last executing test programs: 20m54.385653523s ago: executing program 2 (id=6): syz_open_dev$evdev(0x0, 0x1, 0x2002) syz_open_procfs(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x27, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0xf, 0x7, 0x1000, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x13) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x75}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) 20m51.830478772s ago: executing program 2 (id=7): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getrusage(0x1, &(0x7f0000000800)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x22, &(0x7f0000000180)=@llc={0x1a, 0x17, 0x5, 0x9, 0xc, 0xb, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f20700", 0x0, 0x2f, 0x0, @private2, @remote}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_submit(r6, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x378, &(0x7f00000008c0)="4445fc632f407dbcc47fc155a6c8c6cb501d745c666123d4906136da7442afb8466d76083b1b304574b9a6a49b87c5d8a2f5871800de9df7526f0503197d23c8e6c1360cfca8a88ce785f9029dc7fd053cabaaf4ed80297f6b4f514d") 20m47.848299236s ago: executing program 2 (id=10): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000680), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) 20m47.28723766s ago: executing program 2 (id=13): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 20m41.549265651s ago: executing program 2 (id=16): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r1}, 0x0, &(0x7f00000013c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 20m40.935942919s ago: executing program 2 (id=18): socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ptrace$setregs(0xf, r0, 0x6, &(0x7f00000003c0)) read$FUSE(0xffffffffffffffff, &(0x7f0000001b00)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e00000000000000030000000700000003000000fdffffff00000000000000002e000af661a3902707559757c004de957f80f8c0bfc6d024d9d21b27f504374f1c364bb559daf1302bd4c726b70b18ee55c99a2cc625af85b48bb2b72383943a3f25764fdfc3a127314ce78f92e1adcd67abca6f1c0111fed36d819a10200f523fcb367af66fc2c5cfa63c9eda16fdd75666b1720f662579add5dd7c48643147599f1520922dd16f5b72d5ec"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x28) 20m32.232364192s ago: executing program 4 (id=41): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x700000000000000) 20m31.875399019s ago: executing program 4 (id=43): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0xcc, 0xc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r1, 0x0, 0x0}, 0x10) 20m31.364425294s ago: executing program 4 (id=45): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 20m31.081275433s ago: executing program 4 (id=48): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80), 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$kcm(0xa, 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) 20m30.890107s ago: executing program 4 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80000001}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x65, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) close(r6) 20m29.329914418s ago: executing program 4 (id=52): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) unshare(0x64000600) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, 0x0, 0x0, 0xe7b, 0x0, 0x0) 20m23.803732305s ago: executing program 32 (id=18): socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ptrace$setregs(0xf, r0, 0x6, &(0x7f00000003c0)) read$FUSE(0xffffffffffffffff, &(0x7f0000001b00)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e00000000000000030000000700000003000000fdffffff00000000000000002e000af661a3902707559757c004de957f80f8c0bfc6d024d9d21b27f504374f1c364bb559daf1302bd4c726b70b18ee55c99a2cc625af85b48bb2b72383943a3f25764fdfc3a127314ce78f92e1adcd67abca6f1c0111fed36d819a10200f523fcb367af66fc2c5cfa63c9eda16fdd75666b1720f662579add5dd7c48643147599f1520922dd16f5b72d5ec"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x28) 20m14.186791928s ago: executing program 33 (id=52): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) unshare(0x64000600) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, 0x0, 0x0, 0xe7b, 0x0, 0x0) 20m12.503049662s ago: executing program 1 (id=81): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32], 0x48) r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x2000) 20m11.912722649s ago: executing program 1 (id=83): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80), 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$kcm(0xa, 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) 20m11.602862557s ago: executing program 1 (id=84): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) 20m4.837914001s ago: executing program 1 (id=89): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r0}, 0x10) 20m4.508038041s ago: executing program 1 (id=91): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = inotify_init1(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000440)=@framed={{}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffa1}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) inotify_add_watch(r3, 0x0, 0x40000000) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1\x00', 0xe42, 0x1ff) 20m4.174623468s ago: executing program 1 (id=93): listen(0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000400)="89e7ee2c78dad9b4b473fec988cafbc5abd88e89cbf7c62256d096cb8b87334cd352e9ee431403439127bc3e3e5b417c36d11174", 0x34}], 0x1) 19m48.789770852s ago: executing program 34 (id=93): listen(0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000400)="89e7ee2c78dad9b4b473fec988cafbc5abd88e89cbf7c62256d096cb8b87334cd352e9ee431403439127bc3e3e5b417c36d11174", 0x34}], 0x1) 19m38.407053926s ago: executing program 0 (id=130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x8000}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) 19m38.363597673s ago: executing program 0 (id=131): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000007800)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) 19m38.303622154s ago: executing program 0 (id=132): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) 19m32.959816317s ago: executing program 0 (id=139): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000007800)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) 19m32.832300841s ago: executing program 0 (id=140): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 19m32.572837162s ago: executing program 0 (id=141): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @loopback}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x2a) 19m17.451655735s ago: executing program 35 (id=141): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @loopback}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x2a) 8m27.724231705s ago: executing program 3 (id=694): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5de0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 8m27.705160408s ago: executing program 3 (id=695): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000003c0), 0x1, 0x20041) write$FUSE_INIT(r4, &(0x7f0000000680)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xffff7ffe, 0x20c441, 0x0, 0x7, 0x3, 0x20000f, 0x0, 0x0, 0x2}}, 0x50) 8m26.332167902s ago: executing program 3 (id=696): getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {0x0, 0x410c, 0xea}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x4044000) 8m23.286037936s ago: executing program 3 (id=697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$vcsn(&(0x7f00000003c0), 0x1, 0x20041) write$FUSE_INIT(r4, &(0x7f0000000680)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xffff7ffe, 0x20c441, 0x0, 0x7, 0x3, 0x20000f, 0x0, 0x0, 0x2}}, 0x50) 8m21.548601097s ago: executing program 3 (id=698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 8m20.316829889s ago: executing program 3 (id=699): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x2, 0xecb, 0x3, 0x3}, 'syz1\x00', 0x1e}) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 8m4.566288742s ago: executing program 36 (id=699): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x2, 0xecb, 0x3, 0x3}, 'syz1\x00', 0x1e}) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 10.974370683s ago: executing program 9 (id=987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 9.751339136s ago: executing program 9 (id=988): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 9.509208129s ago: executing program 9 (id=989): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x3, 0x5002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="130f000000000000f6ff06"], 0x18}}, 0x0) 8.172063035s ago: executing program 9 (id=990): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getitimer(0x0, &(0x7f00000001c0)) 5.952532694s ago: executing program 9 (id=991): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) 0s ago: executing program 9 (id=992): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 48.614713][ T7790] usb 10-1: device descriptor read/8, error -71 [ 948.701152][ T9850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.701169][ T9850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.701195][ T9850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.760614][ T9850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.760631][ T9850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.760658][ T9850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.854761][ T7790] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 948.877847][ T7790] usb 10-1: device descriptor read/8, error -71 [ 949.007825][ T7790] usb usb10-port1: unable to enumerate USB device [ 949.152253][ T9850] hsr_slave_0: entered promiscuous mode [ 949.153013][ T9850] hsr_slave_1: entered promiscuous mode [ 949.154382][ T9850] debugfs: 'hsr0' already exists in 'hsr' [ 949.154406][ T9850] Cannot create hsr debugfs directory [ 949.550726][ T9771] veth0_vlan: entered promiscuous mode [ 949.763445][ T5841] Bluetooth: hci4: command tx timeout [ 949.802933][ T9771] veth1_vlan: entered promiscuous mode [ 950.001652][ T9886] chnl_net:caif_netlink_parms(): no params data found [ 951.054291][ T9918] chnl_net:caif_netlink_parms(): no params data found [ 951.078378][ T9886] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.078593][ T9886] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.078819][ T9886] bridge_slave_0: entered allmulticast mode [ 951.081529][ T9886] bridge_slave_0: entered promiscuous mode [ 952.730664][ T9886] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.730842][ T9886] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.731078][ T9886] bridge_slave_1: entered allmulticast mode [ 952.741430][ T9886] bridge_slave_1: entered promiscuous mode [ 953.523825][ T9963] 9pnet_fd: Insufficient options for proto=fd [ 957.147149][ T9771] veth0_macvtap: entered promiscuous mode [ 957.154636][ T9886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.187179][ T9886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.293509][ T44] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 957.415107][ T9771] veth1_macvtap: entered promiscuous mode [ 957.449962][ T44] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 957.449996][ T44] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 49737, setting to 1024 [ 957.459502][ T44] usb 10-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 957.459529][ T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.459550][ T44] usb 10-1: Product: syz [ 957.459563][ T44] usb 10-1: Manufacturer: syz [ 957.459577][ T44] usb 10-1: SerialNumber: syz [ 957.475648][ T44] usb 10-1: config 0 descriptor?? [ 957.495364][ T44] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 957.929197][ T44] usb 10-1: USB disconnect, device number 6 [ 957.996940][ T9886] team0: Port device team_slave_0 added [ 957.997632][ T9918] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.997784][ T9918] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.997955][ T9918] bridge_slave_0: entered allmulticast mode [ 958.031464][ T9918] bridge_slave_0: entered promiscuous mode [ 958.252658][ T9886] team0: Port device team_slave_1 added [ 958.259519][ T9918] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.259678][ T9918] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.259918][ T9918] bridge_slave_1: entered allmulticast mode [ 958.262736][ T9918] bridge_slave_1: entered promiscuous mode [ 958.671943][ T9987] netlink: 16 bytes leftover after parsing attributes in process `syz.9.727'. [ 959.869254][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.869268][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.869286][ T9886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.886592][ T9918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.904504][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.904521][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.904546][ T9886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.956972][ T9918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 960.025271][ T9771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.510162][ T9918] team0: Port device team_slave_0 added [ 960.685772][ T9771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 960.704224][ T9918] team0: Port device team_slave_1 added [ 960.704986][ T9850] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 960.785825][ T9886] hsr_slave_0: entered promiscuous mode [ 960.787156][ T9886] hsr_slave_1: entered promiscuous mode [ 960.788046][ T9886] debugfs: 'hsr0' already exists in 'hsr' [ 960.788068][ T9886] Cannot create hsr debugfs directory [ 960.974695][ T9850] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 961.821279][ T9996] 9pnet_fd: Insufficient options for proto=fd [ 962.286999][ T9850] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 962.462564][ T9918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.462580][ T9918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.462606][ T9918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.734522][ T9850] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 963.623196][ T67] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.674972][ T9918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.674987][ T9918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.675013][ T9918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.700765][ T67] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.760218][ T1148] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.871471][ T1148] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.750147][ T9918] hsr_slave_0: entered promiscuous mode [ 964.752607][ T9918] hsr_slave_1: entered promiscuous mode [ 964.754341][ T9918] debugfs: 'hsr0' already exists in 'hsr' [ 964.754367][ T9918] Cannot create hsr debugfs directory [ 965.579072][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 965.582427][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 965.593945][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 965.605306][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 965.606201][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 966.955461][ T1413] bridge_slave_1: left allmulticast mode [ 966.955495][ T1413] bridge_slave_1: left promiscuous mode [ 966.955756][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.017636][ T1413] bridge_slave_0: left allmulticast mode [ 967.017670][ T1413] bridge_slave_0: left promiscuous mode [ 967.017942][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.087871][ T1413] bridge_slave_1: left allmulticast mode [ 967.087904][ T1413] bridge_slave_1: left promiscuous mode [ 967.088154][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.175123][ T1413] bridge_slave_0: left allmulticast