytes leftover after parsing attributes in process `syz.1.315'. [ 391.983554][ T7228] hsr_slave_0: entered promiscuous mode [ 391.986952][ T7228] hsr_slave_1: entered promiscuous mode [ 394.256567][ T7335] chnl_net:caif_netlink_parms(): no params data found [ 394.403382][ T7499] smc: net device bond0 applied user defined pnetid SYZ0 [ 394.403568][ T7501] smc: net device bond0 erased user defined pnetid SYZ0 [ 394.743178][ T7508] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 398.052205][ T7397] chnl_net:caif_netlink_parms(): no params data found [ 398.087050][ T7335] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.087230][ T7335] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.087441][ T7335] bridge_slave_0: entered allmulticast mode [ 398.112176][ T7335] bridge_slave_0: entered promiscuous mode [ 398.156807][ T7335] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.158097][ T7335] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.158330][ T7335] bridge_slave_1: entered allmulticast mode [ 398.181618][ T7335] bridge_slave_1: entered promiscuous mode [ 398.189386][ T5929] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 398.369323][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 398.371291][ T5929] usb 2-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 398.371315][ T5929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.371333][ T5929] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 65 [ 398.371375][ T5929] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 398.371387][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.380474][ T5929] usb 2-1: config 0 descriptor?? [ 398.595776][ T5929] usb 2-1: USB disconnect, device number 4 [ 402.677710][ T7335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.871452][ T7335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.546332][ T7335] team0: Port device team_slave_0 added [ 407.650034][ T7397] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.650203][ T7397] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.650432][ T7397] bridge_slave_0: entered allmulticast mode [ 407.685133][ T7397] bridge_slave_0: entered promiscuous mode [ 407.701760][ T7335] team0: Port device team_slave_1 added [ 409.286253][ T7397] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.286394][ T7397] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.286640][ T7397] bridge_slave_1: entered allmulticast mode [ 409.300602][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 409.329793][ T7397] bridge_slave_1: entered promiscuous mode [ 409.337368][ T4367] bridge_slave_1: left allmulticast mode [ 409.337399][ T4367] bridge_slave_1: left promiscuous mode [ 409.337649][ T4367] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.363143][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 409.365105][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 409.389620][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 409.390993][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 409.572097][ T4367] bridge_slave_0: left allmulticast mode [ 409.572128][ T4367] bridge_slave_0: left promiscuous mode [ 409.572378][ T4367] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.737684][ T4367] bridge_slave_1: left allmulticast mode [ 409.737716][ T4367] bridge_slave_1: left promiscuous mode [ 409.737960][ T4367] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.050782][ T4367] bridge_slave_0: left allmulticast mode [ 410.050815][ T4367] bridge_slave_0: left promiscuous mode [ 410.051073][ T4367] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.469368][ T5156] Bluetooth: hci5: command tx timeout [ 411.651390][ T4367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.961549][ T4367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.042381][ T4367] bond0 (unregistering): Released all slaves [ 413.559336][ T5156] Bluetooth: hci5: command tx timeout [ 416.883519][ T5844] Bluetooth: hci5: command tx timeout [ 417.005986][ T4367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.449893][ T4367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.711456][ T4367] bond0 (unregistering): Released all slaves [ 418.909373][ T5156] Bluetooth: hci5: command tx timeout [ 422.621111][ T7335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.621127][ T7335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.621150][ T7335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.835433][ T7397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.082164][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 424.087773][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 424.094335][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 424.101478][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 424.102230][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 424.130439][ T4367] hsr_slave_0: left promiscuous mode [ 424.168091][ T4367] hsr_slave_1: left promiscuous mode [ 424.168942][ T4367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.221702][ T4367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.393177][ T4367] hsr_slave_0: left promiscuous mode [ 424.439378][ T4367] hsr_slave_1: left promiscuous mode [ 424.440350][ T4367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.474190][ T4367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.189888][ T5156] Bluetooth: hci1: command tx timeout [ 428.269414][ T5156] Bluetooth: hci1: command tx timeout [ 428.750027][ T4367] team0 (unregistering): Port device team_slave_1 removed [ 428.952096][ T4367] team0 (unregistering): Port device team_slave_0 removed [ 430.210465][ T4367] team0 (unregistering): Port device team_slave_1 removed [ 430.340142][ T4367] team0 (unregistering): Port device team_slave_0 removed [ 430.352240][ T5156] Bluetooth: hci1: command tx timeout [ 430.977034][ T7397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.419798][ T7681] netlink: 22 bytes leftover after parsing attributes in process `syz.2.356'. [ 431.756164][ T7397] team0: Port device team_slave_0 added [ 431.783031][ T7397] team0: Port device team_slave_1 added [ 432.824594][ T5156] Bluetooth: hci1: command tx timeout [ 436.188808][ T7705] syz.2.361 (7705) used greatest stack depth: 17832 bytes left [ 436.414781][ T7397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.414792][ T7397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.414804][ T7397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.514498][ T7397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.514509][ T7397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.514522][ T7397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.087139][ T7397] hsr_slave_0: entered promiscuous mode [ 437.095977][ T7397] hsr_slave_1: entered promiscuous mode [ 437.097123][ T7397] debugfs: 'hsr0' already exists in 'hsr' [ 437.097147][ T7397] Cannot create hsr debugfs directory [ 437.420214][ T7723] netlink: 'syz.1.364': attribute type 4 has an invalid length. [ 437.471726][ T7722] netlink: 'syz.1.364': attribute type 4 has an invalid length. [ 438.690992][ T6071] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 438.860651][ T6071] usb 2-1: Using ep0 maxpacket: 8 [ 438.895154][ T6071] usb 2-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 438.895754][ T6071] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.895799][ T6071] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 65 [ 438.896163][ T6071] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 438.896212][ T6071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.236719][ T6071] usb 2-1: config 0 descriptor?? [ 439.308206][ T7580] chnl_net:caif_netlink_parms(): no params data found [ 440.845794][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 440.874690][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 440.899420][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 440.901110][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 440.901830][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 441.111545][ T7641] chnl_net:caif_netlink_parms(): no params data found [ 441.249598][ T9] usb 2-1: USB disconnect, device number 5 [ 441.926228][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.926367][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.926588][ T7580] bridge_slave_0: entered allmulticast mode [ 441.959713][ T7580] bridge_slave_0: entered promiscuous mode [ 442.053323][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.053469][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.053705][ T7580] bridge_slave_1: entered allmulticast mode [ 442.063007][ T7580] bridge_slave_1: entered promiscuous mode [ 442.654285][ T7774] netlink: 22 bytes leftover after parsing attributes in process `syz.2.369'. [ 443.890326][ T5156] Bluetooth: hci0: command tx timeout [ 