last executing test programs: 2m7.601224162s ago: executing program 2 (id=3): unshare(0x600) getdents64(0xffffffffffffffff, 0x0, 0x0) 2m6.798729638s ago: executing program 2 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x1}, @restrict={0xa, 0x0, 0x0, 0xb, 0x4}, @enum64={0x5, 0x2, 0x0, 0x13, 0x0, 0x7, [{0xd, 0x9, 0x2}, {0x4, 0x6, 0xd1}]}, @func={0x8, 0x0, 0x0, 0xc, 0x3}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x62, 0x0, 0x13, 0x2}, @struct={0x2, 0x9, 0x0, 0x4, 0x1, 0x3, [{0x3, 0x3, 0x59}, {0x5, 0x2, 0x7}, {0x8, 0x1, 0xe43}, {0x2, 0x5, 0x2}, {0x8, 0x4, 0xb}, {0x6, 0x5, 0x900000}, {0x5, 0x5, 0x1}, {0x10, 0x3, 0xfffffbff}, {0xc, 0x1, 0x401}]}]}, {0x0, [0x61, 0x0, 0x2e]}}, &(0x7f0000000140)=""/174, 0xed, 0xae, 0x0, 0x8}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040080) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x24dfdbff, {0x0, 0x0, 0x0, r11, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 1m50.882792592s ago: executing program 32 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x1}, @restrict={0xa, 0x0, 0x0, 0xb, 0x4}, @enum64={0x5, 0x2, 0x0, 0x13, 0x0, 0x7, [{0xd, 0x9, 0x2}, {0x4, 0x6, 0xd1}]}, @func={0x8, 0x0, 0x0, 0xc, 0x3}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x62, 0x0, 0x13, 0x2}, @struct={0x2, 0x9, 0x0, 0x4, 0x1, 0x3, [{0x3, 0x3, 0x59}, {0x5, 0x2, 0x7}, {0x8, 0x1, 0xe43}, {0x2, 0x5, 0x2}, {0x8, 0x4, 0xb}, {0x6, 0x5, 0x900000}, {0x5, 0x5, 0x1}, {0x10, 0x3, 0xfffffbff}, {0xc, 0x1, 0x401}]}]}, {0x0, [0x61, 0x0, 0x2e]}}, &(0x7f0000000140)=""/174, 0xed, 0xae, 0x0, 0x8}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040080) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x24dfdbff, {0x0, 0x0, 0x0, r11, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 1m22.580809005s ago: executing program 4 (id=43): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1m21.791475206s ago: executing program 4 (id=44): socket$pptp(0x18, 0x1, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 1m20.399106865s ago: executing program 4 (id=46): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x5, 0xbf8a, 0xfffffe0000000001, 0xfa11, 0xfff}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x3, 0x841, 0x3, 0x9, 0x100, 0x80000001, 0xffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000017c0)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x24040084) bind$inet(0xffffffffffffffff, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f00000005c0)={&(0x7f0000000140)=@canfd={{0x4, 0x0, 0x1}, 0x32, 0x2, 0x0, 0x0, "1a0f15a74ced1faed02d8eca4b9583bc785f35ec178ecc6b1505e76345becf55672f46211934eb4f58e9242778e88aa57dced2c654dd907a466d31f4b8149d71"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r6 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001280)={r4, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, 0x0, 0x0, 0x8) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0xc6, 0x1e, 0x40, 0x7c9, 0x12, 0xc2f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcb, 0x8e, 0x2f}}]}}]}}, 0x0) 1m16.596180072s ago: executing program 4 (id=52): sched_setattr(0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000003f001215edce000000000000027c00000400fe800800018004004e8050a88ca6418b5910d8674c309054da4700d7334db6e8035806b43580175d79109a6df367781d0c31"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB='_\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000003000000210001800400028008000300fdffffff0e0001"], 0x68}}, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r10, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 1m4.471821636s ago: executing program 4 (id=63): r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x40201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x6, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1, 0x4, 0xd, 0x20000004}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x5}, {0x10001, 0x4, 0x9, 0x0, 0x3, 0x1d, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, 0x20000000000000}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) poll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x2208}, {r0, 0x2011}, {r2, 0x64f0de7c82ba7a77}], 0x3, 0x1) 1m3.292309904s ago: executing program 4 (id=66): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x459, 0x10, r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 47.550539538s ago: executing program 33 (id=66): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x459, 0x10, r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 34.491064212s ago: executing program 3 (id=90): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$session_to_parent(0x12) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r4, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x30, 0x80}}, 0x50) read$FUSE(r2, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r5}, 0x10) syz_fuse_handle_req(r2, &(0x7f0000004940)="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", 0x202c, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xfffffffffffffffe, 0x3}, 0x0}) ioctl$FS_IOC_RESVSP(r3, 0x40086602, &(0x7f0000002740)={0xda}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x121180) ioctl$EVIOCGREP(r6, 0x80084503, &(0x7f0000001140)=""/136) r7 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet_sctp(r7, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f00000001c0)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}], 0x30}], 0x1, 0x0) 27.82957919s ago: executing program 0 (id=97): r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x40201, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x6, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1, 0x4, 0xd, 0x20000004}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x5}, {0x10001, 0x4, 0x9, 0x0, 0x3, 0x1d, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, 0x20000000000000}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x28, 0x1, 0x1, 0x3, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.575588268s ago: executing program 0 (id=99): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000844000/0x1000)=nil], &(0x7f0000002640), &(0x7f0000000000), 0x0) 25.821316313s ago: executing program 0 (id=102): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d06, 0x0, 0x1}]}) 24.810110161s ago: executing program 3 (id=103): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0xb, 0x401, 0x3, 0x1c, 0x2, 0x2, 0x4e, 0x3, 0xf9, 0x2, 0x80, 0x9, 0xc58}, {0xfffffffb, 0x2, 0x8, 0xcb, 0x2, 0x17, 0xd, 0xf1, 0x5, 0xff, 0x41, 0x7d, 0x5}, {0xe2a5, 0x4, 0x1, 0x9, 0x2, 0x1, 0x6, 0xb, 0x0, 0x6, 0x3, 0x3, 0x131}], 0x3}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) socket(0x400000000010, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) r2 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01"], 0x0) 24.772713099s ago: executing program 0 (id=104): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000380)="15e14481999f6905ce", 0x9}], 0x1) 23.291741519s ago: executing program 0 (id=105): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 14.857489766s ago: executing program 1 (id=111): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xa4, 