last executing test programs: 9m1.575319964s ago: executing program 2 (id=1933): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20b0232}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000480)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r3}) 9m0.303985052s ago: executing program 2 (id=1937): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)}, 0x1, 0x0, 0x0, 0x24008011}, 0x80) recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x10001}], 0x1, 0x22, 0x0) 8m58.242736406s ago: executing program 2 (id=1943): r0 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 8m58.08641172s ago: executing program 2 (id=1945): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 8m57.213551937s ago: executing program 2 (id=1948): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 8m56.206265218s ago: executing program 2 (id=1951): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) 8m40.86114945s ago: executing program 32 (id=1951): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) 8m30.982434951s ago: executing program 0 (id=2031): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x400) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0xb, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x33524742}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) inotify_rm_watch(0xffffffffffffffff, r3) 8m28.069133318s ago: executing program 0 (id=2037): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r2}, './file1\x00'}) 8m27.796550137s ago: executing program 0 (id=2038): r0 = fanotify_init(0x8, 0x0) fanotify_mark(r0, 0x1, 0x8000021, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, 0x0, 0x0) accept(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$packet(0x11, 0x2, 0x300) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) 8m27.011520953s ago: executing program 0 (id=2043): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x6, 0x1, 'j'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)={0x0, 0xb, 0x2, '6c'}, 0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000001600)={0x0, 0x6}, 0x8) 8m26.636926702s ago: executing program 0 (id=2044): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 8m25.846906077s ago: executing program 0 (id=2046): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 8m10.514758072s ago: executing program 33 (id=2046): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 7m19.17132501s ago: executing program 3 (id=2162): openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, 0x0, 0x22281, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) 7m17.840162544s ago: executing program 3 (id=2163): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x4000000014bc01, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000300)={0x1, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db0700", {0x2, 0x2}}) 7m17.716883905s ago: executing program 3 (id=2164): syz_emit_ethernet(0xa1, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000005", 0x6b, 0x3a, 0xff, @remote, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1, 0x9, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b"}, {0x0, 0x1, '\x00'/12}]}}}}}}, 0x0) 7m17.702685904s ago: executing program 3 (id=2165): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{0x0}], 0x1}}], 0x1, 0x20000010) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189, 0xbd}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) 7m16.760825831s ago: executing program 3 (id=2168): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 7m16.6198469s ago: executing program 3 (id=2170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9a860675e5aa2a63, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r3, 0x89e0, &(0x7f0000000180)=0x5) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, 0x0) 7m15.832798794s ago: executing program 1 (id=2171): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) 7m14.288156478s ago: executing program 1 (id=2174): syz_emit_ethernet(0xa4, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000005", 0x6e, 0x3a, 0xff, @remote, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af"}, {0x0, 0x1, '\x00'/12}]}}}}}}, 0x0) 7m14.119838958s ago: executing program 1 (id=2176): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{0x0}], 0x1}}], 0x1, 0x20000010) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189, 0xbd}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) 7m13.05673498s ago: executing program 1 (id=2178): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r2}, 0x0, &(0x7f0000000180)='%pK \x00'}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r3, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) eventfd2(0x3, 0x80000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, 0x0) read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000002680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0xffffff51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r7, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) 7m10.743401624s ago: executing program 1 (id=2180): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 7m10.600666006s ago: executing program 1 (id=2182): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1be) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 7m1.25833286s ago: executing program 34 (id=2170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9a860675e5aa2a63, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r3, 0x89e0, &(0x7f0000000180)=0x5) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, 0x0) 6m55.242101846s ago: executing program 35 (id=2182): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1be) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 6m11.666626783s ago: executing program 4 (id=2241): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000071180f0000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m11.583999566s ago: executing program 4 (id=2242): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x45, 0x101, 0x400}}) 6m11.472860412s ago: executing program 4 (id=2243): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0), 0x4000000014bc01, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, 0x0) 6m8.344222011s ago: executing program 4 (id=2244): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 6m7.943974972s ago: executing program 4 (id=2245): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, r2, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x800000a7f}}, 0x30) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="200000002d00010026bd7000fcdbdf25040000ec04000d8008001700", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 6m6.896777696s ago: executing program 4 (id=2246): write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000088a80500"], 0xfdef) 6m6.74939508s ago: executing program 36 (id=2246): write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000088a80500"], 0xfdef) 21.411431837s ago: executing program 7 (id=2925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) r0 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x4) io_setup(0x7, &(0x7f0000007f00)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000007f80)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0}]) 18.442084485s ago: executing program 7 (id=2932): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r3}, './file1\x00'}) timer_create(0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) 16.500798337s ago: executing program 6 (id=2939): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f00000003c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 15.245251681s ago: executing program 9 (id=2942): syz_io_uring_setup(0x2, 0x0, &(0x7f0000000240), 0x0) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000280)={0x0, 0xd095, 0x10, 0x3, 0x13f}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x0, 0x1}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x409c, 0x3, 0x28, 0x0, 0x0) 14.951500816s ago: executing program 9 (id=2944): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r2}, 0x0, &(0x7f0000000180)='%pK \x00'}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r3, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000002680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0xffffff51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r6, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) 14.745320544s ago: executing program 6 (id=2945): semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffe) 14.264974126s ago: executing program 9 (id=2947): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) landlock_restrict_self(r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x121101, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) truncate(&(0x7f0000000240)='./file0\x00', 0x1) 14.096862517s ago: executing program 6 (id=2948): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48041, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) recvmmsg(r3, &(0x7f0000001d40)=[{{&(0x7f0000000300)=@pptp, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/4096, 0x1000}, 0x8}], 0x1, 0x20, 0x0) 13.099287535s ago: executing program 9 (id=2949): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x60, 0x0, &(0x7f0000000940)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1040}, @acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) 12.469575527s ago: executing program 9 (id=2951): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000100)) getsockopt(r0, 0x28, 0x8, 0x0, &(0x7f0000000080)) getpid() socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x80, 0x2, 0x0, 0x127}) io_uring_enter(r2, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x0, {0x5, 0x5}, 0x1}, 0x1) 9.364409149s ago: executing program 8 (id=2955): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], 0x0, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}]}}]}, 0x8c}}, 0x0) 9.324776832s ago: executing program 5 (id=2956): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 8.77060941s ago: executing program 8 (id=2957): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r0, 0x0, 0x0) 7.8949226s ago: executing program 6 (id=2958): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffe) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000500)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) 7.69585801s ago: executing program 7 (id=2959): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r0) r4 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) accept$packet(r4, &(0x7f0000004ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r1, 0x5, &(0x7f00000000c0)=0x5) prlimit64(r6, 0x3, &(0x7f0000000000)={0x6, 0x9}, &(0x7f0000000040)) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000400)={0x0, 0x492, 0x2000}) 6.084005907s ago: executing program 8 (id=2960): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) 5.093164398s ago: executing program 5 (id=2961): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, 0x0, 0x44) 4.759607877s ago: executing program 6 (id=2962): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4.758703286s ago: executing program 7 (id=2963): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x111, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000080600"], 0xfdef) 4.574893306s ago: executing program 5 (id=2964): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) 4.573748197s ago: executing program 8 (id=2965): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x60, 0x0, &(0x7f0000000940)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1040}, @acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) 4.336874713s ago: executing program 5 (id=2966): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffe) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000500)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x88, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40048c1}, 0x0) 3.327737094s ago: executing program 6 (id=2967): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000003c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) fchown(r1, r2, r3) 3.140781119s ago: executing program 5 (id=2968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x5d9, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f00000002c0)="f4000900062b2c25fe80000000000000007a00200dad6e911b51818462b440b77571284f7767739a2c95e194", 0x2c}], 0x1}, 0x4c8c0) 3.110859682s ago: executing program 8 (id=2969): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.748434344s ago: executing program 8 (id=2970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) ioprio_set$uid(0x3, 0x0, 0x0) io_setup(0x7, &(0x7f0000007f00)=0x0) io_submit(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000007f80)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 2.747412962s ago: executing program 5 (id=2971): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xbdfc, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000080), 0x4) 2.622343756s ago: executing program 7 (id=2972): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r4, 0xa) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) capset(&(0x7f0000000300)={0x20071026}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r6, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)={0x40242, 0x0, 0x10}, 0x18) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x48, 0x6, 0xbc0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}}) mount$bind(&(0x7f0000000380)='./cgroup\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8880, 0x0) 1.167626655s ago: executing program 9 (id=2973): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r0) r4 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) accept$packet(r4, &(0x7f0000004ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r1, 0x5, &(0x7f00000000c0)=0x5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000400)={0x0, 0x492, 0x2000}) 0s ago: executing program 7 (id=2974): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000054}, 0x44) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.1.1565'. [ 1073.481495][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1565'. [ 1073.481580][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1565'. [ 1073.494737][T12909] syz.1.1565 (12909): drop_caches: 2 [ 1075.674751][T12928] netlink: 'syz.4.1569': attribute type 10 has an invalid length. [ 1075.674785][T12928] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1075.834312][T12928] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1077.297442][T12951] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1078.217558][T12960] netlink: 'syz.2.1576': attribute type 1 has an invalid length. [ 1078.334720][T12963] __nla_validate_parse: 46 callbacks suppressed [ 1078.334738][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1576'. [ 1078.334753][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 1079.212541][T12960] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1080.142509][T12973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1080.196824][ T6002] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1080.369010][ T6002] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.369029][ T6002] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1080.369058][ T6002] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.369072][ T6002] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1080.453137][ T6002] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1080.453166][ T6002] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.453185][ T6002] usb 3-1: Product: syz [ 1080.453198][ T6002] usb 3-1: Manufacturer: syz [ 1080.453211][ T6002] usb 3-1: SerialNumber: syz [ 1080.513980][ T6002] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1080.514009][ T6002] cdc_ncm 3-1:1.0: bind() failure [ 1081.792130][T12983] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1081.889503][ T31] usb 3-1: USB disconnect, device number 25 [ 1082.817004][T12990] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1083.393081][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'. [ 1083.393142][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'. [ 1083.393192][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'. [ 1083.393244][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'. [ 1083.393294][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'. [ 1083.393345][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'. [ 1083.393399][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'. [ 1083.393446][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'. [ 1083.393494][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'. [ 1083.393541][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'. [ 1083.528390][T12999] syz.2.1582 (12999): drop_caches: 2 [ 1085.895577][T13014] syz.4.1585 (13014): drop_caches: 2 [ 1088.417554][T13042] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1088.672596][T13033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1089.934416][T13054] __nla_validate_parse: 