mode [ 967.175157][ T1413] bridge_slave_0: left promiscuous mode [ 967.175404][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.683634][ T5838] Bluetooth: hci0: command tx timeout [ 969.024356][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 969.085165][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 969.138068][ T1413] bond0 (unregistering): Released all slaves [ 969.763570][ T5838] Bluetooth: hci0: command tx timeout [ 970.475249][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 970.534176][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 970.559112][ T1413] bond0 (unregistering): Released all slaves [ 971.073433][ T37] audit: type=1326 audit(1757337769.998:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10020 comm="syz.9.734" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a7cebe9 code=0x0 [ 971.570163][ T1413] hsr_slave_0: left promiscuous mode [ 971.613173][ T1413] hsr_slave_1: left promiscuous mode [ 971.614408][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.684606][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.846812][ T5838] Bluetooth: hci0: command tx timeout [ 971.888362][ T1413] hsr_slave_0: left promiscuous mode [ 971.924144][ T1413] hsr_slave_1: left promiscuous mode [ 971.926499][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.976390][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 972.171793][ T1413] veth1_vlan: left promiscuous mode [ 972.183599][ T1413] veth0_vlan: left promiscuous mode [ 973.934032][ T5838] Bluetooth: hci0: command tx timeout [ 975.504450][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 975.684300][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 978.424229][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 978.625267][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 980.512430][ T9850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.905710][ T9850] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.960557][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.963575][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.000274][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.000474][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.089730][T10012] chnl_net:caif_netlink_parms(): no params data found [ 983.354341][T10012] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.354507][T10012] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.354741][T10012] bridge_slave_0: entered allmulticast mode [ 983.357465][T10012] bridge_slave_0: entered promiscuous mode [ 983.434263][T10012] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.434413][T10012] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.434652][T10012] bridge_slave_1: entered allmulticast mode [ 983.441224][T10012] bridge_slave_1: entered promiscuous mode [ 983.918660][T10012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.996037][T10012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.144636][T10012] team0: Port device team_slave_0 added [ 985.189981][T10012] team0: Port device team_slave_1 added [ 985.733327][T10106] netlink: 9 bytes leftover after parsing attributes in process `syz.9.740'. [ 985.894986][T10107] netlink: 5 bytes leftover after parsing attributes in process `syz.9.740'. [ 987.566651][T10106] gretap0: entered promiscuous mode [ 987.575724][T10107] 0猉功D: renamed from gretap0 [ 987.610016][T10107] 0猉功D: left promiscuous mode [ 987.610046][T10107] 0猉功D: entered allmulticast mode [ 987.612839][T10107] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 987.956187][T10012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.956203][T10012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.956229][T10012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.995754][T10012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.995769][T10012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.995795][T10012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.394301][ T37] audit: type=1326 audit(1757337787.318:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10111 comm="syz.9.741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a7cebe9 code=0x0 [ 988.702100][T10012] hsr_slave_0: entered promiscuous mode [ 988.705683][T10012] hsr_slave_1: entered promiscuous mode [ 988.716126][T10012] debugfs: 'hsr0' already exists in 'hsr' [ 988.716152][T10012] Cannot create hsr debugfs directory [ 989.188397][ T9850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.543802][ T9886] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 989.805867][ T9886] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 989.893474][ T9886] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 990.469133][ T1413] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.593169][ T9886] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 990.967752][ T1413] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.608883][ T1413] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.810647][T10178] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 992.039525][ T1413] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.097778][ T9918] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 992.246266][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 992.264598][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 992.265768][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 992.267486][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 992.268347][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 992.348565][ T9918] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 992.482359][ T9918] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 993.603633][ T9918] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 994.954162][ T5838] Bluetooth: hci1: command tx timeout [ 995.247012][ T1413] bridge_slave_1: left allmulticast mode [ 995.247111][ T1413] bridge_slave_1: left promiscuous mode [ 995.247368][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.345100][ T1413] bridge_slave_0: left allmulticast mode [ 995.345134][ T1413] bridge_slave_0: left promiscuous mode [ 995.345393][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.256048][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.256128][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.571171][ T9450] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 998.657845][ T9454] Bluetooth: hci1: command tx timeout [ 998.729250][ T9450] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 998.743673][ T9450] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 998.748564][ T9450] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 998.751216][ T9450] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 999.664536][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 999.710524][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.750362][ T1413] bond0 (unregistering): Released all slaves [ 999.768268][T10206] netlink: 'syz.9.745': attribute type 12 has an invalid length. [ 1000.561732][ T9450] Bluetooth: hci7: command 0x0406 tx timeout [ 1000.723543][ T5841] Bluetooth: hci1: command tx timeout [ 1000.803442][ T5841] Bluetooth: hci2: command tx timeout [ 1001.033907][ T1413] hsr_slave_0: left promiscuous mode [ 1001.063634][ T1413] hsr_slave_1: left promiscuous mode [ 1001.064588][ T1413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1001.064616][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.111869][ T1413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1001.111903][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.171179][ T1413] veth1_macvtap: left promiscuous mode [ 1001.171254][ T1413] veth0_macvtap: left promiscuous mode [ 1001.171424][ T1413] veth1_vlan: left promiscuous mode [ 1001.171537][ T1413] veth0_vlan: left promiscuous mode [ 1002.828947][ T9450] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1002.833178][ T9450] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1002.849305][ T9450] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1002.851285][ T9450] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1002.852150][ T9450] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1002.861245][ T9450] Bluetooth: hci1: command tx timeout [ 1002.893122][ T5841] Bluetooth: hci2: command tx timeout [ 1005.274694][ T9450] Bluetooth: hci2: command tx timeout [ 1005.274758][ T9450] Bluetooth: hci3: command tx timeout [ 1006.554890][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1006.745405][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1007.283670][ T9450] Bluetooth: hci2: command tx timeout [ 1007.283727][ T5841] Bluetooth: hci3: command tx timeout [ 1009.152433][ T37] audit: type=1326 audit(1757337808.088:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10237 comm="syz.9.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a7cebe9 code=0x7ffc0000 [ 1009.186885][ T37] audit: type=1326 audit(1757337808.128:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10237 comm="syz.9.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a7cebe9 code=0x7ffc0000 [ 1009.204215][ T37] audit: type=1326 audit(1757337808.148:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10237 comm="syz.9.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8e1a7cebe9 code=0x7ffc0000 [ 1009.204265][ T37] audit: type=1326 audit(1757337808.148:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10237 comm="syz.9.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a7cebe9 code=0x7ffc0000 [ 1009.204308][ T37] audit: type=1326 audit(1757337808.148:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10237 comm="syz.9.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a7cebe9 code=0x7ffc0000 [ 1009.204809][ T37] audit: type=1326 audit(1757337808.148:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10237 comm="syz.9.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8e1a7cebe9 code=0x7ffc0000 [ 1009.204853][ T37] audit: type=1326 audit(1757337808.148:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10237 comm="syz.9.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a7cebe9 code=0x7ffc0000 [ 1009.204894][ T37] audit: type=1326 audit(1757337808.148:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10237 comm="syz.9.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a7cebe9 code=0x7ffc0000 [ 1009.205414][ T37] audit: type=1326 audit(1757337808.148:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10237 comm="syz.9.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f8e1a7cebe9 code=0x7ffc0000 [ 1009.206055][ T37] audit: type=1326 audit(1757337808.148:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10237 comm="syz.9.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a7cebe9 code=0x7ffc0000 [ 1009.568828][ T5841] Bluetooth: hci3: command tx timeout [ 1010.206298][ T7790] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1010.439119][ T7790] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1010.524664][T10245] fido_id[10245]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1011.612306][ T5841] Bluetooth: hci3: command tx timeout [ 1011.697397][T10254] netlink: 9 bytes leftover after parsing attributes in process `syz.9.754'. [ 1011.749438][T10255] netlink: 5 bytes leftover after parsing attributes in process `syz.9.754'. [ 1011.869377][T10254] 0猉功D: entered promiscuous mode [ 1011.869408][T10254] 0猉功D: left allmulticast mode [ 1011.878492][T10255] 1猉功D: renamed from 30猉功D [ 1011.918323][T10255] 1猉功D: left promiscuous mode [ 1011.918350][T10255] 1猉功D: entered allmulticast mode [ 1011.920100][T10255] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 1012.330773][T10185] chnl_net:caif_netlink_parms(): no params data found [ 1012.764065][T10012] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1013.022317][T10012] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1013.420921][T10268] 9pnet_fd: Insufficient options for proto=fd [ 1013.730623][T10185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.758556][T10185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.809035][T10185] bridge_slave_0: entered allmulticast mode [ 1014.035576][T10185] bridge_slave_0: entered promiscuous mode [ 1014.073794][T10012] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1014.340750][T10185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.340939][T10185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.341164][T10185] bridge_slave_1: entered allmulticast mode [ 1014.342782][T10185] bridge_slave_1: entered promiscuous mode [ 1014.499454][T10012] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1014.814079][T10207] chnl_net:caif_netlink_parms(): no params data found [ 1014.847911][T10185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.012200][T10220] chnl_net:caif_netlink_parms(): no params data found [ 1015.028846][T10185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.025220][T10185] team0: Port device team_slave_0 added [ 1020.514126][T10185] team0: Port device team_slave_1 added [ 1022.091129][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 1022.091147][ T37] audit: type=1326 audit(1757337821.028:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10312 comm="syz.9.765" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a7cebe9 code=0x0 [ 1022.814260][T10185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.814283][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.814308][T10185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.899200][T10207] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.899585][T10207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.899735][T10207] bridge_slave_0: entered allmulticast mode [ 1022.901308][T10207] bridge_slave_0: entered promiscuous mode [ 1022.911774][T10318] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1022.998344][T10185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.998359][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.998386][T10185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.346488][T10207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.346641][T10207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.346865][T10207] bridge_slave_1: entered allmulticast mode [ 1023.349558][T10207] bridge_slave_1: entered promiscuous mode [ 1023.374286][T10220] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.374417][T10220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.374648][T10220] bridge_slave_0: entered allmulticast mode [ 1023.377431][T10220] bridge_slave_0: entered promiscuous mode [ 1023.747518][T10325] hub 9-0:1.0: USB hub found [ 1023.764022][T10325] hub 9-0:1.0: 1 port detected [ 1024.533996][T10220] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.534179][T10220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.534387][T10220] bridge_slave_1: entered allmulticast mode [ 1024.540849][T10220] bridge_slave_1: entered promiscuous mode [ 1024.827416][T10207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.363715][T10207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.474798][T10220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.597088][T10185] hsr_slave_0: entered promiscuous mode [ 1025.598414][T10185] hsr_slave_1: entered promiscuous mode [ 1025.628726][T10220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.017937][T10207] team0: Port device team_slave_0 added [ 1026.254362][T10207] team0: Port device team_slave_1 added [ 1026.324593][T10220] team0: Port device team_slave_0 added [ 1026.452226][T10220] team0: Port device team_slave_1 added [ 