0x0, &(0x7f0000001040)="d543f4d8ddbc3b5d8af16d4b7207543c1c6e3d2cd57f1ebd4721edf5eca8d5a0921488fe47f058ffa22cf27cb571e72e0cb9c525b6f19565d6c19fca35e3f69153daaf6ebb7814133522e0e6517b249233d92523277f84cd0fd338049c9faed2da33797446627aad81b6a9c78cdd7df447996b839c9673479b2d4098300ea2c980209a9ec06707d28a59ba4817f15ae17698116e511fb014585264cf3dd357a1567015cd"}) 14.129762947s ago: executing program 1 (id=112): unshare(0x8040480) r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) 12.989157204s ago: executing program 1 (id=113): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 12.380416138s ago: executing program 3 (id=114): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 11.770317526s ago: executing program 1 (id=115): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) shutdown(r0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0xc191) 11.429244792s ago: executing program 3 (id=116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x44004) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) 11.146963968s ago: executing program 0 (id=117): r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x40201, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x6, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1, 0x4, 0xd, 0x20000004}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x5}, {0x10001, 0x4, 0x9, 0x0, 0x3, 0x1d, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, 0x20000000000000}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x28, 0x1, 0x1, 0x3, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.946796451s ago: executing program 1 (id=118): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000780)=[{0x10, 0x29, 0x37}], 0x10}}], 0x1, 0x4000000) 10.605341105s ago: executing program 3 (id=119): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESHEX=r3, @ANYRES32=r2], 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) fchdir(0xffffffffffffffff) 6.0585861s ago: executing program 3 (id=120): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x108) sendfile(r0, r1, &(0x7f0000002700)=0x23, 0x1d) 0s ago: executing program 1 (id=121): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x1, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r0, 0x2219, 0x7723, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xc, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad60002784"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. [ 190.242796][ T5752] cgroup: Unknown subsys name 'net' [ 190.381269][ T5752] cgroup: Unknown subsys name 'cpuset' [ 190.396383][ T5752] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 196.847661][ T5752] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 201.830382][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 201.840631][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 201.850264][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 201.866517][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 201.880097][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.895030][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.904339][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.913594][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.928961][ T5067] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.958057][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.994076][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.010220][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.019985][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.034938][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.054124][ T5067] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 202.062390][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.073182][ T5067] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.084354][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 202.109624][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 202.122184][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 202.190220][ T5773] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.217973][ T5773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.232368][ T5773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.245595][ T5773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.258766][ T5773] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 203.690250][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 203.794740][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 203.945575][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 203.957680][ T49] Bluetooth: hci0: command tx timeout [ 204.037450][ T49] Bluetooth: hci1: command tx timeout [ 204.134633][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 204.197742][ T49] Bluetooth: hci3: command tx timeout [ 204.197788][ T5773] Bluetooth: hci2: command tx timeout [ 204.357846][ T49] Bluetooth: hci4: command tx timeout [ 204.449536][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 204.813306][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.827780][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.835495][ T5774] bridge_slave_0: entered allmulticast mode [ 204.861375][ T5774] bridge_slave_0: entered promiscuous mode [ 204.907309][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.917702][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.925364][ T5774] bridge_slave_1: entered allmulticast mode [ 204.969182][ T5774] bridge_slave_1: entered promiscuous mode [ 205.272665][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.309985][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.318187][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.325647][ T5780] bridge_slave_0: entered allmulticast mode [ 205.335190][ T5780] bridge_slave_0: entered promiscuous mode [ 205.348046][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.355554][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.365101][ T5778] bridge_slave_0: entered allmulticast mode [ 205.375844][ T5778] bridge_slave_0: entered promiscuous mode [ 205.405557][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.459212][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.466978][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.476818][ T5780] bridge_slave_1: entered allmulticast mode [ 205.489084][ T5780] bridge_slave_1: entered promiscuous mode [ 205.500934][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.508844][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.516298][ T5778] bridge_slave_1: entered allmulticast mode [ 205.526941][ T5778] bridge_slave_1: entered promiscuous mode [ 205.565568][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.607990][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.615707][ T5770] bridge_slave_0: entered allmulticast mode [ 205.652667][ T5770] bridge_slave_0: entered promiscuous mode [ 205.753377][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.761290][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.769050][ T5770] bridge_slave_1: entered allmulticast mode [ 205.778155][ T5770] bridge_slave_1: entered promiscuous mode [ 205.880409][ T5774] team0: Port device team_slave_0 added [ 205.897792][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.970787][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.989998][ T5774] team0: Port device team_slave_1 added [ 206.003786][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.037560][ T49] Bluetooth: hci0: command tx timeout [ 206.068503][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.076046][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.084365][ T5783] bridge_slave_0: entered allmulticast mode [ 206.093201][ T5783] bridge_slave_0: entered promiscuous mode [ 206.113030][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.119004][ T49] Bluetooth: hci1: command tx timeout [ 206.221971][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.232462][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.240439][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.248353][ T5783] bridge_slave_1: entered allmulticast mode [ 206.256961][ T5783] bridge_slave_1: entered promiscuous mode [ 206.277500][ T49] Bluetooth: hci3: command tx timeout [ 206.277747][ T5773] Bluetooth: hci2: command tx timeout [ 206.354983][ T5778] team0: Port device team_slave_0 added [ 206.370596][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.437477][ T5773] Bluetooth: hci4: command tx timeout [ 206.475515][ T5780] team0: Port device team_slave_0 added [ 206.493971][ T5780] team0: Port device team_slave_1 added [ 206.502967][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.514514][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.541605][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.559943][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.567385][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.594141][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.618241][ T5778] team0: Port device team_slave_1 added [ 206.795410][ T5770] team0: Port device team_slave_0 added [ 206.811626][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.906321][ T5770] team0: Port device team_slave_1 added [ 206.921383][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.933483][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.941247][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.968233][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.986151][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.994078][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.021162][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.035824][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.043169][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.069735][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.186647][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.193888][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.220688][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.342630][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.349886][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.377321][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.398544][ T5783] team0: Port device team_slave_0 added [ 207.418369][ T5774] hsr_slave_0: entered promiscuous mode [ 207.427833][ T5774] hsr_slave_1: entered promiscuous mode [ 207.450677][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.457852][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.484553][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.504097][ T5783] team0: Port device team_slave_1 added [ 207.758676][ T5780] hsr_slave_0: entered promiscuous mode [ 207.768073][ T5780] hsr_slave_1: entered promiscuous mode [ 207.775973][ T5780] debugfs: 'hsr0' already exists in 'hsr' [ 207.782081][ T5780] Cannot create hsr debugfs directory [ 207.834900][ T5778] hsr_slave_0: entered promiscuous mode [ 207.844196][ T5778] hsr_slave_1: entered promiscuous mode [ 207.852625][ T5778] debugfs: 'hsr0' already exists in 'hsr' [ 207.858613][ T5778] Cannot create hsr debugfs directory [ 207.867670][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.875070][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.901688][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.024314][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.031544][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.058245][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.127371][ T5773] Bluetooth: hci0: command tx timeout [ 208.151686][ T5770] hsr_slave_0: entered promiscuous mode [ 208.160940][ T5770] hsr_slave_1: entered promiscuous mode [ 208.169901][ T5770] debugfs: 'hsr0' already exists in 'hsr' [ 208.175783][ T5770] Cannot create hsr debugfs directory [ 208.197466][ T5773] Bluetooth: hci1: command tx timeout [ 208.357578][ T5773] Bluetooth: hci2: command tx timeout [ 208.357927][ T49] Bluetooth: hci3: command tx timeout [ 208.517820][ T49] Bluetooth: hci4: command tx timeout [ 208.531590][ T5783] hsr_slave_0: entered promiscuous mode [ 208.540721][ T5783] hsr_slave_1: entered promiscuous mode [ 208.549258][ T5783] debugfs: 'hsr0' already exists in 'hsr' [ 208.555122][ T5783] Cannot create hsr debugfs directory [ 209.615862][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 209.656906][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.678852][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.716628][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 209.822564][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 209.888579][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 209.912503][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 209.966522][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 210.179938][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.197471][ T49] Bluetooth: hci0: command tx timeout [ 210.212183][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.236273][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.278068][ T49] Bluetooth: hci1: command tx timeout [ 210.285532][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.437762][ T49] Bluetooth: hci2: command tx timeout [ 210.437854][ T5773] Bluetooth: hci3: command tx timeout [ 210.566417][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.591578][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.599116][ T49] Bluetooth: hci4: command tx timeout [ 210.670024][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.695089][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.946891][ T5783] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 210.983256][ T5783] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.003107][ T5783] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.051749][ T5783] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.239090][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.468470][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.500732][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.661708][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.669300][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.693520][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.719050][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.773252][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.780842][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.838990][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.846343][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.868840][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.876308][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.106519][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.156796][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.164232][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.213283][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.301163][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.308759][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.437040][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.489708][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.497066][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.575840][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.622010][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.629480][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.980880][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.120379][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.128019][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.215145][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.222761][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.785828][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.041836][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.116334][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.868001][ T5774] veth0_vlan: entered promiscuous mode [ 214.898868][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.994900][ T5780] veth0_vlan: entered promiscuous mode [ 215.051193][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.076993][ T5774] veth1_vlan: entered promiscuous mode [ 215.120193][ T5780] veth1_vlan: entered promiscuous mode [ 215.212112][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.641108][ T5774] veth0_macvtap: entered promiscuous mode [ 215.695599][ T5780] veth0_macvtap: entered promiscuous mode [ 215.723340][ T5778] veth0_vlan: entered promiscuous mode [ 215.781430][ T5774] veth1_macvtap: entered promiscuous mode [ 215.838684][ T5780] veth1_macvtap: entered promiscuous mode [ 215.906750][ T5778] veth1_vlan: entered promiscuous mode [ 215.925392][ T5770] veth0_vlan: entered promiscuous mode [ 216.094269][ T5770] veth1_vlan: entered promiscuous mode [ 216.124333][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.170863][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.234209][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.286159][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.363914][ T152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.373301][ T152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.406013][ T152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.422092][ T5778] veth0_macvtap: entered promiscuous mode [ 216.463683][ T1089] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.473871][ T1089] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.524016][ T5778] veth1_macvtap: entered promiscuous mode [ 216.555378][ T1089] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.577563][ T1089] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.586626][ T1089] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.981076][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.006942][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.024421][ T5770] veth0_macvtap: entered promiscuous mode [ 217.185723][ T5770] veth1_macvtap: entered promiscuous mode [ 217.257553][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.266677][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.327861][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.394034][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.433458][ T5783] veth0_vlan: entered promiscuous mode [ 217.611675][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.714238][ T5783] veth1_vlan: entered promiscuous mode [ 217.854636][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.002816][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.019356][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.061504][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.073821][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.391619][ T5783] veth0_macvtap: entered promiscuous mode [ 218.484771][ T5783] veth1_macvtap: entered promiscuous mode [ 218.890000][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.971011][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.073253][ T1077] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.141419][ T1077] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.175046][ T1077] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.273481][ T1077] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.690813][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.717594][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.889354][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.927506][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.191954][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.207468][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.255485][ T3429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.330202][ T3429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.690928][ T5780] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 224.687418][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.695502][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.023255][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.052383][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.106618][ T5960] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 225.411836][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.430037][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.120548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 226.166024][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.206938][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.338776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 227.008297][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.016346][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.096515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 227.111002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 227.158811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 227.170658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 227.399825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 228.013335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 228.115434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 228.218340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 234.817025][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.830112][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 235.124771][ T5979] batman_adv: batadv0: Adding interface: gretap1 [ 235.131459][ T5979] batman_adv: batadv0: Interface activated: gretap1 [ 235.930153][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.978263][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.650257][ T5996] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5'. [ 238.222569][ T6000] syz.0.12 uses obsolete (PF_INET,SOCK_PACKET) [ 238.249438][ T6000] syzkaller1: entered promiscuous mode [ 238.312274][ T6000] syzkaller1: entered allmulticast mode [ 238.987566][ T6009] process 'syz.1.13' launched '/dev/fd/8' with NULL argv: empty string added [ 239.651989][ T6013] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 241.564299][ T6013] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 241.874939][ T6013] Zero length message leads to an empty skb [ 243.537732][ T5773] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 243.562892][ T5773] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 243.572180][ T5773] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 243.589977][ T5773] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 243.600838][ T5773] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 245.797754][ T5773] Bluetooth: hci5: command tx timeout [ 246.816988][ T6025] chnl_net:caif_netlink_parms(): no params data found [ 247.889019][ T5773] Bluetooth: hci5: command tx timeout [ 249.957606][ T5773] Bluetooth: hci5: command tx timeout [ 250.248615][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.332005][ T6025] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.401253][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.578084][ T6025] bridge_slave_0: entered allmulticast mode [ 250.597872][ T6025] bridge_slave_0: entered promiscuous mode [ 250.889680][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.992912][ T6025] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.057793][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.099260][ T6025] bridge_slave_1: entered allmulticast mode [ 251.139471][ T6025] bridge_slave_1: entered promiscuous mode [ 251.224818][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.029455][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.067650][ T5773] Bluetooth: hci5: command tx timeout [ 252.308444][ T6025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.402439][ T6025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.428164][ T6046] syzkaller1: entered promiscuous mode [ 252.444568][ T6046] syzkaller1: entered allmulticast mode [ 253.036279][ T6025] team0: Port device team_slave_0 added [ 253.129332][ T6025] team0: Port device team_slave_1 added [ 254.200440][ T6025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.217750][ T6025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.349256][ T6025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.540239][ T6025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.565301][ T6025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.667088][ T6025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.731668][ T56] bridge_slave_1: left allmulticast mode [ 254.770263][ T56] bridge_slave_1: left promiscuous mode [ 254.792031][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.907064][ T56] bridge_slave_0: left allmulticast mode [ 254.913310][ T56] bridge_slave_0: left promiscuous mode [ 254.968296][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.964813][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888026d40c00: rx timeout, send abort [ 256.292945][ T6080] binder: 6079:6080 ioctl c010644f 200000000140 returned -22 [ 256.465571][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888051994800: rx timeout, send abort [ 256.474688][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888026d40c00: abort rx timeout. Force session deactivation [ 256.980477][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888051994800: abort rx timeout. Force session deactivation [ 257.815677][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.855995][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.907976][ T56] bond0 (unregistering): Released all slaves [ 259.342525][ T6025] hsr_slave_0: entered promiscuous mode [ 259.461938][ T6025] hsr_slave_1: entered promiscuous mode [ 259.472034][ T6025] debugfs: 'hsr0' already exists in 'hsr' [ 259.478799][ T6025] Cannot create hsr debugfs directory [ 259.867470][ T6093] could not allocate digest TFM handle md5 [ 260.587393][ T56] hsr_slave_0: left promiscuous mode [ 260.617562][ T56] hsr_slave_1: left promiscuous mode [ 260.654282][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.707510][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.746301][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.797696][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.928032][ T56] veth1_macvtap: left promiscuous mode [ 260.970942][ T56] veth0_macvtap: left promiscuous mode [ 261.008437][ T56] veth1_vlan: left promiscuous mode [ 261.037855][ T56] veth0_vlan: left promiscuous mode [ 263.816511][ T56] team0 (unregistering): Port device team_slave_1 removed [ 263.945327][ T56] team0 (unregistering): Port device team_slave_0 removed [ 267.050873][ T6025] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 267.328831][ T6025] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 267.507530][ T6025] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 267.609828][ T6025] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 269.974551][ T6025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.333835][ T6025] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.452106][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.459581][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.599256][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.606812][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.493469][ T6025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.418951][ T5827] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 272.858706][ T5827] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 272.919316][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.937720][ T5827] usb 5-1: Product: syz [ 272.988609][ T5827] usb 5-1: Manufacturer: syz [ 273.009883][ T5827] usb 5-1: SerialNumber: syz [ 273.086037][ T5827] usb 5-1: config 0 descriptor?? [ 274.608932][ T6025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.950306][ T5828] usb 5-1: USB disconnect, device number 2 [ 275.858946][ T6181] tipc: Started in network mode [ 275.864176][ T6181] tipc: Node identity 7f000001, cluster identity 4711 [ 275.897422][ T29] audit: type=1326 audit(1770951059.410:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e379bf79 code=0x7ffc0000 [ 276.001262][ T6181] tipc: Enabled bearer , priority 10 [ 276.021126][ T29] audit: type=1326 audit(1770951059.420:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43e379bf79 code=0x7ffc0000 [ 276.293373][ T29] audit: type=1326 audit(1770951059.430:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e379bf79 code=0x7ffc0000 [ 276.372447][ T29] audit: type=1326 