152 callbacks suppressed [ 1089.934444][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'. [ 1089.934639][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'. [ 1089.934737][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'. [ 1089.934808][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'. [ 1089.934885][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'. [ 1089.934972][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'. [ 1089.935063][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'. [ 1089.935150][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'. [ 1089.935232][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'. [ 1089.935318][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'. [ 1090.273226][T13055] syz.1.1592 (13055): drop_caches: 2 [ 1091.156926][ T31] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1091.306839][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 1091.309015][ T31] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.309033][ T31] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1091.309048][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1091.309067][ T31] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1091.309078][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.312459][ T31] usb 1-1: config 0 descriptor?? [ 1091.535965][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 1091.536042][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1091.565600][ T31] usb 1-1: USB disconnect, device number 31 [ 1092.861963][T13064] binder: BINDER_SET_CONTEXT_MGR already set [ 1092.861973][T13064] binder: 13063:13064 ioctl 4018620d 200000000040 returned -16 [ 1092.862301][T13064] binder: 13063:13064 ioctl c0306201 0 returned -14 [ 1096.866318][T13097] capability: warning: `syz.2.1604' uses 32-bit capabilities (legacy support in use) [ 1097.057004][T13099] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1606' sets config #1 [ 1097.963920][T13124] __nla_validate_parse: 97 callbacks suppressed [ 1097.963944][T13124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1616'. [ 1106.857538][T13191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1109.749691][ C0] vkms_vblank_simulate: vblank timer overrun [ 1110.819619][ C0] vkms_vblank_simulate: vblank timer overrun [ 1110.952473][ C0] vkms_vblank_simulate: vblank timer overrun [ 1111.821473][ C0] vkms_vblank_simulate: vblank timer overrun [ 1112.685767][ C0] vkms_vblank_simulate: vblank timer overrun [ 1118.087879][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1118.087956][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.587096][T13278] tipc: Enabled bearer , priority 0 [ 1119.608737][T13278] syzkaller0: entered promiscuous mode [ 1119.608766][T13278] syzkaller0: entered allmulticast mode [ 1121.703711][ T5928] tipc: Node number set to 254673050 [ 1122.287000][T13289] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1673'. [ 1122.287024][T13289] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1673'. [ 1122.287053][T13289] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1673'. [ 1122.287130][T13289] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1673'. [ 1122.807772][T13289] syz.4.1673 (13289) used greatest stack depth: 15032 bytes left [ 1122.850593][T13281] tipc: Resetting bearer [ 1124.071454][T13275] tipc: Resetting bearer [ 1124.327803][T13275] tipc: Disabling bearer [ 1125.368956][T13303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1679'. [ 1128.866201][T13342] kthread_run failed with err -4 [ 1128.866451][T13342] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1691'. [ 1129.204659][ T5906] kernel write not supported for file /snd/seq (pid: 5906 comm: kworker/0:4) [ 1130.548357][T13359] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1697'. [ 1130.810208][T13369] capability: warning: `syz.1.1700' uses deprecated v2 capabilities in a way that may be insecure [ 1131.979462][T13375] ======================================================= [ 1131.979462][T13375] WARNING: The mand mount option has been deprecated and [ 1131.979462][T13375] and is ignored by this kernel. Remove the mand [ 1131.979462][T13375] option from the mount to silence this warning. [ 1131.979462][T13375] ======================================================= [ 1131.983374][T13375] new mount options do not match the existing superblock, will be ignored [ 1132.029896][T13375] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 1132.362873][ T37] audit: type=1326 audit(1757752697.220:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13366 comm="syz.2.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d1f8eba9 code=0x7ffc0000 [ 1132.362925][ T37] audit: type=1326 audit(1757752697.220:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13366 comm="syz.2.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5d1f8eba9 code=0x7ffc0000 [ 1132.362968][ T37] audit: type=1326 audit(1757752697.230:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13366 comm="syz.2.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb5d1f8eba9 code=0x7ffc0000 [ 1132.865437][ T37] audit: type=1326 audit(1757752698.290:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13382 comm="syz.3.1705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e1017eba9 code=0x0 [ 1134.131957][ C1] vkms_vblank_simulate: vblank timer overrun [ 1134.968996][T13402] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1712'. [ 1135.105297][ C1] vkms_vblank_simulate: vblank timer overrun [ 1135.483106][ C1] vkms_vblank_simulate: vblank timer overrun [ 1136.192272][ C1] vkms_vblank_simulate: vblank timer overrun [ 1136.849765][ C1] vkms_vblank_simulate: vblank timer overrun [ 1137.712309][ C1] vkms_vblank_simulate: vblank timer overrun [ 1138.079484][ C1] vkms_vblank_simulate: vblank timer overrun [ 1138.793801][ C1] vkms_vblank_simulate: vblank timer overrun [ 1139.123227][ C1] vkms_vblank_simulate: vblank timer overrun [ 1139.217654][T13441] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1723'. [ 1139.476583][T13450] syz.0.1728 uses old SIOCAX25GETINFO [ 1148.261739][T13546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1762'. [ 1148.261762][T13546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1762'. [ 1148.261780][T13546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1762'. [ 1148.311807][T13546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1762'. [ 1151.399618][T13598] sock: sock_set_timeout: `syz.4.1784' (pid 13598) tries to set negative timeout [ 1154.565211][T13627] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1794'. [ 1163.469413][T13689] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1815'. [ 1163.469460][T13689] bond0: invalid ARP target 0.0.0.0 specified for addition [ 1163.469483][T13689] bond0: option arp_ip_target: invalid value (0) [ 1165.958394][T13716] tmpfs: Bad value for 'nr_blocks' [ 1166.141595][T13718] bridge_slave_0: entered promiscuous mode [ 1166.143883][T13718] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1166.149459][T13718] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1166.217255][T13718] bridge_slave_0: left promiscuous mode [ 1167.041927][T13727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1829'. [ 1167.531720][T13731] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1174.221278][T13783] 9pnet_fd: Insufficient options for proto=fd [ 1178.562695][T13823] 9pnet_fd: Insufficient options for proto=fd [ 1179.744634][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1866'. [ 1179.910249][T13836] bridge1: entered allmulticast mode [ 1183.469928][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.470002][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.665697][T13867] loop2: detected capacity change from 0 to 7 [ 1183.834512][T12582] Dev loop2: unable to read RDB block 7 [ 1183.834572][T12582] loop2: unable to read partition table [ 1183.834833][T12582] loop2: partition table beyond EOD, truncated [ 1183.875177][T13867] Dev loop2: unable to read RDB block 7 [ 1183.875224][T13867] loop2: unable to read partition table [ 1183.875464][T13867] loop2: partition table beyond EOD, truncated [ 1183.875481][T13867] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1185.187027][T13881] bridge1: entered allmulticast mode [ 1185.247964][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1882'. [ 1186.857045][T13904] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1890'. [ 1186.857067][T13904] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1890'. [ 1186.857085][T13904] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1890'. [ 1186.857128][T13904] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1890'. [ 1188.884691][T13921] bridge2: entered allmulticast mode [ 1188.906345][T13921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1899'. [ 1192.790699][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1912'. [ 1193.570119][T13967] bridge2: entered allmulticast mode [ 1198.626869][ T5928] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1199.242353][ T5928] usb 5-1: Using ep0 maxpacket: 32 [ 1199.386283][ T5928] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1199.386371][ T5928] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1199.386445][ T5928] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1199.386491][ T5928] usb 5-1: config 1 has no interface number 0 [ 1199.570711][ T5928] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1199.570952][ T5928] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1199.571667][ T5928] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1199.571853][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.433651][ T5928] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1200.871624][ T5928] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1201.943769][ T5928] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1202.051186][ T5915] usb 5-1: USB disconnect, device number 31 [ 1202.054173][ T5915] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1204.423967][ T5906] kernel write not supported for file /snd/seq (pid: 5906 comm: kworker/0:4) [ 1205.679941][T14078] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1949'. [ 1215.785760][T14162] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1977'. [ 1216.331664][T14174] new mount options do not match the existing superblock, will be ignored [ 1218.777152][T14198] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1989'. [ 1225.156103][T14249] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1225.166541][T14249] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1225.169586][T14249] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1225.171044][T14249] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1225.173445][T14249] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1225.908906][ T37] audit: type=1326 audit(1757752791.310:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14256 comm="syz.4.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562bc1eba9 code=0x7ffc0000 [ 1225.909203][ T37] audit: type=1326 audit(1757752791.320:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14256 comm="syz.4.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562bc1eba9 code=0x7ffc0000 [ 1225.909474][ T37] audit: type=1326 audit(1757752791.320:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14256 comm="syz.4.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f562bc1eba9 code=0x7ffc0000 [ 1227.115501][T14280] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2017'. [ 1227.115524][T14280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2017'. [ 1227.115541][T14280] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2017'. [ 1227.115590][T14280] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2017'. [ 1227.667002][T14249] Bluetooth: hci5: command tx timeout [ 1229.837219][T14249] Bluetooth: hci5: command tx timeout [ 1230.906229][ T37] audit: type=1326 audit(1757752796.300:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14308 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1017eba9 code=0x7ffc0000 [ 1231.056370][ T37] audit: type=1326 audit(1757752796.300:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14308 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1017eba9 code=0x7ffc0000 [ 1231.085305][ T37] audit: type=1326 audit(1757752796.310:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14308 comm="syz.3.2028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4e1017eba9 code=0x7ffc0000 [ 1232.020522][T14249] Bluetooth: hci5: command tx timeout [ 1233.578126][T14337] No control pipe specified [ 1234.100464][T14249] Bluetooth: hci5: command tx timeout [ 1234.693147][T14346] No control pipe specified [ 1236.033180][ T37] audit: type=1326 audit(1757752801.450:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14356 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562bc1eba9 code=0x7ffc0000 [ 1236.033539][ T37] audit: type=1326 audit(1757752801.450:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14356 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562bc1eba9 code=0x7ffc0000 [ 1236.033836][ T37] audit: type=1326 audit(1757752801.450:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14356 comm="syz.4.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f562bc1eba9 code=0x7ffc0000 [ 1237.155031][ T1023] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.767428][T14384] No control pipe specified [ 1240.487807][ T1023] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.003944][ T37] audit: type=1326 audit(1757752807.390:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14400 comm="syz.3.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1017eba9 code=0x7ffc0000 [ 1242.004665][ T37] audit: type=1326 audit(1757752807.390:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14400 comm="syz.3.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1017eba9 code=0x7ffc0000 [ 1242.005206][ T37] audit: type=1326 audit(1757752807.390:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14400 comm="syz.3.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4e1017eba9 code=0x7ffc0000 [ 1242.073349][T14409] new mount options do not match the existing superblock, will be ignored [ 1242.813554][ T1023] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.444984][ T1023] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.591573][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.591648][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.647574][T14429] 9pnet_fd: Insufficient options for proto=fd [ 1245.805133][T14248] chnl_net:caif_netlink_parms(): no params data found [ 1246.525524][T14444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2067'. [ 1247.741834][ T37] audit: type=1326 audit(1757752813.150:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14445 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1017eba9 code=0x7ffc0000 [ 1247.742140][ T37] audit: type=1326 audit(1757752813.160:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14445 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1017eba9 code=0x7ffc0000 [ 1247.742404][ T37] audit: type=1326 audit(1757752813.160:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14445 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4e1017eba9 code=0x7ffc0000 [ 1247.850611][T14449] new mount options do not match the existing superblock, will be ignored [ 1248.744856][T14458] No control pipe specified [ 1248.829937][T14248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.830146][T14248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.830342][T14248] bridge_slave_0: entered allmulticast mode [ 1248.939956][T14248] bridge_slave_0: entered promiscuous mode [ 1248.994395][T14463] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2071'. [ 1248.994416][T14463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2071'. [ 1248.994433][T14463] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2071'. [ 1248.994472][T14463] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2071'. [ 1249.589925][T14248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.590081][T14248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.590332][T14248] bridge_slave_1: entered allmulticast mode [ 1249.799776][T14248] bridge_slave_1: entered promiscuous mode [ 1252.250947][T14486] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2081'. [ 1253.048089][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1253.052738][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1253.053951][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1253.055356][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1253.056106][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1255.106971][T14249] Bluetooth: hci0: command tx timeout [ 1255.333017][ T1023] bond0 (unregistering): Released all slaves [ 1255.902885][ T1023] bond1 (unregistering): Released all slaves [ 1256.454513][ T1023] bond2 (unregistering): Released all slaves [ 1256.520572][T14248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1257.130106][T14505] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2085'. [ 1257.130154][T14505] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2085'. [ 1257.130220][T14505] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2085'. [ 1257.130513][T14505] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2085'. [ 1257.188913][T14249] Bluetooth: hci0: command tx timeout [ 1258.319838][ T1023] IPVS: stopping backup sync thread 11611 ... [ 1259.490447][T14249] Bluetooth: hci0: command tx timeout [ 1259.519460][T14248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.540721][T14524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2093'. [ 1260.884635][T14248] team0: Port device team_slave_0 added [ 1260.910098][T14248] team0: Port device team_slave_1 added [ 1261.516861][T14249] Bluetooth: hci0: command tx timeout [ 1262.701799][T14563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2102'. [ 1263.067003][T14248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.067019][T14248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1263.067045][T14248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1263.147725][T14248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1263.147741][T14248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1263.147766][T14248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1264.326758][ T1023] hsr_slave_0: left promiscuous mode [ 1264.407012][ T1023] hsr_slave_1: left promiscuous mode [ 1264.543523][ T1023] veth1_macvtap: left promiscuous mode [ 1264.543811][ T1023] veth0_macvtap: left promiscuous mode [ 1264.544203][ T1023] ÿÿÿÿÿÿ: left promiscuous mode [ 1264.544561][ T1023] veth0_vlan: left promiscuous mode [ 1264.904407][T14588] new mount options do not match the existing superblock, will be ignored [ 1264.927225][ T37] audit: type=1326 audit(1757752830.310:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14582 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1017eba9 code=0x7ffc0000 [ 1264.927662][ T37] audit: type=1326 audit(1757752830.310:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14582 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1017eba9 code=0x7ffc0000 [ 1264.927962][ T37] audit: type=1326 audit(1757752830.310:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14582 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f4e1017eba9 code=0x7ffc0000 [ 1264.928666][ T37] audit: type=1326 audit(1757752830.310:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14582 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1017eba9 code=0x7ffc0000 [ 1264.928969][ T37] audit: type=1326 audit(1757752830.310:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14582 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1017eba9 code=0x7ffc0000 [ 1264.929271][ T37] audit: type=1326 audit(1757752830.320:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14582 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4e1017eba9 code=0x7ffc0000 [ 1264.929929][ T37] audit: type=1326 audit(1757752830.320:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14582 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1017eba9 code=0x7ffc0000 [ 1264.930238][ T37] audit: type=1326 audit(1757752830.320:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14582 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1017eba9 code=0x7ffc0000 [ 1264.930535][ T37] audit: type=1326 audit(1757752830.330:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14582 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4e1017eba9 code=0x7ffc0000 [ 1264.931241][ T37] audit: type=1326 audit(1757752830.340:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14582 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1017eba9 code=0x7ffc0000 [ 1277.819852][T14646] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2124'. [ 1277.819899][T14646] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2124'. [ 1277.819965][T14646] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2124'. [ 1277.820257][T14646] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2124'. [ 1279.315945][T14248] hsr_slave_0: entered promiscuous mode [ 1279.631459][T14248] hsr_slave_1: entered promiscuous mode [ 1279.632393][T14248] debugfs: 'hsr0' already exists in 'hsr' [ 1279.632417][T14248] Cannot create hsr debugfs directory [ 1280.214558][T14662] new mount options do not match the existing superblock, will be ignored [ 1283.110071][T14490] chnl_net:caif_netlink_parms(): no params data found [ 1284.668833][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1285.016433][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1285.038345][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1285.042745][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1285.064847][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1285.289950][T14701] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2134'. [ 1285.289999][T14701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2134'. [ 1285.290067][T14701] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2134'. [ 1285.290478][T14701] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2134'. [ 1287.185362][T14720] new mount options do not match the existing superblock, will be ignored [ 1287.927232][T14249] Bluetooth: hci3: command tx timeout [ 1288.262684][T14723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2139'. [ 1289.594601][T14490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.594823][T14490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.595032][T14490] bridge_slave_0: entered allmulticast mode [ 1289.603109][T14490] bridge_slave_0: entered promiscuous mode [ 1289.702589][T14490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.702736][T14490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.702975][T14490] bridge_slave_1: entered allmulticast mode [ 1289.705769][T14490] bridge_slave_1: entered promiscuous mode [ 1290.012370][ T5156] Bluetooth: hci3: command tx timeout [ 1290.351149][T14753] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2146'. [ 1290.351171][T14753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2146'. [ 1290.351189][T14753] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2146'. [ 1290.351230][T14753] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2146'. [ 1292.498735][ T5156] Bluetooth: hci3: command tx timeout [ 1294.549189][ T5156] Bluetooth: hci3: command tx timeout [ 1297.210340][T14490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1297.608911][ T1023] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.989075][T14490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1300.741559][T14793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2156'. [ 1300.741607][T14793] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2156'. [ 1300.741626][T14793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2156'. [ 1300.741671][T14793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2156'. [ 1302.251026][T14810] new mount options do not match the existing superblock, will be ignored [ 1302.467774][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1302.467793][ T37] audit: type=1326 audit(1757752867.230:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14797 comm="syz.4.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562bc1eba9 code=0x7ffc0000 [ 1302.467839][ T37] audit: type=1326 audit(1757752867.230:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14797 comm="syz.4.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562bc1eba9 code=0x7ffc0000 [ 1302.467881][ T37] audit: type=1326 audit(1757752867.250:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14797 comm="syz.4.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f562bc1eba9 code=0x7ffc0000 [ 1303.461314][ T1023] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.107714][T14490] team0: Port device team_slave_0 added [ 1305.326070][ T1023] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.353664][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.353741][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.399835][T14490] team0: Port device team_slave_1 added [ 1305.913610][ T1023] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.022327][T14490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1306.022343][T14490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1306.022365][T14490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.028655][T14490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.028669][T14490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1306.028694][T14490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.598709][T14490] hsr_slave_0: entered promiscuous mode [ 1306.600076][T14490] hsr_slave_1: entered promiscuous mode [ 1306.600957][T14490] debugfs: 'hsr0' already exists in 'hsr' [ 1306.600981][T14490] Cannot create hsr debugfs directory [ 1307.316783][ T37] audit: type=1326 audit(1757752872.730:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14851 comm="syz.1.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058e88eba9 code=0x7ffc0000 [ 1307.317231][ T37] audit: type=1326 audit(1757752872.730:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14851 comm="syz.1.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058e88eba9 code=0x7ffc0000 [ 1307.317498][ T37] audit: type=1326 audit(1757752872.740:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14851 comm="syz.1.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f058e88eba9 code=0x7ffc0000 [ 1307.475339][T14860] new mount options do not match the existing superblock, will be ignored [ 1308.002139][ T37] audit: type=1326 audit(1757752873.430:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14851 comm="syz.1.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058e88eba9 code=0x7ffc0000 [ 1308.002190][ T37] audit: type=1326 audit(1757752873.430:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14851 comm="syz.1.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058e88eba9 code=0x7ffc0000 [ 1308.778153][T14688] chnl_net:caif_netlink_parms(): no params data found [ 1311.323872][ T1023] bridge_slave_1: left allmulticast mode [ 1311.323904][ T1023] bridge_slave_1: left promiscuous mode [ 1311.328316][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.470573][ T1023] bridge_slave_0: left allmulticast mode [ 1311.470605][ T1023] bridge_slave_0: left promiscuous mode [ 1311.470910][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.634957][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1312.798621][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1312.942274][ T1023] bond0 (unregistering): Released all slaves [ 1313.289382][T14249] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1313.294931][T14249] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1313.320401][T14249] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1313.357113][T14249] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1313.378114][T14249] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1315.427226][ T5156] Bluetooth: hci5: command tx timeout [ 1316.024653][ T1023] bond0 (unregistering): Released all slaves [ 1316.389237][T14688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.389393][T14688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.389576][T14688] bridge_slave_0: entered allmulticast mode [ 1316.400566][T14688] bridge_slave_0: entered promiscuous mode [ 1316.423337][T14688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.423568][T14688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.423753][T14688] bridge_slave_1: entered allmulticast mode [ 1316.439516][T14688] bridge_slave_1: entered promiscuous mode [ 1317.110762][ T1023] tipc: Left network mode [ 1317.220830][ T1023] IPVS: stopping backup sync thread 8813 ... [ 1317.263443][T14688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1317.289627][T14688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1317.507611][ T5156] Bluetooth: hci5: command tx timeout [ 1319.586971][ T5156] Bluetooth: hci5: command tx timeout [ 1319.699307][T14688] team0: Port device team_slave_0 added [ 1319.771790][T14688] team0: Port device team_slave_1 added [ 1320.799656][T14688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1320.799673][T14688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.799699][T14688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1320.878104][T14688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1320.878119][T14688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.878142][T14688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1321.049099][ T1023] hsr_slave_0: left promiscuous mode [ 1321.097035][ T1023] hsr_slave_1: left promiscuous mode [ 1321.097958][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1321.154902][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1321.396857][ T1023] hsr_slave_0: left promiscuous mode [ 1321.476891][ T1023] hsr_slave_1: left promiscuous mode [ 1321.667809][ T5156] Bluetooth: hci5: command tx timeout [ 1321.715196][ T1023] veth1_macvtap: left promiscuous mode [ 1321.715311][ T1023] veth0_macvtap: left promiscuous mode [ 1321.715604][ T1023] veth1_vlan: left promiscuous mode [ 1321.715812][ T1023] veth0_vlan: left promiscuous mode [ 1322.210628][T14249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1322.257001][T14249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1322.260537][T14249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1322.267030][T14249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1322.291508][T14249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1323.057505][ T1023] team0 (unregistering): Port device team_slave_1 removed [ 1323.210715][ T1023] team0 (unregistering): Port device team_slave_0 removed [ 1324.386871][ T5156] Bluetooth: hci0: command tx timeout [ 1326.467980][ T5156] Bluetooth: hci0: command tx timeout [ 1327.894534][T14249] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1327.901131][T14249] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1327.909497][T14249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1327.910657][T14249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1327.911412][T14249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1328.554670][ T5156] Bluetooth: hci0: command tx timeout [ 1329.987014][ T5156] Bluetooth: hci1: command tx timeout [ 1330.636836][ T5156] Bluetooth: hci0: command tx timeout [ 1331.058230][T14688] hsr_slave_0: entered promiscuous mode [ 1331.059613][T14688] hsr_slave_1: entered promiscuous mode [ 1332.068786][ T5156] Bluetooth: hci1: command tx timeout [ 1332.283870][T14895] chnl_net:caif_netlink_parms(): no params data found [ 1333.247126][T14895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.247257][T14895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.247440][T14895] bridge_slave_0: entered allmulticast mode [ 1333.249303][T14895] bridge_slave_0: entered promiscuous mode [ 1333.327267][T14895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.327394][T14895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.327607][T14895] bridge_slave_1: entered allmulticast mode [ 1333.330245][T14895] bridge_slave_1: entered promiscuous mode [ 1333.617797][T14688] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1333.718546][T14895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1333.721146][T14688] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1333.783402][T14935] chnl_net:caif_netlink_parms(): no params data found [ 1333.801784][T14895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1333.816888][T14688] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1333.999117][T14688] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1334.021897][T14924] chnl_net:caif_netlink_parms(): no params data found [ 1334.150359][ T5156] Bluetooth: hci1: command tx timeout [ 1334.210838][T14895] team0: Port device team_slave_0 added [ 1334.242526][T14895] team0: Port device team_slave_1 added [ 1335.121505][T14895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1335.121517][T14895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1335.121532][T14895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1335.363045][T14895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1335.363061][T14895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1335.363086][T14895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1335.463425][T14935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.463637][T14935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.463884][T14935] bridge_slave_0: