last executing test programs: 5m5.782003438s ago: executing program 1 (id=2): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) 5m4.518438429s ago: executing program 1 (id=8): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x0, 0x8000000000000001, 0x48c, 0x1, 0xd, 0x421, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x80000000007, 0x2, 0x1000000081, 0x5, 0x200, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x3, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x36, 0x107, 0xfffffffc, 0x810000, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r5, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000040)=@chain={'key_or_keyring:', r5}) 5m3.690820232s ago: executing program 0 (id=1): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r0, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x7fff}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 5m2.390586364s ago: executing program 0 (id=11): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000002c0)=0xe2, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5m0.114241229s ago: executing program 0 (id=16): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) 4m55.947068995s ago: executing program 0 (id=22): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000c80)=ANY=[@ANYBLOB="09000000c80000"], 0x7) syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x498, 0x400, 0x1, 0x161}, &(0x7f0000000dc0)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x8000, 0x80, 0x4c3, 0x7, {{0x8, 0x4, 0x1, 0x29, 0x20, 0x64, 0x0, 0x9, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_addr={0x44, 0x4, 0x37}, @cipso={0x86, 0x6, 0x3}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2}, 0xfffffe0f) r4 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bind$inet6(r4, 0x0, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r6, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002) close(0xffffffffffffffff) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x200000) 4m47.876882875s ago: executing program 32 (id=8): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x0, 0x8000000000000001, 0x48c, 0x1, 0xd, 0x421, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x80000000007, 0x2, 0x1000000081, 0x5, 0x200, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x3, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x36, 0x107, 0xfffffffc, 0x810000, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r5, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000040)=@chain={'key_or_keyring:', r5}) 4m40.45461436s ago: executing program 33 (id=22): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000c80)=ANY=[@ANYBLOB="09000000c80000"], 0x7) syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x498, 0x400, 0x1, 0x161}, &(0x7f0000000dc0)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x8000, 0x80, 0x4c3, 0x7, {{0x8, 0x4, 0x1, 0x29, 0x20, 0x64, 0x0, 0x9, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_addr={0x44, 0x4, 0x37}, @cipso={0x86, 0x6, 0x3}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2}, 0xfffffe0f) r4 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bind$inet6(r4, 0x0, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r6, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002) close(0xffffffffffffffff) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x200000) 1m10.010812265s ago: executing program 2 (id=394): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000180)=r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) 1m6.855097732s ago: executing program 2 (id=397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x31, 0x7d, 0x55}}]}}]}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40045506, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 1m4.885451362s ago: executing program 2 (id=401): openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$inet(0x2, 0x1, 0x100) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x11, r2, 0x2f2bd000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m1.395444436s ago: executing program 2 (id=404): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 1m0.901353724s ago: executing program 2 (id=406): sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="90000000051405012cbd7000fbdbdf0100000000000800030000000015fd00012ce379552fc285"], 0x90}, 0x1, 0x0, 0x0, 0x20040081}, 0x40010) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0xf170, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffc], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x60000, 0x0, 0x7, 0x8, 0x5, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xeeee0000, 0x8080000, 0xb, 0x4, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfd}, {0x0, 0xdddd0000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0x2}, {0x200000, 0x6000, 0x8, 0x3, 0x8, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0xeeee0000, 0xe, 0x2, 0x70, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x1, 0x0, 0xa1, 0x20, 0x0, 0xff, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x5, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0xc, 0xf800, 0x0, [0x8000000000000001, 0x0, 0xffffffffffffffff, 0x1]}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000040)={0x80000, 0x0, {[0x5, 0x1, 0x6, 0x0, 0x1, 0x8001, 0x0, 0xffff]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 59.81133381s ago: executing program 2 (id=407): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x499, 0x0, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) ustat(0x801, &(0x7f0000000240)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') syz_init_net_socket$ax25(0x3, 0x3, 0xcf) close_range(r5, 0xffffffffffffffff, 0x0) 43.597818454s ago: executing program 34 (id=407): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x499, 0x0, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) ustat(0x801, &(0x7f0000000240)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') syz_init_net_socket$ax25(0x3, 0x3, 0xcf) close_range(r5, 0xffffffffffffffff, 0x0) 15.665040782s ago: executing program 4 (id=461): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0xa6, 0xa9, 0x7, 0x9, 0x6, 0x99, 0x7, 0x0, 0x6, 0x7, 0x1, 0x0, 0x7}, 0xe) shutdown(0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x48600, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a7, 0x2000000000003ff, 0x2]}) close_range(r0, 0xffffffffffffffff, 0x0) 14.071166826s ago: executing program 4 (id=463): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_dev$dvb_demux(&(0x7f0000000280), 0x0, 0x101800) ioctl$DVB_DEMUX_DMX_START(r2, 0x6f29) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) syz_clone3(&(0x7f0000001200)={0x40100080, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) munlockall() mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x5, 0xef, 0x8d, '\x00', 0xee}, {0xfb, 0x7, 0x3}, {0x17, 0xfc, 0x2, '\x00', 0x5}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x5}, {0x9, 0xdb, 0x1, '\x00', 0xff}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x3, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x3}, {0x6e, 0x4, 0x1, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x9}, {0x13, 0x7}, {0x1, 0x6, 0x9, '\x00', 0x2}, {0x8, 0x6, 0x1, '\x00', 0x49}, {0xae, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0xbd, 0x9, 0x54, '\x00', 0x9}]}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r1, @ANYBLOB="3b1625bd7000fddbdf255100000008000300", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x50) 6.607799604s ago: executing program 4 (id=472): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) 6.112934959s ago: executing program 4 (id=474): ioperm(0x7fffffff, 0x1, 0x8) gettid() r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x7aad, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000480)=""/232, 0xe8}, {&(0x7f0000000580)=""/252, 0xfc}, {&(0x7f0000000280)=""/42, 0x2a}, {&(0x7f00000007c0)=""/209, 0xd1}, {0x0}, {&(0x7f0000000380)=""/178, 0xb2}, {&(0x7f00000008c0)=""/232, 0xe8}], 0x7, &(0x7f00000009c0)=""/194, 0xc2}, 0x2001) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) readv(r5, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4085, 0xff5}], 0x1) 4.932450334s ago: executing program 4 (id=477): socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, 0xffffffffffffffff, 0x1e, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sysfs$2(0x2, 0x817fff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 4.037939571s ago: executing program 3 (id=479): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) r0 = io_uring_setup(0xa27, &(0x7f00000010c0)={0x0, 0x8166c, 0x80, 0x0, 0x3d5}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x79, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) openat$cachefiles(0xffffff9c, 0x0, 0x401, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.527671568s ago: executing program 3 (id=480): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0xffffffff, 0x180, 0x2, 0x17, 0xf1, 0x2, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x100004, 0x5], 0xdddd0000, 0x1c4a13}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.198383185s ago: executing program 3 (id=481): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='S8', 0x2}, {&(0x7f00000002c0)="893288f6555be22b12a0d1c291bd28ad4ec486c3de97196e5b6455e9357776593e019448955d760cf9a2cf5543a70f30dd10e8b05b46573a8494df5a6e52d2f948177a0dcb5619ee5b152734d0c9b569fdc911fa5b834b5c2f411365a34e5552ec2da9b6046b7b49a75167625510a2380aa5de711e9e5d6b4ef95f264ffb141774bc06e066289c7d7d9e02d32f5ab995662669af8cc41a17421a0abcc164525df59257b48847ab55eb277d2e8ea0631a34825c86d52772df0c79838c6d41b7623faf4f524d7d57207c89d149f5dac947d6cc0d5fa53d75b183c294af15d9687ee161e5c50eccdd0f681590fe26791f4dd0c2", 0xf2}, {&(0x7f0000000980)="33a15efde9366c2cbe969e3fd7468e23ba7521a41a07c9143ed7bf19038cbeee00ab11d697b9e39b8409ead8fc79676eafaa54d747d522da442ae6fa583d5cc1922bd208fa6fddaaceaca791f8e7c67f38c46330ba13fc7f019bfa0c77e5b893c1d2fb90b494dc5f75f38c8d42efbef3a09b544a3fe12bb89b25357eee0b5d2ea736ea1ddb8ef16fa0321e299c6318fb9b633e0e9481ec259ae919c7959c3e", 0x9f}, {&(0x7f0000000080)="dca061da3ee5546ef2", 0x9}, {&(0x7f00000005c0)="16f0517c46de2d876fca33fc6cd9b75c8ff294b9c7b574672fe3c8e72c4b3e5f2ae66a5fb824c55add2186b870bfaad2dfd8aa434e4636b8a8179651ffef3448741a1cd0d86f811b8f0b520c6e0ff7801582aca2b013d7bbdd7370c4a17293b04d169a4c74daa4e21c904b6524148cc64a31bd7cd409667eeed0cf854bd85faca662aa3f6a542cc23d01123ddffb4a12a0e2ee210570f96ee1d2fea27f9c80c4001098c365b15f300c8c7445548f1f268b52cf54c80b6cf2854b04838709efbe8b88935e50", 0xc5}], 0x5}}, {{&(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f0000000480)=[{&(0x7f00000000c0)="2b787427beefc8435f1f7ef82103ef11c2571e251ea7f67bc99afb7ba2c28b5ce09a230e78", 0x25}, {&(0x7f0000000140)="3265e2e92c82d95cf8ddb2714532a63643fb1b1dc616a03a89a6584ae99ccb79dfc9850820da7152de8d99d7e8474f5d76ad177da0f04d0f3eff008cb34e5fb635278d99d3", 0x45}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000800)=[{&(0x7f00000006c0)="b33bd511f6cd4a779a058f5a901ed9e21b5c455b3f9bb87291e4e7c7bb8ec6c9e330c5c49cdde5f016d45d2a253eee7f2e95401f63f803eec7272209f77e", 0x3e}, {&(0x7f0000000700)="19bcb295fafb19d02122feface30916ff5ce4c64bad378499548306dd61ed25e145dc6448c219c48c67ea58b201c3ed458f8768619bea9a2822efff404f3d7d22c285f2d0ca141b4174f77f31249405f43ec8ea92f3aba6fc9de592bf6deda97b1e3bde8d2bafb076c6e56273d6b61b52bf835e563f0a36c84f857c420703f18d3b8c479d36ca4e1e664c460e05f34186179de491d27456f8385e4407566c4d12fe11d63ba2dfab1262da3cb686fbef43e4b4b", 0xb3}], 0x2, &(0x7f0000000840)}}], 0x3, 0x20008000) recvfrom$inet(r0, &(0x7f0000000500)=""/165, 0xa5, 0x120, 0x0, 0x0) 1.92797802s ago: executing program 3 (id=482): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000700)="c87b35043e70167a3e59c95cf2d2470a409aed8df615eda880680920e7ea2e4413084cba0ac21d664201fbe69bf2660ea3918ef0b6727862bbd91dfce9385577a868d3a94cbfd3756c4fc07934e5ae442a225605985c4a8e3de576c99ecd23d425b1f09e6413e8f779e0723e88fc0d8cc981391df5e1f5ba5fa3ca690b472143edac8820850652322d4594f9b4e4e88482356e", 0x93}, {&(0x7f0000000300)="c071c346d7762184984cd6fc3bd9904a7df7f6f0cc0d7bf8e1359a106b1f25eb975e8b38ca101a0706ae6835", 0x2c}, {&(0x7f00000007c0)="e4e86ea4ab941009402773769eb1b04ad141f53294bf37a503b368ec7378ebb37de43aa11a211b4486253928fb4e4f8874d02cb4d8e961a9b6815ff9a2dec718f23e2b294767db301a17e9d6cd95d7f94a732e6a3c38750a53e71307f9fc58e26b1b9147df16e7b12720ed83999e722ea43c3f1b5b682f44ec468d762b1af6290f4bcd7fcc34e7facbf69dabcc4e95a7ac43f137e3a7d8bae77ad30928ac7aab8f3954ad4cb5430c93a4fd70f8ef79bbc8", 0xb1}, {&(0x7f00000008c0)="96d2502e8c4241346fdc3fe5cee92278ad930f37caffe5853aaf307a54dbc2401f258383278cd81465da6006bf0e9fca4a645e7a170338ffda0e71555ad50ee0851a7e23c343e80a80696e0506ca8601cd8c75b2853fd821a0d92d4d6d39783a5a2b52c29ed15fe0c70a698e9a9d449df75692dd401991ce8398d5b1200f96486b0e945f82e8f195351587b2069eebd4108e37157a8cb58c6897ba7347210a76a3b5ce899dfda4", 0xa7}], 0x4}}], 0x1, 0x24044000) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de250000", 0x3a}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)="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", 0x14b}, {&(0x7f0000000d00)="31cef8", 0x3}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.346135357s ago: executing program 3 (id=483): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x3e7f, &(0x7f0000000540)={0x0, 0xcc09, 0x400, 0x3, 0x285}, &(0x7f0000000380)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r2, r0, 0x80000) 319.324865ms ago: executing program 4 (id=484): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @broadcast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 0s ago: executing program 3 (id=485): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. [ 