1026.944788][T10207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.944805][T10207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.944832][T10207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.126972][T10207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.126989][T10207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.127017][T10207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.129508][T10220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.129522][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.129547][T10220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.204214][T10220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.204231][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.204257][T10220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.719333][ T9450] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1027.732304][ T9450] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1027.735582][ T9450] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1027.736809][ T9450] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1027.737628][ T9450] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1029.993210][ T5841] Bluetooth: hci0: command tx timeout [ 1030.354108][ T37] audit: type=1326 audit(1757337829.298:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10344 comm="syz.9.772" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a7cebe9 code=0x0 [ 1031.136083][T10207] hsr_slave_0: entered promiscuous mode [ 1031.137378][T10207] hsr_slave_1: entered promiscuous mode [ 1031.138305][T10207] debugfs: 'hsr0' already exists in 'hsr' [ 1031.138328][T10207] Cannot create hsr debugfs directory [ 1032.021743][ T5841] Bluetooth: hci0: command tx timeout [ 1032.115509][T10220] hsr_slave_0: entered promiscuous mode [ 1032.116836][T10220] hsr_slave_1: entered promiscuous mode [ 1032.117719][T10220] debugfs: 'hsr0' already exists in 'hsr' [ 1032.117741][T10220] Cannot create hsr debugfs directory [ 1034.085272][ T5841] Bluetooth: hci0: command tx timeout [ 1036.186779][ T5841] Bluetooth: hci0: command tx timeout [ 1041.286726][ T8990] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1041.304040][ T8990] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1041.462795][T10386] fido_id[10386]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1041.879275][ T1413] bridge_slave_1: left allmulticast mode [ 1041.879359][ T1413] bridge_slave_1: left promiscuous mode [ 1041.879608][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.958509][ T1413] bridge_slave_0: left allmulticast mode [ 1041.958543][ T1413] bridge_slave_0: left promiscuous mode [ 1041.958816][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.033456][ T1413] bridge_slave_1: left allmulticast mode [ 1042.033490][ T1413] bridge_slave_1: left promiscuous mode [ 1042.033744][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.084260][ T1413] bridge_slave_0: left allmulticast mode [ 1042.084283][ T1413] bridge_slave_0: left promiscuous mode [ 1042.084440][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.148604][ T1413] bridge_slave_1: left allmulticast mode [ 1042.148636][ T1413] bridge_slave_1: left promiscuous mode [ 1042.148887][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.204277][ T1413] bridge_slave_0: left allmulticast mode [ 1042.204300][ T1413] bridge_slave_0: left promiscuous mode [ 1042.204484][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.894647][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.989706][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.085335][ T1413] bond0 (unregistering): Released all slaves [ 1048.774369][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1048.874712][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1048.937809][ T1413] bond0 (unregistering): Released all slaves [ 1049.413217][ T7747] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1049.471854][ T7747] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1049.589907][T10412] fido_id[10412]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1052.138648][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.199353][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.221498][ T1413] bond0 (unregistering): Released all slaves [ 1052.720159][T10336] chnl_net:caif_netlink_parms(): no params data found [ 1054.641141][ T9450] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1054.672032][ T9450] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1054.685369][ T9450] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1054.687438][ T9450] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1054.688353][ T9450] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1055.827618][ T1413] hsr_slave_0: left promiscuous mode [ 1055.892326][ T1413] hsr_slave_1: left promiscuous mode [ 1055.902637][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1055.940362][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.073965][ T1413] hsr_slave_0: left promiscuous mode [ 1056.127926][ T1413] hsr_slave_1: left promiscuous mode [ 1056.128842][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.155814][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.311856][ T1413] hsr_slave_0: left promiscuous mode [ 1056.343409][ T1413] hsr_slave_1: left promiscuous mode [ 1056.344404][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.367102][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.803779][ T5841] Bluetooth: hci4: command tx timeout [ 1057.445639][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1057.585987][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1058.633632][ T7747] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1058.746912][ T9450] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1058.789241][ T9450] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1058.790402][ T9450] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1058.792057][ T9450] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1058.803781][ T9450] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1058.824536][ T7747] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.880019][ T7747] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1058.880049][ T7747] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.880070][ T7747] usb 10-1: Product: syz [ 1058.880084][ T7747] usb 10-1: Manufacturer: syz [ 1058.880098][ T7747] usb 10-1: SerialNumber: syz [ 1058.893928][ T5841] Bluetooth: hci4: command tx timeout [ 1059.114810][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1059.277375][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1059.690970][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.691042][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.029952][ T7747] cdc_ncm 10-1:1.0: failed to get mac address [ 1060.236743][ T7747] cdc_ncm 10-1:1.0: bind() failure [ 1060.255720][ T7747] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1060.272282][ T7747] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1060.284489][ T7747] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 1060.314892][ T7747] usb 10-1: USB disconnect, device number 7 [ 1060.963799][ T5841] Bluetooth: hci4: command tx timeout [ 1060.963917][ T9450] Bluetooth: hci5: command tx timeout [ 1061.024486][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1061.244421][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1062.280403][T10459] netlink: 9 bytes leftover after parsing attributes in process `syz.9.796'. [ 1063.572618][ T5841] Bluetooth: hci4: command tx timeout [ 1063.572672][ T9450] Bluetooth: hci5: command tx timeout [ 1065.079002][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1065.087865][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1065.092226][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1065.095135][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1065.099745][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1065.603943][ T9450] Bluetooth: hci5: command tx timeout [ 1065.626515][T10459] 1猉功D: entered promiscuous mode [ 1065.626547][T10459] 1猉功D: left allmulticast mode [ 1066.913584][T10336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.913721][T10336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.913953][T10336] bridge_slave_0: entered allmulticast mode [ 1066.944205][T10336] bridge_slave_0: entered promiscuous mode [ 1066.960566][T10336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.960774][T10336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.961241][T10336] bridge_slave_1: entered allmulticast mode [ 1067.028504][T10336] bridge_slave_1: entered promiscuous mode [ 1067.207123][ T9450] Bluetooth: hci6: command tx timeout [ 1068.567796][ T9450] Bluetooth: hci5: command tx timeout [ 1069.283784][ T9450] Bluetooth: hci6: command tx timeout [ 1070.839754][T10336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.057520][T10336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.363745][ T9450] Bluetooth: hci6: command tx timeout [ 1071.656523][T10336] team0: Port device team_slave_0 added [ 1071.715723][T10336] team0: Port device team_slave_1 added [ 1072.237948][T10336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.237964][T10336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.237991][T10336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.270298][T10336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.270314][T10336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.270340][T10336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.082785][T10336] hsr_slave_0: entered promiscuous mode [ 1073.084549][T10336] hsr_slave_1: entered promiscuous mode [ 1073.085509][T10336] debugfs: 'hsr0' already exists in 'hsr' [ 1073.085532][T10336] Cannot create hsr debugfs directory [ 1073.413678][T10500] netlink: 16 bytes leftover after parsing attributes in process `syz.9.803'. [ 1074.243718][ T9450] Bluetooth: hci6: command tx timeout [ 1074.747267][T10504] netlink: 9 bytes leftover after parsing attributes in process `syz.9.804'. [ 1077.568855][T10461] chnl_net:caif_netlink_parms(): no params data found [ 1080.227254][T10442] chnl_net:caif_netlink_parms(): no params data found [ 1081.376571][T10450] chnl_net:caif_netlink_parms(): no params data found [ 1088.356533][T10461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.356764][T10461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.357027][T10461] bridge_slave_0: entered allmulticast mode [ 1088.359826][T10461] bridge_slave_0: entered promiscuous mode [ 1088.688486][T10461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.688629][T10461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.688861][T10461] bridge_slave_1: entered allmulticast mode [ 1088.691636][T10461] bridge_slave_1: entered promiscuous mode [ 1089.676661][T10570] 9pnet_fd: Insufficient options for proto=fd [ 1089.780686][T10442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.782995][T10442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.797452][T10442] bridge_slave_0: entered allmulticast mode [ 1089.893826][T10442] bridge_slave_0: entered promiscuous mode [ 1090.265694][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1090.276698][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1090.277851][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1090.279822][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1090.283162][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1090.597313][T10576] netlink: 16 bytes leftover after parsing attributes in process `syz.9.815'. [ 1091.555802][T10450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.555951][T10450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.556160][T10450] bridge_slave_0: entered allmulticast mode [ 1091.558847][T10450] bridge_slave_0: entered promiscuous mode [ 1091.596452][T10442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.596627][T10442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.596875][T10442] bridge_slave_1: entered allmulticast mode [ 1091.599576][T10442] bridge_slave_1: entered promiscuous mode [ 1092.591711][ T9450] Bluetooth: hci1: command tx timeout [ 1093.635973][T10461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1094.083852][T10450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.084002][T10450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.084245][T10450] bridge_slave_1: entered allmulticast mode [ 1094.086940][T10450] bridge_slave_1: entered promiscuous mode [ 1094.639428][T10461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.653577][ T9450] Bluetooth: hci1: command tx timeout [ 1095.462972][T10442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1095.478463][ T37] audit: type=1326 audit(1757337894.418:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10585 comm="syz.9.818" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a7cebe9 code=0x0 [ 1095.763174][T10450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1095.785982][T10442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1095.852538][T10461] team0: Port device team_slave_0 added [ 1095.961438][T10450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1096.185623][T10461] team0: Port device team_slave_1 added [ 1096.816835][ T9450] Bluetooth: hci1: command tx timeout [ 1100.313591][ T9450] Bluetooth: hci1: command tx timeout [ 1100.576745][T10442] team0: Port device team_slave_0 added [ 1100.836311][T10450] team0: Port device team_slave_0 added [ 1100.838676][T10442] team0: Port device team_slave_1 added [ 1100.846221][T10461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.846236][T10461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1100.846267][T10461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1100.855568][T10450] team0: Port device team_slave_1 added [ 1101.065147][T10461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.065165][T10461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1101.065193][T10461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.129835][T10442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.129880][T10442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.129936][T10442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.592938][T10450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.592955][T10450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.592982][T10450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.657426][T10442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.657444][T10442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.657472][T10442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.749656][T10450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.749672][T10450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.749698][T10450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.583644][ T37] audit: type=1326 audit(1757337904.148:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10610 comm="syz.9.825" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a7cebe9 code=0x0 [ 1107.317409][T10461] hsr_slave_0: entered promiscuous mode [ 1107.332937][T10461] hsr_slave_1: entered promiscuous mode [ 1107.344211][T10461] debugfs: 'hsr0' already exists in 'hsr' [ 1107.344237][T10461] Cannot create hsr debugfs directory [ 1110.265655][T10442] hsr_slave_0: entered promiscuous mode [ 1110.267181][T10442] hsr_slave_1: entered promiscuous mode [ 1110.268188][T10442] debugfs: 'hsr0' already exists in 'hsr' [ 1110.268212][T10442] Cannot create hsr debugfs directory [ 1110.303025][T10450] hsr_slave_0: entered promiscuous mode [ 1110.312675][T10450] hsr_slave_1: entered promiscuous mode [ 1110.319751][T10450] debugfs: 'hsr0' already exists in 'hsr' [ 1110.319778][T10450] Cannot create hsr debugfs directory [ 1113.778127][T10571] chnl_net:caif_netlink_parms(): no params data found [ 