entered allmulticast mode [ 1335.466572][T14935] bridge_slave_0: entered promiscuous mode [ 1335.669989][T14935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.670151][T14935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.670367][T14935] bridge_slave_1: entered allmulticast mode [ 1335.675942][T14935] bridge_slave_1: entered promiscuous mode [ 1335.882798][ T1023] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.940787][T14924] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.940867][T14924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.940984][T14924] bridge_slave_0: entered allmulticast mode [ 1335.942838][T14924] bridge_slave_0: entered promiscuous mode [ 1336.229002][ T5156] Bluetooth: hci1: command tx timeout [ 1336.247259][T14924] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.247396][T14924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.247642][T14924] bridge_slave_1: entered allmulticast mode [ 1336.250355][T14924] bridge_slave_1: entered promiscuous mode [ 1336.773907][ T1023] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.831229][T14935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1337.124781][T14935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1337.185182][T14895] hsr_slave_0: entered promiscuous mode [ 1337.206594][T14895] hsr_slave_1: entered promiscuous mode [ 1337.208141][T14895] debugfs: 'hsr0' already exists in 'hsr' [ 1337.208164][T14895] Cannot create hsr debugfs directory [ 1337.254745][T14924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1337.479041][ T1023] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.654932][T14924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1338.191598][ T1023] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.219291][T15047] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 1338.370821][T14935] team0: Port device team_slave_0 added [ 1338.547512][T14935] team0: Port device team_slave_1 added [ 1338.689518][T14924] team0: Port device team_slave_0 added [ 1338.813829][T14924] team0: Port device team_slave_1 added [ 1339.016080][T14935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.016097][T14935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.016120][T14935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.210990][T14935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.211005][T14935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.211030][T14935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1339.214132][T14924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.214144][T14924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.214168][T14924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.268522][T14924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.268536][T14924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.268560][T14924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1342.099931][T14935] hsr_slave_0: entered promiscuous mode [ 1342.101407][T14935] hsr_slave_1: entered promiscuous mode [ 1342.102433][T14935] debugfs: 'hsr0' already exists in 'hsr' [ 1342.102456][T14935] Cannot create hsr debugfs directory [ 1342.241613][T14924] hsr_slave_0: entered promiscuous mode [ 1342.252985][T14924] hsr_slave_1: entered promiscuous mode [ 1342.257090][T14924] debugfs: 'hsr0' already exists in 'hsr' [ 1342.257114][T14924] Cannot create hsr debugfs directory [ 1342.644032][ T1023] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.866294][T14249] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1342.881166][T14249] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1342.882386][T14249] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1342.883861][T14249] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1342.884638][T14249] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1343.340647][ T1023] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.749644][T15091] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1344.078274][ T1023] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.353619][ T1023] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.688776][T14895] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1344.763573][T14895] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1344.852140][T14895] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1344.907314][T14895] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1344.948349][ T5156] Bluetooth: hci4: command tx timeout [ 1345.385016][ T1023] bridge_slave_1: left allmulticast mode [ 1345.385047][ T1023] bridge_slave_1: left promiscuous mode [ 1345.386369][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.474923][ T1023] bridge_slave_0: left allmulticast mode [ 1345.474955][ T1023] bridge_slave_0: left promiscuous mode [ 1345.475215][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.652077][ T1023] bridge_slave_1: left allmulticast mode [ 1345.652113][ T1023] bridge_slave_1: left promiscuous mode [ 1345.652354][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.736680][ T1023] bridge_slave_0: left allmulticast mode [ 1345.736758][ T1023] bridge_slave_0: left promiscuous mode [ 1345.737031][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.026839][ T5156] Bluetooth: hci4: command tx timeout [ 1347.725116][T15121] new mount options do not match the existing superblock, will be ignored [ 1348.266385][ T37] audit: type=1326 audit(1757752912.980:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15117 comm="syz.4.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562bc1eba9 code=0x7ffc0000 [ 1348.266443][ T37] audit: type=1326 audit(1757752912.980:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15117 comm="syz.4.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562bc1eba9 code=0x7ffc0000 [ 1348.266484][ T37] audit: type=1326 audit(1757752912.990:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15117 comm="syz.4.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f562bc1eba9 code=0x7ffc0000 [ 1349.106829][ T5156] Bluetooth: hci4: command tx timeout [ 1349.390908][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.447876][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.495321][ T1023] bond0 (unregistering): Released all slaves [ 1350.247822][ T1023] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1350.316404][ T1023] bond1 (unregistering): Released all slaves [ 1351.079124][ T1023] bond2 (unregistering): (slave veth5): Releasing backup interface [ 1351.140862][ T1023] bond2 (unregistering): Released all slaves [ 1351.187175][ T5156] Bluetooth: hci4: command tx timeout [ 1351.841470][ T1023] bond3 (unregistering): Released all slaves [ 1353.320417][ T1023] bond0 (unregistering): Released all slaves [ 1353.573715][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1353.647884][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1353.723435][ T1023] bond0 (unregistering): Released all slaves [ 1353.932843][T14935] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1354.107098][T14935] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1354.260596][ T1023] tipc: Left network mode [ 1354.260664][T14935] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1354.373263][T14935] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1354.445235][ T1023] tipc: Left network mode [ 1354.661703][ T1023] IPVS: stopping backup sync thread 9734 ... [ 1354.708197][ T1023] IPVS: stopping backup sync thread 9980 ... [ 1354.726361][T15080] chnl_net:caif_netlink_parms(): no params data found [ 1354.818259][T14924] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1355.116582][T14924] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1355.244559][T14924] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1355.354502][T14924] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1356.310335][T15080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.310468][T15080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.310719][T15080] bridge_slave_0: entered allmulticast mode [ 1356.313595][T15080] bridge_slave_0: entered promiscuous mode [ 1356.350767][T15080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.350922][T15080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.351152][T15080] bridge_slave_1: entered allmulticast mode [ 1356.353933][T15080] bridge_slave_1: entered promiscuous mode [ 1356.891715][T15080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1356.963867][T15080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1357.189246][T15080] team0: Port device team_slave_0 added [ 1357.210882][T15080] team0: Port device team_slave_1 added [ 1358.416918][ T1023] hsr_slave_0: left promiscuous mode [ 1358.456920][ T1023] hsr_slave_1: left promiscuous mode [ 1358.462658][ T1023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1358.462770][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1358.528562][ T1023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1358.528595][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1358.747080][ T1023] hsr_slave_0: left promiscuous mode [ 1358.766884][ T1023] hsr_slave_1: left promiscuous mode [ 1358.890133][ T1023] hsr_slave_0: left promiscuous mode [ 1358.910539][ T1023] hsr_slave_1: left promiscuous mode [ 1358.912263][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1358.958010][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1359.108626][ T1023] veth1_macvtap: left promiscuous mode [ 1359.108752][ T1023] veth0_macvtap: left promiscuous mode [ 1359.109050][ T1023] ÿÿÿÿÿÿ: left promiscuous mode [ 1359.109226][ T1023] veth0_vlan: left promiscuous mode [ 1359.258290][ T1023] veth1_macvtap: left promiscuous mode [ 1359.258417][ T1023] veth0_macvtap: left promiscuous mode [ 1359.258707][ T1023] ÿÿÿÿÿÿ: left promiscuous mode [ 1359.260714][ T1023] veth0_vlan: left promiscuous mode [ 1362.132697][ T1023] team0 (unregistering): Port device team_slave_1 removed [ 1362.328282][ T1023] team0 (unregistering): Port device team_slave_0 removed [ 1366.821263][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.821337][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1369.748403][ T1023] team0 (unregistering): Port device team_slave_1 removed [ 1369.897666][ T1023] team0 (unregistering): Port device team_slave_0 removed [ 1370.723339][T15080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1370.723355][T15080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1370.723380][T15080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1370.740534][T14895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1370.757188][T15080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1370.757204][T15080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1370.757228][T15080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1371.138785][T15080] hsr_slave_0: entered promiscuous mode [ 1371.140072][T15080] hsr_slave_1: entered promiscuous mode [ 1371.140957][T15080] debugfs: 'hsr0' already exists in 'hsr' [ 1371.140980][T15080] Cannot create hsr debugfs directory [ 1371.371262][T14895] 8021q: adding VLAN 0 to HW filter on device team0 [ 1371.562279][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.562440][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1371.623991][T14935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1371.683348][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.683563][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1372.076056][T14935] 8021q: adding VLAN 0 to HW filter on device team0 [ 1372.221783][T14924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1372.549767][T12378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1372.550272][T12378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1372.626086][T12378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.626235][T12378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1372.899231][T14924] 8021q: adding VLAN 0 to HW filter on device team0 [ 1372.950825][T10012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1372.950964][T10012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1373.249935][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1373.250083][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1374.518293][T14249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1374.542816][T14249] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1374.565813][T14249] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1374.589333][T14249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1374.611677][T14249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1374.693513][T15080] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1374.879143][T15080] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1374.996626][T15080] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1375.327501][T15080] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1375.819163][T14935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1375.900196][T14924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1376.358079][ T5156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1376.361969][ T5156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1376.363511][ T5156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1376.365644][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1376.366389][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1376.706879][ T5156] Bluetooth: hci3: command tx timeout [ 1377.756068][T15230] chnl_net:caif_netlink_parms(): no params data found [ 1378.224502][T15230] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.224730][T15230] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.225000][T15230] bridge_slave_0: entered allmulticast mode [ 1378.253509][T15230] bridge_slave_0: entered promiscuous mode [ 1378.284192][T15230] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.284341][T15230] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.284532][T15230] bridge_slave_1: entered allmulticast mode [ 1378.308177][T15230] bridge_slave_1: entered promiscuous mode [ 1378.467098][ T5156] Bluetooth: hci2: command tx timeout [ 1378.532269][T14935] veth0_vlan: entered promiscuous mode [ 1378.618186][T15230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1378.619300][T14924] veth0_vlan: entered promiscuous mode [ 1378.651163][T15230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1378.681388][T15080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1378.786907][ T5156] Bluetooth: hci3: command tx timeout [ 1378.921286][ T1023] bridge_slave_1: left allmulticast mode [ 1378.921317][ T1023] bridge_slave_1: left promiscuous mode [ 1378.921569][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.001499][ T1023] bridge_slave_0: left allmulticast mode [ 1379.001532][ T1023] bridge_slave_0: left promiscuous mode [ 1379.001798][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.074537][ T1023] bridge_slave_1: left allmulticast mode [ 1379.074569][ T1023] bridge_slave_1: left promiscuous mode [ 1379.074822][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.148877][ T1023] bridge_slave_0: left allmulticast mode [ 1379.148917][ T1023] bridge_slave_0: left promiscuous mode [ 1379.149280][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.555376][ T5156] Bluetooth: hci2: command tx timeout [ 1380.867165][ T5156] Bluetooth: hci3: command tx timeout [ 1380.875378][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1380.950011][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1380.973540][ T1023] bond0 (unregistering): Released all slaves [ 1381.567265][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1381.659100][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1381.741538][T14249] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1381.745007][T14249] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1381.757023][T14249] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1381.758109][T14249] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1381.758863][T14249] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1381.791748][ T1023] bond0 (unregistering): Released all slaves [ 1381.853290][T15230] team0: Port device team_slave_0 added [ 1381.853906][T15255] chnl_net:caif_netlink_parms(): no params data found [ 1381.869890][T14935] veth1_vlan: entered promiscuous mode [ 1381.925552][T15230] team0: Port device team_slave_1 added [ 1382.375706][T15230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1382.375723][T15230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1382.375748][T15230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1382.437359][T15230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1382.437375][T15230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1382.437400][T15230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1382.444214][T15080] 