last executing test programs: 3m1.523748903s ago: executing program 0 (id=817): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) capset(0x0, &(0x7f0000000040)) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000300), 0x0) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) listen(0xffffffffffffffff, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40043, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000040), 0x0, 0x1, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000040)={0x0, r7, r6}) socket$kcm(0x2, 0xd, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) 2m59.178792149s ago: executing program 0 (id=822): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_vlan\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private2, @in=@multicast1, 0x4, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x80}, {0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}}, {{@in=@broadcast, 0x400, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x6}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@kfunc]}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0x80085504, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000070000000000000000000071120d00000000009500040000510000b362da04e68d6a4be626b2a466950004dff27647c170bd6dc75da3b3994ea3002b913c827beadfb06120ce9ddd0e3aef73cd60cfde450304cdfa3235f6f98ab5a790146cf7e52386170aae3b4f08b97628e3d632ddebf7ac125e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 2m56.136061096s ago: executing program 0 (id=823): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = userfaultfd(0x801) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0xc01, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x4e}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', 0x0}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x2041) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016"], 0x44}}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000001100)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$igmp(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r9, r7, r8}) close_range(r5, 0xffffffffffffffff, 0x0) dup(r3) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) 2m50.468109098s ago: executing program 0 (id=829): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) ioprio_set$uid(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001100a7cc5a81", @ANYRES32=r3, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f47b0c0d"], 0x44}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c000a0000000d0085a168d0bf46d32345653600648d0b00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) socket(0x1f, 0x80000, 0x32) r6 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_int(r6, &(0x7f0000000100)='memory.min\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r8, &(0x7f00000000c0)="04", 0x1, 0x20010845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000800"/20], 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) 2m49.179076555s ago: executing program 0 (id=831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000780)=""/143) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000100), 0x0, 0x0, 0x2) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0182101, &(0x7f00000004c0)) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) 2m47.573252845s ago: executing program 0 (id=832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x100400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000003c0)=0x8000000000000001, 0xe0) syz_usbip_server_init(0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, 0x0, 0x0) r3 = socket$inet(0x2, 0x80000, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0xfffffffffffffef0) listen(r2, 0x0) fchdir(0xffffffffffffffff) syz_usbip_server_init(0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0100010086380000000000e7"]) socket$nl_crypto(0x10, 0x3, 0x15) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x32315559, 0x8}}) r6 = creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000200), 0xa) setxattr$security_ima(&(0x7f0000000240)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), &(0x7f0000000180)=ANY=[], 0x2, 0x0) open(&(0x7f0000000080)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000001140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 2m35.8473938s ago: executing program 2 (id=840): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = memfd_create(&(0x7f0000002240)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6W\xed\xf4\xaaB\xc1l\x13\xf1t;\x98\x0f\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\x8c\x11\xd8\f\xfc\x98\x86\x03o,\xf3Y\x04\xa53\x9e\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000140)={0x2020}, 0x2020) write$FUSE_DIRENT(r2, 0x0, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000002200)) rt_sigpending(0x0, 0x1000000) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000380)={0x0, r5, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="84010000100013070000000000000000fe8000000000000000000000000000bbac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400736861310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000"], 0x184}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a00000000000000000000000d"], 0x0, 0x32}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="183000000000000000000000030000001801000020696c2500000000002020207b1a1b0001000000bfa100000000000007010000f8ffffffb702000008000000b7030000aa040000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000000f6d00000100ffffa553010000000000850000003500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket(0x25, 0x1, 0x0) recvfrom$packet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000240)={r7, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0x0, 0x4], [0x0, 0x42, 0x0, 0x76bc10cd], [0x0, 0x0, 0x5]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r10}) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 2m28.015818348s ago: executing program 2 (id=844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x10d040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c020000520000042dbd7000fddbdf2502080003005500000008000600b6de000008000600b8de000008000100", @ANYRES32=0x0, @ANYBLOB="0800050007000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioperm(0x8000000000000006, 0x7, 0x4) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffff8) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000180)="3082", 0x71, r7) request_key(0x0, 0x0, 0x0, r7) socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = dup(r5) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000480)="400f01dfc4c131c6b70e0000009c440f01d1f30f1eebc7442400d5000000c744240200509f08c7442406000000000f01142466ba430066b8004866ef67f30f300f00564c0f0766ba2000ed", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xce2, 0x2, 0x5b, 0x8, 0x9, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffc, 0x5f, 0x14, 0x0, 0x2d, 0x0, 0x9], 0x110000, 0x4300}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000c40)={0x0, "f93cf6de0500000000000b000000d607"}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000001010101000000000007000000000000000019800800010000010000100001800c000280050001000000000099"], 0x30}}, 0x0) 2m22.482849634s ago: executing program 3 (id=846): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x408001) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) read$FUSE(r6, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000065c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000002300)={0x50, 0x0, r7, {0x7, 0x9}}, 0x50) read$FUSE(r6, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r8}, 0x10) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r9, r6, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x80086601, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x14, r11, 0x1}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x702, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 2m21.420522091s ago: executing program 2 (id=847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000780)=""/143) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000100), 0x0, 0x0, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0182101, &(0x7f00000004c0)) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) 2m20.095598356s ago: executing program 2 (id=848): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x90d}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_vlan\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private2, @in=@multicast1, 0x4, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x80}, {0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}}, {{@in=@broadcast, 0x400, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x6}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@kfunc]}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80085504, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000070000000000000000000071120d00000000009500040000510000b362da04e68d6a4be626b2a466950004dff27647c170bd6dc75da3b3994ea3002b913c827beadfb06120ce9ddd0e3aef73cd60cfde450304cdfa3235f6f98ab5a790146cf7e52386170aae3b4f08b97628e3d632ddebf7ac125e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 2m15.889509131s ago: executing program 2 (id=849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000780)=""/143) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000100), 0x0, 0x0, 0x2) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0182101, &(0x7f00000004c0)) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) 2m14.367962897s ago: executing program 2 (id=850): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(0x0, 0x1, 0x408001) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x80086601, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x702, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 1m25.351104704s ago: executing program 3 (id=851): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = memfd_create(&(0x7f0000002240)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6W\xed\xf4\xaaB\xc1l\x13\xf1t;\x98\x0f\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\x8c\x11\xd8\f\xfc\x98\x86\x03o,\xf3Y\x04\xa53\x9e\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000140)={0x2020}, 0x2020) write$FUSE_DIRENT(r2, 0x0, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000002200)) rt_sigpending(0x0, 0x1000000) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000380)={0x0, r5, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="84010000100013070000000000000000fe8000000000000000000000000000bbac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400736861310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000"], 0x184}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a00000000000000000000000d"], 0x0, 0x32}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="183000000000000000000000030000001801000020696c2500000000002020207b1a1b0001000000bfa100000000000007010000f8ffffffb702000008000000b7030000aa040000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000000f6d00000100ffffa553010000000000850000003500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket(0x25, 0x1, 0x0) recvfrom$packet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000240)={r7, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0x0, 0x4], [0x0, 0x42, 0x0, 0x76bc10cd], [0x0, 0x0, 0x5]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r10}) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 1m21.443055441s ago: executing program 3 (id=858): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) ioprio_set$uid(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x88a8ffff, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r3, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f47b0c0d"], 0x44}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c000a0000000d0085a168d0bf46d32345653600648d0b00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000", 0x5a, 0x0, 0x0, 0x0) socket(0x1f, 0x80000, 0x32) r6 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_int(r6, &(0x7f0000000100)='memory.min\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r8, &(0x7f00000000c0)="04", 0x1, 0x20010845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000800"/20], 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) 1m11.624035559s ago: executing program 3 (id=864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x10d040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c020000520000042dbd7000fddbdf2502080003005500000008000600b6de000008000600b8de000008000100", @ANYRES32=0x0, @ANYBLOB="0800050007000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioperm(0x8000000000000006, 0x7, 0x4) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffff8) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000180)="3082", 0x71, r7) request_key(0x0, 0x0, 0x0, r7) socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = dup(r5) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000480)="400f01dfc4c131c6b70e0000009c440f01d1f30f1eebc7442400d5000000c744240200509f08c7442406000000000f01142466ba430066b8004866ef67f30f300f00564c0f0766ba2000ed", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xce2, 0x2, 0x5b, 0x8, 0x9, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffc, 0x5f, 0x14, 0x0, 0x2d, 0x0, 0x9], 0x110000, 0x4300}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000c40)={0x0, "f93cf6de0500000000000b000000d607"}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000001010101000000000007000000000000000019800800010000010000100001800c000280050001000000000099fc1cf0e4323dd0ef8180a82ccaf1d95d9030ca79416ce698"], 0x30}}, 0x0) 1m4.465015703s ago: executing program 3 (id=868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x408001) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r6, 0x0, 0x0) open(&(0x7f00000065c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9}}, 0x50) read$FUSE(r6, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r8, r6, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x80086601, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x14, r10, 0x1}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x702, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 46.906363517s ago: executing program 3 (id=875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000780)=""/143) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x102440, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000100), 0x0, 0x0, 0x2) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0182101, &(0x7f00000004c0)) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) 40.299410541s ago: executing program 4 (id=884): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000000200000000000000200000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800168024000180100002000000000000000000000000000c000400000000000200010004"], 0x48}}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) read$FUSE(r1, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 39.190104663s ago: executing program 4 (id=885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x10d040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c020000520000042dbd7000fddbdf2502080003005500000008000600b6de000008000600b8de000008000100", @ANYRES32=0x0, @ANYBLOB="0800050007000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioperm(0x8000000000000006, 0x7, 0x4) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffff8) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000180)="3082", 0x71, r7) request_key(0x0, 0x0, 0x0, r7) socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = dup(r5) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000480)="400f01dfc4c131c6b70e0000009c440f01d1f30f1eebc7442400d5000000c744240200509f08c7442406000000000f01142466ba430066b8004866ef67f30f300f00564c0f0766ba2000ed", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xce2, 0x2, 0x5b, 0x8, 0x9, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffc, 0x5f, 0x14, 0x0, 0x2d, 0x0, 0x9], 0x110000, 0x4300}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000c40)={0x0, "f93cf6de0500000000000b000000d607"}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000001010101000000000007000000000000000019800800010000010000100001800c000280050001000000000099fc1cf0e4323dd0ef8180a82ccaf1d95d9030ca79416ce6981e21f7d1188a61822f008aa0"], 0x30}}, 0x0) 33.372911823s ago: executing program 4 (id=889): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = memfd_create(&(0x7f0000002240)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6W\xed\xf4\xaaB\xc1l\x13\xf1t;\x98\x0f\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\x8c\x11\xd8\f\xfc\x98\x86\x03o,\xf3Y\x04\xa53\x9e\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f0000002180)=ANY=[@ANYBLOB="c5ac38b94ad03a8c6da2580000000010", @ANYRES64=r3, @ANYBLOB="070000000000001400000000000000000800000000000000402d2f5c260d802d000000000000000000000000000000000a000000000000002f3e0d762f6375736500000000000000"], 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000002200)) rt_sigpending(0x0, 0x1000000) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000380)={0x0, r6, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="84010000100013070000000000000000fe8000000000000000000000000000bbac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0014007368613100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000"], 0x184}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r7, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a00000000000000000000000d"], 0x0, 0x32}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="183000000000000000000000030000001801000020696c2500000000002020207b1a1b0001000000bfa100000000000007010000f8ffffffb702000008000000b7030000aa040000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000000f6d00000100ffffa553010000000000850000003500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r10 = socket(0x25, 0x1, 0x0) recvfrom$packet(r10, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000240)={r9, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0x0, 0x4], [0x0, 0x42, 0x0, 0x76bc10cd], [0x0, 0x0, 0x5]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)={r11, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r12}) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 31.128963327s ago: executing program 4 (id=890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x10d040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c020000520000042dbd7000fddbdf2502080003005500000008000600b6de000008000600b8de000008000100", @ANYRES32=0x0, @ANYBLOB="0800050007000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioperm(0x8000000000000006, 0x7, 0x4) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffff8) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000180)="3082", 0x71, r7) request_key(0x0, 0x0, 0x0, r7) socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = dup(r5) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000480)="400f01dfc4c131c6b70e0000009c440f01d1f30f1eebc7442400d5000000c744240200509f08c7442406000000000f01142466ba430066b8004866ef67f30f300f00564c0f0766ba2000ed", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xce2, 0x2, 0x5b, 0x8, 0x9, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffc, 0x5f, 0x14, 0x0, 0x2d, 0x0, 0x9], 0x110000, 0x4300}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000c40)={0x0, "f93cf6de0500000000000b000000d607"}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000001010101000000000007000000000000000019800800010000010000100001800c000280050001000000000099fc1cf0e4323dd0ef8180a82ccaf1d95d9030ca79416ce6981e21f7d1188a61822f008aa08b08d8ee304f"], 0x30}}, 0x0) 28.950976354s ago: executing program 4 (id=893): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000000200000000000000200000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800168024000180100002000000000000000000000000000c000400000000000200010004"], 0x48}}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) read$FUSE(r1, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 27.735881279s ago: executing program 4 (id=894): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x408001) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) read$FUSE(r6, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000065c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000002300)={0x50, 0x0, r7, {0x7, 0x9}}, 0x50) read$FUSE(r6, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r8}, 0x10) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r9, r6, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x80086601, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x14, r11, 0x1}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x702, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 11.150373389s ago: executing program 1 (id=906): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = memfd_create(&(0x7f0000002240)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6W\xed\xf4\xaaB\xc1l\x13\xf1t;\x98\x0f\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\x8c\x11\xd8\f\xfc\x98\x86\x03o,\xf3Y\x04\xa53\x9e\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f0000002180)=ANY=[@ANYBLOB="c5ac38b94ad03a8c6da2580000000010", @ANYRES64=r3, @ANYBLOB="070000000000001400000000000000000800000000000000402d2f5c260d802d000000000000000000000000000000000a000000000000002f3e0d762f6375736500000000000000"], 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000002200)) rt_sigpending(0x0, 0x1000000) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000380)={0x0, r6, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="84010000100013070000000000000000fe8000000000000000000000000000bbac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c"], 0x184}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r7, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a00000000000000000000000d"], 0x0, 0x32}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="183000000000000000000000030000001801000020696c2500000000002020207b1a1b0001000000bfa100000000000007010000f8ffffffb702000008000000b7030000aa040000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000000f6d00000100ffffa553010000000000850000003500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r10 = socket(0x25, 0x1, 0x0) recvfrom$packet(r10, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000240)={r9, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0x0, 0x4], [0x0, 0x42, 0x0, 0x76bc10cd], [0x0, 0x0, 0x5]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)={r11, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r12}) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 9.172425871s ago: executing program 1 (id=907): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100070000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004000000000000c910"], 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000700)=ANY=[@ANYBLOB="4800000002000000000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800168024000180100002000000000000000000000000000c00"], 0x48}}, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) read$FUSE(r5, 0x0, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) read$usbmon(r5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 7.662627394s ago: executing program 1 (id=908): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) ioprio_set$uid(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x88a8ffff, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r3, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f47b0c0d"], 0x44}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x1f, 0x80000, 0x32) r6 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_int(r6, &(0x7f0000000100)='memory.min\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r8, &(0x7f00000000c0)="04", 0x1, 0x20010845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000800"/20], 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) 5.297142706s ago: executing program 1 (id=909): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x90d}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_vlan\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private2, @in=@multicast1, 0x4, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x80}, {0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}}, {{@in=@broadcast, 0x400, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x6}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@kfunc]}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0x80085504, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000070000000000000000000071120d00000000009500040000510000b362da04e68d6a4be626b2a466950004dff27647c170bd6dc75da3b3994ea3002b913c827beadfb06120ce9ddd0e3aef73cd60cfde450304cdfa3235f6f98ab5a790146cf7e52386170aae3b4f08b97628e3d632ddebf7ac125e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 2.093435317s ago: executing program 1 (id=910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x10d040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c020000520000042dbd7000fddbdf2502080003005500000008000600b6de000008000600b8de000008000100", @ANYRES32=0x0, @ANYBLOB="0800050007000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioperm(0x8000000000000006, 0x7, 0x4) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffff8) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000180)="3082", 0x71, r7) request_key(0x0, 0x0, 0x0, r7) socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = dup(r5) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000480)="400f01dfc4c131c6b70e0000009c440f01d1f30f1eebc7442400d5000000c744240200509f08c7442406000000000f01142466ba430066b8004866ef67f30f300f00564c0f0766ba2000ed", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xce2, 0x2, 0x5b, 0x8, 0x9, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffc, 0x5f, 0x14, 0x0, 0x2d, 0x0, 0x9], 0x110000, 0x4300}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000c40)={0x0, "f93cf6de0500000000000b000000d607"}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000001010101000000000007000000000000000019800800010000010000100001800c000280050001000000000099fc1cf0e4323dd0ef8180a82ccaf1d95d9030ca79416ce6981e21f7d1188a61822f008aa08b08d8ee304f"], 0x30}}, 0x0) 0s ago: executing program 1 (id=911): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(0x0, 0x1, 0x408001) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002240)={0x10, 0xffffffffffffffda}, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x80086601, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x702, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): face batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1334.253894][T12024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1334.432699][T12029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1334.440124][T12029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1334.480261][T12029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1334.494847][T12029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1334.501930][T12029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1334.535715][T12029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1334.716917][T12024] hsr_slave_0: entered promiscuous mode [ 1334.733769][T12024] hsr_slave_1: entered promiscuous mode [ 1334.741685][T12024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1334.749756][T12024] Cannot create hsr debugfs directory [ 1334.905707][ T5220] Bluetooth: hci9: command tx timeout [ 1335.044693][T12029] hsr_slave_0: entered promiscuous mode [ 1335.061621][T12029] hsr_slave_1: entered promiscuous mode [ 1335.083573][T12029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1335.104449][T12029] Cannot create hsr debugfs directory [ 1335.239695][T12005] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1335.362175][T12005] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1335.397394][T12005] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1335.432847][T11966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1335.498695][T12005] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1335.690469][T11966] 8021q: adding VLAN 0 to HW filter on device team0 [ 1335.851692][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.859023][ T9715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1336.199765][ T9716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.207211][ T9716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1336.738963][T11966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1337.040971][T12029] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.350039][T12029] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.481600][T12005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1337.578297][T12029] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.750308][ T7703] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1337.767989][ T7703] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1337.777848][ T7703] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1337.799546][ T7703] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1337.807979][ T7703] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1337.816506][T12029] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.829480][ T7703] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1337.916764][T12005] 8021q: adding VLAN 0 to HW filter on device team0 [ 1337.933275][T11966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1338.038264][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.045615][ T9715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1338.081085][ T9715] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.088476][ T9715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1338.643632][T12024] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1338.697644][T12024] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1338.711484][T12024] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1338.855917][T12024] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1339.427558][T12119] chnl_net:caif_netlink_parms(): no params data found [ 1339.528812][T11966] veth0_vlan: entered promiscuous mode [ 1339.556155][T12029] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1339.579430][T12029] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1339.713954][T12029] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1339.845724][T12029] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1339.864837][ T5220] Bluetooth: hci10: command tx timeout [ 1339.881405][T11966] veth1_vlan: entered promiscuous mode [ 1339.978939][T12119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.989460][T12119] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.007741][T12119] bridge_slave_0: entered allmulticast mode [ 1340.017011][T12119] bridge_slave_0: entered promiscuous mode [ 1340.044066][T12005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1340.106600][T12119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.114001][T12119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.129375][T12119] bridge_slave_1: entered allmulticast mode [ 1340.138091][T12119] bridge_slave_1: entered promiscuous mode [ 1340.378636][T12119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1340.475816][T12119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1340.566857][T12024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1340.580218][T11966] veth0_macvtap: entered promiscuous mode [ 1340.646861][T12119] team0: Port device team_slave_0 added [ 1340.670040][T12119] team0: Port device team_slave_1 added [ 1340.832002][T12119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1340.839100][T12119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1340.877191][T12119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1340.909031][T11966] veth1_macvtap: entered promiscuous mode [ 1340.957633][T12119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1340.966433][T12119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1341.010401][T12119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1341.110790][T12024] 8021q: adding VLAN 0 to HW filter on device team0 [ 1341.249417][T11966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.261534][T11966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.281628][T11966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.298654][T11966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.324451][T11966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.345774][T11966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.371789][T11966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.386722][T11966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.414512][T11966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.434401][T11966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.455392][T11966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.485932][T11966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.507543][T11966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1341.604462][ T9716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1341.611808][ T9716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1341.635413][T12005] veth0_vlan: entered promiscuous mode [ 1341.670469][T11966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.691288][T11966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.706101][T11966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.716818][T11966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.727489][T11966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.754350][T11966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.764240][T11966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.791413][T11966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.801671][T11966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.812931][T11966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.823256][T11966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.834431][T11966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.857095][T11966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1341.883386][T12119] hsr_slave_0: entered promiscuous mode [ 1341.899032][T12119] hsr_slave_1: entered promiscuous mode [ 1341.911526][T12119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1341.934493][T12119] Cannot create hsr debugfs directory [ 1341.944688][ T5220] Bluetooth: hci10: command tx timeout [ 1341.998401][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.005738][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.027809][T11966] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.036984][T11966] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.047258][T11966] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.056617][T11966] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.285415][T12005] veth1_vlan: entered promiscuous mode [ 1342.799013][T12029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1342.988241][T12005] veth0_macvtap: entered promiscuous mode [ 1343.143839][T12119] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.264681][T12005] veth1_macvtap: entered promiscuous mode [ 1343.287928][T12029] 8021q: adding VLAN 0 to HW filter on device team0 [ 1343.394254][T12119] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.450346][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.457661][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1343.490410][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.515848][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.618342][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.625678][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1343.747428][T12119] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.895976][T12119] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.998721][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1344.024469][ T5220] Bluetooth: hci10: command tx timeout [ 