audit(1770951059.430:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e379bf79 code=0x7ffc0000 [ 276.523818][ T29] audit: type=1326 audit(1770951059.430:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43e379bf79 code=0x7ffc0000 [ 276.706023][ T29] audit: type=1326 audit(1770951059.430:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e379bf79 code=0x7ffc0000 [ 276.899645][ T29] audit: type=1326 audit(1770951059.430:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43e379bf79 code=0x7ffc0000 [ 277.113873][ T29] audit: type=1326 audit(1770951059.440:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e379bf79 code=0x7ffc0000 [ 277.228571][ T5827] tipc: Node number set to 2130706433 [ 277.278682][ T29] audit: type=1326 audit(1770951059.440:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f43e379bf79 code=0x7ffc0000 [ 277.435780][ T29] audit: type=1326 audit(1770951059.440:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e379bf79 code=0x7ffc0000 [ 280.407761][ T6025] veth0_vlan: entered promiscuous mode [ 280.604527][ T6025] veth1_vlan: entered promiscuous mode [ 281.319130][ T6025] veth0_macvtap: entered promiscuous mode [ 281.372138][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 281.372218][ T29] audit: type=1326 audit(1770951064.920:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdae99bf79 code=0x7ffc0000 [ 281.507390][ T29] audit: type=1326 audit(1770951064.960:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdae99bf79 code=0x7ffc0000 [ 281.584348][ T6025] veth1_macvtap: entered promiscuous mode [ 281.622079][ T29] audit: type=1326 audit(1770951064.960:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fcdae99bf79 code=0x7ffc0000 [ 281.737769][ T29] audit: type=1326 audit(1770951064.960:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdae99bf79 code=0x7ffc0000 [ 281.891638][ T29] audit: type=1326 audit(1770951064.990:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdae99bf79 code=0x7ffc0000 [ 282.316879][ T6025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.497266][ T6025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.722330][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.773579][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.940775][ T1077] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.009483][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.168182][ T6228] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 287.006058][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026d3e800: rx timeout, send abort [ 287.508254][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026d3e600: rx timeout, send abort [ 287.517428][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026d3e800: abort rx timeout. Force session deactivation [ 288.019313][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026d3e600: abort rx timeout. Force session deactivation [ 292.541426][ T6288] netlink: 68 bytes leftover after parsing attributes in process `syz.0.68'. [ 292.591441][ T6288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.68'. [ 294.790801][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.857359][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.305286][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.414560][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.258031][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.265354][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.514289][ T6308] batman_adv: batadv0: Adding interface: gretap1 [ 296.528790][ T6308] batman_adv: batadv0: Interface activated: gretap1 [ 303.156067][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053070c00: rx timeout, send abort [ 303.656677][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053068c00: rx timeout, send abort [ 303.667544][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053070c00: abort rx timeout. Force session deactivation [ 304.165238][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053068c00: abort rx timeout. Force session deactivation [ 304.715881][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 304.737337][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 304.754648][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 304.803616][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 304.832956][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 305.807866][ T6336] libceph: resolve '0..' (ret=-3): failed [ 306.080794][ T5820] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 306.399486][ T5820] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 306.465598][ T5820] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 306.537870][ T5820] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 306.615106][ T5820] usb 2-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.667641][ T5820] usb 2-1: config 1 interface 0 has no altsetting 0 [ 306.780994][ T5820] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 306.832600][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.873368][ T5820] usb 2-1: Product: syz [ 306.887754][ T5820] usb 2-1: Manufacturer: syz [ 306.893018][ T5820] usb 2-1: SerialNumber: syz [ 306.918017][ T49] Bluetooth: hci1: command tx timeout [ 306.958922][ T6331] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 307.031717][ T6331] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 307.197894][ T5773] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 307.228646][ T5773] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 307.244781][ T5773] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 307.270956][ T5773] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 307.283368][ T5773] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 307.527001][ T6334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.607896][ T5827] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 307.619515][ T6334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.858013][ T5827] usb 4-1: Using ep0 maxpacket: 8 [ 307.939774][ T5827] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 307.977508][ T5827] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 308.115885][ T5827] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 308.224251][ T5827] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 308.367672][ T5827] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 308.477635][ T5827] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.572152][ T5827] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 308.698261][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.998089][ T5773] Bluetooth: hci1: command tx timeout [ 309.109986][ T5827] usb 4-1: usb_control_msg returned -32 [ 309.174031][ T5827] usbtmc 4-1:16.0: can't read capabilities [ 309.411621][ T5773] Bluetooth: hci6: command tx timeout [ 309.765079][ T5820] rtl8150 2-1:1.0: couldn't find required endpoints [ 309.825175][ T5820] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 309.906322][ T6329] chnl_net:caif_netlink_parms(): no params data found [ 310.268273][ T5820] usb 2-1: USB disconnect, device number 2 [ 310.951307][ T5827] usb 4-1: USB disconnect, device number 2 [ 311.008343][ T1077] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.079235][ T5773] Bluetooth: hci1: command tx timeout [ 311.497385][ T5773] Bluetooth: hci6: command tx timeout [ 311.735567][ T1077] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.060592][ T1077] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.501677][ T1077] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.157570][ T5773] Bluetooth: hci1: command tx timeout [ 313.211938][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880171e3000: rx timeout, send abort [ 313.559711][ T5773] Bluetooth: hci6: command tx timeout [ 313.712870][ C0] vcan0: j1939_tp_rxtimer: 0xffff888052736600: rx timeout, send abort [ 313.723696][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880171e3000: abort rx timeout. Force session deactivation [ 314.221760][ C0] vcan0: j1939_tp_rxtimer: 0xffff888052736600: abort rx timeout. Force session deactivation [ 314.265134][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.305966][ T6329] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.378972][ T6329] bridge_slave_0: entered allmulticast mode [ 314.462095][ T6329] bridge_slave_0: entered promiscuous mode [ 314.552465][ T6329] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.628181][ T6329] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.636119][ T6329] bridge_slave_1: entered allmulticast mode [ 314.763285][ T6329] bridge_slave_1: entered promiscuous mode [ 315.640551][ T5773] Bluetooth: hci6: command tx timeout [ 315.876791][ T6329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.986270][ T6349] chnl_net:caif_netlink_parms(): no params data found [ 316.223964][ T6329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.285373][ T1077] bridge_slave_1: left allmulticast mode [ 317.317648][ T1077] bridge_slave_1: left promiscuous mode [ 317.324727][ T1077] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.528293][ T1077] bridge_slave_0: left allmulticast mode [ 317.534274][ T1077] bridge_slave_0: left promiscuous mode [ 317.624427][ T1077] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.636755][ T1077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.746567][ T1077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.784629][ T1077] bond0 (unregistering): Released all slaves [ 319.846979][ T6329] team0: Port device team_slave_0 added [ 319.961732][ T6329] team0: Port device team_slave_1 added [ 320.939120][ T6423] batman_adv: batadv0: Adding interface: gretap1 [ 320.986439][ T6423] batman_adv: batadv0: Interface activated: gretap1 [ 321.062603][ T6329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.135342][ T6329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.267416][ T6329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.417914][ T6329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.426362][ T6329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.596006][ T6329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.100020][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880526cc800: rx timeout, send abort [ 322.563415][ T6349] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.600963][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052726400: rx timeout, send abort [ 322.610203][ T6349] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.610365][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880526cc800: abort rx timeout. Force session deactivation [ 322.664972][ T6349] bridge_slave_0: entered allmulticast mode [ 322.735015][ T6349] bridge_slave_0: entered promiscuous mode [ 323.109711][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052726400: abort rx timeout. Force session deactivation [ 323.324434][ T1077] hsr_slave_0: left promiscuous mode [ 323.397746][ T1077] hsr_slave_1: left promiscuous mode [ 323.406321][ T1077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.467730][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.514554][ T1077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.607447][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.786072][ T1077] veth1_macvtap: left promiscuous mode [ 323.792335][ T1077] veth0_macvtap: left promiscuous mode [ 323.880230][ T1077] veth1_vlan: left promiscuous mode [ 323.886033][ T1077] veth0_vlan: left promiscuous mode [ 326.912150][ T1077] team0 (unregistering): Port device team_slave_1 removed [ 327.079883][ T1077] team0 (unregistering): Port device team_slave_0 removed [ 327.418048][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805273da00: rx timeout, send abort [ 327.633139][ T6349] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.689455][ T6349] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.719443][ T6349] bridge_slave_1: entered allmulticast mode [ 327.886576][ T6349] bridge_slave_1: entered promiscuous mode [ 327.893865][ T5826] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 327.918928][ C1] vcan0: j1939_tp_rxtimer: 0xffff888017219200: rx timeout, send abort [ 327.932089][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805273da00: abort rx timeout. Force session deactivation [ 328.323161][ T6329] hsr_slave_0: entered promiscuous mode [ 328.346690][ T6329] hsr_slave_1: entered promiscuous mode [ 328.428150][ C1] vcan0: j1939_tp_rxtimer: 0xffff888017219200: abort rx timeout. Force session deactivation [ 328.457899][ T6453] ip6gretap0: entered allmulticast mode [ 328.464057][ T5826] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 328.525239][ T5826] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 328.553739][ T5826] usb 4-1: config 220 interface 0 has no altsetting 0 [ 328.611780][ T5826] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 328.642089][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.691996][ T5826] usb 4-1: Product: syz [ 328.696632][ T5826] usb 4-1: Manufacturer: syz [ 328.731063][ T5826] usb 4-1: SerialNumber: syz [ 328.937934][ T6349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.006978][ T5773] Bluetooth: hci0: command 0x0406 tx timeout [ 329.015027][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 329.022138][ T5773] Bluetooth: hci3: command 0x0406 tx timeout [ 329.256005][ T6349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.341141][ T6349] team0: Port device team_slave_0 added [ 333.436930][ T6349] team0: Port device team_slave_1 added [ 333.765944][ T1077] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.043010][ T5826] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 334.087608][ T5826] uvcvideo 4-1:220.0: No valid video chain found. [ 334.726669][ T1077] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.844437][ T6349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.867386][ T6349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.021932][ T6349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.101059][ T6349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.147802][ T6349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.256811][ T6349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.744907][ T1077] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.263190][ T1077] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.289641][ T6349] hsr_slave_0: entered promiscuous mode [ 337.356669][ T6349] hsr_slave_1: entered promiscuous mode [ 337.420404][ T6349] debugfs: 'hsr0' already exists in 'hsr' [ 337.426781][ T6349] Cannot create hsr debugfs directory [ 338.883983][ T1077] bridge_slave_1: left allmulticast mode [ 338.940583][ T1077] bridge_slave_1: left promiscuous mode [ 338.996003][ T1077] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.066317][ T1077] bridge_slave_0: left allmulticast mode [ 339.124674][ T1077] bridge_slave_0: left promiscuous mode [ 339.163975][ T1077] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.165451][ T5826] usb 4-1: USB disconnect, device number 3 [ 350.599353][ T1077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.366191][ T57] ===================================================== [ 352.373523][ T57] BUG: KMSAN: uninit-value in __inet6_bind+0x4ac/0x1830 [ 352.381779][ T57] __inet6_bind+0x4ac/0x1830 [ 352.386646][ T57] inet6_bind+0x11e/0x1a0 [ 352.391345][ T57] kernel_bind+0xd6/0x130 [ 352.395856][ T57] rds_tcp_conn_path_connect+0x952/0xff0 [ 352.401971][ T57] rds_connect_worker+0x353/0x4d0 [ 352.407651][ T57] process_scheduled_works+0xae7/0x1d60 [ 352.413412][ T57] worker_thread+0xede/0x1580 [ 352.419624][ T57] kthread+0x53f/0x600 [ 352.424009][ T57] ret_from_fork+0x20f/0x910 [ 352.431840][ T57] ret_from_fork_asm+0x1a/0x30 [ 352.436869][ T57] [ 352.440606][ T57] Uninit was stored to memory at: [ 352.445942][ T57] kernel_bind+0x92/0x130 [ 352.451030][ T57] rds_tcp_conn_path_connect+0x952/0xff0 [ 352.456943][ T57] rds_connect_worker+0x353/0x4d0 [ 352.462396][ T57] process_scheduled_works+0xae7/0x1d60 [ 352.470026][ T57] worker_thread+0xede/0x1580 [ 352.475006][ T57] kthread+0x53f/0x600 [ 352.479570][ T57] ret_from_fork+0x20f/0x910 [ 352.484563][ T57] ret_from_fork_asm+0x1a/0x30 [ 352.489682][ T57] [ 352.492115][ T57] Uninit was stored to memory at: [ 352.498143][ T57] rds_tcp_conn_path_connect+0xae5/0xff0 [ 352.504029][ T57] rds_connect_worker+0x353/0x4d0 [ 352.509412][ T57] process_scheduled_works+0xae7/0x1d60 [ 352.515288][ T57] worker_thread+0xede/0x1580 [ 352.536437][ T57] kthread+0x53f/0x600 [ 352.551316][ T57] ret_from_fork+0x20f/0x910 [ 352.557459][ T57] ret_from_fork_asm+0x1a/0x30 [ 352.562735][ T57] [ 352.565441][ T57] Uninit was created at: [ 352.570124][ T57] kmem_cache_alloc_noprof+0x373/0x1200 [ 352.575855][ T57] rds_tcp_conn_alloc+0x7b/0xbb0 [ 352.581138][ T57] __rds_conn_create+0x267f/0x34e0 [ 352.586935][ T57] rds_conn_create+0x5d/0x80 [ 352.591949][ T57] rds_tcp_accept_one+0x784/0x17d0 [ 352.597443][ T57] rds_tcp_accept_worker+0x38/0x100 [ 352.602893][ T57] process_scheduled_works+0xae7/0x1d60 [ 352.619554][ T57] worker_thread+0xede/0x1580 [ 352.624465][ T57] kthread+0x53f/0x600 [ 352.641640][ T57] ret_from_fork+0x20f/0x910 [ 352.646470][ T57] ret_from_fork_asm+0x1a/0x30 [ 352.655106][ T57] [ 352.658793][ T57] CPU: 0 UID: 0 PID: 57 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 352.668544][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 352.685132][ T57] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 352.692002][ T57] ===================================================== [ 352.703817][ T57] Disabling lock debugging due to kernel taint [ 352.793412][ T1077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.945117][ T57] Kernel panic - not syncing: kmsan.panic set ... [ 352.951954][ T57] CPU: 0 UID: 0 PID: 57 Comm: kworker/u8:4 Tainted: G B syzkaller #0 PREEMPT(full) [ 352.963133][ T57] Tainted: [B]=BAD_PAGE [ 352.967418][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 352.977674][ T57] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 352.984102][ T57] Call Trace: [ 352.987503][ T57] [ 352.990557][ T57] __dump_stack+0x26/0x30 [ 352.995116][ T57] dump_stack_lvl+0x50/0x1c0 [ 352.999944][ T57] ? dump_stack+0x12/0x25 [ 353.004687][ T57] dump_stack+0x1e/0x25 [ 353.009151][ T57] vpanic+0x435/0xd40 [ 353.013377][ T57] panic+0x15d/0x160 [ 353.017542][ T57] kmsan_report+0x31a/0x320 [ 353.022431][ T57] ? __msan_warning+0x1b/0x30 [ 353.027313][ T57] ? __inet6_bind+0x4ac/0x1830 [ 353.032388][ T57] ? inet6_bind+0x11e/0x1a0 [ 353.037119][ T57] ? kernel_bind+0xd6/0x130 [ 353.041913][ T57] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 353.048144][ T57] ? rds_connect_worker+0x353/0x4d0 [ 353.053552][ T57] ? process_scheduled_works+0xae7/0x1d60 [ 353.059541][ T57] ? worker_thread+0xede/0x1580 [ 353.064797][ T57] ? kthread+0x53f/0x600 [ 353.069318][ T57] ? ret_from_fork+0x20f/0x910 [ 353.074258][ T57] ? ret_from_fork_asm+0x1a/0x30 [ 353.079438][ T57] ? stack_depot_save+0x12/0x20 [ 353.084511][ T57] ? kmsan_internal_chain_origin+0xb6/0xd0 [ 353.091002][ T57] ? kmsan_internal_chain_origin+0x5d/0xd0 [ 353.097264][ T57] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 353.103891][ T57] ? __msan_memcpy+0x105/0x1c0 [ 353.109287][ T57] ? kernel_bind+0x92/0x130 [ 353.114145][ T57] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 353.120550][ T57] ? rds_connect_worker+0x353/0x4d0 [ 353.126123][ T57] ? process_scheduled_works+0xae7/0x1d60 [ 353.132281][ T57] ? worker_thread+0xede/0x1580 [ 353.137496][ T57] ? kthread+0x53f/0x600 [ 353.141939][ T57] ? ret_from_fork+0x20f/0x910 [ 353.146901][ T57] ? ret_from_fork_asm+0x1a/0x30 [ 353.152196][ T57] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 353.158527][ T57] ? stack_depot_save_flags+0x610/0x790 [ 353.164337][ T57] ? kmsan_get_metadata+0xf1/0x160 [ 353.169654][ T57] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 353.175694][ T57] ? kmsan_get_metadata+0xf1/0x160 [ 353.181004][ T57] __msan_warning+0x1b/0x30 [ 353.185931][ T57] __inet6_bind+0x4ac/0x1830 [ 353.191028][ T57] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 353.197241][ T57] inet6_bind+0x11e/0x1a0 [ 353.201816][ T57] ? __pfx_inet6_bind+0x10/0x10 [ 353.206971][ T57] kernel_bind+0xd6/0x130 [ 353.211836][ T57] ? kmsan_get_metadata+0xf1/0x160 [ 353.217248][ T57] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 353.223441][ T57] rds_tcp_conn_path_connect+0x952/0xff0 [ 353.229316][ T57] ? try_to_wake_up+0x1056/0x2070 [ 353.234571][ T57] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 353.241566][ T57] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 353.248047][ T57] rds_connect_worker+0x353/0x4d0 [ 353.253310][ T57] ? __pfx_rds_connect_worker+0x10/0x10 [ 353.259079][ T57] process_scheduled_works+0xae7/0x1d60 [ 353.264897][ T57] worker_thread+0xede/0x1580 [ 353.269983][ T57] kthread+0x53f/0x600 [ 353.274255][ T57] ? __pfx_worker_thread+0x10/0x10 [ 353.279621][ T57] ? __pfx_kthread+0x10/0x10 [ 353.284753][ T57] ret_from_fork+0x20f/0x910 [ 353.289608][ T57] ? __switch_to+0x51c/0x750 [ 353.294439][ T57] ? __pfx_kthread+0x10/0x10 [ 353.299248][ T57] ret_from_fork_asm+0x1a/0x30 [ 353.304342][ T57] [ 353.308188][ T57] Kernel Offset: disabled [ 353.312682][ T57] Rebooting in 86400 seconds..