8021q: adding VLAN 0 to HW filter on device team0 [ 1382.628474][ T5156] Bluetooth: hci2: command tx timeout [ 1382.677016][ T1023] hsr_slave_0: left promiscuous mode [ 1382.698337][ T1023] hsr_slave_1: left promiscuous mode [ 1382.699241][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1382.752801][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1382.908302][ T1023] hsr_slave_0: left promiscuous mode [ 1382.927112][ T1023] hsr_slave_1: left promiscuous mode [ 1382.927991][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1382.947168][ T5156] Bluetooth: hci3: command tx timeout [ 1382.967686][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1383.826876][ T5156] Bluetooth: hci5: command tx timeout [ 1384.018915][ T1023] team0 (unregistering): Port device team_slave_1 removed [ 1384.237662][ T1023] team0 (unregistering): Port device team_slave_0 removed [ 1384.707550][ T5156] Bluetooth: hci2: command tx timeout [ 1385.917063][ T5156] Bluetooth: hci5: command tx timeout [ 1386.888910][ T1023] team0 (unregistering): Port device team_slave_1 removed [ 1387.047504][ T1023] team0 (unregistering): Port device team_slave_0 removed [ 1387.988617][ T5156] Bluetooth: hci5: command tx timeout [ 1388.145962][T12378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.146185][T12378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1388.422187][T14249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1388.454968][T15255] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.455078][T15255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.455249][T15255] bridge_slave_0: entered allmulticast mode [ 1388.458654][T14249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1388.460012][T14249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1388.461181][T14249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1388.461862][T14249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1388.524874][T15255] bridge_slave_0: entered promiscuous mode [ 1388.658739][T15255] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.658899][T15255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.659144][T15255] bridge_slave_1: entered allmulticast mode [ 1388.660927][T15255] bridge_slave_1: entered promiscuous mode [ 1388.732094][T15230] hsr_slave_0: entered promiscuous mode [ 1388.733466][T15230] hsr_slave_1: entered promiscuous mode [ 1389.120563][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.120806][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1389.292931][T15255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1389.445467][T15255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1389.845679][T15255] team0: Port device team_slave_0 added [ 1389.912621][T15255] team0: Port device team_slave_1 added [ 1390.067259][T15294] Bluetooth: hci5: command tx timeout [ 1390.395263][T15255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.395277][T15255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.395302][T15255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.468489][T15255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.468505][T15255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.468530][T15255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1390.627166][T15294] Bluetooth: hci0: command tx timeout [ 1391.100549][T15255] hsr_slave_0: entered promiscuous mode [ 1391.101344][T15255] hsr_slave_1: entered promiscuous mode [ 1391.101897][T15255] debugfs: 'hsr0' already exists in 'hsr' [ 1391.101912][T15255] Cannot create hsr debugfs directory [ 1391.134364][T15285] chnl_net:caif_netlink_parms(): no params data found [ 1392.454393][T15285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.454631][T15285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.454883][T15285] bridge_slave_0: entered allmulticast mode [ 1392.478191][T15285] bridge_slave_0: entered promiscuous mode [ 1392.509662][T15285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.509818][T15285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.510029][T15285] bridge_slave_1: entered allmulticast mode [ 1392.512781][T15285] bridge_slave_1: entered promiscuous mode [ 1392.707534][T15294] Bluetooth: hci0: command tx timeout [ 1392.960015][T15291] chnl_net:caif_netlink_parms(): no params data found [ 1393.250629][T15285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1393.337880][T15285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1393.839881][T15285] team0: Port device team_slave_0 added [ 1394.022244][T15285] team0: Port device team_slave_1 added [ 1394.324577][T15080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1394.486140][T15291] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.486342][T15291] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.486575][T15291] bridge_slave_0: entered allmulticast mode [ 1394.494327][T15291] bridge_slave_0: entered promiscuous mode [ 1394.519600][T15285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1394.519615][T15285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1394.519640][T15285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1394.529173][T15291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.529311][T15291] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.529537][T15291] bridge_slave_1: entered allmulticast mode [ 1394.537249][T15291] bridge_slave_1: entered promiscuous mode [ 1394.539007][T15230] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1394.596485][T15285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1394.596500][T15285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1394.596525][T15285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1394.735649][T15230] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1394.787023][T15294] Bluetooth: hci0: command tx timeout [ 1394.937903][T15230] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1394.968914][T15291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1395.033067][T15230] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1395.067698][T15291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1395.540751][T15285] hsr_slave_0: entered promiscuous mode [ 1395.542073][T15285] hsr_slave_1: entered promiscuous mode [ 1395.542958][T15285] debugfs: 'hsr0' already exists in 'hsr' [ 1395.542981][T15285] Cannot create hsr debugfs directory [ 1395.586156][T15291] team0: Port device team_slave_0 added [ 1395.710884][T15291] team0: Port device team_slave_1 added [ 1396.297827][T15291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1396.297844][T15291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1396.297867][T15291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1396.460463][T15255] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1396.524363][T15291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.524379][T15291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1396.524405][T15291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1396.735849][T15255] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1396.819250][T15255] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1396.877184][T15294] Bluetooth: hci0: command tx timeout [ 1397.097589][T15255] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1397.521826][T15291] hsr_slave_0: entered promiscuous mode [ 1397.523112][T15291] hsr_slave_1: entered promiscuous mode [ 1397.523988][T15291] debugfs: 'hsr0' already exists in 'hsr' [ 1397.524011][T15291] Cannot create hsr debugfs directory [ 1397.952582][T15080] veth0_vlan: entered promiscuous mode [ 1398.201155][T15080] veth1_vlan: entered promiscuous mode [ 1398.723652][ T1023] bridge_slave_1: left allmulticast mode [ 1398.723684][ T1023] bridge_slave_1: left promiscuous mode [ 1398.723954][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.798584][ T1023] bridge_slave_0: left allmulticast mode [ 1398.798616][ T1023] bridge_slave_0: left promiscuous mode [ 1398.798888][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.864356][ T1023] bridge_slave_1: left allmulticast mode [ 1398.864390][ T1023] bridge_slave_1: left promiscuous mode [ 1398.864639][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.920166][ T1023] bridge_slave_0: left allmulticast mode [ 1398.920197][ T1023] bridge_slave_0: left promiscuous mode [ 1398.920446][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.599749][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1400.677612][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1400.708676][ T1023] bond0 (unregistering): Released all slaves [ 1402.287739][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1402.357745][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1402.382243][ T1023] bond0 (unregistering): Released all slaves [ 1402.965668][T15230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1403.022800][ T5156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1403.032900][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1403.034223][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1403.035311][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1403.036022][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1403.187307][ T1023] hsr_slave_0: left promiscuous mode [ 1403.244990][ T1023] hsr_slave_1: left promiscuous mode [ 1403.245631][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1403.288388][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1403.507109][ T1023] hsr_slave_0: left promiscuous mode [ 1403.552864][ T1023] hsr_slave_1: left promiscuous mode [ 1403.553489][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1403.578142][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1403.693709][ T1023] veth1_vlan: left promiscuous mode [ 1403.694035][ T1023] veth0_vlan: left promiscuous mode [ 1403.717451][ T1023] veth0_vlan: left promiscuous mode [ 1405.187169][T15294] Bluetooth: hci1: command tx timeout [ 1405.449083][ T1023] team0 (unregistering): Port device team_slave_1 removed [ 1405.687702][ T1023] team0 (unregistering): Port device team_slave_0 removed [ 1407.267095][T15294] Bluetooth: hci1: command tx timeout [ 1409.069879][ T1023] team0 (unregistering): Port device team_slave_1 removed [ 1409.275524][ T1023] team0 (unregistering): Port device team_slave_0 removed [ 1409.356963][T15294] Bluetooth: hci1: command tx timeout [ 1411.438156][T15294] Bluetooth: hci1: command tx timeout [ 1411.919303][T15230] 8021q: adding VLAN 0 to HW filter on device team0 [ 1411.978087][T10012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.978261][T10012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1412.026341][T15255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1412.105776][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.105966][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1412.377773][T15255] 8021q: adding VLAN 0 to HW filter on device team0 [ 1412.611625][T10012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.611938][T10012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1412.798835][T10012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.799074][T10012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1412.950010][T15362] chnl_net:caif_netlink_parms(): no params data found [ 1413.588212][T15362] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.588360][T15362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.588587][T15362] bridge_slave_0: entered allmulticast mode [ 1413.591262][T15362] bridge_slave_0: entered promiscuous mode [ 1413.649571][T15362] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.649787][T15362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.650017][T15362] bridge_slave_1: entered allmulticast mode [ 1413.653380][T15362] bridge_slave_1: entered promiscuous mode [ 1413.946324][T15362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1413.976454][T15285] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1414.025698][T15362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1414.043944][T15285] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1414.192924][T15285] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1414.322218][T15285] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1414.374099][T15362] team0: Port device team_slave_0 added [ 1414.454682][T15362] team0: Port device team_slave_1 added [ 1414.863457][T15362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1414.863473][T15362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1414.863497][T15362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1415.093538][T15362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1415.093553][T15362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1415.093579][T15362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1415.137744][T15230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1415.196903][T15291] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1415.273298][T15291] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1415.682558][T15291] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1415.905546][T15291] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1416.150371][T15362] hsr_slave_0: entered promiscuous mode [ 1416.151715][T15362] hsr_slave_1: entered promiscuous mode [ 1416.152617][T15362] debugfs: 'hsr0' already exists in 'hsr' [ 1416.152641][T15362] Cannot create hsr debugfs directory [ 1416.585492][T15255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1417.389959][ T1023] bridge_slave_1: left allmulticast mode [ 1417.389992][ T1023] bridge_slave_1: left promiscuous mode [ 1417.390243][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.468368][ T1023] bridge_slave_0: left allmulticast mode [ 1417.468400][ T1023] bridge_slave_0: left promiscuous mode [ 1417.468672][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.087780][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1419.169325][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1419.201947][ T1023] bond0 (unregistering): Released all slaves [ 1419.482114][T15230] veth0_vlan: entered promiscuous mode [ 1419.607208][ T1023] hsr_slave_0: left promiscuous mode [ 1419.628949][ T1023] hsr_slave_1: left promiscuous mode [ 1419.630715][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1419.667795][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1419.734598][ T1023] veth1_vlan: left promiscuous mode [ 1419.734728][ T1023] veth0_vlan: left promiscuous mode [ 1421.328773][ T1023] team0 (unregistering): Port device team_slave_1 removed [ 1421.547402][ T1023] team0 (unregistering): Port device team_slave_0 removed [ 1423.979289][T15230] veth1_vlan: entered promiscuous mode [ 1424.101590][T15285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1424.142486][T15255] veth0_vlan: entered promiscuous mode [ 1424.221451][T15255] veth1_vlan: entered promiscuous mode [ 1424.319389][T15285] 8021q: adding VLAN 0 to HW filter on device team0 [ 1424.375539][T15291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1424.402328][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1424.402487][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1424.448458][T15230] veth0_macvtap: entered promiscuous mode [ 1424.474785][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.475042][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1424.518681][T15230] veth1_macvtap: entered promiscuous mode [ 1424.620259][T15291] 8021q: adding VLAN 0 to HW filter on device team0 [ 1424.766368][T15255] veth0_macvtap: entered promiscuous mode [ 1424.783470][T13352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1424.783762][T13352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1424.838766][T15230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1424.894640][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.894748][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1424.903642][T15255] veth1_macvtap: entered promiscuous mode [ 1424.950727][T15230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1424.992456][T15362] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1425.040250][T15362] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1425.093914][T10012] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.100176][T15362] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1425.137511][T10012] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.144815][T15362] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1425.205787][T10012] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.216365][T15255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1425.232167][T10012] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.325271][T15255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1425.537618][ T43] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.545623][ T43] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.573705][ T43] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.591137][ T43] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.966892][T10012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.966912][T10012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.104460][T15285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1426.144665][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.144684][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.263578][T10012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.263595][T10012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.383957][T15362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.393700][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.393718][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.576371][T15362] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.641801][T13352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.646954][T13352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1426.740307][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.747000][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.003874][T15291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1427.107626][ T37] audit: type=1326 audit(1757752992.530:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15445 comm="syz.9.2248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f901863eba9 code=0x0 [ 1428.249584][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.249660][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.882904][T15285] veth0_vlan: entered promiscuous mode [ 1430.087947][T15285] veth1_vlan: entered promiscuous mode [ 1430.956385][T15362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1431.250228][T15291] veth0_vlan: entered promiscuous mode [ 1431.330822][T15291] veth1_vlan: entered promiscuous mode [ 1431.451022][T15285] veth0_macvtap: entered promiscuous mode [ 1431.492200][T15285] veth1_macvtap: entered promiscuous mode [ 1432.409317][T15291] veth0_macvtap: entered promiscuous mode [ 1432.513171][T15285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1432.559550][T15291] veth1_macvtap: entered promiscuous mode [ 1432.618634][T15285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1432.674941][ T1184] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.695926][ T1184] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.707917][ T1184] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.727829][ T1184] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.204047][T15291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1433.972572][T15291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1435.325238][ T1023] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.577263][ T43] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.581329][ T43] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.615753][ T43] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.154105][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1436.154152][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.520225][ T1311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.520244][ T1311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.731385][T15362] veth0_vlan: entered promiscuous mode [ 1438.745439][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.745458][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.799903][T15362] veth1_vlan: entered promiscuous mode [ 1438.872676][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.872696][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.965359][T15362] veth0_macvtap: entered promiscuous mode [ 1438.986474][T15362] veth1_macvtap: entered promiscuous mode [ 1440.098781][T15362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1440.191812][T15362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1440.287098][T15534] netlink: 'syz.6.2267': attribute type 1 has an invalid length. [ 1440.289172][T15537] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2192'. [ 1440.385941][T15539] netlink: 'syz.6.2267': attribute type 10 has an invalid length. [ 1440.385963][T15539] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2267'. [ 1440.449091][T15539] dummy0: entered promiscuous mode [ 1440.484720][ T1023] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.485196][ T1023] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.486346][ T1023] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.538874][T10012] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.941718][T13374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1442.941738][T13374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1442.957220][T15569] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2279'. [ 1444.516251][ T1023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1444.516271][ T1023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1445.373790][ T44] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1446.058653][ T44] usb 10-1: Using ep0 maxpacket: 32 [ 1446.248552][ T44] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 1446.248579][ T44] usb 10-1: config 0 has no interface number 0 [ 1446.248631][ T44] usb 10-1: config 0 interface 12 has no altsetting 0 [ 1446.572042][ T44] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1446.572072][ T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.572091][ T44] usb 10-1: Product: syz [ 1446.572106][ T44] usb 10-1: Manufacturer: syz [ 1446.572119][ T44] usb 10-1: SerialNumber: syz [ 1446.759070][ T44] usb 10-1: config 0 descriptor?? [ 1448.078027][T15610] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2294'. [ 1448.556185][T15620] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2296'. [ 1448.585352][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.585377][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.585481][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.585497][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.585585][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.585601][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.585683][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.585699][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.585790][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.585807][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.585911][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.585929][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.586032][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.586049][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.586143][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.586161][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.586255][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.586272][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.586367][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.586384][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.586478][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.586495][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.586589][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.586606][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.586699][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.586765][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.586860][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.586876][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.586980][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.586998][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.587108][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.587125][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.587224][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.587240][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.587333][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.587350][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.587451][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.587468][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.587570][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.587587][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.587687][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.587705][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.587825][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.587843][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.587940][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.587957][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.588055][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.588073][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.588167][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.588184][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.588277][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.588293][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.588387][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.588404][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.588566][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.588584][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.588678][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.588695][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.588790][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.588807][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.588901][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.588918][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.589039][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.589057][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.589157][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.589175][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.589276][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.589292][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.589397][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.589414][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.589508][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.589525][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.589619][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.589636][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.589730][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.589746][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.589850][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.589867][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.589962][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.589979][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.590084][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.590101][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.590199][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.590215][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.590301][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.590316][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.590412][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.590425][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.590510][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.590526][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.590622][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.590639][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.590756][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.590773][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.590869][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.590885][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.590973][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.590989][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.591089][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.591106][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.591201][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.591218][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.591312][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.591329][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.591421][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.591438][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.591530][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.591546][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.591637][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.591654][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.591756][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.591772][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.591864][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.591881][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.591979][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.591996][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.592097][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.592115][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.592212][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.592229][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.592322][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.592340][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.592434][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.592451][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.592546][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.592562][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.592657][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.592673][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.592765][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.592789][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.592881][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.592897][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.592987][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.593003][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.593111][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.593128][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.593222][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.593239][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.593332][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.593349][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.593443][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.593460][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.593567][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.593584][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.593679][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.593696][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.593788][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.593804][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.593903][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.593919][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.594018][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.594035][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.594161][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.594177][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.594270][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.594286][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.594375][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.594391][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.594481][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.594506][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.594599][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.594616][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.594719][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.594736][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.594844][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.594860][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.594956][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.594972][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.595073][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.595090][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.595184][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.595201][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.595296][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.595312][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.595405][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.595421][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.595548][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.595565][