1114.742707][T10571] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.744134][T10571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.744355][T10571] bridge_slave_0: entered allmulticast mode [ 1114.746957][T10571] bridge_slave_0: entered promiscuous mode [ 1114.795219][T10571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.795370][T10571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.795594][T10571] bridge_slave_1: entered allmulticast mode [ 1114.798423][T10571] bridge_slave_1: entered promiscuous mode [ 1114.980519][T10461] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1115.283898][T10461] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1116.270702][ T9450] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1116.282452][ T9450] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1116.285263][ T9450] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1116.301087][ T9450] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1116.302588][ T9450] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1116.349541][T10571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1116.713457][T10461] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1116.811353][T10571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1116.818447][T10461] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1119.124219][ T5841] Bluetooth: hci0: command tx timeout [ 1119.486720][T10571] team0: Port device team_slave_0 added [ 1119.500530][T10571] team0: Port device team_slave_1 added [ 1119.587817][ T1413] bridge_slave_1: left allmulticast mode [ 1119.587850][ T1413] bridge_slave_1: left promiscuous mode [ 1119.588110][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.644251][ T1413] bridge_slave_0: left allmulticast mode [ 1119.644274][ T1413] bridge_slave_0: left promiscuous mode [ 1119.644469][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.707893][ T1413] bridge_slave_1: left allmulticast mode [ 1119.707926][ T1413] bridge_slave_1: left promiscuous mode [ 1119.708167][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.765003][ T1413] bridge_slave_0: left allmulticast mode [ 1119.765035][ T1413] bridge_slave_0: left promiscuous mode [ 1119.765299][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.837986][ T1413] bridge_slave_1: left allmulticast mode [ 1119.838019][ T1413] bridge_slave_1: left promiscuous mode [ 1119.838260][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.901718][ T1413] bridge_slave_0: left allmulticast mode [ 1119.901739][ T1413] bridge_slave_0: left promiscuous mode [ 1119.901917][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.967904][ T1413] bridge_slave_1: left allmulticast mode [ 1119.967937][ T1413] bridge_slave_1: left promiscuous mode [ 1119.968197][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.026865][ T1413] bridge_slave_0: left allmulticast mode [ 1120.026897][ T1413] bridge_slave_0: left promiscuous mode [ 1120.027145][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.518524][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1120.654073][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1120.717883][ T1413] bond0 (unregistering): Released all slaves [ 1120.878893][ T9450] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1120.889835][ T9450] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1120.892132][ T9450] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1120.911353][ T9450] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1120.915640][ T9450] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1121.203986][ T5841] Bluetooth: hci0: command tx timeout [ 1121.287067][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.287142][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.785948][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1122.874205][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.959660][ T1413] bond0 (unregistering): Released all slaves [ 1122.963661][ T5841] Bluetooth: hci2: command tx timeout [ 1123.283817][ T5841] Bluetooth: hci0: command tx timeout [ 1123.325109][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.424589][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.511607][ T1413] bond0 (unregistering): Released all slaves [ 1124.181717][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1124.484326][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1125.331740][ T5841] Bluetooth: hci2: command tx timeout [ 1125.373609][ T5841] Bluetooth: hci0: command tx timeout [ 1125.427412][ T1413] bond0 (unregistering): Released all slaves [ 1125.853825][T10571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.853842][T10571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.853868][T10571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.929742][T10571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.929758][T10571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.929794][T10571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1126.905119][T10571] hsr_slave_0: entered promiscuous mode [ 1126.919886][T10571] hsr_slave_1: entered promiscuous mode [ 1126.920857][T10571] debugfs: 'hsr0' already exists in 'hsr' [ 1126.920881][T10571] Cannot create hsr debugfs directory [ 1127.376789][ T9450] Bluetooth: hci2: command tx timeout [ 1127.378183][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1127.408020][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1127.409544][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1127.410974][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1127.411902][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1127.756045][ T1413] hsr_slave_0: left promiscuous mode [ 1127.803451][ T1413] hsr_slave_1: left promiscuous mode [ 1127.804402][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.844564][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.450712][ T5838] Bluetooth: hci2: command tx timeout [ 1129.567176][ T5838] Bluetooth: hci3: command tx timeout [ 1130.471313][ T1413] hsr_slave_0: left promiscuous mode [ 1130.503605][ T1413] hsr_slave_1: left promiscuous mode [ 1130.504580][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1130.544874][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.683480][ T1413] hsr_slave_0: left promiscuous mode [ 1130.706196][ T1413] hsr_slave_1: left promiscuous mode [ 1130.707958][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1130.754020][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.913555][ T1413] hsr_slave_0: left promiscuous mode [ 1130.933415][ T1413] hsr_slave_1: left promiscuous mode [ 1130.934377][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1130.975859][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1131.617394][ T5838] Bluetooth: hci3: command tx timeout [ 1132.884573][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1133.075915][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1133.683551][ T5838] Bluetooth: hci3: command tx timeout [ 1135.396307][ T37] audit: type=1326 audit(1757337934.338:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.9.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a7cebe9 code=0x7ffc0000 [ 1135.399065][ T37] audit: type=1326 audit(1757337934.338:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.9.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a7cebe9 code=0x7ffc0000 [ 1135.399355][ T37] audit: type=1326 audit(1757337934.338:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.9.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8e1a7cebe9 code=0x7ffc0000 [ 1135.399612][ T37] audit: type=1326 audit(1757337934.338:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.9.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a7cebe9 code=0x7ffc0000 [ 1135.399869][ T37] audit: type=1326 audit(1757337934.338:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.9.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a7cebe9 code=0x7ffc0000 [ 1135.400266][ T37] audit: type=1326 audit(1757337934.338:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.9.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8e1a7cebe9 code=0x7ffc0000 [ 1135.400638][ T37] audit: type=1326 audit(1757337934.338:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.9.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a7cebe9 code=0x7ffc0000 [ 1135.400681][ T37] audit: type=1326 audit(1757337934.338:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.9.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a7cebe9 code=0x7ffc0000 [ 1135.400993][ T37] audit: type=1326 audit(1757337934.338:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.9.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f8e1a7cebe9 code=0x7ffc0000 [ 1135.401144][ T37] audit: type=1326 audit(1757337934.338:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10709 comm="syz.9.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a7cebe9 code=0x7ffc0000 [ 1136.376836][ T5838] Bluetooth: hci3: command tx timeout [ 1136.439853][ T993] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1136.450851][ T993] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1136.659040][T10714] fido_id[10714]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1136.704622][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1136.834284][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1137.930635][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1138.045492][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1139.134329][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1139.264467][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1142.609041][T10647] chnl_net:caif_netlink_parms(): no params data found [ 1143.426529][T10667] chnl_net:caif_netlink_parms(): no params data found [ 1143.452408][T10571] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1143.615324][T10571] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1143.775330][T10571] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1143.968984][T10647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.969203][T10647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.969407][T10647] bridge_slave_0: entered allmulticast mode [ 1143.972418][T10647] bridge_slave_0: entered promiscuous mode [ 1144.002267][T10571] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1144.092343][T10647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.092508][T10647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.092726][T10647] bridge_slave_1: entered allmulticast mode [ 1144.132393][T10647] bridge_slave_1: entered promiscuous mode [ 1145.232123][T10647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1145.396882][T10685] chnl_net:caif_netlink_parms(): no params data found [ 1145.421002][T10647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1145.421263][T10667] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.421707][T10667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.421898][T10667] bridge_slave_0: entered allmulticast mode [ 1145.434655][T10667] bridge_slave_0: entered promiscuous mode [ 1145.850597][T10753] netlink: 9 bytes leftover after parsing attributes in process `syz.9.852'. [ 1146.010451][T10754] netlink: 5 bytes leftover after parsing attributes in process `syz.9.852'. [ 1147.572214][T10754] 0猉功D: renamed from 31猉功D [ 1147.777585][T10754] 0猉功D: left promiscuous mode [ 1147.777604][T10754] 0猉功D: entered allmulticast mode [ 1147.779988][T10754] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 1147.974958][T10667] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.975111][T10667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.975374][T10667] bridge_slave_1: entered allmulticast mode [ 1147.978202][T10667] bridge_slave_1: entered promiscuous mode [ 1148.175550][T10758] netlink: 16 bytes leftover after parsing attributes in process `syz.9.853'. [ 1150.622790][T10647] team0: Port device team_slave_0 added [ 1150.751240][T10647] team0: Port device team_slave_1 added [ 1150.759331][T10667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1150.889233][T10667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1151.266215][T10647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1151.266231][T10647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1151.266256][T10647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1151.662729][T10647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1151.662747][T10647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1151.662774][T10647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1151.796987][T10667] team0: Port device team_slave_0 added [ 1151.912991][T10685] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.914276][T10685] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.914492][T10685] bridge_slave_0: entered allmulticast mode [ 1151.917219][T10685] bridge_slave_0: entered promiscuous mode [ 1151.922700][T10667] team0: Port device team_slave_1 added [ 1151.967757][T10685] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.967901][T10685] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.968118][T10685] bridge_slave_1: entered allmulticast mode [ 1151.970925][T10685] bridge_slave_1: entered promiscuous mode [ 1153.339826][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1153.355909][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1153.358881][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1153.360489][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1153.361261][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1155.176101][T10667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1155.176117][T10667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1155.176204][T10667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1155.287604][T10667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1155.287621][T10667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1155.287647][T10667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1155.305815][T10685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.333412][T10647] hsr_slave_0: entered promiscuous mode [ 1155.337459][T10647] hsr_slave_1: entered promiscuous mode [ 1155.363178][T10685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.443464][ T5841] Bluetooth: hci1: command tx timeout [ 1155.748195][T10685] team0: Port device team_slave_0 added [ 1155.897817][T10685] team0: Port device team_slave_1 added [ 1156.066980][T10667] hsr_slave_0: entered promiscuous mode [ 1156.068477][T10667] hsr_slave_1: entered promiscuous mode [ 1156.069400][T10667] debugfs: 'hsr0' already exists in 'hsr' [ 1156.069423][T10667] Cannot create hsr debugfs directory [ 1156.968668][T10685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.968685][T10685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.968707][T10685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1157.194684][T10685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1157.194700][T10685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1157.194726][T10685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.523814][ T5841] Bluetooth: hci1: command tx timeout [ 1158.516841][T10685] hsr_slave_0: entered promiscuous mode [ 1158.518573][T10685] hsr_slave_1: entered promiscuous mode [ 1158.519496][T10685] debugfs: 'hsr0' already exists in 'hsr' [ 1158.519518][T10685] Cannot create hsr debugfs directory [ 1159.604582][ T5841] Bluetooth: hci1: command tx timeout [ 1161.683899][ T5841] Bluetooth: hci1: command tx timeout [ 1164.029783][T10775] chnl_net:caif_netlink_parms(): no params data found [ 1164.796781][T10667] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1164.945675][T10667] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1165.006866][T10775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.007064][T10775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.007688][T10775] bridge_slave_0: entered allmulticast mode [ 1165.012522][T10775] bridge_slave_0: entered promiscuous mode [ 1165.020812][T10667] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1165.599253][T10775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.599387][T10775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.599637][T10775] bridge_slave_1: entered allmulticast mode [ 1165.606034][T10775] bridge_slave_1: entered promiscuous mode [ 1165.609312][T10667] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1169.015937][T10775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.082882][T10775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1171.474309][T10647] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1171.516066][T10775] team0: Port device team_slave_0 added [ 1171.519129][T10647] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1171.821771][T10775] team0: Port device team_slave_1 added [ 1171.831203][T10647] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1171.948223][T10647] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1172.300939][T10775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1172.300957][T10775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1172.300980][T10775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1172.378526][T10775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1172.378542][T10775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1172.378578][T10775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1173.512435][T10775] hsr_slave_0: entered promiscuous mode [ 1173.517955][T10775] hsr_slave_1: entered promiscuous mode [ 1173.518912][T10775] debugfs: 'hsr0' already exists in 'hsr' [ 1173.518934][T10775] Cannot create hsr debugfs directory [ 1173.975064][ T1413] bridge_slave_1: left allmulticast mode [ 1173.975096][ T1413] bridge_slave_1: left promiscuous mode [ 1173.975369][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.936957][ T1413] bridge_slave_0: left allmulticast mode [ 1174.937074][ T1413] bridge_slave_0: left promiscuous mode [ 1174.937404][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.019211][ T1413] bridge_slave_1: left allmulticast mode [ 1175.019244][ T1413] bridge_slave_1: left promiscuous mode [ 1175.019492][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.074964][ T1413] bridge_slave_0: left allmulticast mode [ 1175.075006][ T1413] bridge_slave_0: left promiscuous mode [ 1175.075267][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.155852][ T1413] bridge_slave_1: left allmulticast mode [ 1175.155875][ T1413] bridge_slave_1: left promiscuous mode [ 1175.156035][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.216342][ T1413] bridge_slave_0: left allmulticast mode [ 1175.216377][ T1413] bridge_slave_0: left promiscuous mode [ 1175.216624][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.233389][ T44] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1175.288538][ T1413] bridge_slave_1: left allmulticast mode [ 1175.288571][ T1413] bridge_slave_1: left promiscuous mode [ 1175.288813][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.355049][ T1413] bridge_slave_0: left allmulticast mode [ 1175.355083][ T1413] bridge_slave_0: left promiscuous mode [ 1175.355347][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.373406][ T44] usb 10-1: device descriptor read/64, error -71 [ 1175.440811][ T1413] bridge_slave_1: left allmulticast mode [ 1175.440836][ T1413] bridge_slave_1: left promiscuous mode [ 1175.440994][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.495042][ T1413] bridge_slave_0: left allmulticast mode [ 1175.495074][ T1413] bridge_slave_0: left promiscuous mode [ 1175.495331][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.614096][ T44] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1175.763361][ T44] usb 10-1: device descriptor read/64, error -71 [ 1175.875568][ T44] usb usb10-port1: attempt power cycle [ 1175.989689][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1176.064305][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1176.119339][ T1413] bond0 (unregistering): Released all slaves [ 1176.223679][ T44] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1176.244261][ T44] usb 10-1: device descriptor read/8, error -71 [ 1176.430976][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1176.489062][ T44] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1176.504392][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1176.505970][ T44] usb 10-1: device descriptor read/8, error -71 [ 1176.579558][ T1413] bond0 (unregistering): Released all slaves [ 1176.613911][ T44] usb usb10-port1: unable to enumerate USB device [ 1176.877958][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1176.974257][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1177.037907][ T1413] bond0 (unregistering): Released all slaves [ 1177.304614][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1177.423845][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1177.499760][ T1413] bond0 (unregistering): Released all slaves [ 1177.867546][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1177.976110][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1178.038419][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1178.052185][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1178.061128][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1178.070903][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1178.071760][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1178.139692][ T1413] bond0 (unregistering): Released all slaves [ 1180.163405][ T9450] Bluetooth: hci4: command tx timeout [ 1182.243620][ T9450] Bluetooth: hci4: command tx timeout [ 1182.579477][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.579588][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.873851][T10685] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1183.072981][T10685] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1183.155829][T10685] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1183.333482][ T1413] hsr_slave_0: left promiscuous mode [ 1183.363550][ T1413] hsr_slave_1: left promiscuous mode [ 1183.364482][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1183.404625][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1183.603561][ T1413] hsr_slave_0: left promiscuous mode [ 1183.643517][ T1413] hsr_slave_1: left promiscuous mode [ 1183.645471][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1183.666633][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1183.773741][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1183.791154][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1183.792601][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1183.799840][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1183.802249][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1183.849471][ T1413] hsr_slave_0: left promiscuous mode [ 1183.891793][ T1413] hsr_slave_1: left promiscuous mode [ 1183.892485][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1183.934573][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1184.033352][ T1413] hsr_slave_0: left promiscuous mode [ 1184.053486][ T1413] hsr_slave_1: left promiscuous mode [ 1184.054434][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1184.095338][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1184.269041][ T1413] hsr_slave_0: left promiscuous mode [ 1184.309806][ T1413] hsr_slave_1: left promiscuous mode [ 1184.310696][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1184.564786][ T5841] Bluetooth: hci4: command tx timeout [ 1184.594373][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1185.925387][ T5841] Bluetooth: hci0: command tx timeout [ 1186.643725][ T5841] Bluetooth: hci4: command tx timeout [ 1186.895612][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1188.556701][ T5841] Bluetooth: hci0: command tx timeout [ 1189.004863][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1189.491273][ T9450] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1189.523516][ T9450] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1189.527527][ T9450] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1189.529309][ T9450] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1189.530242][ T9450] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1190.863241][ T9450] Bluetooth: hci0: command tx timeout [ 1191.763349][ T9450] Bluetooth: hci2: command tx timeout [ 1192.893531][ T9450] Bluetooth: hci0: command tx timeout [ 1193.074168][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1193.184188][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1193.843326][ T9450] Bluetooth: hci2: command tx timeout [ 1194.317346][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1194.436432][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1195.544437][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1195.684540][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1195.925695][ T9450] Bluetooth: hci2: command tx timeout [ 1196.754547][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1196.889247][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1197.483690][T10685] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1198.009594][ T9450] Bluetooth: hci2: command tx timeout [ 1200.176463][T10864] chnl_net:caif_netlink_parms(): no params data found [ 1201.929134][T10878] chnl_net:caif_netlink_parms(): no params data found [ 1202.179641][T10775] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1202.269523][T10897] chnl_net:caif_netlink_parms(): no params data found [ 1202.425840][T10775] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1202.567169][T10864] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.567308][T10864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.567528][T10864] bridge_slave_0: entered allmulticast mode [ 1202.595536][T10864] bridge_slave_0: entered promiscuous mode [ 1202.609911][T10775] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1202.738961][T10864] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.739102][T10864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.739318][T10864] bridge_slave_1: entered allmulticast mode [ 1202.742127][T10864] bridge_slave_1: entered promiscuous mode [ 1202.774320][T10775] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1207.067548][T10956] hub 9-0:1.0: USB hub found [ 1207.073349][T10956] hub 9-0:1.0: 1 port detected [ 1207.757361][T10864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1207.966775][T10864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1207.969989][T10878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.970131][T10878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.970336][T10878] bridge_slave_0: entered allmulticast mode [ 1208.021773][T10878] bridge_slave_0: entered promiscuous mode [ 1208.304607][T10878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.304821][T10878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.305032][T10878] bridge_slave_1: entered allmulticast mode [ 1208.307841][T10878] bridge_slave_1: entered promiscuous mode [ 1208.957655][T10897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.957798][T10897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.958033][T10897] bridge_slave_0: entered allmulticast mode [ 1208.960778][T10897] bridge_slave_0: entered promiscuous mode [ 1208.999303][T10864] team0: Port device team_slave_0 added [ 1209.141950][T10897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.142073][T10897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.142317][T10897] bridge_slave_1: entered allmulticast mode [ 1209.146021][T10897] bridge_slave_1: entered promiscuous mode [ 1209.149545][T10864] team0: Port device team_slave_1 added [ 1209.153031][T10878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1210.350451][T10878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1211.877495][T10897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.894941][T10864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1211.894957][T10864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.894983][T10864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1212.034089][T10897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1212.035048][T10864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1212.035061][T10864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1212.035088][T10864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1212.048366][T10878] team0: Port device team_slave_0 added [ 1212.215766][T10878] team0: Port device team_slave_1 added [ 1212.481471][T10897] team0: Port device team_slave_0 added [ 1212.758881][T10897] team0: Port device team_slave_1 added [ 1212.794905][T10878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1212.794922][T10878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1212.794949][T10878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.074411][T10878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.074427][T10878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.074455][T10878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.097555][T10864] hsr_slave_0: entered promiscuous mode [ 1213.099000][T10864] hsr_slave_1: entered promiscuous mode [ 1213.099932][T10864] debugfs: 'hsr0' already exists in 'hsr' [ 1213.099955][T10864] Cannot create hsr debugfs directory [ 1213.465045][T10897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.465063][T10897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.465089][T10897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.519863][T10897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.519878][T10897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.520813][T10897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.252969][T10878] hsr_slave_0: entered promiscuous mode [ 1214.260661][T10878] hsr_slave_1: entered promiscuous mode [ 1214.261638][T10878] debugfs: 'hsr0' already exists in 'hsr' [ 1214.261662][T10878] Cannot create hsr debugfs directory [ 1214.434940][T10897] hsr_slave_0: entered promiscuous mode [ 1214.436246][T10897] hsr_slave_1: entered promiscuous mode [ 1214.437134][T10897] debugfs: 'hsr0' already exists in 'hsr' [ 1214.437157][T10897] Cannot create hsr debugfs directory [ 1216.070969][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1216.077355][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1216.078909][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1216.085476][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1216.094502][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1217.573129][ T12] Bluetooth: hci3: Frame reassembly failed (-84) [ 1218.173575][ T5841] Bluetooth: hci1: command tx timeout [ 1219.603462][ T5841] Bluetooth: hci3: command 0x1003 tx timeout [ 1219.603496][ T9450] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1220.317745][ T9450] Bluetooth: hci1: command tx timeout [ 1222.403399][ T5841] Bluetooth: hci1: command tx timeout [ 1224.617250][ T5841] Bluetooth: hci1: command tx timeout [ 1226.075522][T10985] chnl_net:caif_netlink_parms(): no params data found [ 1229.864310][ T6053] Bluetooth: hci3: Frame reassembly failed (-84) [ 1230.452506][T10985] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.452653][T10985] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.452891][T10985] bridge_slave_0: entered allmulticast mode [ 1230.478673][T10985] bridge_slave_0: entered promiscuous mode [ 