156.090693][ T5754] cgroup: Unknown subsys name 'net' [ 156.240198][ T5754] cgroup: Unknown subsys name 'cpuset' [ 156.262872][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 161.841740][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 165.975691][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.012358][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.021776][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.035934][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.046591][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.131746][ T5069] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.142103][ T5069] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.151858][ T5069] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.164330][ T5069] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.192267][ T5069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.232641][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.262783][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.271466][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.280413][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.292896][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.303487][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.320814][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.353836][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.368761][ T5069] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.387492][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.408783][ T5069] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.418065][ T5069] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.428112][ T5069] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.441337][ T5069] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.453948][ T5069] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.565778][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 167.758702][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 167.971756][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 168.164965][ T5785] Bluetooth: hci0: command tx timeout [ 168.239032][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 168.246136][ T5785] Bluetooth: hci1: command tx timeout [ 168.268751][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 168.481384][ T5785] Bluetooth: hci3: command tx timeout [ 168.487146][ T5785] Bluetooth: hci2: command tx timeout [ 168.561481][ T5785] Bluetooth: hci4: command tx timeout [ 168.708522][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.716465][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.725886][ T5772] bridge_slave_0: entered allmulticast mode [ 168.736885][ T5772] bridge_slave_0: entered promiscuous mode [ 168.809527][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.818381][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.830569][ T5776] bridge_slave_0: entered allmulticast mode [ 168.846458][ T5776] bridge_slave_0: entered promiscuous mode [ 168.859316][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.870286][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.878809][ T5772] bridge_slave_1: entered allmulticast mode [ 168.889635][ T5772] bridge_slave_1: entered promiscuous mode [ 168.966652][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.981732][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.989321][ T5776] bridge_slave_1: entered allmulticast mode [ 169.000251][ T5776] bridge_slave_1: entered promiscuous mode [ 169.044691][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.052553][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.060122][ T5786] bridge_slave_0: entered allmulticast mode [ 169.069774][ T5786] bridge_slave_0: entered promiscuous mode [ 169.085685][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.093599][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.101532][ T5786] bridge_slave_1: entered allmulticast mode [ 169.111519][ T5786] bridge_slave_1: entered promiscuous mode [ 169.161747][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.252086][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.335991][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.390468][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.398550][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.406524][ T5778] bridge_slave_0: entered allmulticast mode [ 169.414648][ T5778] bridge_slave_0: entered promiscuous mode [ 169.434167][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.450651][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.486170][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.494157][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.501876][ T5780] bridge_slave_0: entered allmulticast mode [ 169.510149][ T5780] bridge_slave_0: entered promiscuous mode [ 169.520907][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.528679][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.537475][ T5778] bridge_slave_1: entered allmulticast mode [ 169.546060][ T5778] bridge_slave_1: entered promiscuous mode [ 169.566560][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.627351][ T5772] team0: Port device team_slave_0 added [ 169.634372][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.641964][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.649408][ T5780] bridge_slave_1: entered allmulticast mode [ 169.658736][ T5780] bridge_slave_1: entered promiscuous mode [ 169.722534][ T5776] team0: Port device team_slave_0 added [ 169.735015][ T5772] team0: Port device team_slave_1 added [ 169.866235][ T5776] team0: Port device team_slave_1 added [ 169.930851][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.947848][ T5786] team0: Port device team_slave_0 added [ 170.008405][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.025364][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.043116][ T5786] team0: Port device team_slave_1 added [ 170.072487][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.079612][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.105975][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.124935][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.180960][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.188298][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.214539][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.228493][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.235797][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.262557][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.271446][ T5785] Bluetooth: hci0: command tx timeout [ 170.321245][ T5785] Bluetooth: hci1: command tx timeout [ 170.368161][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.375752][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.402577][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.461837][ T5778] team0: Port device team_slave_0 added [ 170.470022][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.477157][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.503547][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.530817][ T5780] team0: Port device team_slave_0 added [ 170.544376][ T5778] team0: Port device team_slave_1 added [ 170.552351][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.559424][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.586228][ T5069] Bluetooth: hci3: command tx timeout [ 170.587952][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.592260][ T5785] Bluetooth: hci2: command tx timeout [ 170.641337][ T5785] Bluetooth: hci4: command tx timeout [ 170.675860][ T5780] team0: Port device team_slave_1 added [ 170.820870][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.828275][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.854646][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.878601][ T5772] hsr_slave_0: entered promiscuous mode [ 170.887289][ T5772] hsr_slave_1: entered promiscuous mode [ 170.908631][ T5776] hsr_slave_0: entered promiscuous mode [ 170.917165][ T5776] hsr_slave_1: entered promiscuous mode [ 170.925330][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 170.931309][ T5776] Cannot create hsr debugfs directory [ 170.985841][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.993051][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.019360][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.053236][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.060352][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.087308][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.207509][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.214841][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.242199][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.267005][ T5786] hsr_slave_0: entered promiscuous mode [ 171.275339][ T5786] hsr_slave_1: entered promiscuous mode [ 171.283994][ T5786] debugfs: 'hsr0' already exists in 'hsr' [ 171.289831][ T5786] Cannot create hsr debugfs directory [ 171.588296][ T5778] hsr_slave_0: entered promiscuous mode [ 171.596784][ T5778] hsr_slave_1: entered promiscuous mode [ 171.605115][ T5778] debugfs: 'hsr0' already exists in 'hsr' [ 171.610925][ T5778] Cannot create hsr debugfs directory [ 171.819977][ T5780] hsr_slave_0: entered promiscuous mode [ 171.829057][ T5780] hsr_slave_1: entered promiscuous mode [ 171.837166][ T5780] debugfs: 'hsr0' already exists in 'hsr' [ 171.843416][ T5780] Cannot create hsr debugfs directory [ 172.321456][ T5785] Bluetooth: hci0: command tx timeout [ 172.411507][ T5785] Bluetooth: hci1: command tx timeout [ 172.578686][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.597052][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 172.636621][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 172.652200][ T5785] Bluetooth: hci2: command tx timeout [ 172.657762][ T5785] Bluetooth: hci3: command tx timeout [ 172.705524][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 172.731402][ T5785] Bluetooth: hci4: command tx timeout [ 172.910776][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.930928][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.954584][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.976237][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.210423][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.264728][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.285590][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.306466][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.572048][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.579471][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.606913][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.634387][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.715055][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.880962][ T5780] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.928617][ T5780] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.959134][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.978938][ T5780] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.000166][ T5780] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.088391][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.096032][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.179875][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.187323][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.216016][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.382781][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.401882][ T5785] Bluetooth: hci0: command tx timeout [ 174.482321][ T5785] Bluetooth: hci1: command tx timeout [ 174.518827][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.526339][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.569991][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.639858][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.647349][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.722657][ T5785] Bluetooth: hci3: command tx timeout [ 174.728260][ T5785] Bluetooth: hci2: command tx timeout [ 174.801426][ T5785] Bluetooth: hci4: command tx timeout [ 174.865589][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.976844][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.984450][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.047792][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.055403][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.189753][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.359832][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.402916][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.478173][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.485675][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.550880][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.638870][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.646241][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.748362][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.769200][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.776757][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.879472][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.886886][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.320430][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.667268][ T5772] veth0_vlan: entered promiscuous mode [ 176.885400][ T5772] veth1_vlan: entered promiscuous mode [ 176.989742][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.078747][ T5776] veth0_vlan: entered promiscuous mode [ 177.159929][ T5776] veth1_vlan: entered promiscuous mode [ 177.312950][ T5772] veth0_macvtap: entered promiscuous mode [ 177.408538][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.463374][ T5772] veth1_macvtap: entered promiscuous mode [ 177.616874][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.676502][ T5786] veth0_vlan: entered promiscuous mode [ 177.766317][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.800025][ T5776] veth0_macvtap: entered promiscuous mode [ 177.840562][ T5786] veth1_vlan: entered promiscuous mode [ 177.866558][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.977558][ T5776] veth1_macvtap: entered promiscuous mode [ 178.009073][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.060501][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.089650][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.190997][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.280869][ T5778] veth0_vlan: entered promiscuous mode [ 178.314782][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.454547][ T5786] veth0_macvtap: entered promiscuous mode [ 178.495155][ T5778] veth1_vlan: entered promiscuous mode [ 178.520728][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.614044][ T5786] veth1_macvtap: entered promiscuous mode [ 178.707476][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.718189][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.757728][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.770924][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.974392][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.072957][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.155073][ T5778] veth0_macvtap: entered promiscuous mode [ 179.243904][ T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.274402][ T5778] veth1_macvtap: entered promiscuous mode [ 179.316465][ T53] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.327198][ T53] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.352000][ T5780] veth0_vlan: entered promiscuous mode [ 179.392954][ T53] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.552177][ T5780] veth1_vlan: entered promiscuous mode [ 179.629475][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.735947][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.874088][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.903103][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.940814][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.949988][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.220984][ T5780] veth0_macvtap: entered promiscuous mode [ 180.305163][ T5780] veth1_macvtap: entered promiscuous mode [ 180.684512][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.853671][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.003692][ T5890] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.042476][ T5890] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.103144][ T5890] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.144333][ T5890] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.771096][ T275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.779094][ T275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.020383][ T5890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.061307][ T5890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.510559][ T5772] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 184.469567][ T5890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.500330][ T5890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.827142][ T5890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.865698][ T5890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.058367][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.092178][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.228078][ T5890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.298135][ T5890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.413948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 185.424153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 186.189459][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.238337][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.638580][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.675693][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.148712][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.161913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 187.200898][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.442509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 187.452429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 187.464429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 187.647139][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.691532][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.739958][ T5974] netlink: 'syz.1.8': attribute type 1 has an invalid length. [ 188.201768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 188.223137][ T5974] mmap: syz.1.8 (5974) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 188.623244][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 189.561830][ T5988] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 190.642758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 191.043303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 191.253009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 204.041145][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.057771][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.555791][ T6054] Zero length message leads to an empty skb [ 208.360423][ T5069] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 208.371873][ T5069] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 208.385707][ T5069] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.416223][ T5069] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 208.434927][ T5069] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.551871][ T5069] Bluetooth: hci5: command tx timeout [ 212.821774][ T5069] Bluetooth: hci5: command tx timeout [ 214.049878][ T5785] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.068094][ T5785] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.083342][ T5785] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.108554][ T5785] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.183344][ T5785] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.911895][ T5785] Bluetooth: hci5: command tx timeout [ 216.681463][ T5785] Bluetooth: hci6: command tx timeout [ 217.214255][ T5785] Bluetooth: hci5: command tx timeout [ 217.321977][ T6058] chnl_net:caif_netlink_parms(): no params data found [ 218.723241][ T5785] Bluetooth: hci6: command tx timeout [ 221.282135][ T5785] Bluetooth: hci6: command tx timeout [ 223.376108][ T5785] Bluetooth: hci6: command tx timeout [ 223.705020][ T6130] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 223.748100][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.780708][ T6058] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.832298][ T6058] bridge_slave_0: entered allmulticast mode [ 223.897901][ T6058] bridge_slave_0: entered promiscuous mode [ 224.030953][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.039881][ T6058] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.059538][ T6058] bridge_slave_1: entered allmulticast mode [ 224.110771][ T6058] bridge_slave_1: entered promiscuous mode [ 224.165052][ T6078] chnl_net:caif_netlink_parms(): no params data found [ 226.913659][ T6058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.485522][ T6058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.996520][ T79] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.239799][ T79] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.377144][ T6058] team0: Port device team_slave_0 added [ 229.298703][ T79] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.563824][ T6058] team0: Port device team_slave_1 added [ 229.777370][ T79] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.158624][ T6058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.215814][ T6058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.290198][ T6058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.493187][ T6058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.500257][ T6058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.595467][ T6058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.613038][ T6078] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.620499][ T6078] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.718276][ T6078] bridge_slave_0: entered allmulticast mode [ 230.764336][ T6078] bridge_slave_0: entered promiscuous mode [ 231.010436][ T6078] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.049783][ T6078] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.078444][ T6078] bridge_slave_1: entered allmulticast mode [ 231.124954][ T6078] bridge_slave_1: entered promiscuous mode [ 233.059534][ T6078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.245170][ T6058] hsr_slave_0: entered promiscuous mode [ 233.290114][ T6058] hsr_slave_1: entered promiscuous mode [ 233.321750][ T6058] debugfs: 'hsr0' already exists in 'hsr' [ 233.331295][ T6058] Cannot create hsr debugfs directory [ 233.547059][ T6078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.516451][ T6078] team0: Port device team_slave_0 added [ 235.742950][ T79] bridge_slave_1: left allmulticast mode [ 235.781390][ T79] bridge_slave_1: left promiscuous mode [ 235.787689][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.889146][ T79] bridge_slave_0: left allmulticast mode [ 235.937161][ T79] bridge_slave_0: left promiscuous mode [ 235.955369][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.090380][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.177756][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.537657][ T79] bond0 (unregistering): Released all slaves [ 238.709644][ T6078] team0: Port device team_slave_1 added [ 241.275738][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.353256][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.413488][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 241.423490][ T5785] CPU: 0 UID: 0 PID: 5785 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 241.423581][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.423662][ T5785] Workqueue: hci0 hci_rx_work [ 241.423771][ T5785] Call Trace: [ 241.423805][ T5785] [ 241.423836][ T5785] __dump_stack+0x26/0x30 [ 241.423943][ T5785] dump_stack_lvl+0x14c/0x1c0 [ 241.424042][ T5785] dump_stack+0x1e/0x25 [ 241.424130][ T5785] sysfs_create_dir_ns+0x46c/0x540 [ 241.424257][ T5785] kobject_add_internal+0x1084/0x19b0 [ 241.424378][ T5785] kobject_add+0x2c1/0x410 [ 241.424484][ T5785] ? kmsan_get_metadata+0xf1/0x160 [ 241.424596][ T5785] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 241.424716][ T5785] device_add+0xa70/0x1c00 [ 241.424817][ T5785] hci_conn_add_sysfs+0x159/0x2e0 [ 241.424936][ T5785] le_conn_complete_evt+0x1d0a/0x2250 [ 241.425062][ T5785] hci_le_conn_complete_evt+0x157/0x260 [ 241.425171][ T5785] hci_le_meta_evt+0x6eb/0x960 [ 241.425288][ T5785] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 241.425453][ T5785] hci_event_packet+0xce2/0x1e40 [ 241.425630][ T5785] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 241.425809][ T5785] hci_rx_work+0x8c3/0xfc0 [ 241.425941][ T5785] ? kmsan_get_metadata+0xf1/0x160 [ 241.426118][ T5785] ? __pfx_hci_rx_work+0x10/0x10 [ 241.426245][ T5785] process_scheduled_works+0xb21/0x1e30 [ 241.426451][ T5785] worker_thread+0xede/0x1580 [ 241.426629][ T5785] kthread+0x53f/0x600 [ 241.426791][ T5785] ? __pfx_worker_thread+0x10/0x10 [ 241.426951][ T5785] ? __pfx_kthread+0x10/0x10 [ 241.427105][ T5785] ret_from_fork+0x20f/0x910 [ 241.427242][ T5785] ? __switch_to+0x51c/0x750 [ 241.427409][ T5785] ? __pfx_kthread+0x10/0x10 [ 241.427568][ T5785] ret_from_fork_asm+0x1a/0x30 [ 241.427752][ T5785] [ 241.611524][ T6078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.622843][ T5785] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 241.623020][ T5785] Bluetooth: hci0: failed to register connection device [ 241.739192][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.746639][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.781348][ T6078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.802499][ T79] hsr_slave_0: left promiscuous mode [ 242.820735][ T79] hsr_slave_1: left promiscuous mode [ 242.836489][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.865331][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.897485][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.931156][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.131599][ T79] veth1_macvtap: left promiscuous mode [ 243.148126][ T79] veth0_macvtap: left promiscuous mode [ 243.187525][ T79] veth1_vlan: left promiscuous mode [ 243.221600][ T79] veth0_vlan: left promiscuous mode [ 245.937203][ T79] team0 (unregistering): Port device team_slave_1 removed [ 246.084191][ T79] team0 (unregistering): Port device team_slave_0 removed [ 247.303245][ T6078] hsr_slave_0: entered promiscuous mode [ 247.337803][ T6078] hsr_slave_1: entered promiscuous mode [ 247.388484][ T6078] debugfs: 'hsr0' already exists in 'hsr' [ 247.397794][ T6078] Cannot create hsr debugfs directory [ 247.762007][ T5069] Bluetooth: hci0: command 0x0406 tx timeout [ 248.498377][ T79] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.792786][ T79] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.948914][ T6058] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 