444.184517][ T7580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.187009][ T7641] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.187151][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.187351][ T7641] bridge_slave_0: entered allmulticast mode [ 444.194785][ T7641] bridge_slave_0: entered promiscuous mode [ 445.752666][ T7580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.753241][ T7641] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.753865][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.754075][ T7641] bridge_slave_1: entered allmulticast mode [ 445.756866][ T7641] bridge_slave_1: entered promiscuous mode [ 446.254789][ T5156] Bluetooth: hci0: command tx timeout [ 446.270740][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.273303][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.022937][ T7805] netlink: 'syz.1.376': attribute type 1 has an invalid length. [ 447.064357][ T4367] bridge_slave_1: left allmulticast mode [ 447.064390][ T4367] bridge_slave_1: left promiscuous mode [ 447.064644][ T4367] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.160851][ T4367] bridge_slave_0: left allmulticast mode [ 447.160883][ T4367] bridge_slave_0: left promiscuous mode [ 447.161139][ T4367] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.235505][ T4367] bridge_slave_1: left allmulticast mode [ 447.235537][ T4367] bridge_slave_1: left promiscuous mode [ 447.235788][ T4367] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.291068][ T4367] bridge_slave_0: left allmulticast mode [ 447.291099][ T4367] bridge_slave_0: left promiscuous mode [ 447.291361][ T4367] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.383707][ T4367] bridge_slave_1: left allmulticast mode [ 447.383739][ T4367] bridge_slave_1: left promiscuous mode [ 447.383983][ T4367] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.533827][ T4367] bridge_slave_0: left allmulticast mode [ 447.533860][ T4367] bridge_slave_0: left promiscuous mode [ 447.534113][ T4367] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.141747][ T4367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.241487][ T4367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.269417][ T5156] Bluetooth: hci0: command tx timeout [ 448.463976][ T4367] bond0 (unregistering): Released all slaves [ 449.672290][ T4367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.849438][ T4367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.925566][ T4367] bond0 (unregistering): Released all slaves [ 450.831442][ T5156] Bluetooth: hci0: command tx timeout [ 451.170346][ T4367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.249949][ T4367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.341670][ T4367] bond0 (unregistering): Released all slaves [ 451.541413][ T7805] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 451.697441][ T7580] team0: Port device team_slave_0 added [ 451.744596][ T7641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.767380][ T7580] team0: Port device team_slave_1 added [ 451.811964][ T7641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.759944][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.759958][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.759982][ T7580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.763759][ T7641] team0: Port device team_slave_0 added [ 453.765623][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.765635][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.765659][ T7580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.882571][ T7641] team0: Port device team_slave_1 added [ 454.279300][ T4367] hsr_slave_0: left promiscuous mode [ 454.394659][ T4367] hsr_slave_1: left promiscuous mode [ 454.395574][ T4367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.488731][ T4367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.586881][ T4367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.147411][ T4367] hsr_slave_0: left promiscuous mode [ 455.180160][ T4367] hsr_slave_1: left promiscuous mode [ 455.181061][ T4367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.395436][ T4367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.120522][ T4367] team0 (unregistering): Port device team_slave_1 removed [ 457.260055][ T4367] team0 (unregistering): Port device team_slave_0 removed [ 457.900118][ T4367] team0 (unregistering): Port device team_slave_1 