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.595661][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.595679][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.595763][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.595778][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.595895][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.595912][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.596019][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.596035][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.596130][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.596147][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.596242][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.596258][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.596351][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.596369][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.596463][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.596480][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.596584][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.596600][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.596694][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.596748][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.596844][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.596861][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.596982][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.596999][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.597106][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.597123][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.597224][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.597241][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.597333][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.597350][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.597444][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.597461][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.597556][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.597572][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.597664][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.597681][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.597782][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.597798][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.597892][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.597915][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.598018][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.598036][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.598124][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.598142][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.598238][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.598254][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.598376][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.598393][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.598488][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.598504][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.598600][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.598616][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.598711][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.598728][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.598822][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.598839][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.598934][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.598951][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.599052][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.599069][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.599165][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.599186][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.599286][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.599303][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.599403][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.599420][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.599515][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.599531][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.599624][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.599641][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.599762][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.599779][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.599890][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.599906][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.600001][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.600024][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.600119][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.600136][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.600238][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.600255][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.600349][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.600365][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.600457][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.600474][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.600569][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.600586][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.600681][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.600697][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.600794][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.600811][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.600911][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.600928][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.601031][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.601048][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.601169][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.601186][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.601282][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.601299][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.601393][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.601410][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.601506][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.601522][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.601618][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.601641][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.601741][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.601758][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.601851][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.601868][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.601962][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.601979][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.602083][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.602100][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.602197][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.602213][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.602308][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.602324][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.602419][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.602436][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.602557][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.602573][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.602668][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.602685][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.602779][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.602796][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.602891][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.602908][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.603002][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.603026][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.603121][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.603137][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.603233][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1448.603249][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1448.856924][ T44] f81534 10-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 1448.856989][ T44] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 1448.857006][ T44] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1448.857099][ T44] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 1454.549153][ T44] usb 10-1: USB disconnect, device number 2 [ 1455.393183][T15655] 9pnet_fd: Insufficient options for proto=fd [ 1455.541329][T15658] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2307'. [ 1458.452466][T15698] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2321'. [ 1462.299438][T15745] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2335'. [ 1466.273044][T15776] nvme_fabrics: unknown parameter or missing value '-' in ctrl creation request [ 1466.531194][T15787] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2349'. [ 1467.915113][T15799] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2352'. [ 1467.969084][T15799] macvlan2: entered promiscuous mode [ 1467.969114][T15799] macvlan2: entered allmulticast mode [ 1471.317062][T15851] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2364'. [ 1471.697425][ T5156] Bluetooth: hci1: command 0x0405 tx timeout [ 1476.470183][T15901] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2381'. [ 1484.983896][T15947] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2394'. [ 1491.624725][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1491.624801][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1492.405335][T16017] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2411'. [ 1497.025990][ T5156] Bluetooth: hci3: command 0x0406 tx timeout [ 1502.080032][T15294] Bluetooth: hci2: command 0x0406 tx timeout [ 1505.735449][T16129] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2441'. [ 1505.774676][T16128] tipc: Started in network mode [ 1505.774707][T16128] tipc: Node identity ce63c52d299d, cluster identity 4711 [ 1505.774951][T16128] tipc: Enabled bearer , priority 0 [ 1505.801024][T16128] syzkaller0: entered promiscuous mode [ 1505.801051][T16128] syzkaller0: entered allmulticast mode [ 1507.592450][ T5156] Bluetooth: hci5: command 0x0406 tx timeout [ 1508.592636][T14187] tipc: Node number set to 3892233517 [ 1509.633443][T16131] tipc: Resetting bearer [ 1510.563511][T16131] tipc: Resetting bearer [ 1512.659832][ T5156] Bluetooth: hci0: command 0x0406 tx timeout [ 1512.782064][T16176] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2453'. [ 1512.963808][T16131] tipc: Disabling bearer [ 1520.533960][T16233] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2470'. [ 1521.898203][T16250] bridge2: entered allmulticast mode [ 1521.933972][T16250] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2476'. [ 1528.244318][T16298] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2488'. [ 1530.914650][T16324] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2491'. [ 1531.644620][T16336] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2496'. [ 1536.679025][T16377] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2505'. [ 1537.920497][T16389] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2509'. [ 1541.078134][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2518'. [ 1543.827394][T16444] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2522'. [ 1547.557897][T16480] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2530'. [ 1550.379116][T16505] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2536'. [ 1553.516828][ T5156] Bluetooth: hci1: command 0x0405 tx timeout [ 1555.252948][T16546] 9pnet_fd: Insufficient options for proto=fd [ 1556.240501][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.240578][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1557.601770][T16559] 9pnet_fd: Insufficient options for proto=fd [ 1563.790283][T16597] 9pnet_fd: Insufficient options for proto=fd [ 1565.167838][T16612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1573.644019][T16691] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2581'. [ 1577.533887][T16718] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1580.909812][T16753] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2597'. [ 1585.394059][T16789] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2606'. [ 1586.859811][T16805] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2611'. [ 1590.602098][T16837] tipc: Started in network mode [ 1590.602127][T16837] tipc: Node identity 1a128f4e061e, cluster identity 4711 [ 1590.602344][T16837] tipc: Enabled bearer , priority 0 [ 1590.604087][T16837] syzkaller0: entered promiscuous mode [ 1590.604114][T16837] syzkaller0: entered allmulticast mode [ 1590.613259][T16837] tipc: Resetting bearer [ 1590.829229][T16834] tipc: Resetting bearer [ 1591.890447][ T10] tipc: Node number set to 470585166 [ 1591.978539][T16834] tipc: Disabling bearer [ 1592.005932][T16847] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2623'. [ 1593.327107][T16857] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2626'. [ 1596.237588][T16880] 9pnet_fd: Insufficient options for proto=fd [ 1596.448439][T16886] tipc: Started in network mode [ 1596.448467][T16886] tipc: Node identity 76e758eae668, cluster identity 4711 [ 1596.448670][T16886] tipc: Enabled bearer , priority 0 [ 1596.450445][T16886] syzkaller0: entered promiscuous mode [ 1596.450471][T16886] syzkaller0: entered allmulticast mode [ 1596.458877][T16886] tipc: Resetting bearer [ 1596.674408][T16884] tipc: Resetting bearer [ 1596.683250][T16889] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2636'. [ 1597.587015][ T10] tipc: Node number set to 2425313514 [ 1597.599350][T16900] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2638'. [ 1597.829307][T16884] tipc: Disabling bearer [ 1598.952985][T16911] bridge1: entered allmulticast mode [ 1599.099563][T16913] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2643'. [ 1601.020563][T16933] 9pnet_fd: Insufficient options for proto=fd [ 1601.624060][T16946] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2651'. [ 1601.788166][T16949] binder: 16944:16949 ioctl c0306201 0 returned -14 [ 1601.900856][T16952] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2653'. [ 1602.141251][T16956] tipc: Enabled bearer , priority 0 [ 1602.143269][T16956] syzkaller0: entered promiscuous mode [ 1602.143296][T16956] syzkaller0: entered allmulticast mode [ 1602.268280][T16956] tipc: Resetting bearer [ 1602.562989][T16955] tipc: Resetting bearer [ 1603.648041][T16955] tipc: Disabling bearer [ 1603.980282][T16974] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2659'. [ 1604.005177][T16973] bridge1: entered allmulticast mode [ 1606.898293][T16993] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2664'. [ 1607.188144][T16998] binder: 16995:16998 ioctl c0306201 0 returned -14 [ 1607.414174][T17006] bridge2: entered allmulticast mode [ 1607.432269][T17006] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2671'. [ 1612.093475][T17045] binder: 17043:17045 ioctl c0306201 0 returned -14 [ 1612.334197][T17050] bridge3: entered allmulticast mode [ 1612.359046][T17050] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2682'. [ 1614.328692][T17071] tipc: Started in network mode [ 1614.328719][T17071] tipc: Node identity 366d2bfad721, cluster identity 4711 [ 1614.329102][T17071] tipc: Enabled bearer , priority 0 [ 1614.332309][T17071] syzkaller0: entered promiscuous mode [ 1614.332336][T17071] syzkaller0: entered allmulticast mode [ 1614.387857][T17071] tipc: Resetting bearer [ 1614.727617][T17070] tipc: Resetting bearer [ 1615.467674][T13415] tipc: Node number set to 3779865594 [ 1615.543717][T17070] tipc: Disabling bearer [ 1615.566560][ T37] audit: type=1326 audit(1757753180.990:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17081 comm="syz.9.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901863eba9 code=0x7ffc0000 [ 1615.566609][ T37] audit: type=1326 audit(1757753180.990:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17081 comm="syz.9.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901863eba9 code=0x7ffc0000 [ 1615.566648][ T37] audit: type=1326 audit(1757753180.990:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17081 comm="syz.9.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f901863eba9 code=0x7ffc0000 [ 1615.614986][T17089] new mount options do not match the existing superblock, will be ignored [ 1615.648520][T17092] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2694'. [ 1615.664089][T17091] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2695'. [ 1615.760151][ T37] audit: type=1326 audit(1757753181.190:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17081 comm="syz.9.