1230.482356][T10985] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.482573][T10985] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.482771][T10985] bridge_slave_1: entered allmulticast mode [ 1230.511906][T10985] bridge_slave_1: entered promiscuous mode [ 1230.688901][T10985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1230.702804][T10985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1230.976801][T10985] team0: Port device team_slave_0 added [ 1231.017016][T10985] team0: Port device team_slave_1 added [ 1231.265823][T10985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1231.265840][T10985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1231.265865][T10985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1231.268576][T10985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1231.268591][T10985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1231.268615][T10985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1231.428188][ T1413] bridge_slave_1: left allmulticast mode [ 1231.428263][ T1413] bridge_slave_1: left promiscuous mode [ 1231.428438][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.493676][ T1413] bridge_slave_0: left allmulticast mode [ 1231.493708][ T1413] bridge_slave_0: left promiscuous mode [ 1231.493980][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.559022][ T1413] bridge_slave_1: left allmulticast mode [ 1231.559056][ T1413] bridge_slave_1: left promiscuous mode [ 1231.559301][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.629638][ T1413] bridge_slave_0: left allmulticast mode [ 1231.629671][ T1413] bridge_slave_0: left promiscuous mode [ 1231.629967][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.725818][ T1413] bridge_slave_1: left allmulticast mode [ 1231.725840][ T1413] bridge_slave_1: left promiscuous mode [ 1231.725988][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.784349][ T1413] bridge_slave_0: left allmulticast mode [ 1231.784372][ T1413] bridge_slave_0: left promiscuous mode [ 1231.784542][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.848220][ T1413] bridge_slave_1: left allmulticast mode [ 1231.848254][ T1413] bridge_slave_1: left promiscuous mode [ 1231.848513][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.923473][ T9450] Bluetooth: hci3: command 0x1003 tx timeout [ 1231.923776][ T5841] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1231.974286][ T1413] bridge_slave_0: left allmulticast mode [ 1231.974318][ T1413] bridge_slave_0: left promiscuous mode [ 1231.974575][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.364343][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1233.446098][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1233.552237][ T1413] bond0 (unregistering): Released all slaves [ 1233.954938][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1234.044333][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1234.117153][ T1413] bond0 (unregistering): Released all slaves [ 1235.242119][T11046] 9pnet_fd: Insufficient options for proto=fd [ 1236.099162][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1236.184244][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1236.257419][ T1413] bond0 (unregistering): Released all slaves [ 1236.868814][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1236.984081][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1237.047508][ T1413] bond0 (unregistering): Released all slaves [ 1237.425946][T10985] hsr_slave_0: entered promiscuous mode [ 1237.427728][T10985] hsr_slave_1: entered promiscuous mode [ 1237.433374][T10985] debugfs: 'hsr0' already exists in 'hsr' [ 1237.433397][T10985] Cannot create hsr debugfs directory [ 1238.316333][ T1413] hsr_slave_0: left promiscuous mode [ 1238.853498][ T1413] hsr_slave_1: left promiscuous mode [ 1238.854443][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1238.923085][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1239.073345][ T1413] hsr_slave_0: left promiscuous mode [ 1239.095500][ T1413] hsr_slave_1: left promiscuous mode [ 1239.096448][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1239.171484][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1239.303481][ T1413] hsr_slave_0: left promiscuous mode [ 1239.323497][ T1413] hsr_slave_1: left promiscuous mode [ 1239.325651][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1239.374275][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1239.552214][ T1413] hsr_slave_0: left promiscuous mode [ 1239.573363][ T1413] hsr_slave_1: left promiscuous mode [ 1239.574296][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1239.624316][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1239.879449][ T9450] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1239.906170][ T9450] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1239.907274][ T9450] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1239.908754][ T9450] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1239.909492][ T9450] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1240.584051][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1240.705493][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1242.005235][ T5841] Bluetooth: hci3: command tx timeout [ 1242.104167][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1242.234223][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1243.544376][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1243.664234][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1244.029021][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.029099][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.083340][ T5841] Bluetooth: hci3: command tx timeout [ 1244.954188][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1245.105413][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1246.173352][ T5841] Bluetooth: hci3: command tx timeout [ 1246.296500][ T9450] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1246.312291][ T9450] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1246.314612][ T9450] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1246.315871][ T9450] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1246.316680][ T9450] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1248.253483][ T5841] Bluetooth: hci3: command tx timeout [ 1248.323560][ T5841] Bluetooth: hci5: command tx timeout [ 1249.331857][T11070] chnl_net:caif_netlink_parms(): no params data found [ 1250.406772][ T5841] Bluetooth: hci5: command tx timeout [ 1250.546032][T11078] chnl_net:caif_netlink_parms(): no params data found [ 1251.121329][T11142] netlink: 16 bytes leftover after parsing attributes in process `syz.9.916'. [ 1252.063562][T11070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.063718][T11070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.063953][T11070] bridge_slave_0: entered allmulticast mode [ 1252.103599][T11070] bridge_slave_0: entered promiscuous mode [ 1252.139400][T10878] netdevsim netdevsim8: probe with driver netdevsim failed with error -12 [ 1252.152321][T11070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.152456][T11070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.152653][T11070] bridge_slave_1: entered allmulticast mode [ 1252.175895][T11070] bridge_slave_1: entered promiscuous mode [ 1252.483263][ T5841] Bluetooth: hci5: command tx timeout [ 1252.634987][ T9450] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1252.652999][ T9450] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1252.661623][ T9450] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1252.673373][ T9450] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1252.674585][ T9450] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1252.975001][T11070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1253.294325][T11070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1253.397310][T11078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.397494][T11078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.397681][T11078] bridge_slave_0: entered allmulticast mode [ 1253.400381][T11078] bridge_slave_0: entered promiscuous mode [ 1253.745753][T11078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.745897][T11078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.746114][T11078] bridge_slave_1: entered allmulticast mode [ 1253.748898][T11078] bridge_slave_1: entered promiscuous mode [ 1254.140940][T11070] team0: Port device team_slave_0 added [ 1254.262714][T11070] team0: Port device team_slave_1 added [ 1254.318120][T11078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1254.565858][ T5841] Bluetooth: hci5: command tx timeout [ 1254.679023][T11078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1254.813476][ T5841] Bluetooth: hci4: command tx timeout [ 1255.398812][T11164] hub 9-0:1.0: USB hub found [ 1255.402156][T11164] hub 9-0:1.0: 1 port detected [ 1256.449607][T11070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1256.449623][T11070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1256.449655][T11070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1257.145299][ T5841] Bluetooth: hci4: command tx timeout [ 1257.715816][T11070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1257.715834][T11070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1257.715861][T11070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.213966][T11175] netlink: 9 bytes leftover after parsing attributes in process `syz.9.921'. [ 1258.370377][T11176] netlink: 5 bytes leftover after parsing attributes in process `syz.9.921'. [ 1259.203388][ T5841] Bluetooth: hci4: command tx timeout [ 1259.893450][T11175] 0猉功D: entered promiscuous mode [ 1259.893481][T11175] 0猉功D: left allmulticast mode [ 1259.899803][T11176] 1猉功D: renamed from 30猉功D [ 1259.959466][T11176] 1猉功D: left promiscuous mode [ 1259.959494][T11176] 1猉功D: entered allmulticast mode [ 1259.962275][T11176] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 1259.965673][T11078] team0: Port device team_slave_0 added [ 1260.565660][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 1260.565712][ T37] audit: type=1326 audit(1757338059.498:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11177 comm="syz.9.922" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e1a7cebe9 code=0x0 [ 1261.283671][ T5841] Bluetooth: hci4: command tx timeout [ 1261.626991][T11078] team0: Port device team_slave_1 added [ 1262.395858][T11078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1262.395878][T11078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1262.395905][T11078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1263.592452][T11078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1263.592470][T11078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1263.592497][T11078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1263.656245][T11070] hsr_slave_0: entered promiscuous mode [ 1263.670003][T11070] hsr_slave_1: entered promiscuous mode [ 1265.377089][T11078] hsr_slave_0: entered promiscuous mode [ 1265.378438][T11078] hsr_slave_1: entered promiscuous mode [ 1265.379379][T11078] debugfs: 'hsr0' already exists in 'hsr' [ 1265.379404][T11078] Cannot create hsr debugfs directory [ 1269.844560][T11226] hub 9-0:1.0: USB hub found [ 1269.850342][T11226] hub 9-0:1.0: 1 port detected [ 1270.745427][T10985] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1270.792352][T11152] chnl_net:caif_netlink_parms(): no params data found [ 1270.809079][T10985] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1270.986757][T10985] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1271.059438][T10985] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1271.843676][T11152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.843828][T11152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.844013][T11152] bridge_slave_0: entered allmulticast mode [ 1271.863719][T11152] bridge_slave_0: entered promiscuous mode [ 1271.893441][T11152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.893587][T11152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.893857][T11152] bridge_slave_1: entered allmulticast mode [ 1271.896574][T11152] bridge_slave_1: entered promiscuous mode [ 1272.206361][ T1413] bridge_slave_1: left allmulticast mode [ 1272.206393][ T1413] bridge_slave_1: left promiscuous mode [ 1272.206667][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.294969][ T1413] bridge_slave_0: left allmulticast mode [ 1272.295002][ T1413] bridge_slave_0: left promiscuous mode [ 1272.295277][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.379150][ T1413] bridge_slave_1: left allmulticast mode [ 1272.379183][ T1413] bridge_slave_1: left promiscuous mode [ 1272.379427][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.435172][ T1413] bridge_slave_0: left allmulticast mode [ 1272.435206][ T1413] bridge_slave_0: left promiscuous mode [ 1272.435469][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.508946][ T1413] bridge_slave_1: left allmulticast mode [ 1272.508980][ T1413] bridge_slave_1: left promiscuous mode [ 1272.509229][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.566606][ T1413] bridge_slave_0: left allmulticast mode [ 1272.566638][ T1413] bridge_slave_0: left promiscuous mode [ 1272.566893][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.274167][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1274.334450][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1274.385581][ T1413] bond0 (unregistering): Released all slaves [ 1274.624230][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1274.704264][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1274.767191][ T1413] bond0 (unregistering): Released all slaves [ 1274.964263][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1275.045962][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1275.097411][ T1413] bond0 (unregistering): Released all slaves [ 1275.167607][T11152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1275.398473][T11152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1275.791885][T11152] team0: Port device team_slave_0 added [ 1275.797709][T11152] team0: Port device team_slave_1 added [ 1276.045604][T11070] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1276.314119][T11152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1276.314130][T11152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1276.314146][T11152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1276.314950][T11070] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1276.422801][T11152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1276.422817][T11152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1276.422844][T11152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1276.518891][T11070] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1276.703364][ T1413] hsr_slave_0: left promiscuous mode [ 1276.726914][ T1413] hsr_slave_1: left promiscuous mode [ 1276.727832][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1276.774852][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1276.893399][ T1413] hsr_slave_0: left promiscuous mode [ 1276.933422][ T1413] hsr_slave_1: left promiscuous mode [ 1276.934395][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1276.965638][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1277.123407][ T1413] hsr_slave_0: left promiscuous mode [ 1277.168142][ T1413] hsr_slave_1: left promiscuous mode [ 1277.170038][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1277.214102][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1277.443405][ T7700] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1277.559203][ T9450] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1277.562577][ T9450] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1277.580953][ T9450] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1277.602923][ T9450] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1277.619482][ T9450] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1277.620507][ T7700] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1277.620553][ T7700] usb 10-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice=40.00 [ 1277.620577][ T7700] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.664888][ T7700] usb 10-1: config 0 descriptor?? [ 1278.131890][ T7700] zeroplus 0003:0C12:0005.000F: item fetching failed at offset 0/3 [ 1278.132710][ T7700] zeroplus 0003:0C12:0005.000F: parse failed [ 1278.132785][ T7700] zeroplus 0003:0C12:0005.000F: probe with driver zeroplus failed with error -22 [ 1278.321167][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1278.338943][T11114] usb 10-1: USB disconnect, device number 12 [ 1278.504090][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1279.686523][ T5841] Bluetooth: hci0: command tx timeout [ 1281.574212][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1281.695544][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1281.763405][ T5841] Bluetooth: hci0: command tx timeout [ 1283.614178][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1283.833349][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1283.843297][ T5841] Bluetooth: hci0: command tx timeout [ 1285.106088][T11070] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1285.605314][T11152] hsr_slave_0: entered promiscuous mode [ 1285.606701][T11152] hsr_slave_1: entered promiscuous mode [ 1285.607497][T11152] debugfs: 'hsr0' already exists in 'hsr' [ 1285.607518][T11152] Cannot create hsr debugfs directory [ 1285.776124][T11078] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1285.923390][ T5841] Bluetooth: hci0: command tx timeout [ 1285.979729][T11078] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1286.130367][T11078] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1286.452550][T11078] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1288.186352][T11253] chnl_net:caif_netlink_parms(): no params data found [ 1289.085679][T11070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1291.881974][T11253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.882198][T11253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.882437][T11253] bridge_slave_0: entered allmulticast mode [ 1291.915795][T11253] bridge_slave_0: entered promiscuous mode [ 1291.974007][T11253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.974166][T11253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.974391][T11253] bridge_slave_1: entered allmulticast mode [ 1291.977135][T11253] bridge_slave_1: entered promiscuous mode [ 1292.841285][T11253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.884837][T11070] 8021q: adding VLAN 0 to HW filter on device team0 [ 1292.896571][T11253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1294.427405][T10269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.427643][T10269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.433070][T11253] team0: Port device team_slave_0 added [ 1294.437868][T11152] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1294.501176][T11253] team0: Port device team_slave_1 added [ 1294.501688][T11152] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1294.618883][T11152] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1294.661624][T11078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.736968][T10269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.737749][T10269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.920521][T11152] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1294.942575][T11253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1294.942591][T11253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.942684][T11253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1294.968019][T11253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1294.968037][T11253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.968061][T11253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1295.305206][T11253] hsr_slave_0: entered promiscuous mode [ 1295.307569][T11253] hsr_slave_1: entered promiscuous mode [ 1295.308298][T11253] debugfs: 'hsr0' already exists in 'hsr' [ 1295.308316][T11253] Cannot create hsr debugfs directory [ 1295.344420][T11078] 8021q: adding VLAN 0 to HW filter on device team0 [ 1295.854818][ T1488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.855120][ T1488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1296.014652][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.019963][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1296.172429][ T1413] bridge_slave_1: left allmulticast mode [ 1296.172461][ T1413] bridge_slave_1: left promiscuous mode [ 1296.172710][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.350389][ T1413] bridge_slave_0: left allmulticast mode [ 1296.350420][ T1413] bridge_slave_0: left promiscuous mode [ 1296.350690][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.025143][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1299.135104][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1299.222523][ T1413] bond0 (unregistering): Released all slaves [ 1299.835195][ T1413] hsr_slave_0: left promiscuous mode [ 1299.873621][ T1413] hsr_slave_1: left promiscuous mode [ 1299.874515][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1299.929274][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1300.684389][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1300.815380][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1302.777690][T11152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1302.823710][T11152] 8021q: adding VLAN 0 to HW filter on device team0 [ 1302.920278][T11152] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1302.920302][T11152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1303.068162][T10269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.073416][T10269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1303.114724][T10269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.114870][T10269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1303.800176][ T9450] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1303.804713][ T9450] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1303.811342][ T9450] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1303.812928][ T9450] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1303.819439][ T9450] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1304.560200][T11078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1304.699670][T11152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1305.459460][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.459534][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.626214][T11253] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1305.730116][T11253] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1305.784093][T11253] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1305.923362][ T5841] Bluetooth: hci1: command tx timeout [ 1305.969651][T11253] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1306.391079][T11391] chnl_net:caif_netlink_parms(): no params data found [ 1308.003422][ T5841] Bluetooth: hci1: command tx timeout [ 1308.065132][T11391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.065353][T11391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.065580][T11391] bridge_slave_0: entered allmulticast mode [ 1308.076110][T11391] bridge_slave_0: entered promiscuous mode [ 1308.114040][T11391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.114188][T11391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.114401][T11391] bridge_slave_1: entered allmulticast mode [ 1308.117216][T11391] bridge_slave_1: entered promiscuous mode [ 1308.896821][T11478] netlink: 9 bytes leftover after parsing attributes in process `syz.9.964'. [ 1309.410241][T11479] netlink: 5 bytes leftover after parsing attributes in process `syz.9.964'. [ 1309.910748][ T9450] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1309.921142][ T9450] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1309.922699][ T9450] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1309.925479][ T9450] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1309.926230][ T9450] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1311.201502][ T9450] Bluetooth: hci1: command tx timeout [ 1311.215297][T11478] 1猉功D: entered promiscuous mode [ 1311.215330][T11478] 1猉功D: left allmulticast mode [ 1311.225448][T11479] 0猉功D: renamed from 31猉功D [ 1311.265600][T11479] 0猉功D: left promiscuous mode [ 1311.265629][T11479] 0猉功D: entered allmulticast mode [ 1311.268702][T11479] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 1311.269347][T11152] veth0_vlan: entered promiscuous mode [ 1311.376973][T11391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.412215][T11391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1311.987427][T11391] team0: Port device team_slave_0 added [ 1312.003512][ T9450] Bluetooth: hci2: command tx timeout [ 1312.097328][T11391] team0: Port device team_slave_1 added [ 1312.519768][T11391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1312.519778][T11391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1312.519793][T11391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.806707][T11391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.806723][T11391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1312.806751][T11391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1313.017611][ T1413] bridge_slave_1: left allmulticast mode [ 1313.017641][ T1413] bridge_slave_1: left promiscuous mode [ 1313.017924][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.085025][ T1413] bridge_slave_0: left allmulticast mode [ 1313.085059][ T1413] bridge_slave_0: left promiscuous mode [ 1313.085333][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.283393][ T9450] Bluetooth: hci1: command tx timeout [ 1314.780031][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1314.790930][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1314.811215][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1314.842216][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1314.843015][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1314.964328][ T5841] Bluetooth: hci2: command tx timeout [ 1316.963432][ T5841] Bluetooth: hci3: command tx timeout [ 1317.053962][ T5841] Bluetooth: hci2: command tx timeout [ 1317.481613][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1317.538423][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1317.576927][ T1413] bond0 (unregistering): Released all slaves [ 1317.731560][T11391] hsr_slave_0: entered promiscuous mode [ 1317.739777][T11391] hsr_slave_1: entered promiscuous mode [ 1317.740624][T11391] debugfs: 'hsr0' already exists in 'hsr' [ 1317.740647][T11391] Cannot create hsr debugfs directory [ 1318.135410][ T1413] hsr_slave_0: left promiscuous mode [ 1318.154736][ T1413] hsr_slave_1: left promiscuous mode [ 1318.155350][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1318.205077][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1319.043261][ T5841] Bluetooth: hci3: command tx timeout [ 1319.123445][ T5841] Bluetooth: hci2: command tx timeout [ 1319.221893][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1319.433830][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1321.123601][ T5841] Bluetooth: hci3: command tx timeout [ 1322.315282][T11512] netlink: 9 bytes leftover after parsing attributes in process `syz.9.971'. [ 1322.533491][T11513] netlink: 5 bytes leftover after parsing attributes in process `syz.9.971'. [ 1323.542272][ T5841] Bluetooth: hci3: command tx timeout [ 1323.597816][T11512] 0猉功D: entered promiscuous mode [ 1323.597851][T11512] 0猉功D: left allmulticast mode [ 1323.603905][T11513] 1猉功D: renamed from 30猉功D [ 1324.236385][T11513] 1猉功D: left promiscuous mode [ 1324.236414][T11513] 1猉功D: entered allmulticast mode [ 1324.238864][T11513] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 1324.532170][T11253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1324.865965][T11480] chnl_net:caif_netlink_parms(): no params data found [ 1325.248151][T11253] 8021q: adding VLAN 0 to HW filter on device team0 [ 1326.765266][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.765502][ T6053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1326.848093][T11480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.848236][T11480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.848502][T11480] bridge_slave_0: entered allmulticast mode [ 1326.851320][T11480] bridge_slave_0: entered promiscuous mode [ 1326.896818][T11480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.896942][T11480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.897170][T11480] bridge_slave_1: entered allmulticast mode [ 1326.899781][T11480] bridge_slave_1: entered promiscuous mode [ 1327.061230][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.061526][ T6053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1327.274108][T11480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.301975][T11480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1327.680035][T11480] team0: Port device team_slave_0 added [ 1327.716988][T11491] chnl_net:caif_netlink_parms(): no params data found [ 1327.725556][T11480] team0: Port device team_slave_1 added [ 1328.219772][T11480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.219789][T11480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.219816][T11480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.274098][T11480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1328.274112][T11480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.274133][T11480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1328.723333][ T9450] Bluetooth: hci4: command 0x1003 tx timeout [ 1328.723620][ T5841] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1330.101764][T11491] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.101976][T11491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.102225][T11491] bridge_slave_0: entered allmulticast mode [ 1330.125523][T11491] bridge_slave_0: entered promiscuous mode [ 1330.257270][T11491] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.257430][T11491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.257657][T11491] bridge_slave_1: entered allmulticast mode [ 1330.260370][T11491] bridge_slave_1: entered promiscuous mode [ 1330.359120][T11480] hsr_slave_0: entered promiscuous mode [ 1330.360457][T11480] hsr_slave_1: entered promiscuous mode [ 1330.976813][T11491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1331.315116][T11391] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1331.592765][T11491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1331.608261][T11391] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1331.782652][T11549] hub 9-0:1.0: USB hub found [ 1331.786978][T11549] hub 9-0:1.0: 1 port detected [ 1332.955075][T11391] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1333.130861][T11391] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1333.175869][T11491] team0: Port device team_slave_0 added [ 1333.228321][T11491] team0: Port device team_slave_1 added [ 