removed [ 458.023743][ T4367] team0 (unregistering): Port device team_slave_0 removed [ 458.982816][ T4367] team0 (unregistering): Port device team_slave_1 removed [ 459.130870][ T4367] team0 (unregistering): Port device team_slave_0 removed [ 459.981463][ T7641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.981477][ T7641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.981499][ T7641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.149857][ T5156] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 460.202411][ T7641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.202426][ T7641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.202451][ T7641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.694786][ T7580] hsr_slave_0: entered promiscuous mode [ 460.696098][ T7580] hsr_slave_1: entered promiscuous mode [ 461.963453][ T7641] hsr_slave_0: entered promiscuous mode [ 461.981760][ T7641] hsr_slave_1: entered promiscuous mode [ 461.989836][ T7641] debugfs: 'hsr0' already exists in 'hsr' [ 461.989861][ T7641] Cannot create hsr debugfs directory [ 463.834819][ T7753] chnl_net:caif_netlink_parms(): no params data found [ 468.895663][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 468.906436][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 468.908105][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 468.940427][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 468.948428][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 471.061775][ T7753] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.061918][ T7753] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.062130][ T7753] bridge_slave_0: entered allmulticast mode [ 471.064906][ T7753] bridge_slave_0: entered promiscuous mode [ 471.153699][ T5844] Bluetooth: hci3: command tx timeout [ 471.657749][ T7753] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.657888][ T7753] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.658118][ T7753] bridge_slave_1: entered allmulticast mode [ 471.671005][ T7753] bridge_slave_1: entered promiscuous mode [ 472.653097][ T7753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.779583][ T7753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.239396][ T5844] Bluetooth: hci3: command tx timeout [ 474.355814][ T7753] team0: Port device team_slave_0 added [ 474.425220][ T7753] team0: Port device team_slave_1 added [ 475.735312][ T5844] Bluetooth: hci3: command tx timeout [ 476.824513][ T7753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.824528][ T7753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.824551][ T7753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.893656][ T7753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.893671][ T7753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.893696][ T7753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.217187][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 477.686278][ T4367] bridge_slave_1: left allmulticast mode [ 477.686300][ T4367] bridge_slave_1: left promiscuous mode [ 477.686456][ T4367] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.760816][ T4367] bridge_slave_0: left allmulticast mode [ 477.760847][ T4367] bridge_slave_0: left promiscuous mode [ 477.761141][ T4367] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.789498][ T5156] Bluetooth: hci3: command tx timeout [ 479.621158][ T4367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.730239][ T4367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.056521][ T4367] bond0 (unregistering): Released all slaves [ 481.266204][ T7753] hsr_slave_0: entered promiscuous mode [ 481.268541][ T7753] hsr_slave_1: entered promiscuous mode [ 481.269558][ T7753] debugfs: 'hsr0' already exists in 'hsr' [ 481.269580][ T7753] Cannot create hsr debugfs directory [ 481.559350][ T4367] hsr_slave_0: left promiscuous mode [ 481.579330][ T4367] hsr_slave_1: left promiscuous mode [ 481.579970][ T4367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.619859][ T4367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.110372][ T4367] team0 (unregistering): Port device team_slave_1 removed [ 482.239783][ T4367] team0 (unregistering): Port device team_slave_0 removed [ 484.111080][ T8071] netlink: 'syz.1.405': attribute type 1 has an invalid length. [ 484.839288][ T8071] 8021q: adding VLAN 0 to HW filter on device bond2 [ 484.987631][ T8075] macvlan2: entered promiscuous mode [ 484.989011][ T8075] bond2: entered promiscuous mode [ 485.019427][ T8075] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 485.261942][ T8075] bond2: left promiscuous mode [ 485.290164][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 485.327289][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 485.329025][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 485.351028][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 485.351773][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 487.047585][ T7940] chnl_net:caif_netlink_parms(): no params data found [ 487.389299][ T5156] Bluetooth: hci5: command tx timeout [ 491.073542][ T5156] Bluetooth: hci5: command tx timeout [ 493.527906][ T5156] Bluetooth: hci5: command tx timeout [ 495.082742][ T7940] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.082967][ T7940] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.083185][ T7940] bridge_slave_0: entered allmulticast mode [ 495.101405][ T7940] bridge_slave_0: entered promiscuous mode [ 495.290296][ T7940] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.290370][ T7940] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.290521][ T7940] bridge_slave_1: entered allmulticast mode [ 495.292043][ T7940] bridge_slave_1: entered promiscuous mode [ 495.642718][ T5156] Bluetooth: hci5: command tx timeout [ 496.235757][ T4367] bridge_slave_1: left allmulticast mode [ 496.235790][ T4367] bridge_slave_1: left promiscuous mode [ 496.236053][ T4367] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.474064][ T4367] bridge_slave_0: left allmulticast mode [ 496.474095][ T4367] bridge_slave_0: left promiscuous mode [ 496.474363][ T4367] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.760005][ T4367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.929839][ T4367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.152402][ T4367] bond0 (unregistering): Released all slaves [ 499.033435][ T7940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.248157][ T7940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.902704][ T8177] vcan0: entered allmulticast mode [ 499.969756][ T8180] vcan0: left allmulticast mode [ 499.976422][ T7940] team0: Port device team_slave_0 added [ 500.739489][ T4367] hsr_slave_0: left promiscuous mode [ 500.790118][ T4367] hsr_slave_1: left promiscuous mode [ 500.790710][ T4367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.857276][ T4367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.935931][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 501.006897][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 501.016624][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 501.029755][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 501.030327][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 502.763893][ T8206] netlink: 'syz.1.418': attribute type 4 has an invalid length. [ 502.815297][ T8207] netlink: 'syz.1.418': attribute type 4 has an invalid length. [ 503.149244][ T5156] Bluetooth: hci0: command tx timeout [ 503.203649][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.420'. [ 503.203675][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.420'. [ 503.449713][ T4367] team0 (unregistering): Port device team_slave_1 removed [ 503.557799][ T4367] team0 (unregistering): Port device team_slave_0 removed [ 504.096940][ T7940] team0: Port device team_slave_1 added [ 505.240616][ T5156] Bluetooth: hci0: command tx timeout [ 505.970220][ T7940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.970235][ T7940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.970259][ T7940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.053229][ T7940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.053239][ T7940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.053253][ T7940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.295269][ T5156] Bluetooth: hci0: command tx timeout [ 508.295491][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.295590][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.551524][ T8086] chnl_net:caif_netlink_parms(): no params data found [ 509.636849][ T7940] hsr_slave_0: entered promiscuous mode [ 509.794838][ T7940] hsr_slave_1: entered promiscuous mode [ 509.922121][ T8254] binder: BINDER_SET_CONTEXT_MGR already set [ 509.922136][ T8254] binder: 8252:8254 ioctl 4018620d 200000004a80 