249.184475][ T6058] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 249.396863][ T79] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.759097][ T6058] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 250.720177][ T79] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.999543][ T6058] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 251.905096][ T79] bridge_slave_1: left allmulticast mode [ 251.955356][ T79] bridge_slave_1: left promiscuous mode [ 252.010117][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.086979][ T79] bridge_slave_0: left allmulticast mode [ 252.093255][ T79] bridge_slave_0: left promiscuous mode [ 252.099785][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.253016][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.332856][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.364012][ T79] bond0 (unregistering): Released all slaves [ 254.593912][ T6347] 9pnet_virtio: no channels available for device syz [ 256.708525][ T6078] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 256.877071][ T79] hsr_slave_0: left promiscuous mode [ 256.895804][ T79] hsr_slave_1: left promiscuous mode [ 256.915562][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.956488][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.999561][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.031384][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.113630][ T79] veth1_macvtap: left promiscuous mode [ 257.151381][ T79] veth0_macvtap: left promiscuous mode [ 257.180184][ T79] veth1_vlan: left promiscuous mode [ 257.202919][ T79] veth0_vlan: left promiscuous mode [ 257.756709][ T6373] netlink: 20 bytes leftover after parsing attributes in process `syz.2.116'. [ 258.798719][ T79] team0 (unregistering): Port device team_slave_1 removed [ 259.262945][ T79] team0 (unregistering): Port device team_slave_0 removed [ 260.042385][ T6078] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 260.646660][ T6058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.758250][ T6058] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.838183][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.845703][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.855730][ T6377] warning: `syz.2.118' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 260.875593][ T6078] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 261.056671][ T6078] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 261.209007][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.216554][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.430097][ T6412] netlink: 20 bytes leftover after parsing attributes in process `syz.3.126'. [ 262.798407][ T6078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.998471][ T6078] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.318571][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.326095][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.583957][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.591580][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.550913][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.557985][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.081284][ T5069] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 267.479953][ T5069] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 267.503396][ T5069] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 267.566428][ T5069] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 267.586687][ T5069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 268.222327][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.138'. [ 268.592326][ T6078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.442420][ T5785] Bluetooth: hci1: command tx timeout [ 272.542010][ T5785] Bluetooth: hci1: command tx timeout [ 273.695129][ T6457] chnl_net:caif_netlink_parms(): no params data found [ 273.969177][ T6506] Bluetooth: MGMT ver 1.23 [ 274.101498][ T6509] syz_tun: entered allmulticast mode [ 274.372615][ T5069] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.432232][ T5069] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.446404][ T5069] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.468802][ T5069] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.496036][ T6506] syz_tun: left allmulticast mode [ 274.514025][ T5069] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.562757][ T5069] Bluetooth: hci1: command tx timeout [ 274.916003][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.149'. [ 276.500549][ T13] bridge_slave_1: left allmulticast mode [ 276.512449][ T13] bridge_slave_1: left promiscuous mode [ 276.574501][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.641547][ T5785] Bluetooth: hci2: command tx timeout [ 276.644363][ T5788] Bluetooth: hci1: command tx timeout [ 276.672452][ T13] bridge_slave_0: left allmulticast mode [ 276.678459][ T13] bridge_slave_0: left promiscuous mode [ 276.726888][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.728964][ T5788] Bluetooth: hci2: command tx timeout [ 279.152364][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.219891][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.245274][ T13] bond0 (unregistering): Released all slaves [ 279.941288][ T13] hsr_slave_0: left promiscuous mode [ 279.990821][ T13] hsr_slave_1: left promiscuous mode [ 279.999435][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.071667][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.291939][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.158'. [ 280.806056][ T5788] Bluetooth: hci2: command tx timeout [ 281.242274][ T13] team0 (unregistering): Port device team_slave_1 removed [ 281.294807][ T13] team0 (unregistering): Port device team_slave_0 removed [ 281.793103][ T6457] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.842719][ T6457] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.889385][ T6457] bridge_slave_0: entered allmulticast mode [ 281.932817][ T6457] bridge_slave_0: entered promiscuous mode [ 282.011432][ T6457] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.046719][ T6457] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.071745][ T6457] bridge_slave_1: entered allmulticast mode [ 282.119338][ T6457] bridge_slave_1: entered promiscuous mode [ 282.881415][ T5788] Bluetooth: hci2: command tx timeout [ 284.609592][ T6457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.629640][ T6457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.176329][ T6457] team0: Port device team_slave_0 added [ 285.273835][ T6457] team0: Port device team_slave_1 added [ 286.005133][ T6515] chnl_net:caif_netlink_parms(): no params data found [ 286.146885][ T6457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.192487][ T6457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.251364][ T6457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.608838][ T6457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.635845][ T6457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.771191][ T6457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.679627][ T6457] hsr_slave_0: entered promiscuous mode [ 288.723304][ T6457] hsr_slave_1: entered promiscuous mode [ 288.730810][ T6457] debugfs: 'hsr0' already exists in 'hsr' [ 288.797649][ T6457] Cannot create hsr debugfs directory [ 289.734066][ T13] bridge_slave_1: left allmulticast mode [ 289.739825][ T13] bridge_slave_1: left promiscuous mode [ 289.790289][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.824045][ T13] bridge_slave_0: left allmulticast mode [ 289.838200][ T13] bridge_slave_0: left promiscuous mode [ 289.888549][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.105398][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.203762][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.286363][ T13] bond0 (unregistering): Released all slaves [ 291.481400][ T6515] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.489544][ T6515] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.545778][ T6515] bridge_slave_0: entered allmulticast mode [ 291.576471][ T6515] bridge_slave_0: entered promiscuous mode [ 291.785018][ T13] hsr_slave_0: left promiscuous mode [ 291.825803][ T13] hsr_slave_1: left promiscuous mode [ 291.844190][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.874037][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.181286][ T6645] Bluetooth: hci0: command 0x0406 tx timeout [ 293.187590][ T6645] Bluetooth: hci3: command 0x0406 tx timeout [ 293.194483][ T5784] Bluetooth: hci4: command 0x0406 tx timeout [ 294.145816][ T13] team0 (unregistering): Port device team_slave_1 removed [ 294.216296][ T13] team0 (unregistering): Port device team_slave_0 removed [ 294.489240][ T6515] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.498290][ T6515] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.506581][ T6515] bridge_slave_1: entered allmulticast mode [ 294.517161][ T6515] bridge_slave_1: entered promiscuous mode [ 294.613126][ T6672] bond0: entered promiscuous mode [ 294.620880][ T6672] bond_slave_0: entered promiscuous mode [ 294.629479][ T6672] bond_slave_1: entered promiscuous mode [ 294.650413][ T6672] batadv0: entered promiscuous mode [ 294.662497][ T6672] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 294.960018][ T6515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.052965][ T6515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.101296][ T6678] fuse: Bad value for 'fd' [ 296.574095][ T6515] team0: Port device team_slave_0 added [ 297.484771][ T6515] team0: Port device team_slave_1 added [ 297.927655][ T6515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.961130][ T6515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.027040][ T6515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.094037][ T6515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.101832][ T6515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.137114][ T6515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.191279][ T794] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 298.368009][ T794] usb 5-1: Using ep0 maxpacket: 32 [ 298.411227][ T794] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 298.419544][ T794] usb 5-1: config 0 has no interface number 0 [ 298.493125][ T794] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 298.527731][ T794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.550172][ T794] usb 5-1: Product: syz [ 298.560584][ T794] usb 5-1: Manufacturer: syz [ 298.576309][ T794] usb 5-1: SerialNumber: syz [ 298.599866][ T6515] hsr_slave_0: entered promiscuous mode [ 298.610917][ T794] usb 5-1: config 0 descriptor?? [ 298.653083][ T794] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 298.653758][ T6515] hsr_slave_1: entered promiscuous mode [ 298.688651][ T794] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 298.694862][ T6515] debugfs: 'hsr0' already exists in 'hsr' [ 298.704035][ T6515] Cannot create hsr debugfs directory [ 298.848179][ T794] usb 5-1: USB disconnect, device number 2 [ 299.213137][ T6722] fuse: Bad value for 'fd' [ 299.799574][ T6457] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 300.033026][ T6457] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 300.578064][ T6457] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 300.718809][ T6457] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 302.722939][ T5829] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 302.899320][ T6515] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 302.901234][ T5829] usb 4-1: Using ep0 maxpacket: 8 [ 302.950848][ T5829] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 302.966523][ T6515] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 302.983993][ T5829] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.015744][ T5829] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 303.075449][ T5829] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 303.093282][ T6515] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 303.122568][ T5829] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.164189][ T5829] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 303.182574][ T6515] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 303.201702][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.517172][ T6457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.551370][ T5829] usb 4-1: GET_CAPABILITIES returned 2f [ 303.579383][ T5829] usbtmc 4-1:16.0: can't read capabilities [ 303.840931][ T6457] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.998593][ T6747] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 303.998874][ T5865] usb 4-1: USB disconnect, device number 2 [ 304.062350][ T6755] syz.2.209 uses obsolete (PF_INET,SOCK_PACKET) [ 304.216354][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.223857][ T6550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.451632][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.459075][ T6022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.683240][ T6515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.018031][ T6515] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.675040][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.682463][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.916556][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.924107][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.178558][ T6457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.237831][ T5824] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 310.567993][ T5824] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 