1334.777482][T11491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1334.777495][T11491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1334.777510][T11491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1334.855299][T11491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1334.855727][T11491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1334.855835][T11491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1335.012313][ T1488] Bluetooth: hci4: Frame reassembly failed (-84) [ 1335.575159][T11491] hsr_slave_0: entered promiscuous mode [ 1335.579252][T11491] hsr_slave_1: entered promiscuous mode [ 1335.582007][T11491] debugfs: 'hsr0' already exists in 'hsr' [ 1335.582033][T11491] Cannot create hsr debugfs directory [ 1336.235908][T11253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1337.043273][ T5841] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1337.960410][T11391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1338.307689][ T1413] bridge_slave_1: left allmulticast mode [ 1338.307714][ T1413] bridge_slave_1: left promiscuous mode [ 1338.307892][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.374909][ T1413] bridge_slave_0: left allmulticast mode [ 1338.374942][ T1413] bridge_slave_0: left promiscuous mode [ 1338.375192][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.457698][ T1413] bridge_slave_1: left allmulticast mode [ 1338.457733][ T1413] bridge_slave_1: left promiscuous mode [ 1338.457978][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.542096][ T1413] bridge_slave_0: left allmulticast mode [ 1338.542120][ T1413] bridge_slave_0: left promiscuous mode [ 1338.542291][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.574750][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1340.600213][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1340.601503][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1340.620619][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1340.654635][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1342.745445][T11586] Bluetooth: hci0: command tx timeout [ 1343.328387][T11593] netlink: 'syz.9.984': attribute type 4 has an invalid length. [ 1343.328461][T11593] netlink: 17 bytes leftover after parsing attributes in process `syz.9.984'. [ 1344.144315][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1344.205780][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1344.228187][ T1413] bond0 (unregistering): Released all slaves [ 1344.803324][T11586] Bluetooth: hci0: command tx timeout [ 1345.474043][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1345.554974][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1345.580294][ T1413] bond0 (unregistering): Released all slaves [ 1345.945333][T11600] netlink: 16 bytes leftover after parsing attributes in process `syz.9.985'. [ 1345.993622][T11391] 8021q: adding VLAN 0 to HW filter on device team0 [ 1346.049321][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.049476][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1346.216690][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.216893][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1346.356522][ T1413] hsr_slave_0: left promiscuous mode [ 1346.393400][ T1413] hsr_slave_1: left promiscuous mode [ 1346.394383][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1346.455767][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1346.593399][ T1413] hsr_slave_0: left promiscuous mode [ 1346.613402][ T1413] hsr_slave_1: left promiscuous mode [ 1346.614353][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1346.666286][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1346.955525][T11586] Bluetooth: hci0: command tx timeout [ 1347.010265][ T1413] veth0_vlan: left promiscuous mode [ 1348.963586][T11586] Bluetooth: hci0: command tx timeout [ 1349.017038][T11609] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1349.017053][T11609] overlayfs: maximum fs stacking depth exceeded [ 1353.118161][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1353.325266][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1356.196639][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 1356.414315][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 1358.676426][T11623] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 1358.676449][T11623] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 11623, name: syz.9.992 [ 1358.676467][T11623] preempt_count: 1, expected: 0 [ 1358.676477][T11623] RCU nest depth: 1, expected: 1 [ 1358.676494][T11623] 3 locks held by syz.9.992/11623: [ 1358.676506][T11623] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0x1a/0x140 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1358.676585][T11623] #1: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1358.676641][T11623] #2: ffff88803aba5298 (&stab->lock){+...}-{3:3}, at: sock_map_delete_elem+0xb7/0x170 [ 1358.676701][T11623] Preemption disabled at: [ 1358.676706][T11623] [] bpf_test_timer_enter+0xf8/0x140 [ 1358.676769][T11623] CPU: 1 UID: 0 PID: 11623 Comm: syz.9.992 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1358.676794][T11623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1358.676813][T11623] Call Trace: [ 1358.676822][T11623] [ 1358.676830][T11623] dump_stack_lvl+0x189/0x250 [ 1358.676870][T11623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1358.676902][T11623] ? __pfx__printk+0x10/0x10 [ 1358.676929][T11623] ? print_lock_name+0xde/0x100 [ 1358.676950][T11623] ? bpf_test_timer_enter+0xf8/0x140 [ 1358.676982][T11623] __might_resched+0x44b/0x5d0 [ 1358.677009][T11623] ? bpf_test_timer_enter+0xf8/0x140 [ 1358.677037][T11623] ? __pfx___might_resched+0x10/0x10 [ 1358.677061][T11623] ? sock_map_delete_elem+0xb7/0x170 [ 1358.677108][T11623] rt_spin_lock+0xc7/0x2c0 [ 1358.677137][T11623] ? __pfx_rt_spin_lock+0x10/0x10 [ 1358.677162][T11623] ? ktime_get+0x3e/0x1f0 [ 1358.677182][T11623] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 1358.677205][T11623] ? __pfx___cant_migrate+0x10/0x10 [ 1358.677233][T11623] ? sock_map_delete_elem+0xa2/0x170 [ 1358.677262][T11623] sock_map_delete_elem+0xb7/0x170 [ 1358.677297][T11623] bpf_prog_7e44d70bdd3887c9+0x49/0x51 [ 1358.677322][T11623] bpf_flow_dissect+0x135/0x400 [ 1358.677350][T11623] bpf_prog_test_run_flow_dissector+0x37c/0x5c0 [ 1358.677395][T11623] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1358.677429][T11623] ? __fget_files+0x2a/0x420 [ 1358.677466][T11623] ? __fget_files+0x2a/0x420 [ 1358.677499][T11623] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1358.677531][T11623] bpf_prog_test_run+0x2cd/0x340 [ 1358.677563][T11623] __sys_bpf+0x581/0x870 [ 1358.677591][T11623] ? __pfx___sys_bpf+0x10/0x10 [ 1358.677641][T11623] ? rcu_is_watching+0x15/0xb0 [ 1358.677681][T11623] __x64_sys_bpf+0x7c/0x90 [ 1358.677705][T11623] do_syscall_64+0xfa/0x3b0 [ 1358.677723][T11623] ? lockdep_hardirqs_on+0x9c/0x150 [ 1358.677760][T11623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.677781][T11623] ? clear_bhb_loop+0x60/0xb0 [ 1358.677808][T11623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.677832][T11623] RIP: 0033:0x7f8e1a7cebe9 [ 1358.677850][T11623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1358.677868][T11623] RSP: 002b:00007f8e18a2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1358.677889][T11623] RAX: ffffffffffffffda RBX: 00007f8e1aa05fa0 RCX: 00007f8e1a7cebe9 [ 1358.677906][T11623] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1358.677920][T11623] RBP: 00007f8e1a851e19 R08: 0000000000000000 R09: 0000000000000000 [ 1358.677933][T11623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1358.677946][T11623] R13: 00007f8e1aa06038 R14: 00007f8e1aa05fa0 R15: 00007ffd257847b8 [ 1358.677981][T11623] [ 1358.958238][T11623] ------------[ cut here ]------------ [ 1358.958251][T11623] DEBUG_LOCKS_WARN_ON(this_cpu_read(softirq_ctrl.cnt)) [ 1358.958332][T11623] WARNING: CPU: 0 PID: 11623 at kernel/softirq.c:172 __local_bh_disable_ip+0x342/0x400 [ 1358.958376][T11623] Modules linked in: [ 1358.958397][T11623] CPU: 0 UID: 0 PID: 11623 Comm: syz.9.992 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 1358.958427][T11623] Tainted: [W]=WARN [ 1358.958434][T11623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1358.958447][T11623] RIP: 0010:__local_bh_disable_ip+0x342/0x400 [ 1358.958474][T11623] Code: 0f b6 04 28 84 c0 0f 85 b5 00 00 00 83 3d 29 9e 98 0d 00 75 19 90 48 c7 c7 00 b2 09 8b 48 c7 c6 40 b2 09 8b e8 df 61 fe ff 90 <0f> 0b 90 90 90 e9 fc fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 1358.958491][T11623] RSP: 0018:ffffc90004fe79a0 EFLAGS: 00010246 [ 1358.958508][T11623] RAX: 2319698c7a4fb000 RBX: 1ffff920009fcf38 RCX: 0000000000080000 [ 1358.958523][T11623] RDX: ffffc90020789000 RSI: 00000000000332ec RDI: 00000000000332ed [ 1358.958537][T11623] RBP: ffffc90004fe7a98 R08: 0000000000000000 R09: 0000000000000000 [ 1358.958551][T11623] R10: dffffc0000000000 R11: ffffed1017104863 R12: 1ffff110055c7c89 [ 1358.958566][T11623] R13: dffffc0000000000 R14: ffffffff8184ca91 R15: ffff88802ae3e44c [ 1358.958582][T11623] FS: 00007f8e18a2e6c0(0000) GS:ffff8881268bf000(0000) knlGS:0000000000000000 [ 1358.958600][T11623] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1358.958614][T11623] CR2: 00007ffeae186b08 CR3: 0000000049530000 CR4: 00000000003526f0 [ 1358.958632][T11623] Call Trace: [ 1358.958639][T11623] [ 1358.958647][T11623] ? sock_map_delete_elem+0xa2/0x170 [ 1358.958680][T11623] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1358.958706][T11623] ? ktime_get+0x3e/0x1f0 [ 1358.958732][T11623] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 1358.958754][T11623] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1358.958778][T11623] ? __pfx___cant_migrate+0x10/0x10 [ 1358.958802][T11623] ? sock_map_delete_elem+0xa2/0x170 [ 1358.958830][T11623] sock_map_delete_elem+0xaf/0x170 [ 1358.958862][T11623] bpf_prog_7e44d70bdd3887c9+0x49/0x51 [ 1358.958880][T11623] bpf_flow_dissect+0x135/0x400 [ 1358.958901][T11623] bpf_prog_test_run_flow_dissector+0x37c/0x5c0 [ 1358.958936][T11623] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1358.958966][T11623] ? __fget_files+0x2a/0x420 [ 1358.958997][T11623] ? __fget_files+0x2a/0x420 [ 1358.959026][T11623] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1358.959055][T11623] bpf_prog_test_run+0x2cd/0x340 [ 1358.959083][T11623] __sys_bpf+0x581/0x870 [ 1358.959107][T11623] ? __pfx___sys_bpf+0x10/0x10 [ 1358.959138][T11623] ? rcu_is_watching+0x15/0xb0 [ 1358.959171][T11623] __x64_sys_bpf+0x7c/0x90 [ 1358.959192][T11623] do_syscall_64+0xfa/0x3b0 [ 1358.959228][T11623] ? lockdep_hardirqs_on+0x9c/0x150 [ 1358.959257][T11623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.959278][T11623] ? clear_bhb_loop+0x60/0xb0 [ 1358.959300][T11623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.959320][T11623] RIP: 0033:0x7f8e1a7cebe9 [ 1358.959335][T11623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1358.959351][T11623] RSP: 002b:00007f8e18a2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1358.959372][T11623] RAX: ffffffffffffffda RBX: 00007f8e1aa05fa0 RCX: 00007f8e1a7cebe9 [ 1358.959387][T11623] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1358.959400][T11623] RBP: 00007f8e1a851e19 R08: 0000000000000000 R09: 0000000000000000 [ 1358.959413][T11623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1358.959425][T11623] R13: 00007f8e1aa06038 R14: 00007f8e1aa05fa0 R15: 00007ffd257847b8 [ 1358.959447][T11623] [ 1358.959457][T11623] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1358.959475][T11623] CPU: 0 UID: 0 PID: 11623 Comm: syz.9.992 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 1358.959503][T11623] Tainted: [W]=WARN [ 1358.959510][T11623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1358.959522][T11623] Call Trace: [ 1358.959529][T11623] [ 1358.959536][T11623] dump_stack_lvl+0x99/0x250 [ 1358.959566][T11623] ? __asan_memcpy+0x40/0x70 [ 1358.959587][T11623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1358.959615][T11623] ? __pfx__printk+0x10/0x10 [ 1358.959642][T11623] vpanic+0x281/0x750 [ 1358.959670][T11623] ? __pfx__printk+0x10/0x10 [ 1358.959690][T11623] ? __pfx_vpanic+0x10/0x10 [ 1358.959725][T11623] ? is_bpf_text_address+0x26/0x2b0 [ 1358.959757][T11623] panic+0xb9/0xc0 [ 1358.959785][T11623] ? __pfx_panic+0x10/0x10 [ 1358.959820][T11623] __warn+0x31b/0x4b0 [ 1358.959848][T11623] ? __local_bh_disable_ip+0x342/0x400 [ 1358.959874][T11623] ? __local_bh_disable_ip+0x342/0x400 [ 1358.959898][T11623] report_bug+0x2be/0x4f0 [ 1358.959924][T11623] ? __local_bh_disable_ip+0x342/0x400 [ 1358.959948][T11623] ? __local_bh_disable_ip+0x342/0x400 [ 1358.959972][T11623] ? __local_bh_disable_ip+0x344/0x400 [ 1358.959996][T11623] handle_bug+0x84/0x160 [ 1358.960016][T11623] exc_invalid_op+0x1a/0x50 [ 1358.960034][T11623] asm_exc_invalid_op+0x1a/0x20 [ 1358.960052][T11623] RIP: 0010:__local_bh_disable_ip+0x342/0x400 [ 1358.960075][T11623] Code: 0f b6 04 28 84 c0 0f 85 b5 00 00 00 83 3d 29 9e 98 0d 00 75 19 90 48 c7 c7 00 b2 09 8b 48 c7 c6 40 b2 09 8b e8 df 61 fe ff 90 <0f> 0b 90 90 90 e9 fc fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 1358.960091][T11623] RSP: 0018:ffffc90004fe79a0 EFLAGS: 00010246 [ 1358.960106][T11623] RAX: 2319698c7a4fb000 RBX: 1ffff920009fcf38 RCX: 0000000000080000 [ 1358.960123][T11623] RDX: ffffc90020789000 RSI: 00000000000332ec RDI: 00000000000332ed [ 1358.960139][T11623] RBP: ffffc90004fe7a98 R08: 0000000000000000 R09: 0000000000000000 [ 1358.960154][T11623] R10: dffffc0000000000 R11: ffffed1017104863 R12: 1ffff110055c7c89 [ 1358.960171][T11623] R13: dffffc0000000000 R14: ffffffff8184ca91 R15: ffff88802ae3e44c [ 1358.960189][T11623] ? __local_bh_disable_ip+0xa1/0x400 [ 1358.960222][T11623] ? sock_map_delete_elem+0xa2/0x170 [ 1358.960253][T11623] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1358.960279][T11623] ? ktime_get+0x3e/0x1f0 [ 1358.960297][T11623] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 1358.960319][T11623] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1358.960343][T11623] ? __pfx___cant_migrate+0x10/0x10 [ 1358.960367][T11623] ? sock_map_delete_elem+0xa2/0x170 [ 1358.960397][T11623] sock_map_delete_elem+0xaf/0x170 [ 1358.960430][T11623] bpf_prog_7e44d70bdd3887c9+0x49/0x51 [ 1358.960449][T11623] bpf_flow_dissect+0x135/0x400 [ 1358.960471][T11623] bpf_prog_test_run_flow_dissector+0x37c/0x5c0 [ 1358.960508][T11623] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1358.960540][T11623] ? __fget_files+0x2a/0x420 [ 1358.960572][T11623] ? __fget_files+0x2a/0x420 [ 1358.960603][T11623] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 1358.960633][T11623] bpf_prog_test_run+0x2cd/0x340 [ 1358.960661][T11623] __sys_bpf+0x581/0x870 [ 1358.960686][T11623] ? __pfx___sys_bpf+0x10/0x10 [ 1358.960750][T11623] ? rcu_is_watching+0x15/0xb0 [ 1358.960785][T11623] __x64_sys_bpf+0x7c/0x90 [ 1358.960808][T11623] do_syscall_64+0xfa/0x3b0 [ 1358.960825][T11623] ? lockdep_hardirqs_on+0x9c/0x150 [ 1358.960855][T11623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.960876][T11623] ? clear_bhb_loop+0x60/0xb0 [ 1358.960899][T11623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.960919][T11623] RIP: 0033:0x7f8e1a7cebe9 [ 1358.960936][T11623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1358.960954][T11623] RSP: 002b:00007f8e18a2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1358.960974][T11623] RAX: ffffffffffffffda RBX: 00007f8e1aa05fa0 RCX: 00007f8e1a7cebe9 [ 1358.960991][T11623] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1358.961006][T11623] RBP: 00007f8e1a851e19 R08: 0000000000000000 R09: 0000000000000000 [ 1358.961019][T11623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1358.961033][T11623] R13: 00007f8e1aa06038 R14: 00007f8e1aa05fa0 R15: 00007ffd257847b8 [ 1358.961057][T11623] [ 1358.961300][T11623] Kernel Offset: disabled