returned -16 [ 510.359416][ T5156] Bluetooth: hci0: command tx timeout [ 512.189338][ T8086] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.190300][ T8086] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.190485][ T8086] bridge_slave_0: entered allmulticast mode [ 512.229654][ T8086] bridge_slave_0: entered promiscuous mode [ 512.257582][ T8086] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.257656][ T8086] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.257764][ T8086] bridge_slave_1: entered allmulticast mode [ 512.263893][ T8086] bridge_slave_1: entered promiscuous mode [ 516.179443][ T8296] netlink: 44 bytes leftover after parsing attributes in process `syz.1.431'. [ 516.231852][ T8297] netlink: 44 bytes leftover after parsing attributes in process `syz.1.431'. [ 516.311999][ T8086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.312228][ T4367] bridge_slave_1: left allmulticast mode [ 516.312253][ T4367] bridge_slave_1: left promiscuous mode [ 516.312495][ T4367] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.575054][ T4367] bridge_slave_0: left allmulticast mode [ 516.575075][ T4367] bridge_slave_0: left promiscuous mode [ 516.575241][ T4367] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.887124][ T4367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.904666][ T8312] binder: BINDER_SET_CONTEXT_MGR already set [ 517.904679][ T8312] binder: 8311:8312 ioctl 4018620d 200000004a80 returned -16 [ 517.969872][ T4367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.035460][ T4367] bond0 (unregistering): Released all slaves [ 518.395063][ T8086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.249835][ T4367] hsr_slave_0: left promiscuous mode [ 519.265843][ T4367] hsr_slave_1: left promiscuous mode [ 519.266481][ T4367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.654838][ T4367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.404817][ T4367] team0 (unregistering): Port device team_slave_1 removed [ 520.559700][ T4367] team0 (unregistering): Port device team_slave_0 removed [ 521.228614][ T8321] netlink: 44 bytes leftover after parsing attributes in process `syz.1.436'. [ 521.232235][ T8325] netlink: 34 bytes leftover after parsing attributes in process `syz.1.436'. [ 521.235896][ T8332] netlink: 44 bytes leftover after parsing attributes in process `syz.2.439'. [ 521.236089][ T8333] netlink: 44 bytes leftover after parsing attributes in process `syz.2.439'. [ 521.257387][ T8086] team0: Port device team_slave_0 added [ 521.288333][ T8086] team0: Port device team_slave_1 added [ 523.018259][ T8086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.018274][ T8086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.018295][ T8086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.026676][ T8086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.026689][ T8086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.026712][ T8086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.067679][ T8191] chnl_net:caif_netlink_parms(): no params data found [ 524.147781][ T8086] hsr_slave_0: entered promiscuous mode [ 524.155033][ T8086] hsr_slave_1: entered promiscuous mode [ 524.156071][ T8086] debugfs: 'hsr0' already exists in 'hsr' [ 524.156094][ T8086] Cannot create hsr debugfs directory [ 525.951869][ T8370] netlink: 44 bytes leftover after parsing attributes in process `syz.1.447'. [ 525.952031][ T8372] netlink: 44 bytes leftover after parsing attributes in process `syz.1.447'. [ 525.952318][ T8191] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.952768][ T8191] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.952961][ T8191] bridge_slave_0: entered allmulticast mode [ 525.955731][ T8191] bridge_slave_0: entered promiscuous mode [ 525.983635][ T8191] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.984590][ T8191] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.984760][ T8191] bridge_slave_1: entered allmulticast mode [ 525.987306][ T8191] bridge_slave_1: entered promiscuous mode [ 526.812965][ T8191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.836654][ T8191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.186428][ T8389] netlink: 'syz.2.454': attribute type 1 has an invalid length. [ 527.248637][ T8389] 8021q: adding VLAN 0 to HW filter on device bond2 [ 527.256705][ T8191] team0: Port device team_slave_0 added [ 527.278056][ T8391] macvlan2: entered promiscuous mode [ 527.278985][ T8391] bond2: entered promiscuous mode [ 527.286389][ T8391] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 527.352068][ T8391] bond2: left promiscuous mode [ 527.494770][ T8191] team0: Port device team_slave_1 added [ 527.897974][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.897986][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.897999][ T8191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.215751][ T8407] loop3: detected capacity change from 0 to 7 [ 528.230975][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.230989][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.231012][ T8191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.247943][ T8407] Dev loop3: unable to read RDB block 7 [ 528.247971][ T8407] loop3: AHDI p1 [ 528.248001][ T8407] loop3: partition table partially beyond EOD, truncated [ 528.515803][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 528.527863][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 528.529663][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 528.536970][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 528.537697][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 528.694756][ T8416] ================================================================== [ 528.694769][ T8416] BUG: KASAN: global-out-of-bounds in kernfs_root+0xda/0x230 [ 528.694785][ T8416] Read of size 8 at addr ffffffff8b0b0af0 by task syz.2.460/8416 [ 528.694793][ T8416] [ 528.694812][ T8416] CPU: 1 UID: 0 PID: 8416 Comm: syz.2.460 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 528.694824][ T8416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 528.694833][ T8416] Call Trace: [ 528.694838][ T8416] [ 528.694842][ T8416] dump_stack_lvl+0x189/0x250 [ 528.694858][ T8416] ? rcu_is_watching+0x15/0xb0 [ 528.694873][ T8416] ? __kasan_check_byte+0x12/0x40 [ 528.694885][ T8416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 528.694898][ T8416] ? rcu_is_watching+0x15/0xb0 [ 528.694911][ T8416] ? lock_release+0x4b/0x3e0 [ 528.694925][ T8416] ? __virt_addr_valid+0x1c8/0x5c0 [ 528.694934][ T8416] ? __virt_addr_valid+0x4a5/0x5c0 [ 528.694943][ T8416] print_report+0xca/0x240 [ 528.694955][ T8416] ? kernfs_root+0xda/0x230 [ 528.694963][ T8416] kasan_report+0x118/0x150 [ 528.694975][ T8416] ? kernfs_root+0xda/0x230 [ 528.694985][ T8416] ? kernfs_root+0x1c/0x230 [ 528.694994][ T8416] kernfs_root+0xda/0x230 [ 528.695003][ T8416] kernfs_remove_by_name_ns+0x2b/0x130 [ 528.695017][ T8416] bus_remove_driver+0x19b/0x300 [ 528.695044][ T8416] comedi_device_detach_locked+0x175/0x750 [ 528.695079][ T8416] comedi_unlocked_ioctl+0xce4/0x1020 [ 528.695103][ T8416] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 528.695131][ T8416] ? __pfx_smack_log+0x10/0x10 [ 528.695157][ T8416] ? smk_access+0x14c/0x4e0 [ 528.695172][ T8416] ? smk_tskacc+0x2fc/0x370 [ 528.695181][ T8416] ? smack_file_ioctl+0x24d/0x340 [ 528.695192][ T8416] ? __pfx_smack_file_ioctl+0x10/0x10 [ 528.695204][ T8416] ? __fget_files+0x2a/0x420 [ 528.695217][ T8416] ? __fget_files+0x3a6/0x420 [ 528.695229][ T8416] ? __fget_files+0x2a/0x420 [ 528.695243][ T8416] ? bpf_lsm_file_ioctl+0x9/0x20 [ 528.695254][ T8416] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 528.695264][ T8416] __se_sys_ioctl+0xfc/0x170 [ 528.695275][ T8416] do_syscall_64+0xfa/0x3b0 [ 528.695285][ T8416] ? lockdep_hardirqs_on+0x9c/0x150 [ 528.695298][ T8416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.695308][ T8416] ? clear_bhb_loop+0x60/0xb0 [ 528.695319][ T8416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.695333][ T8416] RIP: 0033:0x7f5afa81eec9 [ 528.695345][ T8416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.695354][ T8416] RSP: 002b:00007f5af8a86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 528.695366][ T8416] RAX: ffffffffffffffda RBX: 00007f5afaa75fa0 RCX: 00007f5afa81eec9 [ 528.695373][ T8416] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000006 [ 528.695380][ T8416] RBP: 00007f5afa8a1f91 R08: 0000000000000000 R09: 0000000000000000 [ 528.695387][ T8416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.695393][ T8416] R13: 00007f5afaa76038 R14: 00007f5afaa75fa0 R15: 00007fff30fc07f8 [ 528.695404][ T8416] [ 528.695408][ T8416] [ 528.695410][ T8416] The buggy address belongs to the variable: [ 528.695414][ T8416] .str.8+0x30/0x40 [ 