310.578965][ T6515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.601204][ T5824] usb 3-1: config 0 has no interface number 0 [ 310.607508][ T5824] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 310.713581][ T5824] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 310.753549][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.791744][ T5824] usb 3-1: Product: syz [ 310.796121][ T5824] usb 3-1: Manufacturer: syz [ 310.800887][ T5824] usb 3-1: SerialNumber: syz [ 310.838434][ T5824] usb 3-1: config 0 descriptor?? [ 310.947466][ T5824] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 311.186547][ T5829] usb 3-1: USB disconnect, device number 2 [ 311.250571][ T5829] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 311.315365][ T6457] veth0_vlan: entered promiscuous mode [ 311.434962][ T6457] veth1_vlan: entered promiscuous mode [ 311.704833][ T6457] veth0_macvtap: entered promiscuous mode [ 311.787966][ T6457] veth1_macvtap: entered promiscuous mode [ 312.735391][ T6457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.324488][ T6457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.715864][ T1004] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.761889][ T1004] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.892834][ T1004] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.709018][ T1004] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.272702][ T6515] veth0_vlan: entered promiscuous mode [ 317.627634][ T6515] veth1_vlan: entered promiscuous mode [ 319.015046][ T6881] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 320.019370][ T6515] veth0_macvtap: entered promiscuous mode [ 320.226326][ T6515] veth1_macvtap: entered promiscuous mode [ 320.855953][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.165558][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.063747][ T6550] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.111337][ T6550] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.235599][ T6550] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.746335][ T1004] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.946542][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.959611][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.988691][ T5788] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 327.998122][ T5788] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 328.008377][ T5788] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 328.022120][ T5788] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 328.033486][ T5788] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 330.161289][ T5069] Bluetooth: hci5: command tx timeout [ 332.053576][ T6929] chnl_net:caif_netlink_parms(): no params data found [ 332.251598][ T5069] Bluetooth: hci5: command tx timeout [ 334.265768][ T275] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.361684][ T5069] Bluetooth: hci5: command tx timeout [ 335.704357][ T275] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.979622][ T275] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.267203][ T275] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.411120][ T5069] Bluetooth: hci5: command tx timeout [ 337.416352][ T6929] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.496573][ T6929] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.541896][ T6929] bridge_slave_0: entered allmulticast mode [ 337.622794][ T6929] bridge_slave_0: entered promiscuous mode [ 337.815888][ T6929] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.884913][ T6929] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.965188][ T6929] bridge_slave_1: entered allmulticast mode [ 338.037423][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.074163][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.105786][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.152159][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.157725][ T6929] bridge_slave_1: entered promiscuous mode [ 338.163778][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.519963][ T6929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.600260][ T6929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.882722][ T29] audit: type=1326 audit(1771584207.786:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.2.265" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f106eb9c629 code=0x0 [ 340.418931][ T5788] Bluetooth: hci1: command tx timeout [ 340.467842][ T6929] team0: Port device team_slave_0 added [ 340.653219][ T6929] team0: Port device team_slave_1 added [ 341.006221][ T7028] vxcan1: entered promiscuous mode [ 341.355977][ T275] bridge_slave_1: left allmulticast mode [ 341.370696][ T275] bridge_slave_1: left promiscuous mode [ 341.390309][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.448953][ T275] bridge_slave_0: left allmulticast mode [ 341.468045][ T275] bridge_slave_0: left promiscuous mode [ 341.510717][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.264107][ T5829] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 342.487738][ T5788] Bluetooth: hci1: command tx timeout [ 342.530321][ T5829] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 342.558094][ T5829] usb 5-1: config 0 has no interface number 0 [ 342.594171][ T5829] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 342.684645][ T5829] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 342.711309][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.748213][ T5829] usb 5-1: Product: syz [ 342.759801][ T5829] usb 5-1: Manufacturer: syz [ 342.775578][ T5829] usb 5-1: SerialNumber: syz [ 342.836710][ T5829] usb 5-1: config 0 descriptor?? [ 342.939339][ T5829] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 343.190209][ T5829] usb 5-1: USB disconnect, device number 3 [ 343.277429][ T5829] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 343.393031][ T275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.523358][ T275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.566599][ T275] bond0 (unregistering): Released all slaves [ 344.561482][ T5788] Bluetooth: hci1: command tx timeout [ 346.044200][ T275] hsr_slave_0: left promiscuous mode [ 346.068258][ T275] hsr_slave_1: left promiscuous mode [ 346.104093][ T275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.139393][ T275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.189189][ T275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.215713][ T275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.329248][ T275] veth1_macvtap: left promiscuous mode [ 346.341198][ T275] veth0_macvtap: left promiscuous mode [ 346.347061][ T275] veth1_vlan: left promiscuous mode [ 346.379311][ T275] veth0_vlan: left promiscuous mode [ 346.641261][ T5788] Bluetooth: hci1: command tx timeout [ 347.802540][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888025703a00: rx timeout, send abort [ 347.819751][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888025703a00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 349.031340][ T5865] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 349.201222][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 349.217990][ T5865] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 349.228301][ T5865] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.244225][ T5865] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.260682][ T5865] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 349.280621][ T5865] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.304997][ T5865] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 349.320078][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.603502][ T5865] usb 3-1: GET_CAPABILITIES returned 2f [ 349.609342][ T5865] usbtmc 3-1:16.0: can't read capabilities [ 349.735432][ T7066] No such timeout policy "syz1" [ 350.357384][ T275] team0 (unregistering): Port device team_slave_1 removed [ 350.394969][ T275] team0 (unregistering): Port device team_slave_0 removed [ 350.601250][ T5865] usb 3-1: USB disconnect, device number 3 [ 351.923691][ T6929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.938389][ T6929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.969249][ T6929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.027140][ T7054] vxcan1: entered promiscuous mode [ 352.104551][ T6929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.125147][ T32] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 352.157609][ T6929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.291504][ T6929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.348946][ T32] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 352.406555][ T32] usb 5-1: config 0 has no interface number 0 [ 352.482881][ T32] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.537500][ T32] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 352.582604][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.590852][ T32] usb 5-1: Product: syz [ 352.648460][ T32] usb 5-1: Manufacturer: syz [ 352.742457][ T32] usb 5-1: SerialNumber: syz [ 352.796224][ T32] usb 5-1: config 0 descriptor?? [ 352.995532][ T32] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 353.808221][ T32] usb 5-1: USB disconnect, device number 4 [ 353.898279][ T32] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 353.940322][ T6929] hsr_slave_0: entered promiscuous mode [ 354.005719][ T6929] hsr_slave_1: entered promiscuous mode [ 354.048693][ T6929] debugfs: 'hsr0' already exists in 'hsr' [ 354.101227][ T6929] Cannot create hsr debugfs directory [ 354.562990][ T275] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.135913][ T275] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.628165][ T275] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.918400][ T275] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.280196][ T7005] chnl_net:caif_netlink_parms(): no params data found [ 356.332584][ T5824] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 356.521248][ T5824] usb 3-1: Using ep0 maxpacket: 8 [ 356.552936][ T5824] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 356.589649][ T5824] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 356.644864][ T5824] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 356.677431][ T5824] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 356.740211][ T5824] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.771947][ T5824] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 356.835943][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.110100][ T5824] usb 3-1: GET_CAPABILITIES returned 2f [ 357.140698][ T5824] usbtmc 3-1:16.0: can't read capabilities [ 357.986528][ T275] bridge_slave_1: left allmulticast mode [ 358.064307][ T275] bridge_slave_1: left promiscuous mode [ 358.077535][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.712731][ T275] bridge_slave_0: left allmulticast mode [ 360.461267][ T275] bridge_slave_0: left promiscuous mode [ 360.512935][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.818536][ T275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.884349][ T275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.923187][ T275] bond0 (unregistering): Released all slaves [ 362.286596][ T275] hsr_slave_0: left promiscuous mode [ 362.306860][ T275] hsr_slave_1: left promiscuous mode [ 362.326721][ T275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.335077][ T275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.355832][ T275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.370083][ T275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.405350][ T7106] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 362.439566][ T275] veth1_macvtap: left promiscuous mode [ 362.484464][ T275] veth0_macvtap: left promiscuous mode [ 362.490336][ T275] veth1_vlan: left promiscuous mode [ 362.531451][ T275] veth0_vlan: left promiscuous mode [ 362.669710][ T5824] usb 3-1: USB disconnect, device number 4 [ 365.276532][ T275] team0 (unregistering): Port device team_slave_1 removed [ 365.324585][ T275] team0 (unregistering): Port device team_slave_0 removed [ 365.996289][ T7146] vxcan1: entered promiscuous mode [ 366.104950][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805193fe00: rx timeout, send abort [ 368.577340][ T7005] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.644515][ T7005] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.673796][ T7005] bridge_slave_0: entered allmulticast mode [ 368.741486][ T7005] bridge_slave_0: entered promiscuous mode [ 369.233179][ T7005] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.240479][ T7005] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.330628][ T7005] bridge_slave_1: entered allmulticast mode [ 369.374126][ T7005] bridge_slave_1: entered promiscuous mode [ 369.885720][ T7005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.904395][ T7005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.000356][ T6929] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 370.218081][ T6929] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 370.275912][ T7005] team0: Port device team_slave_0 added [ 370.282247][ T6929] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 370.327083][ T7005] team0: Port device team_slave_1 added [ 370.428387][ T6929] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 370.623914][ T7005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.681447][ T7005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.795305][ T7005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.867257][ T7005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.931430][ T7005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.173131][ T7005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.037947][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 374.173278][ T7005] hsr_slave_0: entered promiscuous mode [ 374.204310][ T7005] hsr_slave_1: entered promiscuous mode [ 374.251629][ T7005] debugfs: 'hsr0' already exists in 'hsr' [ 374.257533][ T7005] Cannot create hsr debugfs directory [ 376.548307][ T7209] netlink: 240 bytes leftover after parsing attributes in process `syz.3.317'. [ 376.649715][ T6929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.097006][ T6929] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.276598][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.284059][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.408551][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.416019][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.508724][ T7005] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 377.687583][ T7005] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 377.904351][ T7005] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 378.003125][ T7005] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 378.594772][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'. [ 378.972296][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'. [ 379.940570][ T7005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.140595][ T7005] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.246935][ T6929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.419869][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.427413][ T6550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.578885][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.586408][ T5890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.756266][ T5824] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 380.938772][ T5824] usb 5-1: Using ep0 maxpacket: 8 [ 381.004684][ T5824] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 381.024420][ T5824] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 381.065765][ T5824] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 381.121800][ T5824] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 381.154625][ T5824] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.177817][ T5824] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 381.269851][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.573340][ T5824] usb 5-1: GET_CAPABILITIES returned 0 [ 381.631451][ T5824] usbtmc 5-1:16.0: can't read capabilities [ 381.837358][ T5824] usb 5-1: USB disconnect, device number 5 [ 388.288276][ T5069] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 388.301709][ T5069] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 388.310596][ T5069] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 388.352189][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.358862][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.249860][ T5069] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 389.261741][ T5069] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 391.217981][ T7005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.444539][ T5069] Bluetooth: hci2: command tx timeout [ 392.226917][ T7297] chnl_net:caif_netlink_parms(): no params data found [ 393.530169][ T5069] Bluetooth: hci2: command tx timeout [ 393.669639][ T35] bridge_slave_1: left allmulticast mode [ 393.774046][ T35] bridge_slave_1: left promiscuous mode [ 394.395750][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.603591][ T5069] Bluetooth: hci2: command tx timeout [ 395.909818][ T35] bridge_slave_0: left allmulticast mode [ 395.995554][ T35] bridge_slave_0: left promiscuous mode [ 396.096828][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.721306][ T5069] Bluetooth: hci2: command tx timeout [ 400.030526][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.099988][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.165190][ T35] bond0 (unregistering): Released all slaves [ 400.193836][ T5788] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 400.202810][ T5788] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 400.281862][ T5788] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 400.389133][ T5788] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 400.405528][ T5788] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 401.077204][ T35] hsr_slave_0: left promiscuous mode [ 401.218620][ T35] hsr_slave_1: left promiscuous mode [ 401.284569][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.314066][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.999577][ T5788] Bluetooth: hci5: command tx timeout [ 405.041485][ T5788] Bluetooth: hci5: command tx timeout [ 407.121339][ T5788] Bluetooth: hci5: command tx timeout [ 407.550323][ T35] team0 (unregistering): Port device team_slave_1 removed [ 407.649789][ T35] team0 (unregistering): Port device team_slave_0 removed [ 409.201253][ T5788] Bluetooth: hci5: command tx timeout [ 409.519243][ T7297] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.575317][ T7297] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.615502][ T7297] bridge_slave_0: entered allmulticast mode [ 409.654711][ T7297] bridge_slave_0: entered promiscuous mode [ 409.711431][ T7297] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.750318][ T7297] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.774469][ T7297] bridge_slave_1: entered allmulticast mode [ 409.803938][ T7297] bridge_slave_1: entered promiscuous mode [ 410.031214][ T5402] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 410.175487][ T7297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.211890][ T5402] usb 5-1: Using ep0 maxpacket: 8 [ 410.235924][ T5402] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 410.254985][ T5402] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 410.292637][ T5402] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 410.309871][ T7297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.319935][ T5402] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 410.341437][ T5402] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.371151][ T5402] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 410.391526][ T5402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.663367][ T5402] usb 5-1: GET_CAPABILITIES returned 2f [ 410.669216][ T5402] usbtmc 5-1:16.0: can't read capabilities [ 410.706867][ T7297] team0: Port device team_slave_0 added [ 410.749307][ T7297] team0: Port device team_slave_1 added [ 411.117056][ T5824] usb 5-1: USB disconnect, device number 6 [ 411.143197][ T7446] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 411.189381][ T7297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.241350][ T7297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.283150][ T7297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.316403][ T7297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.329257][ T7297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.371978][ T7297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.164285][ T7297] hsr_slave_0: entered promiscuous mode [ 412.208826][ T7297] hsr_slave_1: entered promiscuous mode [ 412.256171][ T7297] debugfs: 'hsr0' already exists in 'hsr' [ 412.281341][ T7297] Cannot create hsr debugfs directory [ 414.729899][ T7390] chnl_net:caif_netlink_parms(): no params data found [ 414.883624][ T35] bridge_slave_1: left allmulticast mode [ 414.920683][ T35] bridge_slave_1: left promiscuous mode [ 414.954280][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.038070][ T35] bridge_slave_0: left allmulticast mode [ 415.090654][ T35] bridge_slave_0: left promiscuous mode [ 415.165671][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.845230][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.111508][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.106706][ T35] bond0 (unregistering): Released all slaves [ 422.020410][ T35] hsr_slave_0: left promiscuous mode [ 422.088802][ T35] hsr_slave_1: left promiscuous mode [ 422.120632][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.171937][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.547100][ T35] team0 (unregistering): Port device team_slave_1 removed [ 423.653053][ T35] team0 (unregistering): Port device team_slave_0 removed [ 425.001337][ T5824] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 425.171138][ T5824] usb 3-1: Using ep0 maxpacket: 32 [ 425.220866][ T5824] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 425.229487][ T5824] usb 3-1: config 0 has no interface number 0 [ 425.318321][ T5824] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 425.344963][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.392678][ T5824] usb 3-1: Product: syz [ 425.397053][ T5824] usb 3-1: Manufacturer: syz [ 425.412613][ T5824] usb 3-1: SerialNumber: syz [ 425.453412][ T5824] usb 3-1: config 0 descriptor?? [ 425.502716][ T5824] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 425.522201][ T5824] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 425.584958][ T7390] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.608985][ T7390] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.641415][ T7390] bridge_slave_0: entered allmulticast mode [ 425.685749][ T7390] bridge_slave_0: entered promiscuous mode [ 425.707737][ T5830] usb 3-1: USB disconnect, device number 5 [ 425.806559][ T7390] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.845124][ T7390] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.874359][ T7390] bridge_slave_1: entered allmulticast mode [ 425.904258][ T7390] bridge_slave_1: entered promiscuous mode [ 426.165464][ T7390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.244951][ T7390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.583742][ T7390] team0: Port device team_slave_0 added [ 427.340764][ T7390] team0: Port device team_slave_1 added [ 429.506009][ T7390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.572847][ T7390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.748565][ T7390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.808058][ T7297] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 429.905585][ T7297] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 430.001975][ T7390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.009094][ T7390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.045434][ T7390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.178099][ T7552] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 430.185731][ T7552] IPv6: NLM_F_CREATE should be set when creating new route [ 430.187016][ T7297] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 430.282548][ T7297] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 431.763671][ T7390] hsr_slave_0: entered promiscuous mode [ 431.830682][ T7390] hsr_slave_1: entered promiscuous mode [ 431.899981][ T7390] debugfs: 'hsr0' already exists in 'hsr' [ 431.952081][ T7390] Cannot create hsr debugfs directory [ 434.101891][ T7297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.386038][ T7390] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 434.477921][ T29] audit: type=1326 audit(1771584302.406:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7561 comm="syz.2.407" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f106eb9c629 code=0x0 [ 434.508786][ T7297] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.570411][ T7576] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.579915][ T7576] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.632436][ T7390] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 434.715032][ T7390] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 434.746878][ T7390] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 434.898302][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.905874][ T6551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.075478][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.083012][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.506457][ T7390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.537133][ T7390] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.650529][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.657990][ T6550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.844366][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.851929][ T6550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.597997][ T7297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.923239][ T7390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.789329][ T7297] veth0_vlan: entered promiscuous mode [ 441.983645][ T7297] veth1_vlan: entered promiscuous mode [ 442.385695][ T7297] veth0_macvtap: entered promiscuous mode [ 442.479120][ T7297] veth1_macvtap: entered promiscuous mode [ 442.818644][ T7297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.989345][ T7297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.213217][ T53] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.254709][ T7364] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.336950][ T7364] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.381430][ T7364] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.107641][ T7390] veth0_vlan: entered promiscuous mode [ 444.296549][ T7390] veth1_vlan: entered promiscuous mode [ 446.868794][ T7390] veth0_macvtap: entered promiscuous mode [ 446.999140][ T7390] veth1_macvtap: entered promiscuous mode [ 447.297535][ T7390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.474291][ T7390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.645882][ T1098] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.684608][ T1098] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.772240][ T35] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.829844][ T35] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.358889][ T5069] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 449.380590][ T5069] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 449.408458][ T5069] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 449.424808][ T5069] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 449.442001][ T5069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 449.815313][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.823646][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.053501][ T5788] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 450.073612][ T5788] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 450.123073][ T5788] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 450.145667][ T5788] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 450.163066][ T5788] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 451.523125][ T5788] Bluetooth: hci1: command tx timeout [ 452.251108][ T5788] Bluetooth: hci6: command tx timeout [ 453.399710][ T7364] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.601758][ T5788] Bluetooth: hci1: command tx timeout [ 454.305683][ T7364] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.332818][ T5788] Bluetooth: hci6: command tx timeout [ 454.539190][ T7677] chnl_net:caif_netlink_parms(): no params data found [ 454.680258][ T7364] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.045317][ T7364] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.681116][ T5788] Bluetooth: hci1: command tx timeout [ 456.004518][ T7364] bridge_slave_1: left allmulticast mode [ 456.010363][ T7364] bridge_slave_1: left promiscuous mode [ 456.064323][ T7364] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.156575][ T7364] bridge_slave_0: left allmulticast mode [ 456.182762][ T7364] bridge_slave_0: left promiscuous mode [ 456.189272][ T7364] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.213787][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.435'. [ 456.401562][ T5788] Bluetooth: hci6: command tx timeout [ 456.997004][ T7364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.035509][ T7364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.067537][ T7364] bond0 (unregistering): Released all slaves [ 457.112558][ T7688] chnl_net:caif_netlink_parms(): no params data found [ 457.587240][ T7364] hsr_slave_0: left promiscuous mode [ 457.605307][ T7364] hsr_slave_1: left promiscuous mode [ 457.613341][ T7364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.631942][ T7364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.643372][ T7364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.671466][ T7364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.733646][ T7364] veth1_macvtap: left promiscuous mode [ 457.739352][ T7364] veth0_macvtap: left promiscuous mode [ 457.761327][ T5788] Bluetooth: hci1: command tx timeout [ 457.767214][ T7364] veth1_vlan: left promiscuous mode [ 457.781184][ T7364] veth0_vlan: left promiscuous mode [ 458.491642][ T5788] Bluetooth: hci6: command tx timeout [ 459.683113][ T5069] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 459.731676][ T5069] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 459.750511][ T5069] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 459.775696][ T5069] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 459.807383][ T5069] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 460.385044][ T7364] team0 (unregistering): Port device team_slave_1 removed [ 460.469009][ T7364] team0 (unregistering): Port device team_slave_0 removed [ 461.662196][ T7677] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.669674][ T7677] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.705121][ T7677] bridge_slave_0: entered allmulticast mode [ 461.753710][ T7677] bridge_slave_0: entered promiscuous mode [ 461.822171][ T7677] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.830862][ T7677] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.891671][ T7677] bridge_slave_1: entered allmulticast mode [ 461.923920][ T5069] Bluetooth: hci0: command tx timeout [ 462.031595][ T7677] bridge_slave_1: entered promiscuous mode [ 462.750336][ T7677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.854419][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 462.861823][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 463.001288][ T7677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.162508][ T7768] ceph: No mds server is up or the cluster is laggy [ 463.171840][ T7771] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 463.192276][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 463.229399][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 463.809671][ T7688] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.841742][ T7688] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.849436][ T7688] bridge_slave_0: entered allmulticast mode [ 463.894339][ T7688] bridge_slave_0: entered promiscuous mode [ 463.930363][ T7677] team0: Port device team_slave_0 added [ 463.976787][ T7677] team0: Port device team_slave_1 added [ 464.001288][ T5069] Bluetooth: hci0: command tx timeout [ 464.186483][ T7688] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.238265][ T7688] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.311561][ T7688] bridge_slave_1: entered allmulticast mode [ 464.319629][ T7688] bridge_slave_1: entered promiscuous mode [ 465.047523][ T6551] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.177190][ T7677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.209129][ T7677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.321225][ T7677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.382274][ T7677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.389387][ T7677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.501363][ T7677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.610115][ T7688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.656435][ T7790] netlink: 'syz.3.446': attribute type 27 has an invalid length. [ 465.692597][ T7688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.764085][ T6551] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.081440][ T5069] Bluetooth: hci0: command tx timeout [ 466.245178][ T7790] vxcan1: left promiscuous mode [ 466.556027][ T7790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.623304][ T7790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.437501][ T6551] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.669353][ T7364] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.679505][ T7364] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.695530][ T7364] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.847570][ T7364] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.885024][ T7688] team0: Port device team_slave_0 added [ 467.913016][ T6551] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.010110][ T7677] hsr_slave_0: entered promiscuous mode [ 468.044452][ T7677] hsr_slave_1: entered promiscuous mode [ 468.067478][ T7677] debugfs: 'hsr0' already exists in 'hsr' [ 468.081363][ T7677] Cannot create hsr debugfs directory [ 468.161550][ T5069] Bluetooth: hci0: command tx timeout [ 468.213586][ T7688] team0: Port device team_slave_1 added [ 468.532512][ T7746] chnl_net:caif_netlink_parms(): no params data found [ 468.699948][ T7688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.736461][ T7688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.807095][ T7688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.985940][ T7688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.004769][ T7688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.071740][ T7688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.550382][ T7810] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.870461][ T7810] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.364027][ T7810] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.854299][ T7810] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.880572][ T6551] bridge_slave_1: left allmulticast mode [ 470.886656][ T6551] bridge_slave_1: left promiscuous mode [ 470.893717][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.909386][ T6551] bridge_slave_0: left allmulticast mode [ 470.921504][ T6551] bridge_slave_0: left promiscuous mode [ 470.927943][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.232967][ T6551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.249677][ T6551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.264270][ T6551] bond0 (unregistering): Released all slaves [ 471.290178][ T7688] hsr_slave_0: entered promiscuous mode [ 471.300688][ T7688] hsr_slave_1: entered promiscuous mode [ 471.309715][ T7688] debugfs: 'hsr0' already exists in 'hsr' [ 471.318219][ T7688] Cannot create hsr debugfs directory [ 471.389439][ T7746] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.397092][ T7746] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.405818][ T7746] bridge_slave_0: entered allmulticast mode [ 471.419772][ T7746] bridge_slave_0: entered promiscuous mode [ 471.433319][ T7746] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.440853][ T7746] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.448609][ T7746] bridge_slave_1: entered allmulticast mode [ 471.458628][ T7746] bridge_slave_1: entered promiscuous mode [ 471.614985][ T7746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.698846][ T7746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.875975][ T6551] hsr_slave_0: left promiscuous mode [ 471.910275][ T6551] hsr_slave_1: left promiscuous mode [ 471.918324][ T6551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.936418][ T6551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.946317][ T6551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.958670][ T6551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.988097][ T6551] veth1_macvtap: left promiscuous mode [ 471.993976][ T6551] veth0_macvtap: left promiscuous mode [ 471.999701][ T6551] veth1_vlan: left promiscuous mode [ 472.005412][ T6551] veth0_vlan: left promiscuous mode [ 472.600008][ T6551] team0 (unregistering): Port device team_slave_1 removed [ 472.624594][ T6551] team0 (unregistering): Port device team_slave_0 removed [ 473.196260][ T5890] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.242965][ T5890] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.313231][ T7746] team0: Port device team_slave_0 added [ 473.374746][ T7746] team0: Port device team_slave_1 added [ 473.497585][ T1098] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.536144][ T7746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.544791][ T7746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.574368][ T7746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.683868][ T7746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.712255][ T7746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.775653][ T7746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.890457][ T53] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.320662][ T6551] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.366531][ T7746] hsr_slave_0: entered promiscuous mode [ 474.377996][ T7746] hsr_slave_1: entered promiscuous mode [ 474.426377][ T7746] debugfs: 'hsr0' already exists in 'hsr' [ 474.441612][ T7746] Cannot create hsr debugfs directory [ 474.539656][ T6551] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.776486][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 474.802598][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 474.926141][ T7850] ceph: No mds server is up or the cluster is laggy [ 476.680052][ T6551] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.753547][ T7851] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 477.206009][ T6551] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.280806][ T7677] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 477.399770][ T7677] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 477.527336][ T7677] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 477.622550][ T7677] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 478.046630][ T7688] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 478.140214][ T7688] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 478.256256][ T7688] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 478.317820][ T6551] bridge_slave_1: left allmulticast mode [ 478.329139][ T6551] bridge_slave_1: left promiscuous mode [ 478.336306][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.354553][ T6551] bridge_slave_0: left allmulticast mode [ 478.371208][ T6551] bridge_slave_0: left promiscuous mode [ 478.382549][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.013293][ T6551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.047985][ T6551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.088725][ T6551] bond0 (unregistering): Released all slaves [ 479.120347][ T7688] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 480.132808][ T6551] hsr_slave_0: left promiscuous mode [ 480.172318][ T6551] hsr_slave_1: left promiscuous mode [ 480.180082][ T6551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.209674][ T6551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.232967][ T6551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.251358][ T6551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.296326][ T6551] veth1_macvtap: left promiscuous mode [ 480.311212][ T6551] veth0_macvtap: left promiscuous mode [ 480.321615][ T6551] veth1_vlan: left promiscuous mode [ 480.341603][ T6551] veth0_vlan: left promiscuous mode [ 481.139653][ T6551] team0 (unregistering): Port device team_slave_1 removed [ 481.225733][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 481.243223][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 481.365876][ T6551] team0 (unregistering): Port device team_slave_0 removed [ 481.439563][ T7884] ceph: No mds server is up or the cluster is laggy [ 482.239726][ T7887] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 482.665122][ T7677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.884073][ T7746] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 483.009246][ T7746] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 483.082782][ T7746] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 483.173877][ T7677] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.212587][ T7746] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 483.335703][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.343134][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.457382][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.464942][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.537724][ T7688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.765357][ T7688] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.867263][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.874693][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.989724][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.997376][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.610118][ T7893] could not open pipe file descriptor [ 485.154657][ T7746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.376233][ T7746] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.496903][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.504455][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.616758][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.624468][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.967781][ T7677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.078046][ T7688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.797949][ T7746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.378949][ T7688] veth0_vlan: entered promiscuous mode [ 488.462647][ T7677] veth0_vlan: entered promiscuous mode [ 488.548467][ T7688] veth1_vlan: entered promiscuous mode [ 488.609119][ T7677] veth1_vlan: entered promiscuous mode [ 489.023225][ T7688] veth0_macvtap: entered promiscuous mode [ 489.138853][ T7951] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 489.225966][ T7688] veth1_macvtap: entered promiscuous mode [ 489.262271][ T7948] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 489.424238][ T7688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.573563][ T7688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.718391][ T6551] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.776484][ T6551] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.908521][ T6551] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.941894][ T6551] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.166212][ T7677] veth0_macvtap: entered promiscuous mode [ 490.325405][ T7677] veth1_macvtap: entered promiscuous mode [ 490.626596][ T7677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.779870][ T7677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.892907][ T53] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.937774][ T53] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.033428][ T53] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.102213][ T53] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.504095][ T7965] ===================================================== [ 491.511375][ T7965] BUG: KMSAN: uninit-value in __fl_lookup+0x6ce/0x940 [ 491.518293][ T7965] __fl_lookup+0x6ce/0x940 [ 491.523098][ T7965] fl_mask_lookup+0x305/0xd60 [ 491.527928][ T7965] fl_classify+0x36b/0x780 [ 491.532621][ T7965] tcf_classify+0x855/0x1ca0 [ 491.537467][ T7965] multiq_enqueue+0x82/0x5a0 [ 491.542362][ T7965] __dev_queue_xmit+0x257f/0x5a50 [ 491.547576][ T7965] packet_xmit+0x8f/0x710 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 491.552212][ T7965] packet_sendmsg+0x91d9/0xa320 [ 491.557208][ T7965] ____sys_sendmsg+0xfe7/0x1080 [ 491.562330][ T7965] ___sys_sendmsg+0x271/0x3b0 [ 491.567191][ T7965] __x64_sys_sendmsg+0x211/0x3e0 [ 491.572418][ T7965] x64_sys_call+0x1e20/0x3ea0 [ 491.577277][ T7965] do_syscall_64+0x134/0xf80 [ 491.582157][ T7965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.588204][ T7965] [ 491.590613][ T7965] Uninit was stored to memory at: [ 491.596015][ T7965] fl_mask_lookup+0x254/0xd60 [ 491.601017][ T7965] fl_classify+0x36b/0x780 [ 491.605583][ T7965] tcf_classify+0x855/0x1ca0 [ 491.610333][ T7965] multiq_enqueue+0x82/0x5a0 [ 491.615212][ T7965] __dev_queue_xmit+0x257f/0x5a50 [ 491.620414][ T7965] packet_xmit+0x8f/0x710 [ 491.625009][ T7965] packet_sendmsg+0x91d9/0xa320 [ 491.630007][ T7965] ____sys_sendmsg+0xfe7/0x1080 [ 491.635136][ T7965] ___sys_sendmsg+0x271/0x3b0 [ 491.639995][ T7965] __x64_sys_sendmsg+0x211/0x3e0 [ 491.645204][ T7965] x64_sys_call+0x1e20/0x3ea0 [ 491.650056][ T7965] do_syscall_64+0x134/0xf80 [ 491.654955][ T7965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.661096][ T7965] [ 491.663491][ T7965] Uninit was stored to memory at: [ 491.668786][ T7965] __skb_flow_dissect+0xfe4/0xa1f0 [ 491.674200][ T7965] fl_classify+0x349/0x780 [ 491.678765][ T7965] tcf_classify+0x855/0x1ca0 [ 491.680010][ T7746] veth0_vlan: entered promiscuous mode [ 491.683623][ T7965] multiq_enqueue+0x82/0x5a0 [ 491.693880][ T7965] __dev_queue_xmit+0x257f/0x5a50 [ 491.699108][ T7965] packet_xmit+0x8f/0x710 [ 491.703707][ T7965] packet_sendmsg+0x91d9/0xa320 [ 491.708730][ T7965] ____sys_sendmsg+0xfe7/0x1080 [ 491.713907][ T7965] ___sys_sendmsg+0x271/0x3b0 [ 491.718772][ T7965] __x64_sys_sendmsg+0x211/0x3e0 [ 491.724024][ T7965] x64_sys_call+0x1e20/0x3ea0 [ 491.728877][ T7965] do_syscall_64+0x134/0xf80 [ 491.733816][ T7965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.739868][ T7965] [ 491.742358][ T7965] Uninit was created at: [ 491.746834][ T7965] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 491.753119][ T7965] __alloc_skb+0x855/0x1190 [ 491.757789][ T7965] alloc_skb_with_frags+0xc5/0xa60 [ 491.763191][ T7965] sock_alloc_send_pskb+0xacb/0xc60 [ 491.768588][ T7965] packet_sendmsg+0x7477/0xa320 [ 491.773716][ T7965] ____sys_sendmsg+0xfe7/0x1080 [ 491.778770][ T7965] ___sys_sendmsg+0x271/0x3b0 [ 491.783737][ T7965] __x64_sys_sendmsg+0x211/0x3e0 [ 491.788858][ T7965] x64_sys_call+0x1e20/0x3ea0 [ 491.793829][ T7965] do_syscall_64+0x134/0xf80 [ 491.798611][ T7965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.804765][ T7965] [ 491.807199][ T7965] CPU: 1 UID: 0 PID: 7965 Comm: syz.4.484 Not tainted syzkaller #0 PREEMPT(full) [ 491.816653][ T7965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.826953][ T7965] ===================================================== [ 491.834082][ T7965] Disabling lock debugging due to kernel taint [ 491.840342][ T7965] Kernel panic - not syncing: kmsan.panic set ... [ 491.846894][ T7965] CPU: 1 UID: 0 PID: 7965 Comm: syz.4.484 Tainted: G B syzkaller #0 PREEMPT(full) [ 491.857846][ T7965] Tainted: [B]=BAD_PAGE [ 491.862090][ T7965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.872280][ T7965] Call Trace: [ 491.875647][ T7965] [ 491.878661][ T7965] __dump_stack+0x26/0x30 [ 491.883154][ T7965] dump_stack_lvl+0x50/0x1c0 [ 491.887887][ T7965] ? dump_stack+0x12/0x25 [ 491.892376][ T7965] dump_stack+0x1e/0x25 [ 491.896671][ T7965] vpanic+0x7b4/0x1430 [ 491.900910][ T7965] panic+0x15d/0x160 [ 491.905007][ T7965] kmsan_report+0x31a/0x320 [ 491.909851][ T7965] ? __msan_warning+0x1b/0x30 [ 491.914676][ T7965] ? __fl_lookup+0x6ce/0x940 [ 491.919396][ T7965] ? fl_mask_lookup+0x305/0xd60 [ 491.924373][ T7965] ? fl_classify+0x36b/0x780 [ 491.929092][ T7965] ? tcf_classify+0x855/0x1ca0 [ 491.934000][ T7965] ? multiq_enqueue+0x82/0x5a0 [ 491.938930][ T7965] ? __dev_queue_xmit+0x257f/0x5a50 [ 491.944294][ T7965] ? packet_xmit+0x8f/0x710 [ 491.948942][ T7965] ? packet_sendmsg+0x91d9/0xa320 [ 491.954116][ T7965] ? ____sys_sendmsg+0xfe7/0x1080 [ 491.959396][ T7965] ? ___sys_sendmsg+0x271/0x3b0 [ 491.964407][ T7965] ? __x64_sys_sendmsg+0x211/0x3e0 [ 491.969688][ T7965] ? x64_sys_call+0x1e20/0x3ea0 [ 491.974700][ T7965] ? do_syscall_64+0x134/0xf80 [ 491.979730][ T7965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.985965][ T7965] ? kmsan_get_metadata+0xf1/0x160 [ 491.991269][ T7965] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 491.997773][ T7965] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 492.004019][ T7965] ? kmsan_get_metadata+0xf1/0x160 [ 492.009310][ T7965] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 492.015300][ T7965] ? jhash2+0x318/0x420 [ 492.019629][ T7965] ? kmsan_get_metadata+0xf1/0x160 [ 492.024917][ T7965] __msan_warning+0x1b/0x30 [ 492.029583][ T7965] __fl_lookup+0x6ce/0x940 [ 492.034131][ T7965] ? stack_depot_save_flags+0x610/0x790 [ 492.039895][ T7965] fl_mask_lookup+0x305/0xd60 [ 492.044749][ T7965] ? kmsan_get_metadata+0xf1/0x160 [ 492.050030][ T7965] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 492.056523][ T7965] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 492.062810][ T7965] fl_classify+0x36b/0x780 [ 492.067359][ T7965] ? kmsan_metadata_is_contiguous+0x65/0x1e0 [ 492.073499][ T7965] ? stack_depot_save_flags+0x610/0x790 [ 492.079225][ T7965] ? kmsan_get_metadata+0xf1/0x160 [ 492.084504][ T7965] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 492.091006][ T7965] ? kmsan_internal_poison_memory+0x78/0x90 [ 492.097057][ T7965] ? kmsan_internal_poison_memory+0x4a/0x90 [ 492.103102][ T7965] ? kmsan_slab_alloc+0xdc/0x160 [ 492.108193][ T7965] ? kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 492.114529][ T7965] ? __alloc_skb+0x855/0x1190 [ 492.119350][ T7965] ? alloc_skb_with_frags+0xc5/0xa60 [ 492.124885][ T7965] ? sock_alloc_send_pskb+0xacb/0xc60 [ 492.130535][ T7965] ? packet_sendmsg+0x7477/0xa320 [ 492.135700][ T7965] ? ____sys_sendmsg+0xfe7/0x1080 [ 492.140907][ T7965] ? ___sys_sendmsg+0x271/0x3b0 [ 492.145928][ T7965] ? __x64_sys_sendmsg+0x211/0x3e0 [ 492.151224][ T7965] ? x64_sys_call+0x1e20/0x3ea0 [ 492.156236][ T7965] ? do_syscall_64+0x134/0xf80 [ 492.161182][ T7965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.167429][ T7965] ? __update_load_avg_cfs_rq+0xe9/0x1060 [ 492.173334][ T7965] ? kmsan_get_metadata+0xf1/0x160 [ 492.178629][ T7965] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 492.184614][ T7965] ? __skb_flow_dissect+0x21/0xa1f0 [ 492.189975][ T7965] ? filter_irq_stacks+0x49/0x190 [ 492.195160][ T7965] ? kmsan_get_metadata+0xf1/0x160 [ 492.200470][ T7965] ? __pfx_fl_classify+0x10/0x10 [ 492.205545][ T7965] tcf_classify+0x855/0x1ca0 [ 492.210321][ T7965] multiq_enqueue+0x82/0x5a0 [ 492.215083][ T7965] ? kmsan_get_metadata+0xf1/0x160 [ 492.220374][ T7965] ? __pfx_multiq_enqueue+0x10/0x10 [ 492.225753][ T7965] __dev_queue_xmit+0x257f/0x5a50 [ 492.230964][ T7965] ? __msan_warning+0x1b/0x30 [ 492.235814][ T7965] ? __dev_queue_xmit+0x280/0x5a50 [ 492.241136][ T7965] packet_xmit+0x8f/0x710 [ 492.245610][ T7965] ? packet_parse_headers+0x92b/0xa20 [ 492.251158][ T7965] packet_sendmsg+0x91d9/0xa320 [ 492.256142][ T7965] ? kmsan_get_metadata+0xf1/0x160 [ 492.261420][ T7965] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 492.267414][ T7965] ? aa_label_sk_perm+0x759/0x810 [ 492.272594][ T7965] ? tomoyo_socket_bind_permission+0x2e1/0x370 [ 492.278893][ T7965] ? filter_irq_stacks+0x49/0x190 [ 492.284093][ T7965] ? dim_calc_stats+0x30/0x530 [ 492.289010][ T7965] ? kmsan_get_metadata+0xf1/0x160 [ 492.294293][ T7965] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 492.300810][ T7965] ? aa_sk_perm+0x7f1/0xda0 [ 492.305525][ T7965] ? __pfx_packet_sendmsg+0x10/0x10 [ 492.310869][ T7965] ? __pfx_packet_sendmsg+0x10/0x10 [ 492.316215][ T7965] ____sys_sendmsg+0xfe7/0x1080 [ 492.321281][ T7965] ___sys_sendmsg+0x271/0x3b0 [ 492.326125][ T7965] ? kmsan_get_metadata+0xf1/0x160 [ 492.331460][ T7965] ? kmsan_get_metadata+0xf1/0x160 [ 492.336740][ T7965] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 492.342744][ T7965] __x64_sys_sendmsg+0x211/0x3e0 [ 492.347872][ T7965] ? kmsan_get_metadata+0xf1/0x160 [ 492.353170][ T7965] x64_sys_call+0x1e20/0x3ea0 [ 492.358011][ T7965] do_syscall_64+0x134/0xf80 [ 492.362770][ T7965] ? clear_bhb_loop+0x50/0xa0 [ 492.367582][ T7965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.373642][ T7965] RIP: 0033:0x7f6f8f99c629 [ 492.378156][ T7965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.397913][ T7965] RSP: 002b:00007f6f908a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.406477][ T7965] RAX: ffffffffffffffda RBX: 00007f6f8fc15fa0 RCX: 00007f6f8f99c629 [ 492.414576][ T7965] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000008 [ 492.422664][ T7965] RBP: 00007f6f8fa32b39 R08: 0000000000000000 R09: 0000000000000000 [ 492.430751][ T7965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.438817][ T7965] R13: 00007f6f8fc16038 R14: 00007f6f8fc15fa0 R15: 00007ffc4b1cbb38 [ 492.446939][ T7965] [ 492.450395][ T7965] Kernel Offset: disabled [ 492.454792][ T7965] Rebooting in 86400 seconds..