1344.024663][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.061828][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1344.084422][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.106904][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1344.135252][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.164490][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1344.187396][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.212985][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1344.224918][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.248958][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1344.274499][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.294449][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1344.314852][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.342174][T12005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1344.468824][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.474196][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.480611][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.534862][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.564590][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.594632][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.614493][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.634465][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.666225][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.684463][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.704399][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.724427][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.746878][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.784475][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.804407][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.825085][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.847567][T12005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1344.921796][T12005] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.949534][T12005] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.959022][T12005] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.985012][T12005] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.327643][T12024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1345.380306][T12119] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1345.470093][T12119] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1345.561587][T12119] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1345.611631][T12119] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1345.641999][T12224] netlink: 'syz.4.792': attribute type 5 has an invalid length. [ 1345.771671][ T5783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.853116][ T5783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.868679][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 1346.105272][ T5220] Bluetooth: hci10: command tx timeout [ 1346.295412][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1346.303291][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1346.321400][T12024] veth0_vlan: entered promiscuous mode [ 1346.382566][T12024] veth1_vlan: entered promiscuous mode [ 1346.572963][T12029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1346.947883][T12024] veth0_macvtap: entered promiscuous mode [ 1347.045148][T12119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1348.189497][ T29] audit: type=1326 audit(1724364448.831:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12230 comm="syz.2.800" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f950a779e79 code=0x0 [ 1348.322248][T12024] veth1_macvtap: entered promiscuous mode [ 1348.534174][T12119] 8021q: adding VLAN 0 to HW filter on device team0 [ 1348.581401][T12029] veth0_vlan: entered promiscuous mode [ 1348.690854][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.698174][ T5783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.766354][T12237] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1348.928388][T12029] veth1_vlan: entered promiscuous mode [ 1349.094235][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.101631][ T5783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1349.171331][T12238] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 1349.177941][T12238] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1349.202305][T12238] vhci_hcd vhci_hcd.0: Device attached [ 1349.231212][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1349.291122][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1349.352988][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1349.394778][ T945] vhci_hcd: vhci_device speed not set [ 1349.422192][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1349.462922][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1349.507564][ T945] usb 13-2: new full-speed USB device number 10 using vhci_hcd [ 1349.526605][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1349.567251][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1349.623812][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1349.642711][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1349.653738][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1349.681963][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1349.703217][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1349.731148][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1349.781284][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1349.825411][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1349.861904][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1349.931275][T12024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1349.963634][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1350.012368][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1350.026007][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1350.064438][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1350.097789][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1350.114621][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1350.162689][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1350.176737][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1350.212080][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1350.223314][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1350.236174][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1350.253408][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1350.274696][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1350.298434][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1350.317437][T12024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1350.329490][T12024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1350.345487][T12240] vhci_hcd: connection reset by peer [ 1350.351668][ T5783] vhci_hcd: stop threads [ 1350.357693][ T5783] vhci_hcd: release socket [ 1350.373272][T12024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1350.380871][ T5783] vhci_hcd: disconnect device [ 1350.438822][T12024] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.474532][T12024] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.507534][T12024] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.517518][T12024] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.095962][T12029] veth0_macvtap: entered promiscuous mode [ 1351.368224][T12029] veth1_macvtap: entered promiscuous mode [ 1351.686009][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1351.708697][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1351.764518][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1351.781544][T12257] netlink: 148 bytes leftover after parsing attributes in process `syz.4.811'. [ 1351.804412][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1351.860291][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1351.897854][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1351.921255][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1351.953209][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1351.969002][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1351.989914][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.030083][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1352.053905][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.093400][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1352.123458][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.147016][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1352.167199][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.191752][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1352.276959][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.326068][T12029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1352.561447][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1352.567003][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1352.591342][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.598939][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.645289][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1352.668984][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.706305][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1352.718894][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.739284][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1352.758527][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.776428][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1352.801568][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.817430][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1352.842640][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.887985][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1352.908327][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.935679][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1352.981414][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.048458][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.091439][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.144538][T12029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1353.278936][T12029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.289240][T12029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.314087][T12029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.323053][T12029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.349487][T12265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12265 comm=syz.2.812 [ 1353.386723][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1353.401019][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1353.492823][T12119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1353.713005][T12265] netlink: 'syz.2.812': attribute type 5 has an invalid length. [ 1354.026252][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 1354.665205][ T945] vhci_hcd: vhci_device speed not set [ 1355.498841][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.514513][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1355.826661][T12119] veth0_vlan: entered promiscuous mode [ 1355.909837][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.935110][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1355.985549][T12119] veth1_vlan: entered promiscuous mode [ 1356.580504][T12119] veth0_macvtap: entered promiscuous mode [ 1356.623010][T12119] veth1_macvtap: entered promiscuous mode [ 1356.750165][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.807122][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.817787][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.831173][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.852686][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.863782][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.881724][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.925140][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.966126][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1357.007548][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.055305][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1357.091242][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.125244][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1357.157235][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.191133][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1357.240822][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.328646][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1357.366097][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.389759][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1357.403042][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.446150][T12119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1357.617605][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.686738][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.738391][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1358.084476][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.095377][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1361.436101][T12288] usb usb9: usbfs: process 12288 (syz.0.815) did not claim interface 0 before use [ 1361.445677][T12288] usb usb9: selecting invalid altsetting 21783 [ 1361.867161][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.969844][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.087902][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.104812][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.131719][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.154072][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.484450][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.434487][ T29] audit: type=1326 audit(1724364463.991:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12291 comm="syz.0.816" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1203779e79 code=0x0 [ 1363.516984][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.544643][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.574496][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.616697][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.641323][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.662112][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.684460][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.717862][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.744883][T12119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1363.791306][T12119] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.811935][T12119] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.841364][T12119] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.031359][T12119] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.984490][ T29] audit: type=1326 audit(1724364465.621:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12298 comm="syz.3.818" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e21d79e79 code=0x0 [ 1365.952170][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.018055][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.416565][ T9716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1368.289054][ T7703] Bluetooth: hci8: command 0x206a tx timeout [ 1368.298832][ T5220] Bluetooth: hci8: Opcode 0x206a failed: -110 [ 1368.334081][T12319] usb usb9: usbfs: process 12319 (syz.0.822) did not claim interface 0 before use [ 1368.344936][T12319] usb usb9: selecting invalid altsetting 21783 [ 1368.643968][ T9716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1368.655209][T12314] netlink: 5312 bytes leftover after parsing attributes in process `syz.2.821'. [ 1369.683003][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.823'. [ 1369.709275][ T7703] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1370.544449][ T29] audit: type=1326 audit(1724364471.201:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12324 comm="syz.1.807" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb81c579e79 code=0x0 [ 1370.570200][ T7703] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1370.585184][ T7703] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1370.600158][ T7703] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1370.608455][ T7703] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1370.616423][ T7703] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1371.456126][T12340] fuseblk: Unknown parameter '4».¬¼ +•X&l“á4¦hÛÑ<Ê(¾VE0ܬÓrG$|_¯BWŠlbKíŸëTÔù΄5ÍjÖoä´ÇÖx¯CÆù¦5cõ§ùˆÑ‚B«C½š_ôã£ÅÁ-¤ÇÎiºLVuùá»tÉ0xffffffffffffffff' [ 1372.623448][T12347] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1372.744923][ T5220] Bluetooth: hci11: command tx timeout [ 1372.961883][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1372.969833][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1373.464558][T12348] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 1373.471137][T12348] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1373.551625][T12348] vhci_hcd vhci_hcd.0: Device attached [ 1373.864643][ T25] vhci_hcd: vhci_device speed not set [ 1373.984429][ T25] usb 11-2: new full-speed USB device number 9 using vhci_hcd [ 1374.522075][T12326] chnl_net:caif_netlink_parms(): no params data found [ 1374.830533][ T5220] Bluetooth: hci11: command tx timeout [ 1375.088819][T12352] vhci_hcd: connection reset by peer [ 1375.100560][ T62] vhci_hcd: stop threads [ 1375.124517][ T62] vhci_hcd: release socket [ 1375.139429][ T62] vhci_hcd: disconnect device [ 1375.218011][T12361] netlink: 36 bytes leftover after parsing attributes in process `syz.0.829'. [ 1375.267045][T12364] netlink: 'syz.0.829': attribute type 5 has an invalid length. [ 1375.426192][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 1376.009279][T12326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.046758][T12326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.057255][T12326] bridge_slave_0: entered allmulticast mode [ 1376.345867][T12326] bridge_slave_0: entered promiscuous mode [ 1377.316310][ T29] audit: type=1326 audit(1724364477.931:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12376 comm="syz.0.831" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1203779e79 code=0x0 [ 1377.355249][ T5220] Bluetooth: hci11: command tx timeout [ 1377.399634][T12326] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.464704][T12326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.530455][T12326] bridge_slave_1: entered allmulticast mode [ 1377.580445][T12326] bridge_slave_1: entered promiscuous mode [ 1377.766647][T12385] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1378.711201][T12389] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 1378.717799][T12389] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1378.737833][T12389] vhci_hcd vhci_hcd.0: Device attached [ 1378.841794][T12326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1378.948499][T12326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1379.150445][ T25] vhci_hcd: vhci_device speed not set [ 1379.394882][ T5220] Bluetooth: hci11: command tx timeout [ 1379.401800][T12326] team0: Port device team_slave_0 added [ 1379.595179][T12326] team0: Port device team_slave_1 added [ 1383.576059][T12401] usb usb9: usbfs: process 12401 (syz.3.836) did not claim interface 0 before use [ 1383.585617][T12401] usb usb9: selecting invalid altsetting 21783 [ 1384.041807][ T7703] Bluetooth: hci1: command 0x0406 tx timeout [ 1384.564115][T12326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1388.265910][T12407] usb usb9: usbfs: process 12407 (syz.3.837) did not claim interface 0 before use [ 1388.287252][T12407] usb usb9: selecting invalid altsetting 21783 [ 1388.714358][T12326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1388.781514][ T7703] Bluetooth: hci4: command 0x0406 tx timeout [ 1388.916108][T12326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1389.009129][T12326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1389.143681][T12326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1389.169722][ C0] vkms_vblank_simulate: vblank timer overrun [ 1389.392482][T12326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1394.272640][T12421] usb usb9: usbfs: process 12421 (syz.3.841) did not claim interface 0 before use [ 1394.282340][T12421] usb usb9: selecting invalid altsetting 21783 [ 1395.592538][T12326] hsr_slave_0: entered promiscuous mode [ 1395.805289][T12326] hsr_slave_1: entered promiscuous mode [ 1396.035148][T12326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1396.042814][T12326] Cannot create hsr debugfs directory [ 1396.829903][ T7703] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1396.841325][ T7703] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1396.851849][ T7703] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1396.860694][ T7703] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1396.869782][ T7703] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1396.885305][ T7703] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1397.084616][T12392] vhci_hcd: connection closed [ 1397.171795][ T5220] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1397.204905][ T5220] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1397.214513][ T5220] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1397.226948][ T5220] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1397.245995][ T5220] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1397.254675][ T5220] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1397.311667][ T1111] vhci_hcd: stop threads [ 1397.316655][ T1111] vhci_hcd: release socket [ 1397.321158][ T1111] vhci_hcd: disconnect device [ 1397.832241][ T6158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.885316][T12440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.844'. [ 1398.751833][ T6158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.055607][T12443] usb usb9: usbfs: process 12443 (syz.3.845) did not claim interface 0 before use [ 1402.065164][T12443] usb usb9: selecting invalid altsetting 21783 [ 1402.454497][ T7703] Bluetooth: hci2: command tx timeout [ 1402.458327][ T5220] Bluetooth: hci9: command tx timeout [ 1403.529985][ T6158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.833727][ T6158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.027837][T12326] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.336292][ T29] audit: type=1326 audit(1724364505.651:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12453 comm="syz.2.847" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f950a779e79 code=0x0 [ 1404.908349][ T4609] Bluetooth: hci2: command tx timeout [ 1404.913924][ T4609] Bluetooth: hci9: command tx timeout [ 1405.105047][T12326] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.645759][T12465] usb usb9: usbfs: process 12465 (syz.2.848) did not claim interface 0 before use [ 1408.795272][T12465] usb usb9: selecting invalid altsetting 21783 [ 1408.839404][ T5220] Bluetooth: hci5: command 0x0406 tx timeout [ 1408.858044][ T5220] Bluetooth: hci2: command tx timeout [ 1408.871242][ T5220] Bluetooth: hci9: command tx timeout [ 1409.315709][T12326] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.621465][T12326] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.552143][ T29] audit: type=1326 audit(1724364511.331:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12467 comm="syz.2.849" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f950a779e79 code=0x0 [ 1410.663928][ T6158] bridge_slave_1: left allmulticast mode [ 1410.697337][ T6158] bridge_slave_1: left promiscuous mode [ 1410.727086][ T6158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.747712][ T6158] bridge_slave_0: left allmulticast mode [ 1410.753437][ T6158] bridge_slave_0: left promiscuous mode [ 1410.778611][ T6158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.921556][ T5220] Bluetooth: hci6: command 0x0406 tx timeout [ 1410.928234][ T5220] Bluetooth: hci2: command tx timeout [ 1410.933769][T11222] Bluetooth: hci9: command tx timeout [ 1412.125858][ T6158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1412.151237][ T6158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1412.163909][ T6158] bond0 (unregistering): Released all slaves [ 1412.989986][T12431] chnl_net:caif_netlink_parms(): no params data found [ 1413.021944][T12434] chnl_net:caif_netlink_parms(): no params data found [ 1413.215366][ T6158] hsr_slave_0: left promiscuous mode [ 1413.228844][ T6158] hsr_slave_1: left promiscuous mode [ 1413.245941][ T6158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1413.253504][ T6158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1413.276288][ T6158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1413.283961][ T6158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1413.347305][ T6158] veth1_macvtap: left promiscuous mode [ 1413.352999][ T6158] veth0_macvtap: left promiscuous mode [ 1413.373828][ T6158] veth1_vlan: left promiscuous mode [ 1413.382947][ T6158] veth0_vlan: left promiscuous mode [ 1414.045660][T12477] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1414.057328][T12477] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1414.073867][T12477] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1414.112530][T12477] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1414.121397][T12477] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1414.133613][T12477] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1414.623266][ T6158] team0 (unregistering): Port device team_slave_1 removed [ 1414.690827][ T6158] team0 (unregistering): Port device team_slave_0 removed [ 1415.630257][T12326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1415.764001][T12326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1415.783319][T12326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1415.902976][T12326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1415.929283][T12431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1415.937747][T12431] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.947834][T12431] bridge_slave_0: entered allmulticast mode [ 1415.956579][T12431] bridge_slave_0: entered promiscuous mode [ 1415.970609][T12431] bridge0: port 2(bridge_slave_1) entered blocking state [ 1415.980791][T12431] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.988433][T12431] bridge_slave_1: entered allmulticast mode [ 1415.999272][T12431] bridge_slave_1: entered promiscuous mode [ 1416.012459][T12434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.021027][T12434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.049376][T12434] bridge_slave_0: entered allmulticast mode [ 1416.058717][T12434] bridge_slave_0: entered promiscuous mode [ 1416.070222][T12434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.078023][T12434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.086377][T12434] bridge_slave_1: entered allmulticast mode [ 1416.095575][T12434] bridge_slave_1: entered promiscuous mode [ 1416.194620][T12477] Bluetooth: hci12: command tx timeout [ 1416.295772][T12431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1416.317086][T12431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1416.453147][T12434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1416.479353][T12434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1416.580996][T12431] team0: Port device team_slave_0 added [ 1416.602850][T12434] team0: Port device team_slave_0 added [ 1416.615743][T12434] team0: Port device team_slave_1 added [ 1416.708340][T12431] team0: Port device team_slave_1 added [ 1417.047977][T12434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1417.072934][T12434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1417.100974][T12434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1417.117667][T12434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1417.134318][T12434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1417.169947][T12434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1417.199399][T12431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1417.214468][T12431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1417.290043][T12431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1417.306122][T12431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1417.313187][T12431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1417.344496][T12431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1417.778600][T12431] hsr_slave_0: entered promiscuous mode [ 1417.788637][T12431] hsr_slave_1: entered promiscuous mode [ 1417.801348][T12431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1417.809291][T12431] Cannot create hsr debugfs directory [ 1417.865289][T12499] chnl_net:caif_netlink_parms(): no params data found [ 1417.900245][T12434] hsr_slave_0: entered promiscuous mode [ 1417.910826][T12434] hsr_slave_1: entered promiscuous mode [ 1417.925905][T12434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1417.933632][T12434] Cannot create hsr debugfs directory [ 1418.265717][T12477] Bluetooth: hci12: command tx timeout [ 1418.450300][T12499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.461235][T12499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.470655][T12499] bridge_slave_0: entered allmulticast mode [ 1418.479845][T12499] bridge_slave_0: entered promiscuous mode [ 1418.502758][T12499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.511068][T12499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.535197][T12499] bridge_slave_1: entered allmulticast mode [ 1418.543997][T12499] bridge_slave_1: entered promiscuous mode [ 1418.620617][T12326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1418.790301][T12499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.955882][T12499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1419.166964][T12326] 8021q: adding VLAN 0 to HW filter on device team0 [ 1419.280961][T12499] team0: Port device team_slave_0 added [ 1419.460789][T12499] team0: Port device team_slave_1 added [ 1419.537522][ T6158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.544868][ T6158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1419.799356][ T6158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.806647][ T6158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1419.942857][T12499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1419.952764][T12499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1419.979974][T12499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1419.995431][T12499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1420.002443][T12499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1420.037146][T12499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.208051][T12499] hsr_slave_0: entered promiscuous mode [ 1420.239639][T12499] hsr_slave_1: entered promiscuous mode [ 1420.246973][T12499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1420.265770][T12499] Cannot create hsr debugfs directory [ 1420.344948][T12477] Bluetooth: hci12: command tx timeout [ 1420.767297][T12431] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1420.783374][T12431] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1420.866035][T12434] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.258810][T12431] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1421.599411][T12434] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.677498][T12431] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1421.777967][ T62] bridge_slave_1: left allmulticast mode [ 1421.783693][ T62] bridge_slave_1: left promiscuous mode [ 1421.815199][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.837702][ T62] bridge_slave_0: left allmulticast mode [ 1421.843529][ T62] bridge_slave_0: left promiscuous mode [ 1421.876578][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.055932][ T7703] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1422.080067][ T7703] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1422.089295][ T7703] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1422.100216][ T7703] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1422.109567][ T7703] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1422.117440][ T7703] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1422.434920][ T7703] Bluetooth: hci12: command tx timeout [ 1422.869929][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1422.886402][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1422.909515][ T62] bond0 (unregistering): Released all slaves [ 1423.031572][T12434] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.249142][T12434] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.540156][T12326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1423.747473][ T62] hsr_slave_0: left promiscuous mode [ 1423.774652][ T62] hsr_slave_1: left promiscuous mode [ 1423.791133][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1423.813207][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1423.836686][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1423.854669][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1423.925550][ T62] veth1_macvtap: left promiscuous mode [ 1423.931249][ T62] veth0_macvtap: left promiscuous mode [ 1423.955045][ T62] veth1_vlan: left promiscuous mode [ 1423.960553][ T62] veth0_vlan: left promiscuous mode [ 1424.190391][ T7703] Bluetooth: hci3: command tx timeout [ 1425.974543][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1426.125768][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1426.251869][T12477] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1426.272762][ T4609] Bluetooth: hci3: command tx timeout [ 1426.307882][T12477] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1426.327888][T12477] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1426.338692][T12477] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1426.374082][T12477] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1426.382691][T12477] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1427.213084][T12499] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.643978][T12499] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.860253][T12499] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.078905][T12499] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.344619][T12477] Bluetooth: hci3: command tx timeout [ 1428.466014][T12431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1428.514539][T12477] Bluetooth: hci1: command tx timeout [ 1428.772718][T12434] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1428.799709][T12434] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1428.880848][T12554] chnl_net:caif_netlink_parms(): no params data found [ 1428.958847][T12431] 8021q: adding VLAN 0 to HW filter on device team0 [ 1428.968969][T12434] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1429.047441][T12434] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1429.245909][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.253211][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1429.333579][ T9715] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.340932][ T9715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1429.388317][T12554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.397187][T12554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.405429][T12554] bridge_slave_0: entered allmulticast mode [ 1429.413403][T12554] bridge_slave_0: entered promiscuous mode [ 1429.430508][T12554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.438428][T12554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.453152][T12554] bridge_slave_1: entered allmulticast mode [ 1429.465263][T12554] bridge_slave_1: entered promiscuous mode [ 1429.472932][T12602] chnl_net:caif_netlink_parms(): no params data found [ 1429.621264][T12499] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1429.645227][T12499] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1429.706900][T12554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1429.722873][T12554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1429.757456][T12499] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1429.901159][T12499] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1430.101160][T12554] team0: Port device team_slave_0 added [ 1430.118477][T12554] team0: Port device team_slave_1 added [ 1430.147120][T12431] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1430.165392][T12431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1430.198394][T12602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.209854][T12602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.220867][T12602] bridge_slave_0: entered allmulticast mode [ 1430.231035][T12602] bridge_slave_0: entered promiscuous mode [ 1430.242367][T12602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.249792][T12602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.257881][T12602] bridge_slave_1: entered allmulticast mode [ 1430.273951][T12602] bridge_slave_1: entered promiscuous mode [ 1430.424642][T12477] Bluetooth: hci3: command tx timeout [ 1430.495194][ T62] bridge_slave_1: left allmulticast mode [ 1430.500904][ T62] bridge_slave_1: left promiscuous mode [ 1430.510149][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.527081][ T62] bridge_slave_0: left allmulticast mode [ 1430.532808][ T62] bridge_slave_0: left promiscuous mode [ 1430.538871][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.559280][ T62] bridge_slave_1: left allmulticast mode [ 1430.575813][ T62] bridge_slave_1: left promiscuous mode [ 1430.581749][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.591761][T12477] Bluetooth: hci1: command tx timeout [ 1430.602818][ T62] bridge_slave_0: left allmulticast mode [ 1430.608760][ T62] bridge_slave_0: left promiscuous mode [ 1430.615350][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.700670][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1431.723165][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1431.736276][ T62] bond0 (unregistering): Released all slaves [ 1431.918825][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1431.933045][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1431.947215][ T62] bond0 (unregistering): Released all slaves [ 1431.992764][T12554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1432.005276][T12554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1432.064407][T12554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1432.079750][T12554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1432.087533][T12554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1432.119307][T12554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1432.200186][T12602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1432.276966][T12602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1432.429133][T12554] hsr_slave_0: entered promiscuous mode [ 1432.437236][T12554] hsr_slave_1: entered promiscuous mode [ 1432.447228][T12554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1432.455337][T12554] Cannot create hsr debugfs directory [ 1432.640800][T12602] team0: Port device team_slave_0 added [ 1432.665346][T12477] Bluetooth: hci1: command tx timeout [ 1432.790567][T12602] team0: Port device team_slave_1 added [ 1433.080195][T12602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1433.092165][T12602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1433.119519][T12602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1433.295361][ T62] hsr_slave_0: left promiscuous mode [ 1433.314945][ T62] hsr_slave_1: left promiscuous mode [ 1433.329306][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1433.356202][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1433.387007][ T62] hsr_slave_0: left promiscuous mode [ 1433.405349][ T62] hsr_slave_1: left promiscuous mode [ 1433.425918][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1433.433502][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1433.476676][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1433.494694][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1433.614166][ T62] veth1_macvtap: left promiscuous mode [ 1433.619944][ T62] veth0_macvtap: left promiscuous mode [ 1433.625939][ T62] veth1_vlan: left promiscuous mode [ 1433.631408][ T62] veth0_vlan: left promiscuous mode [ 1434.391587][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1434.398220][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1434.746001][ T7703] Bluetooth: hci1: command tx timeout [ 1434.759471][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1434.846811][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1436.236849][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1436.310483][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1436.429166][ T7703] Bluetooth: hci7: command 0x0406 tx timeout [ 1437.137723][T12602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1437.147332][T12602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1437.174885][T12602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1437.452195][T12602] hsr_slave_0: entered promiscuous mode [ 1437.496038][T12602] hsr_slave_1: entered promiscuous mode [ 1437.503247][T12602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1437.511868][T12602] Cannot create hsr debugfs directory [ 1437.698463][T12431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1437.963886][T12554] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.012146][T12434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1438.225761][T12554] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.488576][T12554] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.613418][T12434] 8021q: adding VLAN 0 to HW filter on device team0 [ 1438.809972][T12554] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.077047][T12499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1439.096216][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.103677][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1439.300252][ T9716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.307548][ T9716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1439.492414][T12431] veth0_vlan: entered promiscuous mode [ 1439.712831][T12499] 8021q: adding VLAN 0 to HW filter on device team0 [ 1439.760846][T12431] veth1_vlan: entered promiscuous mode [ 1439.800569][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.807932][ T9715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1439.891732][ T62] bridge_slave_1: left allmulticast mode [ 1439.907999][ T62] bridge_slave_1: left promiscuous mode [ 1439.913916][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.933549][ T62] bridge_slave_0: left allmulticast mode [ 1439.943022][ T62] bridge_slave_0: left promiscuous mode [ 1439.950542][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.963373][ T62] bridge_slave_1: left allmulticast mode [ 1439.970548][ T62] bridge_slave_1: left promiscuous mode [ 1439.978143][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.996754][ T62] bridge_slave_0: left allmulticast mode [ 1440.002475][ T62] bridge_slave_0: left promiscuous mode [ 1440.008928][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.123339][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1441.137343][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1441.151616][ T62] bond0 (unregistering): Released all slaves [ 1441.343355][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1441.358699][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1441.371933][ T62] bond0 (unregistering): Released all slaves [ 1441.478686][ T9716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.486134][ T9716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1441.549051][ T7703] Bluetooth: hci8: command 0x206a tx timeout [ 1441.769490][T12431] veth0_macvtap: entered promiscuous mode [ 1441.921609][T12431] veth1_macvtap: entered promiscuous mode [ 1441.982616][T12602] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1442.030763][T12602] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1442.050945][T12602] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1442.079599][T12602] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1442.256331][T12431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1442.284539][T12431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.306265][T12431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1442.317436][T12431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.327953][T12431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1442.338612][T12431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.356129][T12431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1442.367212][T12431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.377655][T12431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1442.388919][T12431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.399233][T12431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1442.410428][T12431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.423402][T12431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1442.436568][T12431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.450984][T12431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1442.461662][T12431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.477436][T12431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1442.689051][T12431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1442.714327][T12431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.726856][T12431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1442.738805][T12431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.751411][T12431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1442.783874][T12431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.797474][T12431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1442.808211][T12431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.820027][T12431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1442.833714][T12431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.844369][T12431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1442.859131][T12431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.870258][T12431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1442.881171][T12431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.892493][T12431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1442.903141][T12431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.917978][T12431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1442.988920][T12431] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.997807][T12431] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.007642][T12431] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.016984][T12431] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.139965][T12554] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1443.240903][T12554] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1443.284179][T12554] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1443.745324][ T62] hsr_slave_0: left promiscuous mode [ 1443.751936][ T62] hsr_slave_1: left promiscuous mode [ 1443.759677][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1443.769454][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1443.785459][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1443.792973][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1443.811087][ T62] hsr_slave_0: left promiscuous mode [ 1443.817966][ T62] hsr_slave_1: left promiscuous mode [ 1443.824783][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1443.832318][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1443.841878][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1443.849678][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1443.919593][ T62] veth1_macvtap: left promiscuous mode [ 1443.925400][ T62] veth0_macvtap: left promiscuous mode [ 1443.931221][ T62] veth1_vlan: left promiscuous mode [ 1443.936848][ T62] veth0_vlan: left promiscuous mode [ 1443.947618][ T62] veth1_macvtap: left promiscuous mode [ 1443.953278][ T62] veth0_macvtap: left promiscuous mode [ 1443.961248][ T62] veth1_vlan: left promiscuous mode [ 1443.968958][ T62] veth0_vlan: left promiscuous mode [ 1445.401122][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1445.470105][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1446.664416][ T7703] Bluetooth: hci0: command 0x0406 tx timeout [ 1447.172207][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1447.243703][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1448.005314][T12554] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1448.036677][T12434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1448.635536][T12499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1448.965129][T10959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.979137][T10959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.212568][T12434] veth0_vlan: entered promiscuous mode [ 1449.349003][T12602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1449.424530][ T9715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.432510][ T9715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.468809][T12499] veth0_vlan: entered promiscuous mode [ 1449.565342][T12434] veth1_vlan: entered promiscuous mode [ 1449.793829][T12602] 8021q: adding VLAN 0 to HW filter on device team0 [ 1449.916296][T12499] veth1_vlan: entered promiscuous mode [ 1450.041967][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.049313][ T9715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1450.089410][ T9715] bridge0: port 2(bridge_slave_1) entered blocking state [ 1450.096752][ T9715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1450.202669][T12554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1450.356005][T12434] veth0_macvtap: entered promiscuous mode [ 1450.390731][T12434] veth1_macvtap: entered promiscuous mode [ 1450.553410][ T7703] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1450.584777][ T7703] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1450.593641][ T7703] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1450.604431][ T7703] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1450.616058][ T7703] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1450.623759][ T7703] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1450.884204][T12554] 8021q: adding VLAN 0 to HW filter on device team0 [ 1450.940388][T12499] veth0_macvtap: entered promiscuous mode [ 1450.989820][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.009220][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.020083][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.031182][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.041880][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.072544][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.083392][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.104811][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.136108][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.165122][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.184351][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.204573][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.230160][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.256943][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.294830][T12434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1451.339687][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.347030][ T5783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1451.453383][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.489511][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.504341][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.524307][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.546599][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.575004][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.600913][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.620142][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.644296][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.674461][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.696065][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.719729][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.730054][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.754749][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.787936][T12434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1451.822402][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.829721][ T5783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1451.887793][T12499] veth1_macvtap: entered promiscuous mode [ 1451.923552][T12434] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.951187][T12434] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.960871][T12434] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.977470][T12434] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.137882][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1452.151249][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.168287][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1452.199853][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.210670][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1452.236191][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.254916][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1452.267721][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.288668][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1452.299616][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.309777][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1452.320383][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.330784][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1452.341526][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.356606][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1452.367319][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.387420][T12499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1452.595694][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.644142][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.657537][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.669629][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.680741][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.699345][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.709946][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.720127][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.732838][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.745592][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.757199][T12477] Bluetooth: hci4: command tx timeout [ 1452.757839][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.773405][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.784102][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.801984][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.812575][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.822692][T12499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.835971][T12499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.851871][T12499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1452.939788][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.976111][T12499] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.985582][T12499] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.008792][T12499] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.018574][T12499] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.144172][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.252911][T12602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1453.333019][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.464726][ T5783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.472642][ T5783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.932362][T12554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1453.976871][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.003843][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.167790][ T5783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.205215][ T5783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.382706][T12682] chnl_net:caif_netlink_parms(): no params data found [ 1454.506069][ T62] bridge_slave_1: left allmulticast mode [ 1454.511796][ T62] bridge_slave_1: left promiscuous mode [ 1454.536976][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.561544][ T62] bridge_slave_0: left allmulticast mode [ 1454.577654][ T62] bridge_slave_0: left promiscuous mode [ 1454.583642][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.612836][ T62] bridge_slave_1: left allmulticast mode [ 1454.637583][ T62] bridge_slave_1: left promiscuous mode [ 1454.644956][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.666795][ T62] bridge_slave_0: left allmulticast mode [ 1454.672509][ T62] bridge_slave_0: left promiscuous mode [ 1454.691226][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.718567][ T62] bridge_slave_1: left allmulticast mode [ 1454.725703][ T62] bridge_slave_1: left promiscuous mode [ 1454.731616][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.769824][ T62] bridge_slave_0: left allmulticast mode [ 1454.778408][ T62] bridge_slave_0: left promiscuous mode [ 1454.790643][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.884352][T12477] Bluetooth: hci4: command tx timeout [ 1455.235040][T12725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.842'. [ 1456.909924][T12477] Bluetooth: hci4: command tx timeout [ 1457.459267][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 1457.591863][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1457.633936][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1457.662048][ T62] bond0 (unregistering): Released all slaves [ 1457.885621][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1457.926203][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1457.952184][ T62] bond0 (unregistering): Released all slaves [ 1458.193201][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1458.214467][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1458.246726][ T62] bond0 (unregistering): Released all slaves [ 1458.552481][T12733] netlink: 36 bytes leftover after parsing attributes in process `syz.1.854'. [ 1458.565171][T12734] netlink: 'syz.1.854': attribute type 5 has an invalid length. [ 1458.805861][ T9716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1458.813735][ T9716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1458.984724][T12477] Bluetooth: hci4: command tx timeout [ 1459.369459][T12682] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.392051][T12682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.414673][T12682] bridge_slave_0: entered allmulticast mode [ 1459.432802][T12682] bridge_slave_0: entered promiscuous mode [ 1459.488237][T12682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.514532][T12682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.528601][T12682] bridge_slave_1: entered allmulticast mode [ 1459.556902][T12682] bridge_slave_1: entered promiscuous mode [ 1459.579324][T12602] veth0_vlan: entered promiscuous mode [ 1459.994081][T12554] veth0_vlan: entered promiscuous mode [ 1460.063485][T12682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1460.258260][T12682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1460.453538][T12554] veth1_vlan: entered promiscuous mode [ 1460.663938][T12602] veth1_vlan: entered promiscuous mode [ 1460.816484][T12682] team0: Port device team_slave_0 added [ 1460.845383][T12682] team0: Port device team_slave_1 added [ 1461.886199][ T29] audit: type=1326 audit(1724364562.571:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12766 comm="syz.1.856" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9075179e79 code=0x0 [ 1462.027469][ T7703] Bluetooth: hci10: command 0x0406 tx timeout [ 1462.485636][T12682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1462.499994][T12682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1462.605399][T12682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1462.675266][T12682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1462.695153][T12682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1462.721227][ C0] vkms_vblank_simulate: vblank timer overrun [ 1462.761303][T12781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.857'. [ 1462.984694][T12682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1463.568191][T12554] veth0_macvtap: entered promiscuous mode [ 1463.756922][ T62] hsr_slave_0: left promiscuous mode [ 1463.776626][ T62] hsr_slave_1: left promiscuous mode [ 1463.789805][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1463.797498][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1463.806366][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1463.814998][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1463.884056][ T62] hsr_slave_0: left promiscuous mode [ 1463.955997][ T62] hsr_slave_1: left promiscuous mode [ 1464.069639][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 1464.100378][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1464.123110][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1464.171520][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1464.196536][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1464.278345][ T62] hsr_slave_0: left promiscuous mode [ 1464.297718][ T62] hsr_slave_1: left promiscuous mode [ 1464.323546][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1464.344786][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1464.382464][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1464.404602][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1464.633414][ T62] veth1_macvtap: left promiscuous mode [ 1464.669024][ T62] veth0_macvtap: left promiscuous mode [ 1464.697431][ T62] veth1_vlan: left promiscuous mode [ 1464.702958][ T62] veth0_vlan: left promiscuous mode [ 1464.746073][ T62] veth1_macvtap: left promiscuous mode [ 1464.762553][ T62] veth0_macvtap: left promiscuous mode [ 1464.772666][ T62] veth1_vlan: left promiscuous mode [ 1464.813866][ T62] veth0_vlan: left promiscuous mode [ 1464.867563][ T62] veth1_macvtap: left promiscuous mode [ 1464.884450][ T62] veth0_macvtap: left promiscuous mode [ 1464.900980][ T62] veth1_vlan: left promiscuous mode [ 1464.915930][ T62] veth0_vlan: left promiscuous mode [ 1465.032984][T12801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.859'. [ 1466.600027][T12804] netlink: 148 bytes leftover after parsing attributes in process `syz.1.860'. [ 1467.629354][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1467.745907][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1469.544868][ T29] audit: type=1326 audit(1724364570.261:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12805 comm="syz.1.861" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9075179e79 code=0x0 [ 1470.852132][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1470.937747][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1472.361653][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1472.428508][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1473.184150][T12602] veth0_macvtap: entered promiscuous mode [ 1473.298192][T12554] veth1_macvtap: entered promiscuous mode [ 1473.389019][T12602] veth1_macvtap: entered promiscuous mode [ 1473.507571][T12682] hsr_slave_0: entered promiscuous mode [ 1473.555231][T12682] hsr_slave_1: entered promiscuous mode [ 1473.687022][T12834] netlink: 36 bytes leftover after parsing attributes in process `syz.1.865'. [ 1473.840508][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 1473.965220][T12836] netlink: 'syz.1.865': attribute type 5 has an invalid length. [ 1474.244521][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.295234][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.344720][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.397926][T12841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.864'. [ 1474.408020][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.429391][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.624505][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.648603][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.676273][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.706030][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.734462][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.784334][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.814635][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.862886][T12554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1475.073347][T12602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1475.126793][T12602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.143728][T12602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1475.155623][T12602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.180743][T12602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1475.244809][T12602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.336598][T12602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1475.384717][T12602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.404548][T12602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1475.421773][T12602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.434431][T12602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1475.468394][T12602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.504582][T12602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1475.526277][T12602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.576104][T12602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1475.590516][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1475.654819][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.671040][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1475.682070][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.702019][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1475.729780][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.754977][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1475.789373][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.820093][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1475.857092][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.891590][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1475.923815][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.977411][T12554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1476.108233][T12602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1476.164473][T12602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1476.196309][T12602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1476.227696][T12602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1476.261949][T12602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1476.556224][T12602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1476.587711][T12602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1479.960102][T12854] usb usb9: usbfs: process 12854 (syz.1.866) did not claim interface 0 before use [ 1479.969779][T12854] usb usb9: selecting invalid altsetting 21783 [ 1480.033113][T12602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.115635][T12602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1480.126911][T12602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.162617][T12602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1480.244908][T12602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.254886][T12602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1480.266499][T12602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.307154][T12602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1480.374587][T12554] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.383379][T12554] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.452698][T12554] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.514446][T12554] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.676844][T12602] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.703841][T12602] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.770088][T12602] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.786857][T12602] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.550064][ T9716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1482.579318][ T9716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1483.083931][ T29] audit: type=1326 audit(1724364584.311:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12871 comm="syz.1.869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9075179e79 code=0x0 [ 1484.059445][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1484.083877][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.704365][T12880] netlink: 148 bytes leftover after parsing attributes in process `syz.1.870'. [ 1484.777626][ T7703] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1484.798556][ T7703] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1484.810474][ T7703] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1484.823180][ T7703] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1484.835629][ T7703] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1484.853552][ T7703] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1485.397731][T12892] netlink: 148 bytes leftover after parsing attributes in process `syz.4.820'. [ 1486.298090][T12682] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1486.400620][T12682] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1486.550163][T12682] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1486.602319][T12682] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1486.985542][T12477] Bluetooth: hci2: command tx timeout [ 1487.328523][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.641963][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.849304][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.355328][ T29] audit: type=1326 audit(1724364589.691:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12901 comm="syz.1.871" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9075179e79 code=0x0 [ 1488.842941][T12885] chnl_net:caif_netlink_parms(): no params data found [ 1489.064529][T12477] Bluetooth: hci2: command tx timeout [ 1489.176128][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.144461][T12477] Bluetooth: hci2: command tx timeout [ 1491.289761][T12885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1491.324718][T12885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1491.340504][T12885] bridge_slave_0: entered allmulticast mode [ 1491.406706][T12936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.874'. [ 1491.416629][T12885] bridge_slave_0: entered promiscuous mode [ 1491.475902][T12885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1491.654527][T12885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.661970][T12885] bridge_slave_1: entered allmulticast mode [ 1491.710431][T12885] bridge_slave_1: entered promiscuous mode [ 1491.812741][T12682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1492.082218][T12885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1492.379499][T12885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1495.669443][ T4609] Bluetooth: hci2: command tx timeout [ 1495.739275][T12940] usb usb9: usbfs: process 12940 (syz.1.877) did not claim interface 0 before use [ 1495.748919][T12940] usb usb9: selecting invalid altsetting 21783 [ 1495.813810][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1495.824799][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1495.903727][T12477] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1496.123333][T12682] 8021q: adding VLAN 0 to HW filter on device team0 [ 1496.232012][T12477] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1497.489008][ T29] audit: type=1326 audit(1724364598.161:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12944 comm="syz.1.878" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9075179e79 code=0x0 [ 1497.603124][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1497.610472][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1497.679309][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.686727][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1497.762646][T12885] team0: Port device team_slave_0 added [ 1497.805578][T12885] team0: Port device team_slave_1 added [ 1497.838961][ T62] bridge_slave_1: left allmulticast mode [ 1497.854331][ T62] bridge_slave_1: left promiscuous mode [ 1497.860303][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.944550][T12938] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1497.965387][ T62] bridge_slave_0: left allmulticast mode [ 1497.971075][ T62] bridge_slave_0: left promiscuous mode [ 1498.023535][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.878866][T12961] usb usb9: usbfs: process 12961 (syz.4.880) did not claim interface 0 before use [ 1501.889341][T12961] usb usb9: selecting invalid altsetting 21783 [ 1503.382135][T12977] netlink: 28 bytes leftover after parsing attributes in process `syz.4.881'. [ 1503.766346][ T7703] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1503.778472][ T7703] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1503.814612][ T7703] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1503.834156][ T7703] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1503.850634][ T7703] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1503.859653][ T7703] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1503.973020][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1504.035752][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1504.058421][ T62] bond0 (unregistering): Released all slaves [ 1504.475743][T12885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1504.519068][T12885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1504.614564][T12885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1504.687268][ T62] hsr_slave_0: left promiscuous mode [ 1504.766421][ T62] hsr_slave_1: left promiscuous mode [ 1504.813991][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1504.838565][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1504.845721][T12986] netlink: 148 bytes leftover after parsing attributes in process `syz.1.883'. [ 1504.864976][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1504.884789][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1505.001068][ T62] veth1_macvtap: left promiscuous mode [ 1505.023573][ T62] veth0_macvtap: left promiscuous mode [ 1505.037444][ T62] veth1_vlan: left promiscuous mode [ 1505.049835][ T62] veth0_vlan: left promiscuous mode [ 1505.944665][ T7703] Bluetooth: hci3: command tx timeout [ 1508.753283][ T29] audit: type=1326 audit(1724364609.501:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13006 comm="syz.1.886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9075179e79 code=0x0 [ 1508.778811][ T7703] Bluetooth: hci3: command tx timeout [ 1508.928318][T13009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.885'. [ 1510.424349][ T29] audit: type=1326 audit(1724364611.101:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13013 comm="syz.1.887" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9075179e79 code=0x0 [ 1510.826489][ T7703] Bluetooth: hci3: command tx timeout [ 1511.240262][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 1511.789183][T12477] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1511.800162][T12477] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1511.858245][T12477] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1511.966018][T12477] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1511.981277][T12477] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1511.992215][T12477] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1512.247031][T13029] netlink: 148 bytes leftover after parsing attributes in process `syz.4.889'. [ 1512.252261][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1512.541593][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1512.919595][ T7703] Bluetooth: hci3: command tx timeout [ 1513.852811][T12885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1513.874800][T12885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1513.919941][T12885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1514.034944][ T7703] Bluetooth: hci5: command tx timeout [ 1514.381721][T12885] hsr_slave_0: entered promiscuous mode [ 1514.415273][T12885] hsr_slave_1: entered promiscuous mode [ 1514.448776][T12885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1514.468978][T12885] Cannot create hsr debugfs directory [ 1514.755380][T13046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.890'. [ 1516.104478][ T7703] Bluetooth: hci5: command tx timeout [ 1516.288101][T13058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.892'. [ 1517.216385][T12979] chnl_net:caif_netlink_parms(): no params data found [ 1518.189251][ T7703] Bluetooth: hci5: command tx timeout [ 1520.005542][ T29] audit: type=1326 audit(1724364620.711:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13082 comm="syz.1.895" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9075179e79 code=0x0 [ 1520.265482][ T7703] Bluetooth: hci5: command tx timeout [ 1520.554583][ T29] audit: type=1326 audit(1724364621.891:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13091 comm="syz.1.896" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9075179e79 code=0x0 [ 1520.637703][T13026] chnl_net:caif_netlink_parms(): no params data found [ 1521.386534][T12979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.410275][T12979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.435049][T12979] bridge_slave_0: entered allmulticast mode [ 1521.455048][T12979] bridge_slave_0: entered promiscuous mode [ 1521.480682][T12979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.514630][T12979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.522146][T12979] bridge_slave_1: entered allmulticast mode [ 1521.567046][T12979] bridge_slave_1: entered promiscuous mode [ 1521.970531][T12979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1522.020510][T12979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1522.026960][T13125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.897'. [ 1522.164726][T13026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.171987][T13026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.182310][T13026] bridge_slave_0: entered allmulticast mode [ 1522.250814][T13026] bridge_slave_0: entered promiscuous mode [ 1522.290966][T13026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.329987][T13026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.342740][T13026] bridge_slave_1: entered allmulticast mode [ 1522.377111][T13026] bridge_slave_1: entered promiscuous mode [ 1522.757919][T12979] team0: Port device team_slave_0 added [ 1522.796950][T12979] team0: Port device team_slave_1 added [ 1523.078884][T13026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1523.352486][T12885] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1523.405539][T12885] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1523.452532][T13026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1523.464823][T12477] Bluetooth: hci9: command 0x0406 tx timeout [ 1523.582844][ T62] bridge_slave_1: left allmulticast mode [ 1523.597806][ T62] bridge_slave_1: left promiscuous mode [ 1523.603859][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.657021][ T62] bridge_slave_0: left allmulticast mode [ 1523.662764][ T62] bridge_slave_0: left promiscuous mode [ 1523.694937][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.067863][T13145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.898'. [ 1525.329728][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1525.355438][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1525.380504][ T62] bond0 (unregistering): Released all slaves [ 1525.444845][T12979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1525.462142][T12979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.509201][T12979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1525.525573][T12979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1525.532592][T12979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.560319][T12979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1525.652674][T12885] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1526.444144][ T29] audit: type=1326 audit(1724364627.111:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13159 comm="syz.1.899" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9075179e79 code=0x0 [ 1526.538043][T12885] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1526.674388][ T62] hsr_slave_0: left promiscuous mode [ 1526.687483][ T62] hsr_slave_1: left promiscuous mode [ 1526.696624][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1526.718515][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1527.163866][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1527.232386][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1528.129997][T12477] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1528.142624][T12477] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1528.165756][T12477] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1528.185118][T12477] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1528.198135][T12477] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1528.207170][T13026] team0: Port device team_slave_0 added [ 1528.207402][T12477] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1528.246362][T13026] team0: Port device team_slave_1 added [ 1528.399115][T13026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1528.414343][T13026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1528.453843][T13026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1528.634584][T13026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1528.651952][T13026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1528.734952][T13026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.575732][T12979] hsr_slave_0: entered promiscuous mode [ 1529.642563][T12979] hsr_slave_1: entered promiscuous mode [ 1529.921791][T13026] hsr_slave_0: entered promiscuous mode [ 1529.943407][T13026] hsr_slave_1: entered promiscuous mode [ 1529.956076][T13026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1529.963713][T13026] Cannot create hsr debugfs directory [ 1530.264758][T12477] Bluetooth: hci4: command tx timeout [ 1531.166691][T12979] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.523395][T13206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.904'. [ 1531.769966][T12979] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.009462][T12979] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.107994][T12885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1532.286641][T12979] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.345010][T12477] Bluetooth: hci4: command tx timeout [ 1532.381714][T13172] chnl_net:caif_netlink_parms(): no params data found [ 1532.491295][T12885] 8021q: adding VLAN 0 to HW filter on device team0 [ 1532.850734][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.858059][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1532.874895][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 1532.882162][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1533.188128][T13172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.196412][T13172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.204041][T13172] bridge_slave_0: entered allmulticast mode [ 1533.219143][T13172] bridge_slave_0: entered promiscuous mode [ 1533.373672][T13172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.401897][T13172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.422707][T13172] bridge_slave_1: entered allmulticast mode [ 1533.444110][T13172] bridge_slave_1: entered promiscuous mode [ 1533.692192][T13172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1533.808376][T13172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1534.092489][T13232] netlink: 148 bytes leftover after parsing attributes in process `syz.1.906'. [ 1534.204550][T12979] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1534.262406][T13172] team0: Port device team_slave_0 added [ 1534.294637][T13172] team0: Port device team_slave_1 added [ 1534.339456][T12979] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1534.425671][T12477] Bluetooth: hci4: command tx timeout [ 1534.657286][T12979] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1534.713065][T12979] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1535.054877][T13172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.068192][T13172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1535.103309][T13172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1535.134551][T13172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1535.158912][T13172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1535.186035][ C0] vkms_vblank_simulate: vblank timer overrun [ 1535.199809][T13172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1535.610696][T13172] hsr_slave_0: entered promiscuous mode [ 1535.644054][T13172] hsr_slave_1: entered promiscuous mode [ 1535.680207][T13172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1535.688159][T13172] Cannot create hsr debugfs directory [ 1535.903780][T12885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1536.516975][T12477] Bluetooth: hci4: command tx timeout [ 1537.556288][T13026] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1537.761259][T13026] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1537.803086][T13026] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1537.942600][T13026] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1538.061910][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 1538.353649][T13172] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.525589][T12885] veth0_vlan: entered promiscuous mode [ 1538.670451][T13172] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.830201][ T7703] Bluetooth: hci12: command 0x0406 tx timeout [ 1538.971718][T13172] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.043239][T12979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1539.081537][T12885] veth1_vlan: entered promiscuous mode [ 1539.223434][T13172] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.372864][T12979] 8021q: adding VLAN 0 to HW filter on device team0 [ 1539.519911][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.527273][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1539.710676][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.718027][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1539.937252][T12885] veth0_macvtap: entered promiscuous mode [ 1540.122472][T13172] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1540.200075][T13026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1540.210186][T13172] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1542.300592][T13276] usb usb9: usbfs: process 13276 (syz.1.909) did not claim interface 0 before use [ 1542.310740][T13276] usb usb9: selecting invalid altsetting 21783 [ 1542.765406][T12885] veth1_macvtap: entered promiscuous mode [ 1542.831527][T13172] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1542.992387][T13172] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1543.190264][T13026] 8021q: adding VLAN 0 to HW filter on device team0 [ 1543.262783][ T6157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.270175][ T6157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1543.383367][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.390795][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1544.014653][T13285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.910'. [ 1544.465212][ T7703] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1544.476645][ T7703] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1544.496230][ T7703] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1544.513159][ T7703] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1544.533609][ T7703] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1544.552859][ T7703] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1545.031563][T12979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1545.204129][T13172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1546.048614][T13172] 8021q: adding VLAN 0 to HW filter on device team0 [ 1546.214597][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.222025][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1546.291018][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.298344][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1546.392599][T13026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1546.503080][ T12] bridge_slave_1: left allmulticast mode [ 1546.527874][ T12] bridge_slave_1: left promiscuous mode [ 1546.533890][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.560984][ T12] bridge_slave_0: left allmulticast mode [ 1546.566789][ T12] bridge_slave_0: left promiscuous mode [ 1546.572641][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.664503][T12477] Bluetooth: hci2: command tx timeout [ 1546.993588][ T30] INFO: task syz.1.838:12420 blocked for more than 143 seconds. [ 1547.003919][ T30] Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1547.048772][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1547.069864][ T30] task:syz.1.838 state:D stack:23680 pid:12420 tgid:12414 ppid:12119 flags:0x00004002 [ 1547.094382][ T30] Call Trace: [ 1547.097748][ T30] [ 1547.114305][ T30] __schedule+0xe37/0x5490 [ 1547.149578][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1547.179677][ T30] ? hlock_class+0x4e/0x130 [ 1547.184629][ T30] ? mark_lock+0xb5/0xc60 [ 1547.189038][ T30] ? __pfx___schedule+0x10/0x10 [ 1547.193968][ T30] ? schedule+0x298/0x350 [ 1547.228145][ T30] ? __pfx_lock_release+0x10/0x10 [ 1547.233297][ T30] schedule+0xe7/0x350 [ 1547.244999][ T30] rpc_wait_bit_killable+0x17/0x170 [ 1547.250390][ T30] __wait_on_bit+0x62/0x180 [ 1547.263523][ T30] ? __pfx_rpc_wait_bit_killable+0x10/0x10 [ 1547.270100][ T30] ? __pfx_call_connect_status+0x10/0x10 [ 1547.278109][ T30] out_of_line_wait_on_bit+0xda/0x110 [ 1547.283816][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1547.291045][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 1547.297636][ T30] ? rcu_is_watching+0x12/0xc0 [ 1547.302590][ T30] __rpc_execute+0x556/0x1230 [ 1547.312055][ T30] ? __pfx___rpc_execute+0x10/0x10 [ 1547.317708][ T30] ? __pfx_lock_release+0x10/0x10 [ 1547.322804][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 1547.327981][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1547.333418][ T30] rpc_execute+0x2f8/0x430 [ 1547.337997][ T30] rpc_run_task+0x530/0x750 [ 1547.342658][ T30] rpc_call_sync+0xca/0x1b0 [ 1547.347341][ T30] ? __pfx_rpc_call_sync+0x10/0x10 [ 1547.352599][ T30] ? net_generic+0xea/0x2a0 [ 1547.357280][ T30] rpcb_register+0x22a/0x4f0 [ 1547.361918][ T30] ? __pfx_rpcb_register+0x10/0x10 [ 1547.367170][ T30] ? __mutex_unlock_slowpath+0x164/0x650 [ 1547.372876][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1547.379024][ T30] svc_unregister+0x4fe/0x740 [ 1547.383817][ T30] svc_bind+0x1bb/0x210 [ 1547.388696][ T30] nfsd_create_serv+0x268/0x430 [ 1547.393672][ T30] ? __pfx_nfsd_create_serv+0x10/0x10 [ 1547.402105][ T30] ? __asan_memset+0x23/0x50 [ 1547.414591][ T30] nfsd_nl_listener_set_doit+0xeb/0x1b20 [ 1547.420323][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 1547.426354][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1547.432562][ T30] ? __nla_parse+0x40/0x60 [ 1547.437200][ T30] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1547.444804][ T30] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1547.452335][ T30] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1547.458233][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1547.465711][ T30] ? security_capable+0x98/0xd0 [ 1547.470728][ T30] genl_rcv_msg+0x565/0x800 [ 1547.475456][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1547.480562][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1547.485928][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1547.492139][ T30] netlink_rcv_skb+0x16b/0x440 [ 1547.497102][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1547.502206][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1547.517750][ T30] ? down_read+0xc9/0x330 [ 1547.522203][ T30] ? __pfx_down_read+0x10/0x10 [ 1547.527171][ T30] ? netlink_deliver_tap+0x1ae/0xd90 [ 1547.532515][ T30] genl_rcv+0x28/0x40 [ 1547.538291][ T30] netlink_unicast+0x53c/0x7f0 [ 1547.543143][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1547.549844][ T30] netlink_sendmsg+0x8b8/0xd70 [ 1547.554800][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1547.560160][ T30] ? __import_iovec+0x1fd/0x6e0 [ 1547.565204][ T30] ____sys_sendmsg+0xab5/0xc90 [ 1547.570208][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 1547.575874][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1547.581243][ T30] ? __pfx___futex_wait+0x10/0x10 [ 1547.586432][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1547.591689][ T30] ? try_to_wake_up+0x14b/0x13e0 [ 1547.596859][ T30] ___sys_sendmsg+0x135/0x1e0 [ 1547.601608][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1547.606954][ T30] ? __fget_light+0x173/0x210 [ 1547.618202][ T30] __sys_sendmsg+0x117/0x1f0 [ 1547.622889][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 1547.632095][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 1547.638207][ T30] do_syscall_64+0xcd/0x250 [ 1547.642905][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.649046][ T30] RIP: 0033:0x7fb81c579e79 [ 1547.653516][ T30] RSP: 002b:00007fb81bfde038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1547.662103][ T30] RAX: ffffffffffffffda RBX: 00007fb81c716130 RCX: 00007fb81c579e79 [ 1547.670220][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 1547.678315][ T30] RBP: 00007fb81c5e7916 R08: 0000000000000000 R09: 0000000000000000 [ 1547.686393][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1547.694489][ T30] R13: 0000000000000000 R14: 00007fb81c716130 R15: 00007fffc15ed818 [ 1547.702524][ T30] [ 1547.705776][ T30] INFO: task syz.3.846:12451 blocked for more than 144 seconds. [ 1547.720248][ T30] Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 1547.728734][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1547.737613][ T30] task:syz.3.846 state:D stack:27728 pid:12451 tgid:12447 ppid:12024 flags:0x00000004 [ 1547.748027][ T30] Call Trace: [ 1547.751343][ T30] [ 1547.754390][ T30] __schedule+0xe37/0x5490 [ 1547.758877][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1547.764162][ T30] ? __kernel_text_address+0xd/0x40 [ 1547.769582][ T30] ? arch_stack_walk+0x118/0x170 [ 1547.774687][ T30] ? __pfx___schedule+0x10/0x10 [ 1547.779606][ T30] ? schedule+0x298/0x350 [ 1547.784000][ T30] ? __pfx_lock_release+0x10/0x10 [ 1547.789203][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 1547.793941][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1547.799587][ T30] schedule+0xe7/0x350 [ 1547.803714][ T30] schedule_preempt_disabled+0x13/0x30 [ 1547.809303][ T30] __mutex_lock+0x5b8/0x9c0 [ 1547.813881][ T30] ? ____sys_sendmsg+0xab5/0xc90 [ 1547.822862][ T30] ? ___sys_sendmsg+0x135/0x1e0 [ 1547.829620][ T30] ? nfsd_nl_listener_set_doit+0xe3/0x1b20 [ 1547.835705][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1547.840810][ T30] ? __asan_memset+0x23/0x50 [ 1547.845573][ T30] ? nfsd_nl_listener_set_doit+0xe3/0x1b20 [ 1547.851428][ T30] nfsd_nl_listener_set_doit+0xe3/0x1b20 [ 1547.857198][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 1547.862982][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1547.869419][ T30] ? __nla_parse+0x40/0x60 [ 1547.873905][ T30] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1547.881716][ T30] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1547.889300][ T30] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1547.895324][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1547.901495][ T30] ? security_capable+0x98/0xd0 [ 1547.906525][ T30] genl_rcv_msg+0x565/0x800 [ 1547.911103][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1547.916275][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1547.927963][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1547.934905][ T30] netlink_rcv_skb+0x16b/0x440 [ 1547.939906][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1547.945867][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1547.951233][ T30] ? down_read+0xc9/0x330 [ 1547.956406][ T30] ? __pfx_down_read+0x10/0x10 [ 1547.961255][ T30] ? netlink_deliver_tap+0x1ae/0xd90 [ 1547.967352][ T30] genl_rcv+0x28/0x40 [ 1547.971410][ T30] netlink_unicast+0x53c/0x7f0 [ 1547.977163][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1547.982520][ T30] netlink_sendmsg+0x8b8/0xd70 [ 1547.993176][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1547.999000][ T30] ? __import_iovec+0x1fd/0x6e0 [ 1548.003906][ T30] ____sys_sendmsg+0xab5/0xc90 [ 1548.009436][ T30] ? copy_msghdr_from_user+0x10b/0x160 [ 1548.015696][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1548.026458][ T30] ? __pfx___futex_wait+0x10/0x10 [ 1548.031579][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1548.037615][ T30] ? try_to_wake_up+0x14b/0x13e0 [ 1548.042628][ T30] ___sys_sendmsg+0x135/0x1e0 [ 1548.048056][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1548.053336][ T30] ? __fget_light+0x173/0x210 [ 1548.058842][ T30] __sys_sendmsg+0x117/0x1f0 [ 1548.063505][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 1548.068722][ T30] ? __x64_sys_futex+0x1e1/0x4c0 [ 1548.073726][ T30] do_syscall_64+0xcd/0x250 [ 1548.078430][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.084456][ T30] RIP: 0033:0x7f7e21d79e79 [ 1548.088926][ T30] RSP: 002b:00007f7e22b60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1548.103918][ T30] RAX: ffffffffffffffda RBX: 00007f7e21f16208 RCX: 00007f7e21d79e79 [ 1548.112548][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1548.120971][ T30] RBP: 00007f7e21de7916 R08: 0000000000000000 R09: 0000000000000000 [ 1548.133306][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1548.141504][ T30] R13: 0000000000000000 R14: 00007f7e21f16208 R15: 00007ffe00d08708 [ 1548.149651][ T30] [ 1548.152846][ T30] [ 1548.152846][ T30] Showing all locks held in the system: [ 1548.165056][ T30] 2 locks held by init/1: [ 1548.169466][ T30] #0: ffff8880b933edd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 1548.179830][ T30] #1: ffffe8ffffd7e4c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x55e/0x900 [ 1548.194457][ T30] 5 locks held by kworker/u8:1/12: [ 1548.199643][ T30] #0: ffff8880166e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1548.211720][ T30] #1: ffffc90000117d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1548.223475][ T30] #2: ffffffff8fa0db50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbb0 [ 1548.236487][ T30] #3: ffffffff8fa232e8 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x503/0xbb0 [ 1548.246030][ T30] #4: ffffffff8ddc1378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 1548.260679][ T30] 1 lock held by khungtaskd/30: [ 1548.269007][ T30] #0: ffffffff8ddb5be0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 1548.284649][ T30] 3 locks held by kworker/u8:2/35: [ 1548.289838][ T30] #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1548.324521][ T30] #1: ffffc90000ab7d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1548.354364][ T30] #2: ffffffff8fa232e8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 1548.363759][ T30] 3 locks held by kworker/u8:3/52: [ 1548.384501][ T30] #0: ffff88802a9d7948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1548.414337][ T30] #1: ffffc90000bd7d80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1548.444481][ T30] #2: ffffffff8fa232e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcf/0x14d0 [ 1548.464370][ T30] 2 locks held by dhcpcd/4885: [ 1548.469636][ T30] #0: ffff888054988678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: netlink_dump+0x9fe/0xcc0 [ 1548.494490][ T30] #1: ffffffff8fa232e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x18f/0x1f0 [ 1548.503612][ T30] 2 locks held by getty/4973: [ 1548.524374][ T30] #0: ffff88802b55d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1548.554509][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 1548.570387][ T30] 3 locks held by kworker/1:4/5269: [ 1548.576156][ T30] #0: ffff888015881948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1548.592745][ T30] #1: ffffc9000387fd80 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1548.605315][ T30] #2: ffffffff8fa232e8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x84/0x1140 [ 1548.615602][ T30] 3 locks held by kworker/u8:11/5783: [ 1548.621023][ T30] 3 locks held by kworker/0:7/6999: [ 1548.626352][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1548.641037][ T30] #1: ffffc9000320fd80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1548.651875][ T30] #2: ffffffff8fa232e8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1548.662515][ T30] 4 locks held by syz.4.813/12276: [ 1548.668346][ T30] #0: ffff8880431b4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 1548.678192][ T30] #1: ffff8880431b4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x346/0x1110 [ 1548.688090][ T30] #2: ffffffff8fc87a68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xc4/0x260 [ 1548.698611][ T30] #3: ffffffff8ddc1378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x1a4/0x3b0 [ 1548.713647][ T30] 2 locks held by syz.1.838/12420: [ 1548.719055][ T30] #0: ffffffff8fac0930 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 1548.727473][ T30] #1: ffffffff8e1b51c8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0xe3/0x1b20 [ 1548.741840][ T30] 2 locks held by syz.3.846/12451: [ 1548.747116][ T7703] Bluetooth: hci2: command tx timeout [ 1548.752656][ T30] #0: ffffffff8fac0930 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 1548.761046][ T30] #1: ffffffff8e1b51c8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0xe3/0x1b20 [ 1548.771314][ T30] 2 locks held by syz.2.850/12479: [ 1548.776532][ T30] #0: ffffffff8fac0930 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 1548.784923][ T30] #1: ffffffff8e1b51c8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0xe3/0x1b20 [ 1548.795190][ T30] 3 locks held by kworker/u9:4/12477: [ 1548.800601][ T30] #0: ffff88806ad03948 ((wq_completion)hci1){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1548.811077][ T30] #1: ffffc900032afd80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1548.828224][ T30] #2: ffff888066514d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x170/0x410 [ 1548.843828][ T30] 2 locks held by kworker/1:2/12660: [ 1548.849327][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1548.860003][ T30] #1: ffffc90003dcfd80 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1548.869847][ T30] 2 locks held by syz.3.868/12868: [ 1548.875082][ T30] #0: ffffffff8fac0930 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 1548.883378][ T30] #1: ffffffff8e1b51c8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0xe3/0x1b20 [ 1548.893638][ T30] 1 lock held by syz-executor/12979: [ 1548.899049][ T30] #0: ffffffff8fa232e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 1548.911169][ T30] 1 lock held by syz-executor/13026: [ 1548.916708][ T30] #0: ffffffff8fa232e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 1548.926785][ T30] 2 locks held by syz.4.894/13081: [ 1548.931952][ T30] #0: ffffffff8fac0930 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 1548.949834][ T30] #1: ffffffff8e1b51c8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0xe3/0x1b20 [ 1548.960190][ T30] 1 lock held by syz-executor/13172: [ 1548.965591][ T30] #0: ffffffff8fa232e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 1548.975202][ T30] 1 lock held by syz-executor/13288: [ 1548.980524][ T30] #0: ffffffff8fa232e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 1548.991693][ T30] 2 locks held by syz.1.911/13297: [ 1548.997275][ T30] #0: ffffffff8fac0930 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 1549.005708][ T30] #1: ffffffff8e1b51c8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0xe3/0x1b20 [ 1549.016031][ T30] [ 1549.018512][ T30] ============================================= [ 1549.018512][ T30] [ 1549.027121][ T30] NMI backtrace for cpu 1 [ 1549.031509][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 1549.042066][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1549.052427][ T30] Call Trace: [ 1549.055728][ T30] [ 1549.058705][ T30] dump_stack_lvl+0x116/0x1f0 [ 1549.063569][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1549.068600][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1549.074639][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1549.080664][ T30] watchdog+0xf0c/0x1240 [ 1549.084964][ T30] ? __pfx_watchdog+0x10/0x10 [ 1549.089683][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1549.095007][ T30] ? __kthread_parkme+0x148/0x220 [ 1549.100100][ T30] ? __pfx_watchdog+0x10/0x10 [ 1549.104814][ T30] kthread+0x2c1/0x3a0 [ 1549.108911][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1549.114144][ T30] ? __pfx_kthread+0x10/0x10 [ 1549.118759][ T30] ret_from_fork+0x45/0x80 [ 1549.123215][ T30] ? __pfx_kthread+0x10/0x10 [ 1549.127832][ T30] ret_from_fork_asm+0x1a/0x30 [ 1549.132674][ T30] [ 1549.138430][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1549.143811][ C0] NMI backtrace for cpu 0 [ 1549.143828][ C0] CPU: 0 UID: 0 PID: 5783 Comm: kworker/u8:11 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 1549.143861][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1549.143879][ C0] Workqueue: bat_events batadv_nc_worker [ 1549.144000][ C0] RIP: 0010:check_preemption_disabled+0x2/0xe0 [ 1549.144045][ C0] Code: 0f 65 8b 05 6c 66 f1 74 85 c0 74 04 90 0f 0b 90 e9 53 fc ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 <55> 53 48 83 ec 08 65 8b 1d ed b8 f2 74 65 8b 05 e2 b8 f2 74 a9 ff [ 1549.144071][ C0] RSP: 0018:ffffc9000353fad0 EFLAGS: 00000092 [ 1549.144090][ C0] RAX: 0000000000000001 RBX: ffff888021601e00 RCX: 1ffffffff28d0376 [ 1549.144109][ C0] RDX: 0000000000000001 RSI: ffffffff8b4cc7c0 RDI: ffffffff8bb09880 [ 1549.144127][ C0] RBP: 2dbb93b119c6e004 R08: 0000000000000000 R09: fffffbfff28c54fb [ 1549.144146][ C0] R10: ffffffff9462a7df R11: 0000000000000000 R12: ffffffff8ad59020 [ 1549.144164][ C0] R13: ffff888025045380 R14: 0000000000000000 R15: ffff88801f7ef900 [ 1549.144182][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 1549.144214][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1549.144236][ C0] CR2: 00005599242e8078 CR3: 000000000db7c000 CR4: 00000000003506f0 [ 1549.144256][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1549.144276][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1549.144297][ C0] Call Trace: [ 1549.144308][ C0] [ 1549.144320][ C0] ? show_regs+0x8c/0xa0 [ 1549.144382][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1549.144428][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1549.144471][ C0] ? nmi_handle+0x1a9/0x5c0 [ 1549.144499][ C0] ? check_preemption_disabled+0x2/0xe0 [ 1549.144547][ C0] ? default_do_nmi+0x6a/0x160 [ 1549.144579][ C0] ? exc_nmi+0x170/0x1e0 [ 1549.144608][ C0] ? end_repeat_nmi+0xf/0x53 [ 1549.144669][ C0] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 1549.144723][ C0] ? check_preemption_disabled+0x2/0xe0 [ 1549.144772][ C0] ? check_preemption_disabled+0x2/0xe0 [ 1549.144821][ C0] ? check_preemption_disabled+0x2/0xe0 [ 1549.144868][ C0] [ 1549.144879][ C0] [ 1549.144889][ C0] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 1549.144947][ C0] lockdep_hardirqs_on_prepare+0x17d/0x420 [ 1549.144990][ C0] ? batadv_nc_purge_paths+0x1c6/0x390 [ 1549.145036][ C0] trace_hardirqs_on+0x36/0x40 [ 1549.145077][ C0] __local_bh_enable_ip+0xa4/0x120 [ 1549.145127][ C0] batadv_nc_purge_paths+0x1c6/0x390 [ 1549.145175][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1549.145216][ C0] batadv_nc_worker+0x913/0x1060 [ 1549.145267][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1549.145314][ C0] ? __pfx_lock_release+0x10/0x10 [ 1549.145358][ C0] process_one_work+0x9c5/0x1b40 [ 1549.145404][ C0] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 1549.145446][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1549.145492][ C0] ? assign_work+0x1a0/0x250 [ 1549.145530][ C0] worker_thread+0x6c8/0xf20 [ 1549.145575][ C0] ? __kthread_parkme+0x148/0x220 [ 1549.145626][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1549.145668][ C0] kthread+0x2c1/0x3a0 [ 1549.145696][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1549.145737][ C0] ? __pfx_kthread+0x10/0x10 [ 1549.145766][ C0] ret_from_fork+0x45/0x80 [ 1549.145813][ C0] ? __pfx_kthread+0x10/0x10 [ 1549.145842][ C0] ret_from_fork_asm+0x1a/0x30 [ 1549.145895][ C0] [ 1549.149470][ T7703] Bluetooth: hci1: command 0x0406 tx timeout [ 1549.233615][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1549.233643][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 1549.233690][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1549.233713][ T30] Call Trace: [ 1549.233727][ T30] [ 1549.233742][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1549.233787][ T30] panic+0x6dc/0x7c0 [ 1549.233830][ T30] ? __pfx_panic+0x10/0x10 [ 1549.233870][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1549.233914][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1549.233966][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1549.234002][ T30] ? watchdog+0xd76/0x1240 [ 1549.234049][ T30] ? watchdog+0xd69/0x1240 [ 1549.234095][ T30] watchdog+0xd87/0x1240 [ 1549.234144][ T30] ? __pfx_watchdog+0x10/0x10 [ 1549.234195][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1549.234242][ T30] ? __kthread_parkme+0x148/0x220 [ 1549.234297][ T30] ? __pfx_watchdog+0x10/0x10 [ 1549.234343][ T30] kthread+0x2c1/0x3a0 [ 1549.234374][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1549.234430][ T30] ? __pfx_kthread+0x10/0x10 [ 1549.234460][ T30] ret_from_fork+0x45/0x80 [ 1549.234510][ T30] ? __pfx_kthread+0x10/0x10 [ 1549.234542][ T30] ret_from_fork_asm+0x1a/0x30 [ 1549.234595][ T30] [ 1549.237807][ T30] Kernel Offset: disabled