528.695422][ T8416] [ 528.695424][ T8416] The buggy address belongs to the physical page: [ 528.695433][ T8416] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xb0b0 [ 528.695445][ T8416] flags: 0x80000000002000(reserved|node=0|zone=1) [ 528.695462][ T8416] raw: 0080000000002000 ffffea00002c2c08 ffffea00002c2c08 0000000000000000 [ 528.695470][ T8416] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 528.695475][ T8416] page dumped because: kasan: bad access detected [ 528.695480][ T8416] page_owner info is not present (never set?) [ 528.695488][ T8416] [ 528.695490][ T8416] Memory state around the buggy address: [ 528.695495][ T8416] ffffffff8b0b0980: f9 f9 f9 f9 00 00 04 f9 f9 f9 f9 f9 07 f9 f9 f9 [ 528.695502][ T8416] ffffffff8b0b0a00: 00 00 05 f9 f9 f9 f9 f9 00 07 f9 f9 00 00 00 00 [ 528.695509][ T8416] >ffffffff8b0b0a80: 00 00 00 f9 f9 f9 f9 f9 00 00 01 f9 f9 f9 f9 f9 [ 528.695513][ T8416] ^ [ 528.695519][ T8416] ffffffff8b0b0b00: 00 00 00 00 f9 f9 f9 f9 00 00 00 03 f9 f9 f9 f9 [ 528.695526][ T8416] ffffffff8b0b0b80: 00 00 00 00 f9 f9 f9 f9 00 00 06 f9 f9 f9 f9 f9 [ 528.695531][ T8416] ================================================================== [ 528.695608][ T8416] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 528.695622][ T8416] CPU: 1 UID: 0 PID: 8416 Comm: syz.2.460 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 528.695644][ T8416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 528.695655][ T8416] Call Trace: [ 528.695662][ T8416] [ 528.695670][ T8416] dump_stack_lvl+0x99/0x250 [ 528.695705][ T8416] ? __asan_memcpy+0x40/0x70 [ 528.695716][ T8416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 528.695729][ T8416] ? __pfx__printk+0x10/0x10 [ 528.695743][ T8416] vpanic+0x281/0x750 [ 528.695756][ T8416] ? preempt_schedule+0xae/0xc0 [ 528.695770][ T8416] ? __pfx_vpanic+0x10/0x10 [ 528.695782][ T8416] ? preempt_schedule_common+0x83/0xd0 [ 528.695795][ T8416] ? preempt_schedule+0xae/0xc0 [ 528.695808][ T8416] ? __pfx_preempt_schedule+0x10/0x10 [ 528.695823][ T8416] panic+0xb9/0xc0 [ 528.695835][ T8416] ? __pfx_panic+0x10/0x10 [ 528.695849][ T8416] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 528.695865][ T8416] ? kernfs_root+0xda/0x230 [ 528.695874][ T8416] check_panic_on_warn+0x89/0xb0 [ 528.695884][ T8416] ? kernfs_root+0xda/0x230 [ 528.695892][ T8416] end_report+0x78/0x160 [ 528.695904][ T8416] kasan_report+0x129/0x150 [ 528.695917][ T8416] ? kernfs_root+0xda/0x230 [ 528.695927][ T8416] ? kernfs_root+0x1c/0x230 [ 528.695936][ T8416] kernfs_root+0xda/0x230 [ 528.695946][ T8416] kernfs_remove_by_name_ns+0x2b/0x130 [ 528.695958][ T8416] bus_remove_driver+0x19b/0x300 [ 528.695971][ T8416] comedi_device_detach_locked+0x175/0x750 [ 528.695987][ T8416] comedi_unlocked_ioctl+0xce4/0x1020 [ 528.696000][ T8416] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 528.696014][ T8416] ? __pfx_smack_log+0x10/0x10 [ 528.696029][ T8416] ? smk_access+0x14c/0x4e0 [ 528.696043][ T8416] ? smk_tskacc+0x2fc/0x370 [ 528.696052][ T8416] ? smack_file_ioctl+0x24d/0x340 [ 528.696063][ T8416] ? __pfx_smack_file_ioctl+0x10/0x10 [ 528.696075][ T8416] ? __fget_files+0x2a/0x420 [ 528.696087][ T8416] ? __fget_files+0x3a6/0x420 [ 528.696100][ T8416] ? __fget_files+0x2a/0x420 [ 528.696112][ T8416] ? bpf_lsm_file_ioctl+0x9/0x20 [ 528.696123][ T8416] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 528.696134][ T8416] __se_sys_ioctl+0xfc/0x170 [ 528.696145][ T8416] do_syscall_64+0xfa/0x3b0 [ 528.696154][ T8416] ? lockdep_hardirqs_on+0x9c/0x150 [ 528.696168][ T8416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.696177][ T8416] ? clear_bhb_loop+0x60/0xb0 [ 528.696188][ T8416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.696197][ T8416] RIP: 0033:0x7f5afa81eec9 [ 528.696205][ T8416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.696214][ T8416] RSP: 002b:00007f5af8a86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 528.696224][ T8416] RAX: ffffffffffffffda RBX: 00007f5afaa75fa0 RCX: 00007f5afa81eec9 [ 528.696232][ T8416] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000006 [ 528.696238][ T8416] RBP: 00007f5afa8a1f91 R08: 0000000000000000 R09: 0000000000000000 [ 528.696244][ T8416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.696250][ T8416] R13: 00007f5afaa76038 R14: 00007f5afaa75fa0 R15: 00007fff30fc07f8 [ 528.696261][ T8416] [ 528.696531][ T8416] Kernel Offset: disabled