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901863eba9 code=0x7ffc0000 [ 1615.760204][ T37] audit: type=1326 audit(1757753181.190:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17081 comm="syz.9.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901863eba9 code=0x7ffc0000 [ 1616.020057][T17086] bridge1: entered allmulticast mode [ 1617.675663][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.675739][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1620.587035][T17135] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2706'. [ 1621.289822][T17150] bridge4: entered allmulticast mode [ 1621.320884][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2710'. [ 1622.279619][T17166] sp0: Synchronizing with TNC [ 1623.207427][T17165] [U] è` [ 1628.575518][T17227] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2728'. [ 1634.091999][T17271] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2741'. [ 1634.967644][ C1] vkms_vblank_simulate: vblank timer overrun [ 1635.490649][ C1] vkms_vblank_simulate: vblank timer overrun [ 1635.809833][ C1] vkms_vblank_simulate: vblank timer overrun [ 1636.717872][ C1] vkms_vblank_simulate: vblank timer overrun [ 1637.046998][ C1] vkms_vblank_simulate: vblank timer overrun [ 1646.726915][ T37] audit: type=1326 audit(1757753212.150:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17373 comm="syz.7.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04993eba9 code=0x7ffc0000 [ 1646.726967][ T37] audit: type=1326 audit(1757753212.150:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17373 comm="syz.7.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04993eba9 code=0x7ffc0000 [ 1646.727009][ T37] audit: type=1326 audit(1757753212.150:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17373 comm="syz.7.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc04993eba9 code=0x7ffc0000 [ 1646.771170][T17377] new mount options do not match the existing superblock, will be ignored [ 1647.007406][ T37] audit: type=1326 audit(1757753212.440:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17373 comm="syz.7.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04993eba9 code=0x7ffc0000 [ 1647.007469][ T37] audit: type=1326 audit(1757753212.440:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17373 comm="syz.7.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04993eba9 code=0x7ffc0000 [ 1649.123336][T17398] veth0_vlan: entered allmulticast mode [ 1649.281106][T17398] syzkaller0: entered promiscuous mode [ 1649.281135][T17398] syzkaller0: entered allmulticast mode [ 1649.287790][T17398] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 1653.777458][T17428] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2783'. [ 1654.213389][T17436] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1661.153126][T17491] batadv0 speed is unknown, defaulting to 1000 [ 1661.157548][T17491] batadv0 speed is unknown, defaulting to 1000 [ 1661.161299][T17491] batadv0 speed is unknown, defaulting to 1000 [ 1661.447137][T17491] infiniband syz1: set active [ 1661.447174][T17491] infiniband syz1: added batadv0 [ 1661.451426][T17491] syz1: rxe_create_cq: returned err = -12 [ 1661.451618][T17491] infiniband syz1: Couldn't create ib_mad CQ [ 1661.451836][T17491] infiniband syz1: Couldn't open port 1 [ 1661.480281][ T31] batadv0 speed is unknown, defaulting to 1000 [ 1661.523278][T17491] RDS/IB: syz1: added [ 1661.524046][T17491] smc: adding ib device syz1 with port count 1 [ 1661.524295][T17491] smc: ib device syz1 port 1 has pnetid [ 1661.532266][T17491] batadv0 speed is unknown, defaulting to 1000 [ 1661.563275][ T31] batadv0 speed is unknown, defaulting to 1000 [ 1661.697640][T17493] binder: 17492:17493 ioctl c0306201 0 returned -14 [ 1661.847993][T17491] batadv0 speed is unknown, defaulting to 1000 [ 1662.174371][T17491] batadv0 speed is unknown, defaulting to 1000 [ 1662.498252][T17491] batadv0 speed is unknown, defaulting to 1000 [ 1662.814882][T17491] batadv0 speed is unknown, defaulting to 1000 [ 1663.133633][T17491] batadv0 speed is unknown, defaulting to 1000 [ 1665.279780][T17517] process 'syz.7.2812' launched './file1' with NULL argv: empty string added [ 1666.432133][T17523] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2815'. [ 1670.555319][T17543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2820'. [ 1676.801561][T17593] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2837'. [ 1679.369736][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1679.369814][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1680.531087][T17606] batadv0 speed is unknown, defaulting to 1000 [ 1683.090056][T17631] sctp: [Deprecated]: syz.5.2851 (pid 17631) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1683.090056][T17631] Use struct sctp_sack_info instead [ 1686.243494][T17650] batadv0 speed is unknown, defaulting to 1000 [ 1692.826692][T17706] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2874'. [ 1697.199528][T17736] batadv0 speed is unknown, defaulting to 1000 [ 1709.013893][T17804] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2900'. [ 1709.013914][T17804] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2900'. [ 1709.013930][T17804] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2900'. [ 1709.013970][T17804] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2900'. [ 1710.279334][T17807] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2902'. [ 1713.843709][T17834] batadv0 speed is unknown, defaulting to 1000 [ 1721.801306][T17892] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2926'. [ 1724.449920][T17910] ip6gretap0: entered promiscuous mode [ 1724.775193][T17915] binder: BINDER_SET_CONTEXT_MGR already set [ 1724.775207][T17915] binder: 17914:17915 ioctl 4018620d 200000004a80 returned -16 [ 1727.775221][T17912] batadv0 speed is unknown, defaulting to 1000 [ 1729.649408][T17966] binder_alloc: 17965: binder_alloc_buf, no vma [ 1732.782511][T17983] rdma_rxe: rxe_newlink: failed to add batadv0 [ 1738.742735][T18022] syz1: rxe_newlink: already configured on batadv0 [ 1740.619097][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1740.619172][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1742.511763][T18044] [ 1742.511777][T18044] ====================================================== [ 1742.511787][T18044] WARNING: possible circular locking dependency detected [ 1742.511813][T18044] syzkaller #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1742.511824][T18044] ------------------------------------------------------ [ 1742.511833][T18044] syz.9.2973/18044 is trying to acquire lock: [ 1742.511845][T18044] ffff8880619f8cc0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbe0 [ 1742.511906][T18044] [ 1742.511906][T18044] but task is already holding lock: [ 1742.511913][T18044] ffff88805f349250 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x5a0 [ 1742.511965][T18044] [ 1742.511965][T18044] which lock already depends on the new lock. [ 1742.511965][T18044] [ 1742.511972][T18044] [ 1742.511972][T18044] the existing dependency chain (in reverse order) is: [ 1742.511980][T18044] [ 1742.511980][T18044] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 1742.512009][T18044] lock_acquire+0x120/0x360 [ 1742.512033][T18044] lock_sock_nested+0x3e/0x130 [ 1742.512056][T18044] smc_listen_out+0x109/0x3e0 [ 1742.512072][T18044] process_scheduled_works+0xade/0x17b0 [ 1742.512094][T18044] worker_thread+0x8a0/0xda0 [ 1742.512116][T18044] kthread+0x70e/0x8a0 [ 1742.512142][T18044] ret_from_fork+0x439/0x7d0 [ 1742.512165][T18044] ret_from_fork_asm+0x1a/0x30 [ 1742.512183][T18044] [ 1742.512183][T18044] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 1742.512211][T18044] validate_chain+0xb9b/0x2140 [ 1742.512238][T18044] __lock_acquire+0xab9/0xd20 [ 1742.512260][T18044] lock_acquire+0x120/0x360 [ 1742.512282][T18044] __flush_work+0x6b8/0xbe0 [ 1742.512306][T18044] __cancel_work_sync+0xbe/0x110 [ 1742.512332][T18044] smc_clcsock_release+0x60/0xf0 [ 1742.512349][T18044] __smc_release+0x6a0/0x810 [ 1742.512371][T18044] smc_close_non_accepted+0xd5/0x1f0 [ 1742.512399][T18044] smc_close_active+0xb9c/0xf40 [ 1742.512416][T18044] __smc_release+0xa0/0x810 [ 1742.512438][T18044] smc_release+0x2eb/0x5a0 [ 1742.512459][T18044] sock_close+0xc3/0x240 [ 1742.512478][T18044] __fput+0x458/0xa80 [ 1742.512495][T18044] task_work_run+0x1d4/0x260 [ 1742.512511][T18044] get_signal+0x11c5/0x1310 [ 1742.512532][T18044] arch_do_signal_or_restart+0x9a/0x750 [ 1742.512552][T18044] exit_to_user_mode_loop+0x75/0x110 [ 1742.512576][T18044] do_syscall_64+0x2bd/0x3b0 [ 1742.512592][T18044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.512611][T18044] [ 1742.512611][T18044] other info that might help us debug this: [ 1742.512611][T18044] [ 1742.512618][T18044] Possible unsafe locking scenario: [ 1742.512618][T18044] [ 1742.512623][T18044] CPU0 CPU1 [ 1742.512630][T18044] ---- ---- [ 1742.512636][T18044] lock(sk_lock-AF_SMC/1); [ 1742.512653][T18044] lock((work_completion)(&new_smc->smc_listen_work)); [ 1742.512669][T18044] lock(sk_lock-AF_SMC/1); [ 1742.512688][T18044] lock((work_completion)(&new_smc->smc_listen_work)); [ 1742.512703][T18044] [ 1742.512703][T18044] *** DEADLOCK *** [ 1742.512703][T18044] [ 1742.512708][T18044] 3 locks held by syz.9.2973/18044: [ 1742.512720][T18044] #0: ffff88803da1da38 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1742.512772][T18044] #1: ffff88805f349250 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x5a0 [ 1742.512831][T18044] #2: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbe0 [ 1742.512883][T18044] [ 1742.512883][T18044] stack backtrace: [ 1742.512908][T18044] CPU: 0 UID: 0 PID: 18044 Comm: syz.9.2973 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1742.512931][T18044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1742.512950][T18044] Call Trace: [ 1742.512957][T18044] [ 1742.512965][T18044] dump_stack_lvl+0x189/0x250 [ 1742.512996][T18044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1742.513024][T18044] ? __pfx__printk+0x10/0x10 [ 1742.513045][T18044] ? print_lock_name+0xde/0x100 [ 1742.513074][T18044] print_circular_bug+0x2ee/0x310 [ 1742.513095][T18044] check_noncircular+0x134/0x160 [ 1742.513128][T18044] validate_chain+0xb9b/0x2140 [ 1742.513158][T18044] ? do_raw_spin_lock+0x121/0x290 [ 1742.513182][T18044] ? look_up_lock_class+0x74/0x170 [ 1742.513212][T18044] ? register_lock_class+0x51/0x320 [ 1742.513239][T18044] __lock_acquire+0xab9/0xd20 [ 1742.513267][T18044] ? __flush_work+0xd2/0xbe0 [ 1742.513292][T18044] lock_acquire+0x120/0x360 [ 1742.513315][T18044] ? __flush_work+0xd2/0xbe0 [ 1742.513344][T18044] ? _raw_spin_unlock_irq+0x23/0x50 [ 1742.513372][T18044] ? __flush_work+0xd2/0xbe0 [ 1742.513399][T18044] __flush_work+0x6b8/0xbe0 [ 1742.513424][T18044] ? __flush_work+0xd2/0xbe0 [ 1742.513450][T18044] ? __flush_work+0xd2/0xbe0 [ 1742.513477][T18044] ? __pfx___flush_work+0x10/0x10 [ 1742.513504][T18044] ? __pfx_wq_barrier_func+0x10/0x10 [ 1742.513539][T18044] ? __pfx___cancel_work+0x10/0x10 [ 1742.513566][T18044] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1742.513592][T18044] ? rt_spin_unlock+0x65/0x80 [ 1742.513617][T18044] __cancel_work_sync+0xbe/0x110 [ 1742.513644][T18044] smc_clcsock_release+0x60/0xf0 [ 1742.513666][T18044] __smc_release+0x6a0/0x810 [ 1742.513689][T18044] ? lock_sock_nested+0x5f/0x130 [ 1742.513715][T18044] smc_close_non_accepted+0xd5/0x1f0 [ 1742.513743][T18044] smc_close_active+0xb9c/0xf40 [ 1742.513763][T18044] ? smc_close_active+0x421/0xf40 [ 1742.513781][T18044] ? __pfx_sock_def_readable+0x10/0x10 [ 1742.513811][T18044] __smc_release+0xa0/0x810 [ 1742.513834][T18044] ? lock_sock_nested+0x5f/0x130 [ 1742.513860][T18044] smc_release+0x2eb/0x5a0 [ 1742.513886][T18044] sock_close+0xc3/0x240 [ 1742.513908][T18044] ? __pfx_sock_close+0x10/0x10 [ 1742.513929][T18044] __fput+0x458/0xa80 [ 1742.513952][T18044] task_work_run+0x1d4/0x260 [ 1742.513972][T18044] ? __pfx_task_work_run+0x10/0x10 [ 1742.513995][T18044] get_signal+0x11c5/0x1310 [ 1742.514018][T18044] ? task_work_add+0x281/0x420 [ 1742.514039][T18044] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1742.514066][T18044] arch_do_signal_or_restart+0x9a/0x750 [ 1742.514091][T18044] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1742.514121][T18044] ? exit_to_user_mode_loop+0x40/0x110 [ 1742.514147][T18044] exit_to_user_mode_loop+0x75/0x110 [ 1742.514173][T18044] do_syscall_64+0x2bd/0x3b0 [ 1742.514190][T18044] ? lockdep_hardirqs_on+0x9c/0x150 [ 1742.514217][T18044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.514237][T18044] ? clear_bhb_loop+0x60/0xb0 [ 1742.514257][T18044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.514281][T18044] RIP: 0033:0x7f901863eba9 [ 1742.514308][T18044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1742.514324][T18044] RSP: 002b:00007f901685c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 1742.514345][T18044] RAX: fffffffffffffe00 RBX: 00007f9018886180 RCX: 00007f901863eba9 [ 1742.514361][T18044] RDX: 0000000000000000 RSI: 0000200000004ec0 RDI: 0000000000000003 [ 1742.514374][T18044] RBP: 00007f90186c1e19 R08: 0000000000000000 R09: 0000000000000000 [ 1742.514387][T18044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1742.514399][T18044] R13: 00007f9018886218 R14: 00007f9018886180 R15: 00007ffe9f3eb3d8 [ 1742.514421][T18044] [ 1746.580671][T17368] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.788919][T17368] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.988137][T17368] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.188370][T17368] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.488734][T17368] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.712593][T17368] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.958574][T17368] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.208867][T17368] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.568726][T17368] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.809617][T17368] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.054576][T17368] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.278622][T17368] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.649348][T17368] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.908757][T17368] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.118705][T17368] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.348697][T17368] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.718351][T17368] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.969101][T17368] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.219517][T17368] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.448734][T17368] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.724203][T17368] bridge_slave_1: left allmulticast mode [ 1751.724219][T17368] bridge_slave_1: left promiscuous mode [ 1751.724319][T17368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.787466][T17368] bridge_slave_0: left allmulticast mode [ 1751.787489][T17368] bridge_slave_0: left promiscuous mode [ 1751.787632][T17368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1751.858429][T17368] bridge_slave_1: left allmulticast mode [ 1751.858446][T17368] bridge_slave_1: left promiscuous mode [ 1751.858537][T17368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.938602][T17368] bridge_slave_0: left allmulticast mode [ 1751.938619][T17368] bridge_slave_0: left promiscuous mode [ 1751.938708][T17368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.019488][T17368] bridge_slave_1: left allmulticast mode [ 1752.019505][T17368] bridge_slave_1: left promiscuous mode [ 1752.019609][T17368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.107214][T17368] bridge_slave_0: left allmulticast mode [ 1752.107231][T17368] bridge_slave_0: left promiscuous mode [ 1752.107328][T17368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.179745][T17368] bridge_slave_1: left allmulticast mode [ 1752.179770][T17368] bridge_slave_1: left promiscuous mode [ 1752.179917][T17368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.239685][T17368] bridge_slave_0: left allmulticast mode [ 1752.239702][T17368] bridge_slave_0: left promiscuous mode [ 1752.239803][T17368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.311492][T17368] bridge_slave_1: left allmulticast mode [ 1752.311516][T17368] bridge_slave_1: left promiscuous mode [ 1752.311640][T17368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.378760][T17368] bridge_slave_0: left allmulticast mode [ 1752.378776][T17368] bridge_slave_0: left promiscuous mode [ 1752.378887][T17368] bridge0: port 1(bridge_slave_0) entered disabled state